$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer File: 68e273c1-e39f-464b-8c1f-b45c8df2b148.cer (raw, json) Hash identifier: mNPE5zUQt+K8ETX0Qo9WpswL3ASvYdF79NL/9K9VDLw= Subject key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858493C019C72EBB19793D0568E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Mar 2025 00:45:33 +0000 Certificate not after: Tue 22 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 26886 IP: 23.167.136.0/24 IP: 2607:82c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:01:9c:72:eb:b1:97:93:d0:56:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 19 00:45:33 2025 GMT Not After : Jun 22 00:45:33 2027 GMT Subject: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:2e:bc:f8:3f:9d:02:cb:b1:e0:bf:f1:7f: 73:7c:17:93:22:33:7e:0c:9a:5a:92:b7:f5:2c:35: e8:35:df:2b:4b:dd:67:1d:ab:9d:b4:f8:96:4e:cd: 19:2d:97:d9:01:50:7d:31:fa:3f:30:2e:1c:31:9f: 73:a8:94:36:4b:09:44:1b:ea:6a:87:52:5c:ab:49: ef:fc:96:98:35:ec:30:16:67:a5:9a:64:79:20:c1: e4:a7:ed:2e:64:c5:76:f1:89:de:4d:0e:83:b3:87: 7b:9a:d4:cc:81:20:94:f3:a1:85:7c:94:2f:c5:73: e7:3d:77:89:90:11:5e:4c:bd:b4:be:d8:05:0d:59: 0a:c6:28:e8:c1:f8:c8:b2:28:65:5a:db:21:15:7e: 39:6a:c3:85:0f:ea:a4:97:e0:c3:88:fb:4b:b0:49: f8:7d:ce:9e:b5:de:3e:30:ba:43:c7:e4:c7:f1:85: 7a:43:d9:42:d7:51:fd:da:24:3b:b1:e5:05:f8:f7: 49:7b:61:b4:bf:fc:65:f3:6a:9d:a2:1d:6b:01:1d: 72:86:3f:5e:d4:f8:a5:47:8c:07:74:6a:f6:9f:33: 7c:00:b9:1e:40:3b:ee:db:23:b8:70:ad:29:5f:7f: c3:0f:f2:c9:c5:27:91:57:d1:3c:e1:15:9f:90:1a: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.167.136.0/24 IPv6: 2607:82c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26886 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:7d:0e:79:84:5d:a8:7a:38:41:6c:9f:9e:77:38:96:97:76: e6:c2:df:3b:c5:4e:89:c4:05:cf:a7:f5:e4:5a:aa:d0:c3:24: 08:d1:94:77:38:bd:8e:13:d8:8f:3f:0a:bf:0d:27:7b:24:0c: ab:c9:61:e7:e6:09:a6:2e:72:e7:62:a5:f0:a7:7b:59:db:a9: 4f:6e:1e:e5:b4:bf:4b:b7:44:71:35:e1:dd:32:15:d1:5c:c8: d6:1b:4b:5a:f6:28:e8:43:ad:e0:9a:65:b9:13:1e:3a:84:c0: 1c:e5:2e:50:46:28:90:c8:64:f2:f7:95:1a:db:03:c6:e1:7c: 4f:f5:e6:9b:0b:f3:1a:7b:f2:89:6f:6c:0b:14:ba:9c:c8:f6: b3:41:94:f7:0a:73:c9:2e:ea:0c:23:e4:4a:ea:bb:e1:c9:8e: 9f:ec:24:6f:bd:ad:47:91:31:d6:20:a5:31:ed:ef:70:59:8a: 04:90:81:72:cb:8c:81:55:88:c5:23:92:fc:6d:bd:4b:1e:38: 74:40:05:a5:00:af:8f:c3:c6:2a:18:46:54:94:6d:79:87:c9: c6:d8:64:10:44:4f:2b:5f:79:a5:40:65:6f:7a:bd:26:4c:11: 58:49:53:57:e0:d9:7c:f4:1f:fb:eb:c0:d8:20:96:a0:9b:dc: ab:9f:2d:4c -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEk8AZxy67GXk9BWjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxOTAwNDUzM1oXDTI3MDYyMjAwNDUzM1owLzEtMCsGA1UEAxMk NjhlMjczYzEtZTM5Zi00NjRiLThjMWYtYjQ1YzhkZjJiMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2UuvPg/nQLLseC/8X9zfBeTIjN+DJpakrf1 LDXoNd8rS91nHaudtPiWTs0ZLZfZAVB9Mfo/MC4cMZ9zqJQ2SwlEG+pqh1Jcq0nv /JaYNewwFmelmmR5IMHkp+0uZMV28YneTQ6Ds4d7mtTMgSCU86GFfJQvxXPnPXeJ kBFeTL20vtgFDVkKxijowfjIsihlWtshFX45asOFD+qkl+DDiPtLsEn4fc6etd4+ MLpDx+TH8YV6Q9lC11H92iQ7seUF+PdJe2G0v/xl82qdoh1rAR1yhj9e1PilR4wH dGr2nzN8ALkeQDvu2yO4cK0pX3/DD/LJxSeRV9E84RWfkBou7wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFE0vi31RndERAVU7cxvbmnq+Yr+lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRmMmIxNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY4ZTI3M2MxLWUzOWYtNDY0Yi04 YzFmLWI0NWM4ZGYyYjE0OC82OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRm MmIxNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXp4gwDQQCAAIwBwMFACYHgsAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICaQYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbX0OeYRdqHo4QWyfnnc4lpd25sLf O8VOicQFz6f15Fqq0MMkCNGUdzi9jhPYjz8Kvw0neyQMq8lh5+YJpi5y52Kl8Kd7 WdupT24e5bS/S7dEcTXh3TIV0VzI1htLWvYo6EOt4JpluRMeOoTAHOUuUEYokMhk 8veVGtsDxuF8T/XmmwvzGnvyiW9sCxS6nMj2s0GU9wpzyS7qDCPkSuq74cmOn+wk b72tR5Ex1iClMe3vcFmKBJCBcsuMgVWIxSOS/G29Sx44dEAFpQCvj8PGKhhGVJRt eYfJxthkEERPK195pUBlb3q9JkwRWElTV+DZfPQf++vA2CCWoJvcq58tTA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:40:11 2025 by rpki-client