$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer File: 75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer (raw, json) Hash identifier: kP3TdHykRUCiOO0YmzfQ7FgXi2vt8PP/Wbm0LjwMik0= Subject key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849437C4DD38C7912F1308A2800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 17:03:26 +0000 Certificate not after: Mon 13 Apr 2026 19:53:37 +0000 Subordinate resources: AS: 23077 AS: 27345 IP: 23.170.24.0/24 IP: 2602:f9aa::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:7c:4d:d3:8c:79:12:f1:30:8a:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 21 17:03:26 2025 GMT Not After : Apr 13 19:53:37 2026 GMT Subject: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:c0:39:0f:a5:02:6d:10:8f:68:8d:73:e3: 54:8e:a0:8d:c3:2d:16:94:58:1b:51:e5:8a:a8:a5: 39:47:7a:13:e7:9c:04:46:ab:d3:8a:94:e6:92:37: 6b:39:5c:ee:1f:6b:b4:13:d1:f8:74:23:51:2c:f4: a1:c9:c4:eb:1e:cf:27:77:ed:52:0b:c9:91:2d:96: ae:9e:c1:18:04:a9:b7:f8:e3:9e:28:a9:d0:e6:f7: 82:01:57:38:a5:5e:87:f5:9a:7a:bf:c5:18:e5:32: 7a:c6:0d:d3:2e:f3:55:12:0f:d4:48:95:ff:a6:7f: bd:1b:0a:e6:44:d4:b3:d7:e1:7e:ae:9e:81:de:85: 88:94:fe:2d:1d:40:96:1c:b0:28:83:27:7b:53:42: f6:a9:78:fc:e4:b7:71:4c:68:a2:5c:8f:59:61:0b: 23:d9:6a:aa:2a:b3:5b:72:e2:05:30:be:01:e3:85: 5e:c4:c9:4a:af:e7:3d:d6:68:1d:c0:c5:55:b2:3e: aa:4a:64:df:72:13:46:5b:a2:94:08:cc:a5:41:dd: 1c:52:1c:fc:c0:57:84:2a:8a:51:cd:14:bf:19:8f: 6e:e9:c7:9c:d6:ef:cd:58:b3:7a:66:a5:d8:47:a3: 6a:9d:19:5c:9b:9a:ee:0f:da:eb:5e:1b:7e:68:7c: f4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.170.24.0/24 IPv6: 2602:f9aa::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23077 27345 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1d:a4:a8:6b:8f:79:20:c4:dc:86:b6:13:f6:77:4c:64:12: da:87:fd:08:92:a2:41:75:20:63:f6:18:2f:01:9d:53:31:5f: 81:b4:a6:00:af:0e:e9:79:8f:dd:74:30:5b:a9:94:46:2e:b1: 6c:26:d1:8e:29:e1:49:db:7a:8d:7e:bd:b9:a0:25:08:a9:fb: 4d:59:d3:0a:d6:12:f9:bd:fe:0a:46:ea:22:4c:7e:d3:29:a1: 19:31:82:8a:c8:d8:93:5c:32:7f:79:c6:b5:81:1e:2a:c2:d5: 40:76:0c:e2:09:78:30:c1:a6:d1:1b:a8:e0:c6:d4:b9:32:92: 27:a9:7f:b4:15:d4:22:41:6c:b9:81:02:cf:14:6a:6e:ea:ae: ec:49:88:8b:d5:95:b4:4e:00:37:b8:4d:ca:41:37:37:98:83: b3:84:b3:25:aa:3a:bd:e7:e7:ff:e6:26:a4:99:3a:e5:b2:0e: 35:60:5e:a6:c9:bf:ed:47:9a:ba:94:54:ec:2f:ee:02:bd:53: 40:52:ca:eb:d4:5e:8a:58:6c:33:6b:47:9d:4b:d5:e3:b3:45: bd:91:0f:55:ee:ac:14:e9:3b:f8:11:3a:db:a1:cd:51:dd:c6: 94:92:9c:b3:d2:9f:75:d8:c0:af:3f:29:03:b5:f2:51:be:c1: 97:c8:43:0a -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWElDfE3TjHkS8TCKKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMyMTE3MDMyNloXDTI2MDQxMzE5NTMzN1owLzEtMCsGA1UEAxMk NzVkMmNiYTUtYWNlYy00YmE4LWFkZTctMGY4M2E2YWVmZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM3AOQ+lAm0Qj2iNc+NUjqCNwy0WlFgbUeWK qKU5R3oT55wERqvTipTmkjdrOVzuH2u0E9H4dCNRLPShycTrHs8nd+1SC8mRLZau nsEYBKm3+OOeKKnQ5veCAVc4pV6H9Zp6v8UY5TJ6xg3TLvNVEg/USJX/pn+9Gwrm RNSz1+F+rp6B3oWIlP4tHUCWHLAogyd7U0L2qXj85LdxTGiiXI9ZYQsj2WqqKrNb cuIFML4B44VexMlKr+c91mgdwMVVsj6qSmTfchNGW6KUCMylQd0cUhz8wFeEKopR zRS/GY9u6cec1u/NWLN6ZqXYR6NqnRlcm5ruD9rrXht+aHz0QwIDAQABo4IELjCC BCowHQYDVR0OBBYEFAtCg605KaaJ34x/1xNHRm+Py+/1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 NWQyY2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgzYTZhZWZkNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc1ZDJjYmE1LWFjZWMtNGJhOC1h ZGU3LTBmODNhNmFlZmQ1OS83NWQyY2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgzYTZh ZWZkNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqhgwDgQCAAIwCAMGACYC+aoAMB0GCCsGAQUF BwEIAQH/BA4wDKAKMAgCAlolAgJq0TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATHaSoa495IMTchrYT9ndM ZBLah/0IkqJBdSBj9hgvAZ1TMV+BtKYArw7peY/ddDBbqZRGLrFsJtGOKeFJ23qN fr25oCUIqftNWdMK1hL5vf4KRuoiTH7TKaEZMYKKyNiTXDJ/eca1gR4qwtVAdgzi CXgwwabRG6jgxtS5MpInqX+0FdQiQWy5gQLPFGpu6q7sSYiL1ZW0TgA3uE3KQTc3 mIOzhLMlqjq95+f/5iakmTrlsg41YF6myb/tR5q6lFTsL+4CvVNAUsrr1F6KWGwz a0edS9Xjs0W9kQ9V7qwU6Tv4ETrboc1R3caUkpyz0p912MCvPykDtfJRvsGXyEMK -----END CERTIFICATE-----Generated at Thu Apr 3 02:41:14 2025 by rpki-client