$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer File: 1f1cdae5-b041-4993-963d-6f855f74efa1.cer (raw, json) Hash identifier: 4xaLvXGzy+DTc9n864GKlKzEAZEgVYyR73P0fPnwgNI= Subject key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858491939D3CA0832D353608B8D70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Mar 2025 13:45:33 +0000 Certificate not after: Wed 09 Jun 2027 12:45:33 +0000 Subordinate resources: AS: 54082 IP: 23.168.104.0/24 IP: 2607:8040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:39:d3:ca:08:32:d3:53:60:8b:8d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 6 13:45:33 2025 GMT Not After : Jun 9 12:45:33 2027 GMT Subject: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:ad:32:17:ab:9f:a8:4f:1a:1e:f1:65:7e: 6f:ce:8b:96:a3:64:81:fd:4f:e4:91:c8:74:2e:a4: 83:58:53:5c:cc:4c:2c:a2:22:5b:e5:f4:9a:06:d1: 81:28:dd:e8:69:5d:ba:41:36:f9:db:e7:2c:76:85: aa:2f:9e:07:4d:72:4f:27:cd:f6:91:0b:a1:3b:4a: 00:b1:a4:b9:68:a8:be:e6:8b:c2:13:7a:6d:22:7b: d0:19:0d:ba:b4:71:fa:32:08:ca:39:8f:b5:a6:6f: c2:56:87:0c:6b:e5:99:f8:da:88:7c:91:f8:e1:bf: b2:28:20:38:66:30:64:fa:ea:fe:95:02:02:ba:af: 15:3c:74:2c:00:51:05:99:76:62:b5:7c:d2:94:92: 42:e5:d6:16:c4:3a:50:46:7c:6a:2d:23:63:1d:5b: 7c:d1:2d:18:9e:34:02:a8:e6:e8:71:eb:b5:2d:8b: c6:53:a8:46:8b:69:e6:df:a6:bc:11:03:84:7a:64: 50:a6:15:25:8d:d7:26:be:18:d2:db:bd:52:d5:95: 4a:50:ef:48:19:93:16:bc:6b:78:17:ea:70:ad:3b: 23:93:40:55:81:ea:de:b4:be:bd:1e:a4:51:cd:43: 12:c0:6e:68:8f:45:a6:97:1c:68:8c:6f:c6:39:8f: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.168.104.0/24 IPv6: 2607:8040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54082 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:14:8a:a7:0e:0d:5c:5f:8d:77:08:02:5b:1c:1d:cb:ce:ca: 6d:dc:c7:1a:4f:df:69:33:67:24:a2:9c:a0:28:82:66:b5:38: 8c:cb:65:b4:e1:c9:b9:59:2e:13:cd:17:08:4a:1f:ea:65:7c: 88:40:c3:66:eb:50:c8:fc:ce:9f:bf:03:f3:a7:0a:30:11:23: eb:d2:b0:29:0f:81:c0:6c:21:c2:41:ca:e1:fb:9b:bb:99:21: f1:d8:35:d9:4f:6a:b6:f9:9e:a5:e0:51:91:ea:29:9b:31:0c: ca:bc:bb:90:56:71:eb:f2:35:20:5a:4b:9c:97:f1:0b:7b:4b: 53:1a:83:ad:9d:c7:02:ac:85:8a:84:9f:fe:9a:e2:33:0b:ef: 16:9a:51:05:ee:55:bc:e4:fb:0f:02:e5:0e:3d:33:70:00:c8: d1:1d:70:65:fd:6e:18:87:c4:bb:74:94:6d:4a:38:63:98:36: 02:cb:4b:0e:0d:e8:75:6e:40:2d:33:b6:06:d4:b1:c1:f0:68: 7a:cd:f7:64:1e:c2:41:1f:99:27:b6:d7:2e:5a:31:d3:21:8e: 35:dd:94:a9:fd:3a:0a:b2:25:84:6e:30:13:c4:eb:6e:06:56: 48:7b:6e:54:ed:7c:91:dd:7f:8a:e8:63:d3:d9:c0:3c:93:a0: 57:60:5f:d1 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkZOdPKCDLTU2CLjXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwNjEzNDUzM1oXDTI3MDYwOTEyNDUzM1owLzEtMCsGA1UEAxMk MWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRlZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uCtMhern6hPGh7xZX5vzouWo2SB/U/kkch0 LqSDWFNczEwsoiJb5fSaBtGBKN3oaV26QTb52+csdoWqL54HTXJPJ832kQuhO0oA saS5aKi+5ovCE3ptInvQGQ26tHH6MgjKOY+1pm/CVocMa+WZ+NqIfJH44b+yKCA4 ZjBk+ur+lQICuq8VPHQsAFEFmXZitXzSlJJC5dYWxDpQRnxqLSNjHVt80S0YnjQC qOboceu1LYvGU6hGi2nm36a8EQOEemRQphUljdcmvhjS271S1ZVKUO9IGZMWvGt4 F+pwrTsjk0BVgeretL69HqRRzUMSwG5oj0WmlxxojG/GOY/KNwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFD6kDY9y8rE3ZHpL91jnh3dcpb6TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x ZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFmMWNkYWU1LWIwNDEtNDk5My05 NjNkLTZmODU1Zjc0ZWZhMS8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3 NGVmYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXqGgwDQQCAAIwBwMFACYHgEAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANNCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABUUiqcODVxfjXcIAlscHcvOym3c xxpP32kzZySinKAogma1OIzLZbThyblZLhPNFwhKH+plfIhAw2brUMj8zp+/A/On CjARI+vSsCkPgcBsIcJByuH7m7uZIfHYNdlParb5nqXgUZHqKZsxDMq8u5BWcevy NSBaS5yX8Qt7S1Mag62dxwKshYqEn/6a4jML7xaaUQXuVbzk+w8C5Q49M3AAyNEd cGX9bhiHxLt0lG1KOGOYNgLLSw4N6HVuQC0ztgbUscHwaHrN92QewkEfmSe21y5a MdMhjjXdlKn9OgqyJYRuMBPE624GVkh7blTtfJHdf4roY9PZwDyToFdgX9E= -----END CERTIFICATE-----Generated at Thu Apr 3 02:49:38 2025 by rpki-client