$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer File: 9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer (raw, json) Hash identifier: 6mDK5XY3zel1Vx4ek5kC0JaL9CqA8knNM43QERJ6M6U= Subject key identifier: 4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849123F1F32CAA57C56C3D28C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 01:45:33 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 36527 IP: 23.160.136.0/24 IP: 2602:fa41::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:3f:1f:32:ca:a5:7c:56:c3:d2:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 4 01:45:33 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:0c:59:8a:cc:b8:c9:28:a9:7b:c2:de:e7: 52:9a:f4:c3:6b:ac:95:5f:1f:4b:8c:03:bb:c3:bf: 93:ed:46:15:a5:82:36:c0:e7:19:f4:cf:1e:d7:03: fb:a8:b0:53:fd:0a:40:85:14:53:d5:cd:22:6b:9f: b8:a1:8b:ae:11:c5:16:36:e3:33:b5:81:dc:4b:05: 61:79:f5:5a:b6:25:95:82:ad:20:cd:a2:e5:8a:12: b6:b2:dc:89:c7:0e:8e:38:52:8e:2d:09:06:c5:12: e4:ec:03:4a:2e:3b:62:a0:80:4c:1c:7a:73:5b:78: e3:cf:d3:68:8e:55:1d:b1:9d:5b:cb:9d:ab:ec:a9: 3b:2f:77:38:bf:20:29:b8:8e:1b:7d:af:0f:fe:f5: ec:17:23:ac:a9:0b:84:3b:f4:ca:ed:eb:89:a5:4c: 9c:dc:81:77:a4:b2:b7:33:ec:33:eb:c0:d1:ca:ac: 6f:2c:a0:6e:a0:e6:36:13:0e:c8:0f:fa:2f:c6:b3: 29:67:10:1d:cf:d6:a8:d9:8c:d0:dd:0f:98:6f:0a: 36:5b:c0:0c:63:a7:37:fc:a8:63:14:59:d4:18:b1: 73:89:9b:f3:70:fb:dc:b1:99:ca:e1:06:fa:bf:7b: 23:ed:95:99:64:e3:39:a3:0c:40:5c:08:ba:de:2c: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.160.136.0/24 IPv6: 2602:fa41::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36527 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:01:fe:35:bc:8a:7c:30:70:f5:22:c9:26:21:ff:d9:be:93: cf:52:a3:45:25:07:7e:51:a7:c9:7c:a8:14:e0:ab:af:e8:c5: 83:83:f1:06:48:6a:d3:2c:61:c6:00:a4:3c:5e:60:dd:ad:d8: 1a:6f:53:d5:92:8b:97:be:ae:d2:ed:7b:54:8e:d0:56:62:41: 14:1f:cf:48:42:4b:f3:85:4d:63:08:9a:43:f0:1a:50:2c:e0: 50:82:27:b3:3d:f1:f8:8e:f7:ba:46:77:8a:f5:d7:0c:18:50: bd:d3:24:d6:a4:e0:27:89:04:1e:49:c7:93:fe:76:19:33:46: 23:15:9f:dd:c3:7c:44:43:48:7f:85:2e:33:3d:8c:80:98:68: b2:7e:69:fb:1f:e9:a1:31:90:3a:b0:2a:5d:27:2c:c2:cd:23: 38:0a:ff:cb:9d:c0:3a:60:41:04:73:58:47:df:d5:36:48:ee: 9d:dc:0a:8a:48:c6:ed:8b:ee:8a:f7:15:5c:96:8f:28:43:88: 04:9c:cb:f4:f3:80:5f:a3:09:84:59:a3:25:a6:be:b2:21:9b: 23:50:18:72:72:d0:b5:6d:5b:3d:21:4d:97:4c:f9:6d:4f:75: f1:69:a5:0d:9d:78:cf:25:ab:d9:c3:63:1b:bd:42:cc:d1:59: f1:ab:88:64 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEkSPx8yyqV8VsPSjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwNDAxNDUzM1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk OWJmN2U4ZjEtODliZS00ZjU3LWEyY2ItOTEyYjQ1YjMwOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZkMWYrMuMkoqXvC3udSmvTDa6yVXx9LjAO7 w7+T7UYVpYI2wOcZ9M8e1wP7qLBT/QpAhRRT1c0ia5+4oYuuEcUWNuMztYHcSwVh efVatiWVgq0gzaLlihK2styJxw6OOFKOLQkGxRLk7ANKLjtioIBMHHpzW3jjz9No jlUdsZ1by52r7Kk7L3c4vyApuI4bfa8P/vXsFyOsqQuEO/TK7euJpUyc3IF3pLK3 M+wz68DRyqxvLKBuoOY2Ew7ID/ovxrMpZxAdz9ao2YzQ3Q+Ybwo2W8AMY6c3/Khj FFnUGLFziZvzcPvcsZnK4Qb6v3sj7ZWZZOM5owxAXAi63iwjXwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEwC2kgivo70s+gX8kdkc4rthth2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 YmY3ZThmMS04OWJlLTRmNTctYTJjYi05MTJiNDViMzA4ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzliZjdlOGYxLTg5YmUtNGY1Ny1h MmNiLTkxMmI0NWIzMDhmYy85YmY3ZThmMS04OWJlLTRmNTctYTJjYi05MTJiNDVi MzA4ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoIgwDgQCAAIwCAMGBCYC+kEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCOrzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGAf41vIp8MHD1IskmIf/ZvpPP UqNFJQd+UafJfKgU4Kuv6MWDg/EGSGrTLGHGAKQ8XmDdrdgab1PVkouXvq7S7XtU jtBWYkEUH89IQkvzhU1jCJpD8BpQLOBQgiezPfH4jve6RneK9dcMGFC90yTWpOAn iQQeSceT/nYZM0YjFZ/dw3xEQ0h/hS4zPYyAmGiyfmn7H+mhMZA6sCpdJyzCzSM4 Cv/LncA6YEEEc1hH39U2SO6d3AqKSMbti+6K9xVclo8oQ4gEnMv084BfowmEWaMl pr6yIZsjUBhyctC1bVs9IU2XTPltT3XxaaUNnXjPJavZw2MbvULM0Vnxq4hk -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:39 2025 by rpki-client