$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac.cer File: 0271d5a3-10cc-4189-b655-bb69b930abac.cer (raw, json) Hash identifier: DOwKGFL3WYID0TaZLjUkibq38t46AvutPMebtVoMxYc= Subject key identifier: 6E:1D:88:4C:97:6E:86:F0:8F:FF:E1:54:46:CB:DB:D6:63:97:BA:19 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848DBCEC6C92247B503D17F8300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/0271d5a3-10cc-4189-b655-bb69b930abac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 13:45:33 +0000 Certificate not after: Tue 18 May 2027 12:45:33 +0000 Subordinate resources: AS: 32638 IP: 209.42.96.0/19 IP: 2620:2f::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:ce:c6:c9:22:47:b5:03:d1:7f:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 12 13:45:33 2025 GMT Not After : May 18 12:45:33 2027 GMT Subject: CN=0271d5a3-10cc-4189-b655-bb69b930abac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:e3:9d:cf:fc:d2:11:38:ff:a5:58:e6:b0: 63:25:50:25:9d:e5:3c:24:3d:cd:08:9a:b1:ac:15: e4:53:ba:d2:73:36:9f:20:ab:74:a4:81:c6:61:1d: e5:27:dc:8e:8b:bf:6f:9e:d9:41:16:7e:d5:8c:09: 20:c9:b2:de:82:d5:dd:1d:23:cc:3d:0a:50:7b:b6: 78:05:3d:06:eb:71:e1:9e:52:67:fa:17:29:1d:db: 28:1e:3d:9b:9a:b0:bc:f8:4c:71:6f:21:0d:fb:c0: ff:13:ff:2e:d7:63:73:a8:88:88:d9:1a:39:77:e2: f1:a6:15:30:3d:ac:ce:2d:57:d3:c2:e5:1b:05:54: 0e:ca:ec:8d:f0:c0:af:22:51:c9:70:01:b6:eb:fe: 88:a1:15:73:95:65:3b:71:fd:ba:e8:0a:73:61:35: 50:e4:e2:6d:73:b7:98:76:1d:71:59:5e:84:cd:d0: 1f:5f:b0:66:2a:98:85:39:3f:c8:38:fb:d9:16:80: c9:63:45:cc:f8:41:06:53:5b:82:8a:c5:c9:b0:29: c3:ae:ea:f4:9f:0f:a9:18:fa:3d:36:d1:31:91:5e: 11:ba:f6:23:99:8a:0a:9f:79:9d:c5:e8:00:ec:89: 84:9f:fb:51:31:52:55:2f:ab:80:03:84:49:af:65: ee:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1D:88:4C:97:6E:86:F0:8F:FF:E1:54:46:CB:DB:D6:63:97:BA:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0271d5a3-10cc-4189-b655-bb69b930abac/0271d5a3-10cc-4189-b655-bb69b930abac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 209.42.96.0/19 IPv6: 2620:2f::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32638 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:db:16:b6:27:59:5c:f0:5b:57:c9:f0:d4:63:5d:23:94:ab: 0a:57:26:83:29:6f:77:cb:3c:91:19:1c:1d:4e:05:bb:cc:17: d6:f3:26:3b:20:55:8d:61:d9:0c:a3:32:03:cb:fa:10:ab:cb: a9:1b:68:7f:28:b1:86:66:03:94:45:bb:8d:ca:b0:6c:d7:47: d9:1c:53:b7:6a:0b:a3:9b:90:c4:a8:e6:82:12:e7:fc:b9:1e: a7:ac:6e:8a:af:8f:ba:c6:9a:75:ef:48:d7:8f:71:2d:ae:6e: 4d:5b:5f:d8:9d:a8:4b:c0:2b:16:57:ec:73:3d:75:02:17:47: f4:05:79:22:65:52:75:ff:fe:b4:a5:57:c7:c3:3e:dd:b3:27: 2b:bb:bc:b1:1f:67:25:88:4e:78:09:8c:c4:ba:ae:01:ad:52: 76:4e:a3:69:f8:26:7f:2e:e6:d4:12:87:82:70:d9:21:a9:95: 8e:4c:a2:a6:04:d5:d9:9e:8a:24:ee:76:3c:41:7d:d1:f8:29: 85:77:11:18:44:d2:75:fb:a7:45:13:6d:c2:db:2b:37:d9:aa: 82:73:b9:2f:3f:3d:92:f8:a3:b1:7b:c7:52:c6:46:b8:53:9c: dd:f9:5e:f6:23:67:46:b7:0c:38:32:32:87:ba:7c:f0:90:45: fc:b2:16:05 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjbzsbJIke1A9F/gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxMjEzNDUzM1oXDTI3MDUxODEyNDUzM1owLzEtMCsGA1UEAxMk MDI3MWQ1YTMtMTBjYy00MTg5LWI2NTUtYmI2OWI5MzBhYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xvjnc/80hE4/6VY5rBjJVAlneU8JD3NCJqx rBXkU7rSczafIKt0pIHGYR3lJ9yOi79vntlBFn7VjAkgybLegtXdHSPMPQpQe7Z4 BT0G63HhnlJn+hcpHdsoHj2bmrC8+ExxbyEN+8D/E/8u12NzqIiI2Ro5d+LxphUw PazOLVfTwuUbBVQOyuyN8MCvIlHJcAG26/6IoRVzlWU7cf266ApzYTVQ5OJtc7eY dh1xWV6EzdAfX7BmKpiFOT/IOPvZFoDJY0XM+EEGU1uCisXJsCnDrur0nw+pGPo9 NtExkV4RuvYjmYoKn3mdxegA7ImEn/tRMVJVL6uAA4RJr2XucwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFG4diEyXbobwj//hVEbL29Zjl7oZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w MjcxZDVhMy0xMGNjLTQxODktYjY1NS1iYjY5YjkzMGFiYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzAyNzFkNWEzLTEwY2MtNDE4OS1i NjU1LWJiNjliOTMwYWJhYy8wMjcxZDVhMy0xMGNjLTQxODktYjY1NS1iYjY5Yjkz MGFiYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAXRKmAwDwQCAAIwCQMHBCYgAC8AADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ/fjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg2xa2J1lc8FtXyfDUY10jlKsK VyaDKW93yzyRGRwdTgW7zBfW8yY7IFWNYdkMozIDy/oQq8upG2h/KLGGZgOURbuN yrBs10fZHFO3agujm5DEqOaCEuf8uR6nrG6Kr4+6xpp170jXj3Etrm5NW1/YnahL wCsWV+xzPXUCF0f0BXkiZVJ1//60pVfHwz7dsycru7yxH2cliE54CYzEuq4BrVJ2 TqNp+CZ/LubUEoeCcNkhqZWOTKKmBNXZnook7nY8QX3R+CmFdxEYRNJ1+6dFE23C 2ys32aqCc7kvPz2S+KOxe8dSxka4U5zd+V72I2dGtww4MjKHunzwkEX8shYF -----END CERTIFICATE-----Generated at Thu Apr 3 02:55:58 2025 by rpki-client