$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer File: 64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer (raw, json) Hash identifier: kWoHsb2mY4gSHPmntVFqSx36JlN3yTAI2cFbU/kj2Mw= Subject key identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848EB298CF959245A48B80BDC0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 01:45:34 +0000 Certificate not after: Mon 24 May 2027 00:45:34 +0000 Subordinate resources: AS: 32673 IP: 23.170.104.0/24 IP: 2607:7c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:29:8c:f9:59:24:5a:48:b8:0b:dc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 18 01:45:34 2025 GMT Not After : May 24 00:45:34 2027 GMT Subject: CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:7a:36:91:c7:2b:f4:d2:99:e3:7f:77:b7: 0b:60:c5:23:6a:8d:bd:a5:32:84:19:eb:9b:e3:6c: ad:86:bb:fd:cd:fe:ff:13:6f:a2:db:7f:2c:24:69: 8e:64:c9:90:22:5a:d0:2c:8e:08:02:1d:30:25:a8: 87:db:0e:53:f7:2b:ba:e1:b0:4c:ac:d5:0e:11:fb: 77:a6:88:d4:0a:aa:50:af:cb:86:08:e5:ad:4c:da: ce:8a:38:c3:a9:b6:12:b3:1c:46:21:a5:e2:b7:6f: 7c:c0:8d:69:70:b4:c0:5f:40:43:6d:05:ff:52:dd: af:97:30:26:cb:04:e5:41:2e:8d:04:08:3e:af:ad: b0:55:f1:5e:19:72:67:b4:2f:13:8e:59:76:96:c5: 5c:55:79:20:a5:b9:21:a3:32:14:0f:72:6d:e4:a9: 88:f9:eb:fe:af:74:47:12:33:7d:82:28:73:2f:e4: 3d:46:1a:c2:5a:26:2b:ac:77:d7:e2:e9:6e:01:3b: 98:29:e9:62:db:7c:14:49:f2:ac:01:3c:07:83:1d: a1:92:f4:7c:17:b2:30:57:e1:b3:15:77:da:e6:33: a7:8b:b2:c7:74:33:ac:a7:dc:bd:8c:eb:3e:50:b8: 2c:5f:83:e2:be:91:fc:a3:5b:30:d9:84:91:00:52: b3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.170.104.0/24 IPv6: 2607:7c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32673 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7d:1b:0c:4e:22:e4:69:08:f6:8e:1e:a4:10:5a:d3:17:8d: dd:0f:3d:12:01:ca:17:cf:03:6b:fd:87:ad:c7:fb:ca:b3:f1: 8c:b6:d7:99:d6:ad:13:6d:8c:ba:9b:0c:e6:bd:2c:4b:c2:b9: 11:4f:78:2c:3c:79:0d:2b:41:8e:b8:60:ba:40:55:ee:6e:99: c0:68:3c:60:75:65:68:ff:19:7b:3b:08:5e:f4:49:5c:64:64: 6b:13:c8:cc:59:13:df:dd:cd:1f:4a:e8:3b:b0:29:b4:17:a2: a6:1f:ae:8e:97:7e:2e:50:21:c9:f7:5f:a3:18:a2:9e:b8:2a: a4:83:bc:63:7f:8c:30:e5:48:a1:b3:2f:d0:af:75:57:54:ad: 20:ee:c0:5d:45:b0:a4:88:06:c4:8e:2f:6e:24:87:77:7f:86: 35:e6:49:83:46:cc:68:d4:b1:a5:88:9b:8b:7e:ca:57:64:69: 9e:ad:c4:ab:83:16:35:45:b8:be:37:c0:b3:6f:e3:31:4e:31: 39:49:e6:b2:f1:ab:9c:46:40:92:e5:dd:62:bc:e4:5b:02:d7: 37:dd:8f:c4:0d:dc:c5:2f:7f:ac:d7:be:77:6c:82:d8:10:6e: a3:54:b4:6a:d9:7e:cd:63:66:52:3d:5c:d2:80:a4:3f:2f:2f: b8:4b:0a:df -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEjrKYz5WSRaSLgL3AwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxODAxNDUzNFoXDTI3MDUyNDAwNDUzNFowLzEtMCsGA1UEAxMk NjRmYWFmZGMtMGVmMi00Y2EyLWFiMTEtNjNjODM5ZTdhYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCx6NpHHK/TSmeN/d7cLYMUjao29pTKEGeub 42ythrv9zf7/E2+i238sJGmOZMmQIlrQLI4IAh0wJaiH2w5T9yu64bBMrNUOEft3 pojUCqpQr8uGCOWtTNrOijjDqbYSsxxGIaXit298wI1pcLTAX0BDbQX/Ut2vlzAm ywTlQS6NBAg+r62wVfFeGXJntC8Tjll2lsVcVXkgpbkhozIUD3Jt5KmI+ev+r3RH EjN9gihzL+Q9RhrCWiYrrHfX4uluATuYKeli23wUSfKsATwHgx2hkvR8F7IwV+Gz FXfa5jOni7LHdDOsp9y9jOs+ULgsX4PivpH8o1sw2YSRAFKzyQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFNAscGIQA000AU7pjz5fvFK3J4vcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 NGZhYWZkYy0wZWYyLTRjYTItYWIxMS02M2M4MzllN2FhNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY0ZmFhZmRjLTBlZjItNGNhMi1h YjExLTYzYzgzOWU3YWE3Mi82NGZhYWZkYy0wZWYyLTRjYTItYWIxMS02M2M4Mzll N2FhNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXqmgwDQQCAAIwBwMFACYHfEAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICf6EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAh30bDE4i5GkI9o4epBBa0xeN3Q89 EgHKF88Da/2Hrcf7yrPxjLbXmdatE22MupsM5r0sS8K5EU94LDx5DStBjrhgukBV 7m6ZwGg8YHVlaP8ZezsIXvRJXGRkaxPIzFkT393NH0roO7AptBeiph+ujpd+LlAh yfdfoxiinrgqpIO8Y3+MMOVIobMv0K91V1StIO7AXUWwpIgGxI4vbiSHd3+GNeZJ g0bMaNSxpYibi37KV2Rpnq3Eq4MWNUW4vjfAs2/jMU4xOUnmsvGrnEZAkuXdYrzk WwLXN92PxA3cxS9/rNe+d2yC2BBuo1S0atl+zWNmUj1c0oCkPy8vuEsK3w== -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:41 2025 by rpki-client