$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer File: d037641d-aa90-4eab-864e-a73e03e24cfa.cer (raw, json) Hash identifier: 0wQL2ag/IFAya1HZ3vidghh2PTB1V3n6NblvsqbXhOg= Subject key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584A62BCD6E86570B4C9AB50FD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 14:30:28 +0000 Certificate not after: Tue 01 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 398759 IP: 23.165.120.0/24 IP: 192.101.177.0/24 IP: 2602:f9eb::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:bc:d6:e8:65:70:b4:c9:ab:50:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 2 14:30:28 2025 GMT Not After : Jun 1 00:45:33 2027 GMT Subject: CN=d037641d-aa90-4eab-864e-a73e03e24cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:70:b0:eb:75:8a:42:09:ab:7d:76:97:98: 9a:c0:8f:5a:51:76:ca:9b:2c:d6:0d:ce:8d:87:a8: 12:1a:d2:b9:5e:92:09:1d:87:0a:b3:38:e0:a7:99: 34:68:29:2a:69:5e:44:79:17:7f:40:6d:c5:c7:ec: 0e:23:f3:60:0c:13:8a:11:c2:69:4d:85:0e:15:12: 84:30:db:a2:ac:51:2c:fd:1d:65:9e:24:ae:ca:ed: 9f:37:4f:a0:18:82:b3:28:a6:68:27:8d:4e:52:8a: 70:ff:76:65:49:f1:56:5c:11:56:83:42:c2:8e:04: 89:f3:06:1a:4c:c3:7c:b5:00:f8:63:17:2b:ac:79: b5:9f:a5:00:20:0e:1e:ca:81:fd:ec:ee:09:16:42: f7:87:33:0e:4f:ac:b3:de:93:77:a6:33:a1:c8:0d: 97:fa:3f:85:b3:3e:b6:8b:22:9d:bf:e2:a4:5f:7e: 8e:4b:05:bf:6e:84:ab:9a:5a:7e:79:e0:b0:75:7a: 5c:8e:5c:1e:99:b6:8b:1c:75:68:29:bd:8c:5a:c0: 3a:3e:03:67:86:45:23:52:45:02:6e:05:9b:f6:77: a4:c4:09:87:e8:38:d7:12:bc:d2:99:97:da:46:41: d8:93:e4:d4:5c:e6:1b:9a:49:61:ae:01:29:59:35: 8d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.120.0/24 192.101.177.0/24 IPv6: 2602:f9eb::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398759 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:68:0c:79:ae:e4:ad:6b:7f:b6:28:1b:c2:c9:72:5e:ed:11: f0:d1:bb:f1:57:76:2a:e6:c8:ad:ca:4d:45:d1:7a:32:27:cc: 60:7d:08:07:5c:a0:0c:c7:5b:61:a1:6f:12:05:ce:b2:a9:77: 93:5c:21:1c:d0:e3:e2:57:3f:17:8e:2a:66:35:8c:9f:4d:ce: 9c:4f:72:1d:19:cb:16:fe:b7:b7:fb:d9:7a:11:f1:64:d5:1d: 75:66:08:14:ff:92:dd:5c:c0:03:cc:d1:bc:9d:39:81:d9:49: 84:21:3b:45:64:90:c7:38:9b:b4:54:11:ae:55:7f:24:e7:2a: 6d:af:d8:c4:a4:9a:7f:23:6b:78:67:70:ad:9f:4a:ad:cc:64: b8:b3:5d:42:63:59:04:bc:1b:ce:5a:86:31:5f:b8:67:73:41: 82:1c:72:4c:54:96:dc:f7:a5:b3:1e:af:16:15:49:3d:3f:82: 94:62:4e:0e:b5:cb:c0:3a:c5:47:3d:e1:92:33:bb:c1:45:17: 1b:1f:30:f7:a4:48:fa:03:67:28:7e:2a:36:21:25:7d:8f:40: 0e:d6:26:5b:82:fe:52:56:54:d5:77:6c:47:05:a2:84:42:16: 89:83:e4:8a:92:56:1b:00:3b:b7:ed:59:71:e2:c4:37:70:be: 6d:67:5d:d3 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEpivNboZXC0yatQ/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDcwMjE0MzAyOFoXDTI3MDYwMTAwNDUzM1owLzEtMCsGA1UEAxMk ZDAzNzY0MWQtYWE5MC00ZWFiLTg2NGUtYTczZTAzZTI0Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0dwsOt1ikIJq312l5iawI9aUXbKmyzWDc6N h6gSGtK5XpIJHYcKszjgp5k0aCkqaV5EeRd/QG3Fx+wOI/NgDBOKEcJpTYUOFRKE MNuirFEs/R1lniSuyu2fN0+gGIKzKKZoJ41OUopw/3ZlSfFWXBFWg0LCjgSJ8wYa TMN8tQD4YxcrrHm1n6UAIA4eyoH97O4JFkL3hzMOT6yz3pN3pjOhyA2X+j+Fsz62 iyKdv+KkX36OSwW/boSrmlp+eeCwdXpcjlwembaLHHVoKb2MWsA6PgNnhkUjUkUC bgWb9nekxAmH6DjXErzSmZfaRkHYk+TUXOYbmklhrgEpWTWNCQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFLe7Q37R/vv0CGXrpuiPPTnlhkgbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNlMjRjZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QwMzc2NDFkLWFhOTAtNGVhYi04 NjRlLWE3M2UwM2UyNGNmYS9kMDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNl MjRjZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXpXgDBADAZbEwDgQCAAIwCAMGBCYC+esAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYVpzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMaAx5ruSta3+2KBvC yXJe7RHw0bvxV3Yq5sityk1F0XoyJ8xgfQgHXKAMx1thoW8SBc6yqXeTXCEc0OPi Vz8XjipmNYyfTc6cT3IdGcsW/re3+9l6EfFk1R11ZggU/5LdXMADzNG8nTmB2UmE ITtFZJDHOJu0VBGuVX8k5yptr9jEpJp/I2t4Z3Ctn0qtzGS4s11CY1kEvBvOWoYx X7hnc0GCHHJMVJbc96WzHq8WFUk9P4KUYk4OtcvAOsVHPeGSM7vBRRcbHzD3pEj6 A2cofio2ISV9j0AO1iZbgv5SVlTVd2xHBaKEQhaJg+SKklYbADu37Vlx4sQ3cL5t Z13T -----END CERTIFICATE-----Generated at Wed Jul 9 17:40:20 2025 by rpki-client