$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer File: b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer (raw, json) Hash identifier: 3zo6gJoEGubFu2LJaTpP6FV5irqFK/L/sFKLbXVSMYE= Subject key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849604C8098A4B55317A7EC3A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 00:45:34 +0000 Certificate not after: Mon 05 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 12131 AS: 395678 IP: 23.161.32.0 -- 23.161.34.255 IP: 23.187.0.0/23 IP: 2604:d2c0::/32 IP: 2620:1df::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:4c:80:98:a4:b5:53:17:a7:ec:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 1 00:45:34 2025 GMT Not After : Jul 5 00:45:34 2027 GMT Subject: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a7:78:f6:91:e0:c9:5c:04:48:8d:31:79:bd: a1:2e:b3:95:e8:99:77:63:9a:bf:43:a7:19:98:d4: 2f:ac:14:93:cd:f4:66:d0:99:fc:21:9c:c8:4e:54: 23:ff:82:44:81:e4:63:63:2f:38:c3:e9:01:f6:b7: a0:49:a7:bb:f5:6e:d3:ff:2c:b1:66:1f:83:11:d8: 3c:3b:32:fa:5f:d4:80:c6:d3:3b:2e:3c:e0:7c:cb: 5e:fb:b2:4e:22:88:3c:ba:9d:32:43:6d:2b:86:5b: d5:8b:19:2b:7c:dc:ae:13:66:7d:51:82:8c:d8:79: c7:6b:08:1a:8e:60:ed:ec:75:d2:f6:7e:ee:29:56: 9d:4a:e7:84:4b:a4:88:a0:cd:6a:ab:1c:51:61:9f: 4a:57:98:42:46:58:23:ee:54:99:c6:c8:98:75:14: ce:57:e1:3e:00:e1:27:49:ca:2b:5c:0b:a3:25:70: 9f:af:54:eb:80:ad:e8:e1:b8:0f:a4:90:c9:8e:b6: 8f:ed:00:b7:7a:0b:ee:24:34:ca:13:5a:f9:29:49: 3a:28:07:5c:c9:4c:e6:f7:94:28:09:04:44:70:c0: 98:80:ed:4e:69:a2:b1:19:cb:e6:43:11:87:94:1b: 21:a5:23:c6:83:ae:f6:02:10:9a:95:c8:39:e3:24: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.161.32.0-23.161.34.255 23.187.0.0/23 IPv6: 2604:d2c0::/32 2620:1df::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12131 395678 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:84:f5:c4:9f:91:07:25:bc:91:63:12:01:c2:a3:8d:6a:76: f7:af:6a:7b:a5:68:48:6e:46:5c:d1:a1:60:0f:d5:30:64:d8: 3d:51:f1:67:72:03:3b:45:63:7c:0d:ed:62:61:a2:32:9a:23: 0a:5c:21:76:c9:8d:2a:7d:10:33:d2:18:40:05:f0:eb:31:30: e1:00:1f:e8:67:97:ce:92:72:91:22:15:67:66:4b:e7:6c:3f: f5:2c:10:f1:51:df:07:88:73:37:3e:dd:01:be:8b:fd:72:8e: 4d:47:3f:51:17:96:7d:f7:a6:1c:00:12:60:61:33:56:48:17: 29:61:0d:f0:c4:54:b0:2a:37:e4:57:e2:d5:c2:c0:69:97:4a: 71:b0:5b:13:42:a4:0c:c3:de:16:5f:de:e3:46:69:1b:88:9f: 59:ce:fd:1b:83:66:5f:56:89:ed:d5:17:69:5e:68:6d:19:4c: 03:24:d8:72:e4:2a:37:e5:c8:97:79:74:f1:68:b6:e9:0d:25: 2e:40:c0:67:9a:78:06:b2:d7:2d:c5:c7:64:b6:30:1f:76:12: d3:88:4d:e0:09:d6:cc:89:80:07:0a:38:88:33:f7:3b:dc:34: 08:f0:a1:40:61:f2:a9:9f:0b:74:13:80:9a:4c:2a:94:52:b9: 2a:46:dd:49 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWElgTICYpLVTF6fsOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwMTAwNDUzNFoXDTI3MDcwNTAwNDUzNFowLzEtMCsGA1UEAxMk YjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcyYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqd49pHgyVwESI0xeb2hLrOV6Jl3Y5q/Q6cZ mNQvrBSTzfRm0Jn8IZzITlQj/4JEgeRjYy84w+kB9regSae79W7T/yyxZh+DEdg8 OzL6X9SAxtM7LjzgfMte+7JOIog8up0yQ20rhlvVixkrfNyuE2Z9UYKM2HnHawga jmDt7HXS9n7uKVadSueES6SIoM1qqxxRYZ9KV5hCRlgj7lSZxsiYdRTOV+E+AOEn ScorXAujJXCfr1TrgK3o4bgPpJDJjraP7QC3egvuJDTKE1r5KUk6KAdcyUzm95Qo CQREcMCYgO1OaaKxGcvmQxGHlBshpSPGg672AhCalcg54yRxEwIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFEbiJqgX1/jdviu3NqfIu1ZPiv95MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i NGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I0ZjkxMzUxLWJhMjctNGQ4YS05 ZDA2LTU5YWVhYTk3MmE2Mi9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5 NzJhNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMBoEAgABMBQwDAMEBRehIAMEABehIgMEARe7ADAUBAIAAjAOAwUA JgTSwAMFACYgAd8wHgYIKwYBBQUHAQgBAf8EDzANoAswCQICL2MCAwYJnjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCLhPXEn5EHJbyRYxIBwqONanb3r2p7pWhIbkZc0aFgD9UwZNg9UfFncgM7 RWN8De1iYaIymiMKXCF2yY0qfRAz0hhABfDrMTDhAB/oZ5fOknKRIhVnZkvnbD/1 LBDxUd8HiHM3Pt0Bvov9co5NRz9RF5Z996YcABJgYTNWSBcpYQ3wxFSwKjfkV+LV wsBpl0pxsFsTQqQMw94WX97jRmkbiJ9Zzv0bg2ZfVont1RdpXmhtGUwDJNhy5Co3 5ciXeXTxaLbpDSUuQMBnmngGstctxcdktjAfdhLTiE3gCdbMiYAHCjiIM/c73DQI 8KFAYfKpnwt0E4CaTCqUUrkqRt1J -----END CERTIFICATE-----Generated at Thu Apr 3 02:54:24 2025 by rpki-client