$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer File: 7e4fb68f-edad-45a2-98d4-e937526bfa31.cer (raw, json) Hash identifier: gASH7UojBirnOkiD4LHjQ0MsjZd957GClnWTfBvMngQ= Subject key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858489FC913F7DA2C6925F646DD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jan 2025 01:45:33 +0000 Certificate not after: Tue 27 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 956 -- 958 AS: 981 IP: 23.153.48.0/24 IP: 2605:ac40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:c9:13:f7:da:2c:69:25:f6:46:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 22 01:45:33 2025 GMT Not After : Apr 27 00:45:33 2027 GMT Subject: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:aa:41:bb:f7:7b:5b:6d:70:59:bf:71:72: 49:f4:67:86:b7:25:88:85:57:7c:2d:f2:b3:13:ed: d0:2f:23:4c:1e:43:37:a0:7f:22:8c:7f:06:9b:03: c3:d0:a2:d9:17:84:2b:25:63:31:35:20:23:3e:87: 43:db:d8:93:17:c0:69:1c:b4:0f:9a:4b:15:56:71: 7a:78:5a:11:4a:d3:0c:6a:dd:fe:e4:57:3c:c0:27: 19:81:2f:30:a0:86:8f:d3:82:a4:f8:93:7a:33:44: d5:67:0a:f2:b9:53:d2:64:0a:df:81:aa:86:82:43: e4:ef:46:b5:d0:58:fc:ed:d2:18:15:94:91:da:e9: b6:ec:c0:74:70:e4:e0:55:7c:10:88:e2:1e:c0:5c: 1c:43:a6:3a:4f:cc:b0:5a:54:a6:e5:8e:02:15:3b: b3:75:9f:cb:ca:ab:19:c3:0d:7f:8f:23:20:c9:9d: 52:95:d4:fe:74:f8:7e:11:f9:57:de:88:99:4b:83: eb:0a:83:08:75:df:15:e5:7c:39:63:32:09:5f:c3: 9d:99:81:79:17:06:33:98:8f:fd:0c:15:2c:0c:4c: 7f:3d:7c:0b:de:db:36:66:3e:e1:57:8f:94:b0:93: fd:15:62:fb:4a:18:9d:3b:09:0a:1a:14:65:30:fa: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.153.48.0/24 IPv6: 2605:ac40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 956-958 981 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4c:b1:08:ef:cd:aa:f8:80:cf:22:6c:92:e0:0c:97:44:8a: ae:c1:88:74:a3:d0:03:5e:9f:5d:71:94:53:f1:77:e7:90:53: 5a:f9:f2:86:47:c0:a1:e9:39:99:3d:77:2a:db:9f:d8:47:9e: 9c:44:eb:b8:a7:c2:18:1b:5b:1f:c9:c5:87:80:b2:4c:04:c8: 86:a3:93:f8:73:c0:43:9b:f9:4e:40:48:c7:db:52:6e:c7:4d: 5c:96:f5:ab:ca:83:4d:a1:37:60:4e:ab:0e:07:b1:92:cf:61: 5b:32:d7:67:4f:0e:83:41:02:a0:3f:27:b2:a8:43:45:fc:1b: 90:67:49:e5:42:ce:0f:ce:b4:cf:e7:4d:2f:ef:07:ac:24:4c: 7f:3c:b4:22:45:1d:3e:c3:a4:d3:c6:bd:e9:c2:9f:22:29:16: 04:dd:21:63:ed:05:f4:db:9c:3c:59:54:49:f9:0c:a5:a9:d2: f7:95:83:32:69:40:e8:e6:09:6e:41:bf:b0:40:64:a1:3f:cc: b7:91:3a:b1:31:6e:46:99:3a:16:86:17:70:36:31:5e:ab:19: a0:0c:dd:25:3f:5d:3d:e7:b8:c2:73:75:25:cd:a0:22:4d:b0: cf:b4:e2:97:2a:47:54:03:5e:4f:2e:fd:e5:9e:e4:ee:4c:7c: a3:c3:87:05 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEifyRP32ixpJfZG3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyMjAxNDUzM1oXDTI3MDQyNzAwNDUzM1owLzEtMCsGA1UEAxMk N2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJmYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPWqQbv3e1ttcFm/cXJJ9GeGtyWIhVd8LfKz E+3QLyNMHkM3oH8ijH8GmwPD0KLZF4QrJWMxNSAjPodD29iTF8BpHLQPmksVVnF6 eFoRStMMat3+5Fc8wCcZgS8woIaP04Kk+JN6M0TVZwryuVPSZArfgaqGgkPk70a1 0Fj87dIYFZSR2um27MB0cOTgVXwQiOIewFwcQ6Y6T8ywWlSm5Y4CFTuzdZ/LyqsZ ww1/jyMgyZ1SldT+dPh+EflX3oiZS4PrCoMIdd8V5Xw5YzIJX8OdmYF5FwYzmI/9 DBUsDEx/PXwL3ts2Zj7hV4+UsJP9FWL7ShidOwkKGhRlMPpE6QIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFEN5jsMwQQkBPYFqDzkrj6t+m7g4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzdlNGZiNjhmLWVkYWQtNDVhMi05 OGQ0LWU5Mzc1MjZiZmEzMS83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2 YmZhMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXmTAwDQQCAAIwBwMFACYFrEAwIwYIKwYBBQUH AQgBAf8EFDASoBAwDjAIAgIDvAICA74CAgPVMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAARMsQjvzar4gM8i bJLgDJdEiq7BiHSj0ANen11xlFPxd+eQU1r58oZHwKHpOZk9dyrbn9hHnpxE67in whgbWx/JxYeAskwEyIajk/hzwEOb+U5ASMfbUm7HTVyW9avKg02hN2BOqw4HsZLP YVsy12dPDoNBAqA/J7KoQ0X8G5BnSeVCzg/OtM/nTS/vB6wkTH88tCJFHT7DpNPG venCnyIpFgTdIWPtBfTbnDxZVEn5DKWp0veVgzJpQOjmCW5Bv7BAZKE/zLeROrEx bkaZOhaGF3A2MV6rGaAM3SU/XT3nuMJzdSXNoCJNsM+04pcqR1QDXk8u/eWe5O5M fKPDhwU= -----END CERTIFICATE-----Generated at Thu Apr 3 02:45:14 2025 by rpki-client