$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer File: d037641d-aa90-4eab-864e-a73e03e24cfa.cer (raw, json) Hash identifier: Vtcx7XPeagqXtPSYkibXDutgCxXwLj/IQjPWvhgvop8= Subject key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849017F02D84868EE79BCAD31C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 01:45:33 +0000 Certificate not after: Tue 01 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 398759 IP: 23.165.120.0/24 IP: 2602:f9eb::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:7f:02:d8:48:68:ee:79:bc:ad:31:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 26 01:45:33 2025 GMT Not After : Jun 1 00:45:33 2027 GMT Subject: CN=d037641d-aa90-4eab-864e-a73e03e24cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:70:b0:eb:75:8a:42:09:ab:7d:76:97:98: 9a:c0:8f:5a:51:76:ca:9b:2c:d6:0d:ce:8d:87:a8: 12:1a:d2:b9:5e:92:09:1d:87:0a:b3:38:e0:a7:99: 34:68:29:2a:69:5e:44:79:17:7f:40:6d:c5:c7:ec: 0e:23:f3:60:0c:13:8a:11:c2:69:4d:85:0e:15:12: 84:30:db:a2:ac:51:2c:fd:1d:65:9e:24:ae:ca:ed: 9f:37:4f:a0:18:82:b3:28:a6:68:27:8d:4e:52:8a: 70:ff:76:65:49:f1:56:5c:11:56:83:42:c2:8e:04: 89:f3:06:1a:4c:c3:7c:b5:00:f8:63:17:2b:ac:79: b5:9f:a5:00:20:0e:1e:ca:81:fd:ec:ee:09:16:42: f7:87:33:0e:4f:ac:b3:de:93:77:a6:33:a1:c8:0d: 97:fa:3f:85:b3:3e:b6:8b:22:9d:bf:e2:a4:5f:7e: 8e:4b:05:bf:6e:84:ab:9a:5a:7e:79:e0:b0:75:7a: 5c:8e:5c:1e:99:b6:8b:1c:75:68:29:bd:8c:5a:c0: 3a:3e:03:67:86:45:23:52:45:02:6e:05:9b:f6:77: a4:c4:09:87:e8:38:d7:12:bc:d2:99:97:da:46:41: d8:93:e4:d4:5c:e6:1b:9a:49:61:ae:01:29:59:35: 8d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.120.0/24 IPv6: 2602:f9eb::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398759 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c7:e9:81:31:08:f5:98:39:e3:8c:0e:0a:26:9c:78:af:5a: 9f:a7:41:a0:ba:03:9a:55:89:e7:1a:cc:c2:c1:d7:82:a0:12: e6:40:ca:93:63:d1:ce:6d:4c:aa:6e:da:7e:b5:34:15:e8:ba: ee:26:3c:7c:a1:3e:c8:7e:5b:a9:cb:aa:74:ac:15:2f:93:79: b9:3d:ed:d9:a1:b5:f7:82:89:e6:2e:d2:8a:72:b4:24:1a:5d: 6f:5f:8c:c4:8c:88:b3:20:e3:f0:ff:24:25:cc:29:fa:a6:16: 18:04:ff:51:8d:e1:89:65:d0:e5:52:60:78:9b:a5:50:5f:ad: 28:05:95:2a:30:8e:44:18:88:b1:dc:0f:61:c2:84:ba:bf:15: 2f:d3:b3:86:7a:54:32:50:26:bd:c1:c7:e6:e5:31:23:35:d6: 5b:9b:28:0b:bd:9e:1a:d7:14:08:6e:c5:a2:57:b2:1f:d4:27: a8:ae:43:43:fd:cd:43:bc:ac:1a:6d:a5:a3:f5:50:ee:de:09: b1:f0:eb:4a:58:87:60:7a:5c:d3:e5:eb:c2:51:61:85:77:71: e9:e9:be:bb:7c:78:38:9a:b1:9b:23:5c:97:70:5d:1b:65:e7: 71:bc:be:ed:8e:a0:90:f8:11:0a:c0:4d:fe:5f:a6:93:cf:64: 15:57:df:89 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEkBfwLYSGjuebytMcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIyNjAxNDUzM1oXDTI3MDYwMTAwNDUzM1owLzEtMCsGA1UEAxMk ZDAzNzY0MWQtYWE5MC00ZWFiLTg2NGUtYTczZTAzZTI0Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0dwsOt1ikIJq312l5iawI9aUXbKmyzWDc6N h6gSGtK5XpIJHYcKszjgp5k0aCkqaV5EeRd/QG3Fx+wOI/NgDBOKEcJpTYUOFRKE MNuirFEs/R1lniSuyu2fN0+gGIKzKKZoJ41OUopw/3ZlSfFWXBFWg0LCjgSJ8wYa TMN8tQD4YxcrrHm1n6UAIA4eyoH97O4JFkL3hzMOT6yz3pN3pjOhyA2X+j+Fsz62 iyKdv+KkX36OSwW/boSrmlp+eeCwdXpcjlwembaLHHVoKb2MWsA6PgNnhkUjUkUC bgWb9nekxAmH6DjXErzSmZfaRkHYk+TUXOYbmklhrgEpWTWNCQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLe7Q37R/vv0CGXrpuiPPTnlhkgbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNlMjRjZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QwMzc2NDFkLWFhOTAtNGVhYi04 NjRlLWE3M2UwM2UyNGNmYS9kMDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNl MjRjZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpXgwDgQCAAIwCAMGBCYC+esAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYVpzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2x+mBMQj1mDnjjA4KJpx4r1qf p0GgugOaVYnnGszCwdeCoBLmQMqTY9HObUyqbtp+tTQV6LruJjx8oT7Iflupy6p0 rBUvk3m5Pe3ZobX3gonmLtKKcrQkGl1vX4zEjIizIOPw/yQlzCn6phYYBP9RjeGJ ZdDlUmB4m6VQX60oBZUqMI5EGIix3A9hwoS6vxUv07OGelQyUCa9wcfm5TEjNdZb mygLvZ4a1xQIbsWiV7If1CeorkND/c1DvKwabaWj9VDu3gmx8OtKWIdgelzT5evC UWGFd3Hp6b67fHg4mrGbI1yXcF0bZedxvL7tjqCQ+BEKwE3+X6aTz2QVV9+J -----END CERTIFICATE-----Generated at Thu Apr 3 02:41:11 2025 by rpki-client