$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer File: 9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer (raw, json) Hash identifier: RoTtML/lOdnP/0v5bR+SFX5vGTqVz68H3nGzzF14wwc= Subject key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848CACFD3878D8B0304D058C200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Feb 2025 11:38:55 +0000 Certificate not after: Wed 12 May 2027 10:38:55 +0000 Subordinate resources: IP: 23.133.148.0/24 IP: 2602:f709::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ca:cf:d3:87:8d:8b:03:04:d0:58:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 6 11:38:55 2025 GMT Not After : May 12 10:38:55 2027 GMT Subject: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:16:a6:85:2a:6c:bc:ed:37:51:49:f1:a7: 1f:e1:f2:db:78:d2:53:ba:bd:2a:9e:a4:60:be:e3: 3a:45:c0:9f:8b:5c:79:3d:b8:c5:92:08:67:bd:74: 9b:be:81:bf:0c:9b:06:6f:d5:bf:04:f0:b0:15:10: b6:ae:c9:54:18:de:58:f8:29:a1:8d:fd:1b:81:d7: b2:ca:b9:24:c7:bb:2f:94:90:59:c4:4d:e6:ef:3f: 28:4f:ff:98:45:38:2c:92:ba:d5:06:8b:5c:6d:a9: 58:69:56:1a:04:66:52:89:3a:36:5e:66:76:76:ff: 4e:e5:cb:10:c3:62:8d:8d:75:3e:d9:50:78:4f:52: 11:d2:12:7e:b3:da:2b:cd:d3:77:4d:e4:b9:10:18: 00:67:00:8c:a3:10:e0:48:de:e8:a6:d7:87:d9:42: 61:8c:02:8f:b1:1b:92:2c:fb:af:4d:92:10:d3:6f: be:f3:05:e8:bc:9c:b7:f4:57:4e:f2:7f:8f:2e:7d: 1e:d6:13:b6:4b:f2:2a:d4:b4:d9:96:62:10:2a:62: 90:f3:84:96:0d:41:2b:7c:b7:0b:13:1c:0f:66:ff: 55:b3:1f:e3:e0:54:dd:91:3a:48:61:df:fa:61:63: 75:42:e1:91:09:3c:b7:5c:a9:c6:4e:e9:32:5a:59: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.133.148.0/24 IPv6: 2602:f709::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a9:b8:a9:0f:5c:7d:59:20:49:74:15:6f:8d:a7:e0:e7:ee: ec:ba:d7:ee:67:0d:99:95:26:c6:88:14:a3:86:23:9d:6d:ca: 88:a1:4d:e1:f3:f7:87:3a:5c:4b:cd:c7:c4:f3:52:07:53:a2: c8:17:35:25:0a:66:c3:84:47:30:e3:60:04:f8:d9:35:a3:f3: c5:01:90:f2:22:b8:96:77:35:93:06:a4:65:29:9b:06:d3:b5: d1:f9:eb:97:ca:d8:f7:63:bf:57:7d:e8:c3:e0:bb:d8:1b:50: 37:75:ed:a1:90:32:c2:59:37:d4:f1:4e:5c:e3:6d:5d:5d:99: 18:fe:f8:36:65:7c:03:7f:89:c2:e8:b2:1c:4e:4b:c7:d5:14: 08:06:69:90:a9:3b:46:69:37:aa:42:33:75:f1:a4:51:17:8e: 55:bf:73:6f:b6:c4:56:a7:83:6b:e6:d0:96:7a:40:3f:df:0b: 00:6a:23:ad:7b:f1:50:e7:60:62:7e:1d:9b:29:fe:11:bc:e8: a2:2b:11:c4:cc:af:8d:09:84:44:d9:cb:05:34:82:21:6d:b7: 59:2d:f7:02:4d:09:e7:36:6b:d1:34:9e:6b:df:05:1a:42:01: af:2a:e2:f4:a9:e3:84:03:3f:aa:4a:55:1a:a3:ad:52:90:c6: 8c:bb:09:17 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEjKz9OHjYsDBNBYwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIwNjExMzg1NVoXDTI3MDUxMjEwMzg1NVowLzEtMCsGA1UEAxMk OWRmYmY1ZDctZGRmZS00ZTJlLThhOTUtNjhkZWQ2NDk4OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvoWpoUqbLztN1FJ8acf4fLbeNJTur0qnqRg vuM6RcCfi1x5PbjFkghnvXSbvoG/DJsGb9W/BPCwFRC2rslUGN5Y+Cmhjf0bgdey yrkkx7svlJBZxE3m7z8oT/+YRTgskrrVBotcbalYaVYaBGZSiTo2XmZ2dv9O5csQ w2KNjXU+2VB4T1IR0hJ+s9orzdN3TeS5EBgAZwCMoxDgSN7opteH2UJhjAKPsRuS LPuvTZIQ02++8wXovJy39FdO8n+PLn0e1hO2S/Iq1LTZlmIQKmKQ84SWDUErfLcL ExwPZv9Vsx/j4FTdkTpIYd/6YWN1QuGRCTy3XKnGTukyWlkdOQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHYIU9S4qbA08jMeaIvclTDaDQaVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0OTg5MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzlkZmJmNWQ3LWRkZmUtNGUyZS04 YTk1LTY4ZGVkNjQ5ODkxMy85ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0 OTg5MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhZQwDgQCAAIwCAMGACYC9wkAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGSpuKkPXH1ZIEl0FW+Np+Dn7uy61+5nDZmVJsaIFKOGI51tyoihTeHz94c6XEvN x8TzUgdTosgXNSUKZsOERzDjYAT42TWj88UBkPIiuJZ3NZMGpGUpmwbTtdH565fK 2Pdjv1d96MPgu9gbUDd17aGQMsJZN9TxTlzjbV1dmRj++DZlfAN/icLoshxOS8fV FAgGaZCpO0ZpN6pCM3XxpFEXjlW/c2+2xFang2vm0JZ6QD/fCwBqI6178VDnYGJ+ HZsp/hG86KIrEcTMr40JhETZywU0giFtt1kt9wJNCec2a9E0nmvfBRpCAa8q4vSp 44QDP6pKVRqjrVKQxoy7CRc= -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:42 2025 by rpki-client