$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer File: 0e307b23-6715-4f4e-8e81-99854b623d2d.cer (raw, json) Hash identifier: /9HJe5dvqkZRcsIlVelfes/LvzJzrqom0J7UhROXsrM= Subject key identifier: 58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848EDF43A5E7F4E9D368B6EA200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 01:45:33 +0000 Certificate not after: Tue 25 May 2027 00:45:33 +0000 Subordinate resources: AS: 397668 IP: 23.165.56.0/24 IP: 2602:f9dd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:f4:3a:5e:7f:4e:9d:36:8b:6e:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 19 01:45:33 2025 GMT Not After : May 25 00:45:33 2027 GMT Subject: CN=0e307b23-6715-4f4e-8e81-99854b623d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:bd:a1:49:c4:e1:23:19:87:e8:af:c0:b5: c1:d8:9d:0f:da:18:0c:9d:dd:fd:a4:04:b8:ff:65: 9b:e1:cb:fd:82:78:d5:43:53:83:9d:4d:60:71:73: 27:15:87:ad:13:bc:78:28:f6:1a:d6:9b:8d:71:5e: 56:ca:e8:12:2d:40:9d:58:33:96:1f:f6:df:08:35: 4a:ee:85:62:3c:c3:d8:ca:3f:5e:c5:24:eb:41:55: 10:0b:6b:00:1a:99:b3:aa:0e:ba:ca:f9:23:9c:b0: e5:b3:6c:e8:35:16:bb:ba:17:a7:e9:2b:e5:dd:da: c2:1e:e8:fd:64:35:d2:a1:11:07:8c:b0:ee:66:f7: c1:46:28:4d:1e:29:ff:28:cf:6c:c1:12:9a:5a:40: 61:7a:8a:35:e9:10:ed:02:5e:34:6a:11:3d:0a:45: c2:6f:71:f1:5c:5a:c5:eb:1e:75:24:40:1f:79:9e: 89:55:b5:d4:c6:41:be:5b:8c:be:e5:1c:38:a1:a8: 2a:c8:29:9a:56:10:05:08:dc:15:43:57:03:83:37: 41:ce:88:e4:30:e2:76:40:85:e9:79:17:c0:f8:d3: 55:5e:67:0a:d6:77:5e:d7:4e:4b:4a:1d:80:7c:66: 31:10:05:30:bb:67:2b:c6:51:94:ed:19:14:3a:c3: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.56.0/24 IPv6: 2602:f9dd::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397668 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d3:9b:e6:3d:ea:07:9a:f9:e9:fe:14:de:84:f2:87:d7:24: 58:40:27:f9:3f:4d:a3:c9:2e:f8:c2:db:8e:87:20:12:50:d5: 5f:38:07:f2:c4:e6:60:09:2a:30:93:41:48:10:af:df:10:30: f4:33:23:71:27:51:18:0b:18:6c:7e:db:72:2f:53:a2:04:59: 4f:93:db:c3:4c:d3:d0:98:a2:64:17:63:0a:18:c3:a2:df:3b: 61:0e:e0:92:6b:89:6c:cd:4a:43:48:22:33:53:6e:5a:ad:c8: 20:cf:a9:70:c8:79:39:e5:a5:35:b8:d7:3c:51:bc:f2:eb:35: cc:a5:29:19:c3:fb:07:e5:06:c1:2c:9f:6f:2f:97:0e:d2:4b: ac:dc:c7:30:84:3c:35:ae:40:dd:89:b9:18:8b:5e:ac:d9:27: 59:f6:50:87:aa:86:a7:05:23:fc:87:1d:88:e8:50:17:4c:e9: b6:b1:49:58:f4:24:76:da:e6:7f:0a:ef:15:25:55:1b:d3:ab: 6d:46:87:24:cc:00:7f:ee:e3:19:c2:53:86:93:91:1b:d9:a9: b7:18:89:43:f6:bf:bc:fc:69:ed:f4:93:fc:9b:f0:22:40:61: 81:04:31:fc:f9:d1:a1:e5:45:99:a8:34:4f:04:cb:44:48:98: 4a:de:9e:63 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjt9Dpef06dNotuogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxOTAxNDUzM1oXDTI3MDUyNTAwNDUzM1owLzEtMCsGA1UEAxMk MGUzMDdiMjMtNjcxNS00ZjRlLThlODEtOTk4NTRiNjIzZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYK9oUnE4SMZh+ivwLXB2J0P2hgMnd39pAS4 /2Wb4cv9gnjVQ1ODnU1gcXMnFYetE7x4KPYa1puNcV5WyugSLUCdWDOWH/bfCDVK 7oViPMPYyj9exSTrQVUQC2sAGpmzqg66yvkjnLDls2zoNRa7uhen6Svl3drCHuj9 ZDXSoREHjLDuZvfBRihNHin/KM9swRKaWkBheoo16RDtAl40ahE9CkXCb3HxXFrF 6x51JEAfeZ6JVbXUxkG+W4y+5Rw4oagqyCmaVhAFCNwVQ1cDgzdBzojkMOJ2QIXp eRfA+NNVXmcK1nde105LSh2AfGYxEAUwu2crxlGU7RkUOsOmjwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFg0/UhxoHdYE1qQ331jaWxgZF3OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w ZTMwN2IyMy02NzE1LTRmNGUtOGU4MS05OTg1NGI2MjNkMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzBlMzA3YjIzLTY3MTUtNGY0ZS04 ZTgxLTk5ODU0YjYyM2QyZC8wZTMwN2IyMy02NzE1LTRmNGUtOGU4MS05OTg1NGI2 MjNkMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpTgwDgQCAAIwCAMGACYC+d0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYRZDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAY05vmPeoHmvnp/hTehPKH1yRY QCf5P02jyS74wtuOhyASUNVfOAfyxOZgCSowk0FIEK/fEDD0MyNxJ1EYCxhsftty L1OiBFlPk9vDTNPQmKJkF2MKGMOi3zthDuCSa4lszUpDSCIzU25arcggz6lwyHk5 5aU1uNc8Ubzy6zXMpSkZw/sH5QbBLJ9vL5cO0kus3McwhDw1rkDdibkYi16s2SdZ 9lCHqoanBSP8hx2I6FAXTOm2sUlY9CR22uZ/Cu8VJVUb06ttRockzAB/7uMZwlOG k5Eb2am3GIlD9r+8/Gnt9JP8m/AiQGGBBDH8+dGh5UWZqDRPBMtESJhK3p5j -----END CERTIFICATE-----Generated at Thu Apr 3 02:48:57 2025 by rpki-client