$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer File: fa43a831-b765-4adf-a0f0-2882a5c07fab.cer (raw, json) Hash identifier: Y/uroje6/BndyLA+YJBKkVH25t5m2XdB/YENINHvl+M= Subject key identifier: 9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858485F93552297A36C29C50CEDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Dec 2024 01:45:32 +0000 Certificate not after: Sun 04 Apr 2027 00:45:32 +0000 Subordinate resources: AS: 396842 IP: 23.135.160.0/24 IP: 199.193.60.0/22 IP: 2602:fe6c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:93:55:22:97:a3:6c:29:c5:0c:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 30 01:45:32 2024 GMT Not After : Apr 4 00:45:32 2027 GMT Subject: CN=fa43a831-b765-4adf-a0f0-2882a5c07fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:8c:5f:2c:67:14:4c:c6:6a:92:3b:ef:6c: bc:67:4a:fe:44:d8:9b:ca:13:54:70:96:77:d9:48: 0f:72:6f:04:3f:b7:2a:01:af:d6:8a:bf:66:21:2f: 05:93:b5:24:95:5d:ad:54:01:f6:13:6a:59:4a:8c: 40:65:45:e5:47:f6:3b:14:66:cc:6a:5a:86:c3:89: 71:55:11:c2:37:e0:a9:7e:e3:99:6c:d9:98:78:a6: 00:7d:74:63:94:b3:90:f9:85:6f:d3:f9:72:a2:ce: d0:ab:55:a2:e8:ad:96:6f:35:2d:48:19:fa:d3:86: b2:a5:f5:cc:a7:94:a3:cc:b0:c5:cd:fe:2a:80:fe: 11:c8:9b:8b:46:ac:90:d5:75:32:3d:60:e9:ab:21: af:ec:0d:b6:65:c1:5a:3e:97:38:2a:93:42:45:07: e5:d3:2e:c6:99:ab:c8:ad:d2:48:c5:ff:2a:44:eb: ac:b0:54:b7:d2:4a:cc:a7:7f:06:1f:3e:d4:8b:12: 36:7f:93:9f:73:5c:ad:83:b1:c5:d9:f5:56:96:95: 3f:1e:96:fe:67:1c:ff:60:a8:c8:47:5e:5e:b4:1c: da:46:19:70:26:fb:44:a8:2b:9b:6f:16:5a:7b:ea: 38:16:e4:5f:2e:45:65:15:5c:7a:4c:87:71:93:6e: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.135.160.0/24 199.193.60.0/22 IPv6: 2602:fe6c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396842 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:bf:98:ef:0c:c7:ea:a9:ee:ca:f7:8e:d1:23:b1:55:1e:14: 18:a4:99:53:4c:f1:ea:7f:cc:54:c0:e8:5f:83:0f:81:de:e7: 08:04:c3:01:56:aa:21:1f:e3:e8:94:4b:73:83:ae:ce:b7:f5: 45:7a:99:48:84:54:2f:a5:9f:c2:c9:44:54:43:77:6a:23:ad: c0:6d:50:4a:70:47:dd:60:d7:1c:04:51:4c:81:99:21:d4:e4: 31:64:40:aa:9a:41:23:6a:c6:1f:36:23:85:9b:bb:70:de:2a: de:14:88:62:89:35:8d:d8:5a:5a:0b:66:46:1a:fb:98:5f:10: 2c:5f:b6:eb:5d:76:e7:4b:64:8a:36:1f:ad:70:32:f2:a8:eb: c7:8a:51:71:89:fd:88:f4:5e:b5:a3:47:cb:7a:46:d2:f8:cc: df:2c:6d:34:45:54:28:21:3d:8b:99:32:d3:f8:7b:4d:30:c1: 99:7a:92:ad:42:c4:2b:c1:3c:2f:af:a3:08:4d:2c:3a:f2:53: e5:b2:bd:2d:5a:e9:5f:1b:62:73:6f:3a:8a:b1:48:6e:c7:68: f2:dc:90:18:88:56:94:13:17:65:05:24:78:77:95:09:59:63: 8b:a7:bf:22:d0:cd:a4:22:ce:53:94:43:57:6c:41:36:c9:ff: c9:5c:10:8f -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEhfk1Uil6NsKcUM7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MTIzMDAxNDUzMloXDTI3MDQwNDAwNDUzMlowLzEtMCsGA1UEAxMk ZmE0M2E4MzEtYjc2NS00YWRmLWEwZjAtMjg4MmE1YzA3ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqiMXyxnFEzGapI772y8Z0r+RNibyhNUcJZ3 2UgPcm8EP7cqAa/Wir9mIS8Fk7UklV2tVAH2E2pZSoxAZUXlR/Y7FGbMalqGw4lx VRHCN+CpfuOZbNmYeKYAfXRjlLOQ+YVv0/lyos7Qq1Wi6K2WbzUtSBn604aypfXM p5SjzLDFzf4qgP4RyJuLRqyQ1XUyPWDpqyGv7A22ZcFaPpc4KpNCRQfl0y7GmavI rdJIxf8qROussFS30krMp38GHz7UixI2f5Ofc1ytg7HF2fVWlpU/Hpb+Zxz/YKjI R15etBzaRhlwJvtEqCubbxZae+o4FuRfLkVlFVx6TIdxk25qLwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFJw1eUTAqc2xYLK1sOvKB0IdFNqcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m YTQzYTgzMS1iNzY1LTRhZGYtYTBmMC0yODgyYTVjMDdmYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZhNDNhODMxLWI3NjUtNGFkZi1h MGYwLTI4ODJhNWMwN2ZhYi9mYTQzYTgzMS1iNzY1LTRhZGYtYTBmMC0yODgyYTVj MDdmYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXh6ADBALHwTwwDgQCAAIwCAMGBCYC/mwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYOKjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5v5jvDMfqqe7K947R I7FVHhQYpJlTTPHqf8xUwOhfgw+B3ucIBMMBVqohH+PolEtzg67Ot/VFeplIhFQv pZ/CyURUQ3dqI63AbVBKcEfdYNccBFFMgZkh1OQxZECqmkEjasYfNiOFm7tw3ire FIhiiTWN2FpaC2ZGGvuYXxAsX7brXXbnS2SKNh+tcDLyqOvHilFxif2I9F61o0fL ekbS+MzfLG00RVQoIT2LmTLT+HtNMMGZepKtQsQrwTwvr6MITSw68lPlsr0tWulf G2JzbzqKsUhux2jy3JAYiFaUExdlBSR4d5UJWWOLp78i0M2kIs5TlENXbEE2yf/J XBCP -----END CERTIFICATE-----Generated at Thu Apr 3 02:42:42 2025 by rpki-client