$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer File: 8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer (raw, json) Hash identifier: jUAQzwbMoUfUWe7V7Jo29eg2U2OE9xzQoPjUyCYkYuA= Subject key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858491ECF332035B9DC43940E3700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 08 Mar 2025 13:45:33 +0000 Certificate not after: Fri 11 Jun 2027 12:45:33 +0000 Subordinate resources: AS: 19415 IP: 23.166.248.0/24 IP: 2602:f9d3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:cf:33:20:35:b9:dc:43:94:0e:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 8 13:45:33 2025 GMT Not After : Jun 11 12:45:33 2027 GMT Subject: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:5b:74:8b:bb:3f:90:05:f2:17:d1:b8:74: fb:ce:18:95:57:30:07:58:3b:ae:2b:54:a0:7e:d5: 1a:15:3b:e4:62:88:11:9d:81:97:03:3c:e1:8c:db: d0:d7:05:e2:8f:b8:5d:a8:ac:83:63:e9:fb:64:98: 01:3c:61:da:9f:47:60:a7:41:50:e3:33:6d:16:91: 39:ad:a4:74:d4:0d:92:e5:ac:42:67:98:a6:77:bc: 6a:fe:50:13:fe:52:50:7e:de:46:5a:94:8c:09:3a: 30:10:7d:32:93:71:6b:97:2f:d1:73:22:b8:16:5b: 3a:30:ab:ec:60:71:69:d6:34:7c:a0:1b:cd:38:6d: ee:c2:8d:77:3b:9d:96:cc:b9:a2:aa:9f:34:2b:ee: 65:41:22:b2:7e:1a:2a:4f:ae:90:09:19:a8:be:3e: 3a:93:0f:06:b9:55:3a:37:ac:e8:d4:1c:b4:8c:12: d2:dc:d4:8d:2d:2b:25:1f:d0:c6:b3:6f:32:70:dc: 16:d3:fe:46:2c:57:c1:02:e7:ce:d4:a3:ff:ec:c9: eb:c2:a5:93:dc:3f:96:7c:12:dd:97:30:b2:a7:83: 9b:94:97:37:e2:13:9c:b8:62:21:2b:4c:2d:22:9c: df:3c:29:4c:eb:6b:96:f3:25:e5:71:c6:0a:cb:bd: a7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.166.248.0/24 IPv6: 2602:f9d3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19415 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:50:21:8f:cb:72:73:c3:1b:3a:cc:74:5c:ee:4c:42:72:8b: 9c:3f:e9:2a:c3:49:d3:2d:9c:92:5c:dc:bc:ba:da:f4:4f:72: 35:86:40:94:c4:3d:88:45:a8:42:45:86:94:b7:55:e3:04:e0: 71:e9:99:14:1e:d9:25:98:88:82:ce:dc:0c:0e:c8:d0:16:7a: 59:1a:0c:7a:49:14:6c:38:23:9e:2a:fc:92:7d:3a:11:f3:6d: c3:fa:b2:6e:f5:47:3e:cf:f1:8c:97:48:98:cc:fa:1d:fe:db: dd:00:c6:44:6e:28:7e:04:5f:d7:4c:da:a3:53:04:f6:92:0a: 95:11:c7:e8:f7:02:bb:18:7d:e8:20:01:9e:c4:45:43:2d:da: bc:1b:8b:d7:93:1b:f4:2b:d6:8e:a4:75:fd:ec:37:26:d1:b5: e1:06:fe:02:b1:e4:90:9d:8e:08:b5:99:f2:c7:8f:57:7c:81: 92:79:59:8a:e9:ee:4e:45:86:b8:31:83:13:0f:43:94:4e:6c: c5:f9:4b:4f:7c:7f:33:a6:ae:0a:2e:17:b0:cb:ce:d4:44:c3: 43:60:83:66:21:fd:f1:97:3c:3d:46:a3:38:81:fc:c8:9f:21: 15:3d:db:3f:b1:f6:6a:48:f2:94:9b:cf:a7:7a:59:28:70:b8: 6a:1f:44:dc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkezzMgNbncQ5QONwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwODEzNDUzM1oXDTI3MDYxMTEyNDUzM1owLzEtMCsGA1UEAxMk OGY2YjIzYjEtYzE5Ny00ZGIyLWI0ZDQtYTgxYWRjZDZmMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+1bdIu7P5AF8hfRuHT7zhiVVzAHWDuuK1Sg ftUaFTvkYogRnYGXAzzhjNvQ1wXij7hdqKyDY+n7ZJgBPGHan0dgp0FQ4zNtFpE5 raR01A2S5axCZ5imd7xq/lAT/lJQft5GWpSMCTowEH0yk3Frly/RcyK4Fls6MKvs YHFp1jR8oBvNOG3uwo13O52WzLmiqp80K+5lQSKyfhoqT66QCRmovj46kw8GuVU6 N6zo1By0jBLS3NSNLSslH9DGs28ycNwW0/5GLFfBAufO1KP/7MnrwqWT3D+WfBLd lzCyp4OblJc34hOcuGIhK0wtIpzfPClM62uW8yXlccYKy72nuQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFO1+zX7vruymTPXtsETKxAL92kPBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNkNmYwZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhmNmIyM2IxLWMxOTctNGRiMi1i NGQ0LWE4MWFkY2Q2ZjBlNS84ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNk NmYwZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpvgwDgQCAAIwCAMGACYC+dMAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkvXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAERQIY/LcnPDGzrMdFzuTEJyi5w/ 6SrDSdMtnJJc3Ly62vRPcjWGQJTEPYhFqEJFhpS3VeME4HHpmRQe2SWYiILO3AwO yNAWelkaDHpJFGw4I54q/JJ9OhHzbcP6sm71Rz7P8YyXSJjM+h3+290AxkRuKH4E X9dM2qNTBPaSCpURx+j3ArsYfeggAZ7ERUMt2rwbi9eTG/Qr1o6kdf3sNybRteEG /gKx5JCdjgi1mfLHj1d8gZJ5WYrp7k5FhrgxgxMPQ5RObMX5S098fzOmrgouF7DL ztREw0Ngg2Yh/fGXPD1GoziB/MifIRU92z+x9mpI8pSbz6d6WShwuGofRNw= -----END CERTIFICATE-----Generated at Thu Apr 3 02:40:12 2025 by rpki-client