$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer File: 05437be8-72be-4526-bdc7-04862534a038.cer (raw, json) Hash identifier: hs9iEYXgCt7T9KhasZZAJjQJLG8Yt44YAjAHLBQvmms= Subject key identifier: C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848AAF3CE2174F20F136A3E4800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jan 2025 01:45:32 +0000 Certificate not after: Sat 01 May 2027 00:45:32 +0000 Subordinate resources: AS: 399035 IP: 162.142.75.0/24 IP: 190.151.136.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:f3:ce:21:74:f2:0f:13:6a:3e:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 26 01:45:32 2025 GMT Not After : May 1 00:45:32 2027 GMT Subject: CN=05437be8-72be-4526-bdc7-04862534a038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:64:e7:ef:0e:c7:89:fe:bd:05:5c:e3:ee: ee:95:c0:e0:18:d3:b8:af:56:7b:d9:23:ca:47:5f: 0e:58:88:53:f6:c8:21:03:54:76:2e:aa:37:54:c3: 8a:85:c2:64:d0:56:dd:8b:86:57:f3:d0:1e:2c:40: 07:ca:64:f7:c6:cc:cf:20:ee:c6:d9:7a:f4:eb:82: 7d:2e:40:a4:1b:55:8d:b7:f5:49:1c:35:79:9a:a2: fa:ef:df:16:34:2c:c6:92:f8:00:94:03:fc:14:55: 21:ef:5b:6b:cd:51:6b:4e:89:a5:12:f1:cb:06:b9: e3:47:58:68:3d:17:c6:5c:a9:48:7a:39:84:45:bf: e5:d4:19:16:89:d2:c6:72:dd:4f:1f:ca:ff:dc:62: 34:2c:a0:a0:b9:ae:3c:23:36:8b:bf:b2:50:ff:3d: 56:d6:ce:14:31:1e:ac:93:dd:dd:8a:cf:56:59:5d: 15:ae:90:11:f4:0e:fa:6e:be:55:2f:80:45:e9:f5: 41:a1:ad:93:93:b1:08:f3:4f:96:cb:09:f7:f0:af: d1:68:67:72:f1:87:0e:31:70:0b:bd:2c:43:29:25: 1e:36:6c:c4:8e:67:f9:5b:9c:43:03:e5:78:05:8a: 94:62:83:9f:28:99:1c:90:a0:5a:00:ff:52:f8:42: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 162.142.75.0/24 190.151.136.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399035 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b6:58:fa:4e:d9:56:37:f0:fd:c7:dc:4a:08:af:27:22:66: 2f:e4:09:46:fe:af:93:c5:1b:94:ba:66:3d:25:c8:6e:78:09: 57:45:e9:88:07:95:4d:0a:36:21:7a:15:9f:b7:ff:6b:f0:dc: 35:cf:18:0e:28:bc:45:a1:0a:9e:48:bc:35:51:7e:99:d3:eb: 66:73:84:6b:e3:eb:c0:f4:44:96:7b:6e:f4:a7:0b:de:fa:a2: 76:93:00:84:53:9f:f8:34:13:8c:28:c1:35:77:55:56:0f:e6: 4d:b8:a7:f7:45:fa:ab:b1:cd:f7:74:95:31:10:62:51:67:33: b7:9e:a4:51:ac:53:90:cf:48:6b:07:71:12:82:b2:b2:72:fa: 1b:db:c9:11:11:b4:78:cf:80:38:18:ad:49:84:b0:8f:0e:72: 5b:85:9f:49:f6:bc:06:aa:92:a3:ca:17:d9:46:8e:27:f4:8a: 98:7c:b6:2d:5d:a5:36:4f:43:92:51:16:37:d8:f4:9c:e6:24: 87:93:9c:73:68:7e:7e:d7:68:f8:22:db:fb:98:1f:c0:d8:bf: 93:b4:7f:f8:7f:b7:4d:b8:7a:6e:85:28:bf:54:fa:c4:62:7b: 66:9b:53:a1:8b:f1:d2:e5:a7:75:84:cb:5c:22:41:03:3f:68: 6b:02:24:24 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEiq884hdPIPE2o+SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyNjAxNDUzMloXDTI3MDUwMTAwNDUzMlowLzEtMCsGA1UEAxMk MDU0MzdiZTgtNzJiZS00NTI2LWJkYzctMDQ4NjI1MzRhMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt45k5+8Ox4n+vQVc4+7ulcDgGNO4r1Z72SPK R18OWIhT9sghA1R2Lqo3VMOKhcJk0Fbdi4ZX89AeLEAHymT3xszPIO7G2Xr064J9 LkCkG1WNt/VJHDV5mqL6798WNCzGkvgAlAP8FFUh71trzVFrTomlEvHLBrnjR1ho PRfGXKlIejmERb/l1BkWidLGct1PH8r/3GI0LKCgua48IzaLv7JQ/z1W1s4UMR6s k93dis9WWV0VrpAR9A76br5VL4BF6fVBoa2Tk7EI80+Wywn38K/RaGdy8YcOMXAL vSxDKSUeNmzEjmf5W5xDA+V4BYqUYoOfKJkckKBaAP9S+EKH4wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFMMDSRWbSEi857DjGzJ/g9eX2685MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NTQzN2JlOC03MmJlLTQ1MjYtYmRjNy0wNDg2MjUzNGEwMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA1NDM3YmU4LTcyYmUtNDUyNi1i ZGM3LTA0ODYyNTM0YTAzOC8wNTQzN2JlOC03MmJlLTQ1MjYtYmRjNy0wNDg2MjUz NGEwMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACijksDBAC+l4gwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBha7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABO2WPpO2VY38P3H3EoIryciZi/kCUb+r5PFG5S6 Zj0lyG54CVdF6YgHlU0KNiF6FZ+3/2vw3DXPGA4ovEWhCp5IvDVRfpnT62ZzhGvj 68D0RJZ7bvSnC976onaTAIRTn/g0E4wowTV3VVYP5k24p/dF+quxzfd0lTEQYlFn M7eepFGsU5DPSGsHcRKCsrJy+hvbyRERtHjPgDgYrUmEsI8OcluFn0n2vAaqkqPK F9lGjif0iph8ti1dpTZPQ5JRFjfY9JzmJIeTnHNofn7XaPgi2/uYH8DYv5O0f/h/ t024em6FKL9U+sRie2abU6GL8dLlp3WEy1wiQQM/aGsCJCQ= -----END CERTIFICATE-----Generated at Thu Apr 3 02:55:11 2025 by rpki-client