$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e.cer File: 0a255869-5473-4988-89f2-dd632982b56e.cer (raw, json) Hash identifier: UVdcNrLYiq6hSgmdBQn2thibwRN+F6YIMgzQnBmMgfo= Subject key identifier: 6B:BC:76:23:85:18:4F:AD:E3:1D:9A:55:83:A6:31:79:6E:C8:55:F7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848EDF43AC098DC9AD6191DC270 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 01:45:33 +0000 Certificate not after: Tue 25 May 2027 00:45:33 +0000 Subordinate resources: AS: 13970 AS: 14392 AS: 16419 AS: 16660 AS: 19020 AS: 19769 AS: 23551 AS: 393361 AS: 395609 AS: 395615 IP: 199.15.188.0/22 IP: 204.63.32.0/19 IP: 208.66.216.0/22 IP: 208.80.48.0/22 IP: 2620:92:e000::/48 IP: 2620:1b6::/32 IP: 2630::/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:f4:3a:c0:98:dc:9a:d6:19:1d:c2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 19 01:45:33 2025 GMT Not After : May 25 00:45:33 2027 GMT Subject: CN=0a255869-5473-4988-89f2-dd632982b56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:98:5e:09:a3:c5:a1:9c:b2:b1:b3:ea:09:59: a5:61:3f:86:f6:e7:01:6f:3f:e6:6d:b0:23:0c:c0: c3:75:92:db:4e:48:2d:71:76:b4:87:18:12:4a:aa: dd:0a:1d:b4:a4:7b:0a:72:a7:6d:12:2e:f2:37:f5: fa:3e:2b:c2:9c:5f:e4:c5:23:a7:6b:3e:2d:03:47: 0d:43:6a:0c:99:78:4e:dc:a7:a2:5c:87:b8:4b:bb: f6:95:31:c1:8a:4a:d3:de:11:ef:23:b6:e9:59:cd: 6e:31:b6:6f:c7:ee:07:d2:fe:c9:fc:5a:98:e8:5d: 9c:28:98:6a:5e:78:ae:80:2e:5b:1f:a9:aa:02:3e: d2:08:e6:bb:72:37:21:17:58:24:2b:d6:5a:08:e7: c1:68:9d:e6:de:d0:3e:b9:aa:1c:db:a2:3b:b3:66: 42:15:19:35:e3:f0:c2:dc:d4:b8:f8:5f:94:fa:ec: af:6b:61:9d:79:04:9a:e2:8b:cb:77:ef:ae:19:6c: ab:ea:e3:b8:58:67:a0:10:e5:ac:b5:7a:81:0f:74: a9:21:44:b2:d9:0a:aa:01:d8:98:e1:3b:4a:ae:1b: fb:9a:2e:53:53:e0:1e:2f:14:ac:48:93:4b:cd:b9: 48:f9:fd:83:25:1b:62:e8:86:f8:60:79:4b:6d:9b: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BC:76:23:85:18:4F:AD:E3:1D:9A:55:83:A6:31:79:6E:C8:55:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.15.188.0/22 204.63.32.0/19 208.66.216.0/22 208.80.48.0/22 IPv6: 2620:92:e000::/48 2620:1b6::/32 2630::/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13970 14392 16419 16660 19020 19769 23551 393361 395609 395615 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2a:57:7e:c9:d0:35:b8:3c:f6:e8:29:26:c1:90:57:34:c3: 0e:da:05:c5:33:65:a0:b5:1b:57:12:48:20:52:90:06:33:a2: cc:dc:8f:f2:5e:1f:3f:5b:c3:d4:6d:49:93:f3:57:1f:e1:a4: 5d:e3:9b:da:5c:9b:c0:8a:b3:de:a6:fa:46:58:d3:13:0d:4f: 9a:4e:95:86:92:ff:34:f6:26:ea:73:35:cb:2a:3e:b3:25:88: c4:63:46:9c:2c:c0:44:eb:94:bf:30:68:32:46:8b:d5:1a:13: 82:10:d7:b6:48:26:02:22:f5:d5:1c:f6:8b:d3:3c:47:8c:d3: 26:94:75:64:4e:e1:b4:f5:69:8f:8b:f9:5e:6c:98:e5:ce:73: 3c:21:16:50:cf:d5:80:e4:e3:1c:49:27:b5:46:b7:ce:95:f7: 38:3e:26:92:95:f1:96:62:bf:78:9a:4a:14:4a:e8:5d:26:90: b6:0c:84:fb:d3:0d:8f:4c:47:5e:fb:4c:82:d0:5a:6f:19:a6: c9:27:a4:47:1b:85:67:f1:44:92:04:6a:f7:9b:12:da:50:0b: 96:39:b7:6b:87:fa:3d:ff:56:0e:c1:8e:1e:07:c7:7b:32:0d: 2f:9e:f5:18:5c:c2:45:e6:2c:69:69:6a:e6:7e:ca:07:2e:2e: ea:9e:a3:31 -----BEGIN CERTIFICATE----- MIIHXjCCBkagAwIBAgIUAQ0Mn0MoWEjt9DrAmNya1hkdwnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxOTAxNDUzM1oXDTI3MDUyNTAwNDUzM1owLzEtMCsGA1UEAxMk MGEyNTU4NjktNTQ3My00OTg4LTg5ZjItZGQ2MzI5ODJiNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJheCaPFoZyysbPqCVmlYT+G9ucBbz/mbbAj DMDDdZLbTkgtcXa0hxgSSqrdCh20pHsKcqdtEi7yN/X6PivCnF/kxSOnaz4tA0cN Q2oMmXhO3KeiXIe4S7v2lTHBikrT3hHvI7bpWc1uMbZvx+4H0v7J/FqY6F2cKJhq XniugC5bH6mqAj7SCOa7cjchF1gkK9ZaCOfBaJ3m3tA+uaoc26I7s2ZCFRk14/DC 3NS4+F+U+uyva2GdeQSa4ovLd++uGWyr6uO4WGegEOWstXqBD3SpIUSy2QqqAdiY 4TtKrhv7mi5TU+AeLxSsSJNLzblI+f2DJRti6Ib4YHlLbZvjGQIDAQABo4IEcDCC BGwwHQYDVR0OBBYEFGu8diOFGE+t4x2aVYOmMXluyFX3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w YTI1NTg2OS01NDczLTQ5ODgtODlmMi1kZDYzMjk4MmI1NmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzBhMjU1ODY5LTU0NzMtNDk4OC04 OWYyLWRkNjMyOTgyYjU2ZS8wYTI1NTg2OS01NDczLTQ5ODgtODlmMi1kZDYzMjk4 MmI1NmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MB4EAgABMBgDBALHD7wDBAXMPyADBALQQtgDBALQUDAwGwQCAAIw FQMHACYgAJLgAAMFACYgAbYDAwAmMDBABggrBgEFBQcBCAEB/wQxMC+gLTArAgI2 kgICODgCAkAjAgJBFAICSkwCAk05AgJb/wIDBgCRAgMGCVkCAwYJXzBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCDKld+ydA1uDz26CkmwZBXNMMO2gXFM2WgtRtXEkggUpAGM6LM3I/yXh8/W8PU bUmT81cf4aRd45vaXJvAirPepvpGWNMTDU+aTpWGkv809ibqczXLKj6zJYjEY0ac LMBE65S/MGgyRovVGhOCENe2SCYCIvXVHPaL0zxHjNMmlHVkTuG09WmPi/lebJjl znM8IRZQz9WA5OMcSSe1RrfOlfc4PiaSlfGWYr94mkoUSuhdJpC2DIT70w2PTEde +0yC0FpvGabJJ6RHG4Vn8USSBGr3mxLaUAuWObdrh/o9/1YOwY4eB8d7Mg0vnvUY XMJF5ixpaWrmfsoHLi7qnqMx -----END CERTIFICATE-----Generated at Thu Apr 3 02:57:35 2025 by rpki-client