$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer File: 2654343f-7862-4859-8638-b9c2008b3151.cer (raw, json) Hash identifier: CKXyykYLSAQ741UJM++lFJg15/bE31OIWywCxp63cpE= Subject key identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584999D65F9D485E2BFF6F347B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Apr 2025 15:24:26 +0000 Certificate not after: Sun 25 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 7201 IP: 23.170.200.0/24 IP: 2602:f99f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:d6:5f:9d:48:5e:2b:ff:6f:34:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 21 15:24:26 2025 GMT Not After : Jul 25 00:45:34 2027 GMT Subject: CN=2654343f-7862-4859-8638-b9c2008b3151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:41:c8:37:d1:0d:7f:5d:56:1a:17:0b:af: 87:cb:bd:54:93:98:9c:b6:fb:6d:20:52:2a:b4:8f: c5:54:c1:f8:a4:91:a0:64:97:ab:67:7e:22:d9:0d: 0a:49:c2:75:f0:58:90:9f:22:f5:09:24:15:a2:c5: e4:fa:2c:96:23:89:c5:10:00:2a:56:cd:72:79:79: d8:ce:73:6b:9f:6e:b9:72:f6:64:6a:a7:c2:6c:43: 23:83:74:29:4e:ce:30:54:04:37:ee:b6:ca:bb:eb: 75:d7:cb:99:fb:4a:26:3e:50:ee:13:b9:b0:96:53: c4:1e:b3:d9:05:75:94:80:98:4b:7c:33:10:cb:b1: 88:44:06:db:39:83:ed:07:24:ca:2b:c4:b2:6e:b0: 21:68:b3:0d:1f:b5:07:39:46:ca:82:d3:fc:0f:76: d0:58:61:8f:cd:67:0d:66:8d:da:e5:4a:66:ee:d9: e6:73:73:ef:6e:da:fd:c2:7e:a7:ec:a8:58:53:1d: 08:7d:7e:79:ae:7d:9c:f3:7e:fa:0d:db:c7:26:6f: 3e:e7:0e:4f:74:23:eb:7f:64:c7:b5:92:4a:3e:ec: d3:f2:03:78:ed:82:bd:4a:99:f8:1c:9c:89:62:95: ed:ee:84:c2:94:e3:e0:80:5a:49:f5:5c:b4:00:05: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.170.200.0/24 IPv6: 2602:f99f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:bd:8e:a3:93:fb:0b:02:af:32:7a:08:b1:40:ec:7a:60:83: c4:04:67:27:4e:7d:19:24:c6:d1:99:2f:bd:f1:47:2f:0a:c1: 32:d9:ae:29:79:44:38:86:85:61:62:32:12:62:0b:f8:1b:6a: 49:ce:bd:af:b8:0c:50:d1:af:3a:cb:b8:81:5d:7a:28:93:09: 8a:9a:6f:cd:37:b8:6c:38:6d:e0:2a:6a:63:03:23:21:73:fe: ef:7f:91:f4:f9:42:37:c3:a3:0d:73:2c:9a:cf:3f:35:27:b1: 9e:40:98:6f:7c:c6:5a:2a:f2:f3:01:03:05:76:d7:80:0d:86: 9d:96:27:ee:76:15:62:1d:a2:10:6f:3b:65:97:da:01:b0:08: 02:26:06:79:cb:1d:f6:5e:fd:e4:aa:42:2e:17:49:7d:c5:d5: d8:f8:fb:a4:5c:51:21:e5:a8:b7:58:b0:f1:57:ef:07:a3:f3: 5b:94:96:7d:6c:c5:7c:d8:3b:5f:25:85:6d:b7:81:e6:ed:8d: 64:2c:37:dc:33:10:9e:f0:f6:13:0b:3b:9c:d8:c9:9d:8d:78: 1c:bf:28:ca:f6:0e:00:8d:1c:0b:45:7d:6a:91:9a:00:9e:5e: f7:33:45:cc:11:14:21:d0:89:fd:8c:4e:9e:07:22:63:f6:6c: 5e:1c:4c:ad -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEmZ1l+dSF4r/280ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQyMTE1MjQyNloXDTI3MDcyNTAwNDUzNFowLzEtMCsGA1UEAxMk MjY1NDM0M2YtNzg2Mi00ODU5LTg2MzgtYjljMjAwOGIzMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqplByDfRDX9dVhoXC6+Hy71Uk5ictvttIFIq tI/FVMH4pJGgZJerZ34i2Q0KScJ18FiQnyL1CSQVosXk+iyWI4nFEAAqVs1yeXnY znNrn265cvZkaqfCbEMjg3QpTs4wVAQ37rbKu+t118uZ+0omPlDuE7mwllPEHrPZ BXWUgJhLfDMQy7GIRAbbOYPtByTKK8SybrAhaLMNH7UHOUbKgtP8D3bQWGGPzWcN Zo3a5Upm7tnmc3Pvbtr9wn6n7KhYUx0IfX55rn2c8376DdvHJm8+5w5PdCPrf2TH tZJKPuzT8gN47YK9Spn4HJyJYpXt7oTClOPggFpJ9Vy0AAX+2wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJ0QVXfyLJNcNx8gGEnERxhlLYIuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y NjU0MzQzZi03ODYyLTQ4NTktODYzOC1iOWMyMDA4YjMxNTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI2NTQzNDNmLTc4NjItNDg1OS04 NjM4LWI5YzIwMDhiMzE1MS8yNjU0MzQzZi03ODYyLTQ4NTktODYzOC1iOWMyMDA4 YjMxNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqsgwDgQCAAIwCAMGACYC+Z8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAhwhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD69jqOT+wsCrzJ6CLFA7Hpgg8QE ZydOfRkkxtGZL73xRy8KwTLZril5RDiGhWFiMhJiC/gbaknOva+4DFDRrzrLuIFd eiiTCYqab803uGw4beAqamMDIyFz/u9/kfT5QjfDow1zLJrPPzUnsZ5AmG98xloq 8vMBAwV214ANhp2WJ+52FWIdohBvO2WX2gGwCAImBnnLHfZe/eSqQi4XSX3F1dj4 +6RcUSHlqLdYsPFX7wej81uUln1sxXzYO18lhW23gebtjWQsN9wzEJ7w9hMLO5zY yZ2NeBy/KMr2DgCNHAtFfWqRmgCeXvczRcwRFCHQif2MTp4HImP2bF4cTK0= -----END CERTIFICATE-----Generated at Sun Apr 27 04:33:36 2025 by rpki-client