$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer File: cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer (raw, json) Hash identifier: w1EQdzw/uYv5wlJnEm8y7C3O5o68EAsSmJcML0g4Gyc= Subject key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848897398AA6748BB72445CE600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jan 2025 01:45:33 +0000 Certificate not after: Mon 19 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 11913 IP: 23.163.120.0/24 IP: 2602:816:3000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:73:98:aa:67:48:bb:72:44:5c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 14 01:45:33 2025 GMT Not After : Apr 19 00:45:33 2027 GMT Subject: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f1:02:ba:dd:08:f4:f7:6f:bb:b5:65:7f:e4: 32:ad:8b:44:b6:5c:88:37:10:4b:6e:22:39:a1:14: 01:83:a9:69:ee:08:ce:14:44:df:f1:d9:ec:72:3c: 89:ee:5e:45:2f:66:27:4f:34:a5:bd:70:5b:9b:b0: 01:bc:24:29:fa:f1:43:c9:24:17:4e:55:4b:c9:a3: 14:fa:60:ac:c8:b8:56:ba:d1:df:d0:37:fe:e8:48: a8:7d:cc:c7:9b:db:0c:9c:9e:84:d7:82:99:2d:88: 4f:28:05:37:18:32:d7:c2:ef:ea:30:d2:0e:f4:08: bc:c2:ab:6b:ae:a0:20:9e:50:3d:3a:78:ed:32:63: f0:28:11:1c:6f:9b:37:9b:83:b3:5d:f2:fa:49:a3: 1f:fd:66:08:39:a3:bc:c8:5b:60:4b:5e:08:74:6a: 45:3e:95:7a:ba:13:b4:99:98:3a:80:70:2f:78:a3: 6f:0e:e5:80:78:24:9f:8b:4b:fb:86:00:0f:8d:58: 91:90:75:83:5d:aa:d1:36:e1:9b:f8:16:b3:bf:eb: 7d:8c:ff:b0:d6:0a:e2:fc:2d:13:a9:21:41:07:33: 96:b9:e4:ba:02:18:5b:92:7b:8b:c1:ea:5c:df:dc: 89:46:e2:da:a3:94:da:ce:72:17:ba:78:85:95:f1: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.163.120.0/24 IPv6: 2602:816:3000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11913 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b2:36:06:62:52:98:34:88:9a:08:02:68:4e:e1:56:a2:c5: 69:4a:92:72:1d:9e:70:90:92:a5:8f:0a:36:f5:2c:fb:e3:d3: 39:4f:40:96:f9:da:a2:04:74:83:0a:47:0f:b0:2d:c5:9a:ab: 9f:0d:69:e6:20:56:41:51:4d:b4:84:13:6e:35:8d:cb:35:b0: 40:b6:44:e9:73:a8:96:6b:d1:d8:15:67:f4:e4:df:62:37:b4: 1c:25:43:70:17:5d:0a:60:4a:7e:25:f9:5c:40:f9:7a:5b:4d: a7:0d:a6:83:a9:ed:e5:90:c1:6d:69:b9:83:be:f2:cb:0c:53: 50:78:ec:86:61:ef:28:2c:93:bf:4e:ac:5c:57:b9:16:e2:ea: 3d:e7:72:bf:58:e3:ed:ff:70:84:9e:79:47:63:14:0a:31:53: eb:23:ac:18:f8:d6:5f:48:9f:68:b7:55:dc:3a:8d:6a:dc:10: f0:62:57:5c:d2:34:92:b6:80:04:00:24:86:33:ad:0d:c2:f2: ee:37:06:d5:d3:aa:ed:2a:59:89:a6:75:42:b8:54:6b:5c:63: bc:bb:e0:bf:44:d1:96:c4:a8:f0:0c:61:b3:3b:d5:80:c3:76: c8:6d:cf:19:9f:df:ab:7e:75:6d:83:20:e8:25:23:bf:97:6e: 0e:75:23:a3 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEiJc5iqZ0i7ckRc5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExNDAxNDUzM1oXDTI3MDQxOTAwNDUzM1owLzEtMCsGA1UEAxMk Y2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNmY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/ECut0I9Pdvu7Vlf+QyrYtEtlyINxBLbiI5 oRQBg6lp7gjOFETf8dnscjyJ7l5FL2YnTzSlvXBbm7ABvCQp+vFDySQXTlVLyaMU +mCsyLhWutHf0Df+6EiofczHm9sMnJ6E14KZLYhPKAU3GDLXwu/qMNIO9Ai8wqtr rqAgnlA9OnjtMmPwKBEcb5s3m4OzXfL6SaMf/WYIOaO8yFtgS14IdGpFPpV6uhO0 mZg6gHAveKNvDuWAeCSfi0v7hgAPjViRkHWDXarRNuGb+Bazv+t9jP+w1gri/C0T qSFBBzOWueS6AhhbknuLwepc39yJRuLao5TaznIXuniFlfGsmQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPq6F0hsNc2KizwWYMRvn1gOL15kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j ZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NmMzEyOTZmLThmMmYtNDI2OC04 NTk5LTRjNDdkMjVjZmNmMC9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1 Y2ZjZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXo3gwDwQCAAIwCQMHBCYCCBYwADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIuiTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmsjYGYlKYNIiaCAJoTuFWosVp SpJyHZ5wkJKljwo29Sz749M5T0CW+dqiBHSDCkcPsC3FmqufDWnmIFZBUU20hBNu NY3LNbBAtkTpc6iWa9HYFWf05N9iN7QcJUNwF10KYEp+JflcQPl6W02nDaaDqe3l kMFtabmDvvLLDFNQeOyGYe8oLJO/TqxcV7kW4uo953K/WOPt/3CEnnlHYxQKMVPr I6wY+NZfSJ9ot1XcOo1q3BDwYldc0jSStoAEACSGM60NwvLuNwbV06rtKlmJpnVC uFRrXGO8u+C/RNGWxKjwDGGzO9WAw3bIbc8Zn9+rfnVtgyDoJSO/l24OdSOj -----END CERTIFICATE-----Generated at Thu Apr 3 02:40:14 2025 by rpki-client