$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer File: 109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer (raw, json) Hash identifier: kMe3m3YBSteoR9Bho3aUSdRpCEJFLwi27HHyS7mfS+I= Subject key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858492B417F3176C1AF71D9814FA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Mar 2025 00:45:33 +0000 Certificate not after: Wed 16 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 33115 IP: 66.223.99.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2b:41:7f:31:76:c1:af:71:d9:81:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 13 00:45:33 2025 GMT Not After : Jun 16 00:45:33 2027 GMT Subject: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:27:66:83:66:2a:a3:cd:55:f0:c1:fd:84: 87:6d:b0:19:52:0b:b2:2c:7b:4e:20:6d:a0:e0:50: 1c:dd:c9:72:21:ec:43:26:1a:8b:45:5a:97:6b:67: 83:3b:88:96:11:e3:d8:0f:9c:be:a6:5f:2e:60:90: b7:d0:8a:f7:8e:92:ba:e0:ba:dc:e3:af:35:47:32: 64:e2:44:dd:30:3b:85:ad:e9:06:18:78:a7:e3:85: ee:7b:ac:2a:92:d6:91:69:42:b0:a0:db:0d:94:08: 5c:21:83:dc:43:89:f7:ca:49:bc:69:87:ba:7e:02: 9b:eb:d2:17:fe:5d:73:94:06:ac:13:e4:b6:b3:02: ff:2a:e7:ed:f2:af:43:d8:db:60:d3:cd:1a:04:76: 95:11:be:e7:78:19:8a:5d:eb:16:bf:79:1d:06:56: 5c:31:3c:99:72:42:fe:23:a1:90:cd:b6:3a:9c:ac: 9e:89:fa:7d:98:f5:24:4c:fa:e7:fe:2e:a4:2e:a6: 0a:c6:88:21:dc:5d:5c:9f:25:59:6f:9d:21:44:3d: 36:a5:91:5b:88:0b:92:55:61:c6:a4:9f:85:95:b6: 5d:75:0b:ef:e5:cc:5a:ff:05:02:1b:72:4c:05:b0: 5e:cc:51:9e:48:45:68:d7:a2:2d:57:69:73:c0:d5: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 66.223.99.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33115 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7f:db:51:fe:c3:3c:59:f7:0f:90:d9:10:4d:f4:19:8c:de: 39:5c:a6:e0:4e:77:3a:68:a9:3a:10:16:66:bd:25:bd:c4:00: e8:ce:1b:f4:a7:51:20:43:73:48:09:d7:34:ca:bc:71:79:b0: ab:6e:4a:28:99:4b:95:6c:e8:3c:50:d7:e5:32:d5:92:d7:62: 20:5b:a4:41:06:33:9a:18:80:5b:54:b4:64:af:44:d6:f8:29: 54:c4:e1:bc:b1:a1:17:55:7e:00:f4:d0:27:b8:ca:49:a6:57: 0b:1f:79:23:3d:cd:84:3d:89:7f:1c:d6:96:fd:29:91:8a:00: e9:52:a6:e1:5c:fb:41:07:85:e0:3c:7e:77:51:7a:a4:e1:04: 19:79:2f:0d:b8:d9:7e:db:c9:77:be:13:8a:3b:b5:38:a2:4f: 33:e2:ec:fd:15:e3:b6:b4:72:13:c3:1b:31:5d:5a:a3:21:00: 69:40:87:7e:46:80:81:df:b3:d4:9c:74:57:65:2a:38:56:21: a6:ab:0a:c5:4c:f6:6a:c0:a8:d1:d2:bc:2c:c4:36:90:df:1e: a0:25:9f:49:b3:53:c6:30:42:e4:b5:7c:93:fa:51:cd:6d:38: df:10:dc:81:4a:77:1c:59:28:3e:4b:4d:c9:e3:d7:1d:c0:2f: 28:b1:72:9e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEkrQX8xdsGvcdmBT6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxMzAwNDUzM1oXDTI3MDYxNjAwNDUzM1owLzEtMCsGA1UEAxMk MTA5YmU3M2ItZTU2OC00NGI3LWJkNjMtZWJjNGU4ZmU2ZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhInZoNmKqPNVfDB/YSHbbAZUguyLHtOIG2g 4FAc3clyIexDJhqLRVqXa2eDO4iWEePYD5y+pl8uYJC30Ir3jpK64Lrc4681RzJk 4kTdMDuFrekGGHin44Xue6wqktaRaUKwoNsNlAhcIYPcQ4n3ykm8aYe6fgKb69IX /l1zlAasE+S2swL/Kuft8q9D2Ntg080aBHaVEb7neBmKXesWv3kdBlZcMTyZckL+ I6GQzbY6nKyeifp9mPUkTPrn/i6kLqYKxogh3F1cnyVZb50hRD02pZFbiAuSVWHG pJ+FlbZddQvv5cxa/wUCG3JMBbBezFGeSEVo16ItV2lzwNW5ywIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEgoYHZceSXvPGpmbdkfQYl5ziBkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x MDliZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0ZThmZTZmMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzEwOWJlNzNiLWU1NjgtNDRiNy1i ZDYzLWViYzRlOGZlNmYxNy8xMDliZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0ZThm ZTZmMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABC32MwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIFbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACZ/21H+wzxZ9w+Q2RBN9BmM3jlcpuBOdzpoqToQFma9Jb3E AOjOG/SnUSBDc0gJ1zTKvHF5sKtuSiiZS5Vs6DxQ1+Uy1ZLXYiBbpEEGM5oYgFtU tGSvRNb4KVTE4byxoRdVfgD00Ce4ykmmVwsfeSM9zYQ9iX8c1pb9KZGKAOlSpuFc +0EHheA8fndReqThBBl5Lw242X7byXe+E4o7tTiiTzPi7P0V47a0chPDGzFdWqMh AGlAh35GgIHfs9ScdFdlKjhWIaarCsVM9mrAqNHSvCzENpDfHqAln0mzU8YwQuS1 fJP6Uc1tON8Q3IFKdxxZKD5LTcnj1x3ALyixcp4= -----END CERTIFICATE-----Generated at Thu Apr 3 02:45:14 2025 by rpki-client