$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer File: 6457bd98-4cd5-4766-a190-844b93a354f2.cer (raw, json) Hash identifier: mpQsyb/q3PeO0T5tS1lx19LlSVyJfTQrDH7pPPunCFs= Subject key identifier: C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858491ECF3397FB8C83BC4746F900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 08 Mar 2025 13:45:33 +0000 Certificate not after: Fri 11 Jun 2027 12:45:33 +0000 Subordinate resources: AS: 46088 IP: 23.166.232.0/24 IP: 67.209.160.0/20 IP: 2602:f9da::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:cf:33:97:fb:8c:83:bc:47:46:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 8 13:45:33 2025 GMT Not After : Jun 11 12:45:33 2027 GMT Subject: CN=6457bd98-4cd5-4766-a190-844b93a354f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:94:ad:5c:d8:85:87:4a:45:4f:2b:f2:90:0f: 56:f6:3a:75:86:f4:6f:f5:11:8b:2d:b8:ac:4a:5a: 21:3f:9b:1c:c5:98:29:82:35:07:7f:3c:cd:24:23: 72:81:13:d1:4a:a2:56:b8:d9:4e:79:8f:36:fd:92: 1b:e4:d6:86:e2:e3:24:32:9b:f2:98:22:d5:27:d2: 61:4a:09:7e:b0:91:ae:50:86:6c:b0:82:e1:69:af: a4:2e:67:37:61:b1:f2:23:97:3b:c4:36:7e:ac:fe: 26:f9:b5:42:37:38:34:a9:13:fc:a0:62:2a:d4:3b: 3c:aa:b1:f2:a7:14:73:03:52:96:a1:2a:8b:20:0a: ce:9d:c6:a9:4b:0b:a6:23:1d:d5:a0:95:ac:9b:df: c9:06:c5:6f:ed:b7:d6:ba:9e:04:69:63:97:fa:f1: 18:4b:ff:6c:fc:0b:20:ec:85:e3:a6:25:5c:e4:cd: a0:e4:88:f3:b8:fb:5a:87:b0:12:bb:7e:11:c8:40: 0c:6c:f9:a4:0c:c4:4e:2b:1f:c6:42:c6:84:9f:48: 82:09:18:08:e5:dd:5b:3c:11:66:4b:9c:eb:41:d2: 9e:be:44:f8:18:61:55:12:ac:3c:ab:34:2c:56:d4: a5:4e:6d:8b:62:30:cb:c0:4a:1d:cc:41:0f:7b:59: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.166.232.0/24 67.209.160.0/20 IPv6: 2602:f9da::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46088 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7e:24:13:58:00:2b:0a:9f:fe:d8:bf:ed:a5:7a:3a:1a:ce: 45:bd:3b:1c:23:1e:29:57:b2:8c:1a:10:53:57:a4:51:b3:2d: 76:0a:f8:89:e6:3e:36:5d:58:dd:cd:51:2c:dd:03:64:44:52: 8f:12:bd:22:ef:a1:ac:96:b6:95:29:af:f9:3f:bd:77:ba:7e: 54:53:d2:38:97:2d:e3:59:14:b0:db:3c:68:c9:11:69:5b:97: 3e:42:78:77:f5:84:6b:8e:2d:e6:c2:5a:35:a2:15:1b:b5:48: 1c:0d:c7:4b:ba:63:59:13:81:ea:17:d5:a0:a2:87:95:a5:50: 44:9f:8b:1a:0a:49:bd:2c:cf:bd:4a:49:9d:03:f3:af:b9:9c: b2:a7:a1:72:14:ae:d6:0a:eb:0f:c3:9d:2b:f1:de:ca:00:b3: 7c:61:69:56:dc:56:42:77:87:39:42:65:11:4e:03:db:56:68: 2e:89:10:18:f9:88:27:24:2e:f6:62:f1:4e:af:1b:e5:20:b1: 55:ab:c0:87:29:f4:ad:52:18:87:f9:a5:99:04:5c:7d:a9:0d: 9a:70:97:1b:cf:45:56:ee:b5:89:22:62:9b:75:23:84:2b:a9: e6:42:e5:1a:f7:51:e4:fa:14:07:59:cc:19:d1:91:5e:12:6e: b2:78:f2:6d -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEkezzOX+4yDvEdG+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwODEzNDUzM1oXDTI3MDYxMTEyNDUzM1owLzEtMCsGA1UEAxMk NjQ1N2JkOTgtNGNkNS00NzY2LWExOTAtODQ0YjkzYTM1NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpStXNiFh0pFTyvykA9W9jp1hvRv9RGLLbis SlohP5scxZgpgjUHfzzNJCNygRPRSqJWuNlOeY82/ZIb5NaG4uMkMpvymCLVJ9Jh Sgl+sJGuUIZssILhaa+kLmc3YbHyI5c7xDZ+rP4m+bVCNzg0qRP8oGIq1Ds8qrHy pxRzA1KWoSqLIArOncapSwumIx3VoJWsm9/JBsVv7bfWup4EaWOX+vEYS/9s/Asg 7IXjpiVc5M2g5IjzuPtah7ASu34RyEAMbPmkDMROKx/GQsaEn0iCCRgI5d1bPBFm S5zrQdKevkT4GGFVEqw8qzQsVtSlTm2LYjDLwEodzEEPe1nKVwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMIFzv420tym2QrT5iVrEXzSDng9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 NDU3YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRiOTNhMzU0ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY0NTdiZDk4LTRjZDUtNDc2Ni1h MTkwLTg0NGI5M2EzNTRmMi82NDU3YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRiOTNh MzU0ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXpugDBARD0aAwDgQCAAIwCAMGBCYC+doAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC0CDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJfiQTWAArCp/+2L/t pXo6Gs5FvTscIx4pV7KMGhBTV6RRsy12CviJ5j42XVjdzVEs3QNkRFKPEr0i76Gs lraVKa/5P713un5UU9I4ly3jWRSw2zxoyRFpW5c+Qnh39YRrji3mwlo1ohUbtUgc DcdLumNZE4HqF9WgooeVpVBEn4saCkm9LM+9SkmdA/OvuZyyp6FyFK7WCusPw50r 8d7KALN8YWlW3FZCd4c5QmURTgPbVmguiRAY+YgnJC72YvFOrxvlILFVq8CHKfSt UhiH+aWZBFx9qQ2acJcbz0VW7rWJImKbdSOEK6nmQuUa91Hk+hQHWcwZ0ZFeEm6y ePJt -----END CERTIFICATE-----Generated at Thu Apr 3 02:58:15 2025 by rpki-client