$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer File: c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer (raw, json) Hash identifier: iRYRImo6wT9N8+ou6rX6FrqlfIrSSTuh96deEz0LldQ= Subject key identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848880E4442249D43812928ED80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jan 2025 13:45:34 +0000 Certificate not after: Sun 18 Apr 2027 12:45:34 +0000 Subordinate resources: AS: 11925 AS: 401057 IP: 23.163.200.0/24 IP: 2607:7140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:88:0e:44:42:24:9d:43:81:29:28:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 13 13:45:34 2025 GMT Not After : Apr 18 12:45:34 2027 GMT Subject: CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:6f:0d:2a:5e:6c:8f:8a:52:7b:b6:ad:5a: 6b:42:25:ee:0c:b6:8d:bf:9b:83:12:51:a1:be:e4: 6a:8c:2a:0d:44:75:05:ec:a3:65:6e:fb:c7:79:75: a3:f9:c4:c5:78:69:7c:80:2a:c2:47:6b:e4:17:a2: 30:0f:62:07:df:42:d0:b5:a0:72:2c:7a:b2:85:43: 61:0a:ef:10:96:50:1b:b3:19:be:98:a1:79:50:36: 21:90:fd:ed:39:f2:b3:59:b8:57:df:c1:73:c7:42: 4e:1c:96:7e:90:2d:bd:20:50:b9:c8:d7:55:de:0a: 55:ee:38:e9:71:b1:32:1a:97:50:ce:dd:49:31:de: d7:d1:03:b2:53:e8:d3:62:dc:05:d1:ba:64:96:b5: 5e:08:1a:65:92:95:63:56:a3:33:35:99:8d:2f:6e: 30:0f:d5:05:10:04:8f:fd:59:d7:1b:a8:30:15:5a: 03:ef:b6:28:0b:78:fd:df:e3:e0:c5:05:4a:6e:a2: 41:cb:87:b7:5f:0b:a4:45:09:76:34:60:72:22:d9: 23:28:f2:91:a6:42:d0:98:05:93:46:09:4f:e0:98: 4d:86:6f:05:38:2d:ab:78:e4:8e:f1:e9:c7:b0:a4: 8c:e1:3b:45:e8:1d:b3:89:f8:3e:3b:f2:0d:9d:86: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.163.200.0/24 IPv6: 2607:7140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11925 401057 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f6:e5:06:3c:83:fe:d2:e0:2c:ed:bc:c7:d0:37:a0:ac:4c: 0a:7e:90:2d:84:44:e8:ad:5b:3d:63:0a:ef:67:fe:fc:62:58: 78:34:e8:3e:7e:85:af:83:b1:99:2c:b8:45:39:ba:44:41:c6: a1:56:92:3d:5b:a7:ec:3d:8c:64:1d:89:2d:9b:c8:17:a4:cb: 38:cc:9b:83:d5:8f:01:6a:63:41:c8:cf:f6:a5:85:ac:56:30: a3:8e:38:81:72:c4:6c:f6:b3:52:ae:37:4d:68:dd:21:4c:d4: 56:bb:4f:b6:a3:31:45:48:f8:ef:d4:97:d7:2c:ea:dc:0c:20: 02:e7:f5:b1:b2:39:64:02:b3:d5:d9:34:eb:20:87:3c:89:11: cb:29:00:12:31:bd:db:44:e3:e4:57:a5:4e:87:79:73:c3:c6: 91:b3:8b:fc:1f:55:fe:19:b8:af:a4:ef:ce:86:34:8f:9f:33: 4b:d7:ac:02:e9:6e:71:f4:75:53:44:14:1e:1b:e1:68:86:8f: c4:01:a1:61:ac:f5:6b:bf:4c:15:64:e9:1d:f3:9e:32:3a:7a: 0a:2f:cf:29:8f:1b:65:e5:55:dc:a7:4e:e7:7f:0c:77:c7:34: 24:b0:f4:d4:3c:f9:92:90:43:38:f1:d6:8c:29:bf:ce:02:8b: 67:cb:db:bc -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEiIDkRCJJ1DgSko7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExMzEzNDUzNFoXDTI3MDQxODEyNDUzNFowLzEtMCsGA1UEAxMk YzlmMjVjZTMtMDFmNC00ZGZmLWJmMzgtMDU5YWY1YjY0ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt79vDSpebI+KUnu2rVprQiXuDLaNv5uDElGh vuRqjCoNRHUF7KNlbvvHeXWj+cTFeGl8gCrCR2vkF6IwD2IH30LQtaByLHqyhUNh Cu8QllAbsxm+mKF5UDYhkP3tOfKzWbhX38Fzx0JOHJZ+kC29IFC5yNdV3gpV7jjp cbEyGpdQzt1JMd7X0QOyU+jTYtwF0bpklrVeCBplkpVjVqMzNZmNL24wD9UFEASP /VnXG6gwFVoD77YoC3j93+PgxQVKbqJBy4e3XwukRQl2NGByItkjKPKRpkLQmAWT RglP4JhNhm8FOC2reOSO8enHsKSM4TtF6B2zifg+O/INnYa3twIDAQABo4IELjCC BCowHQYDVR0OBBYEFCJazC1Xlv86zrxyayQP2dsjmtIlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j OWYyNWNlMy0wMWY0LTRkZmYtYmYzOC0wNTlhZjViNjRkM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M5ZjI1Y2UzLTAxZjQtNGRmZi1i ZjM4LTA1OWFmNWI2NGQzYi9jOWYyNWNlMy0wMWY0LTRkZmYtYmYzOC0wNTlhZjVi NjRkM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXo8gwDQQCAAIwBwMFACYHcUAwHgYIKwYBBQUH AQgBAf8EDzANoAswCQICLpUCAwYeoTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCW9uUGPIP+0uAs7bzH0Deg rEwKfpAthETorVs9YwrvZ/78Ylh4NOg+foWvg7GZLLhFObpEQcahVpI9W6fsPYxk HYktm8gXpMs4zJuD1Y8BamNByM/2pYWsVjCjjjiBcsRs9rNSrjdNaN0hTNRWu0+2 ozFFSPjv1JfXLOrcDCAC5/WxsjlkArPV2TTrIIc8iRHLKQASMb3bROPkV6VOh3lz w8aRs4v8H1X+GbivpO/OhjSPnzNL16wC6W5x9HVTRBQeG+Foho/EAaFhrPVrv0wV ZOkd854yOnoKL88pjxtl5VXcp07nfwx3xzQksPTUPPmSkEM48daMKb/OAotny9u8 -----END CERTIFICATE-----Generated at Thu Apr 3 02:38:43 2025 by rpki-client