$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer File: 0e43d693-397f-4f90-96eb-2da9e8465ff5.cer (raw, json) Hash identifier: gl8B0G8GnKCm+RXGbaB6XkdioCSChBLfpWuolfEi9cA= Subject key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584883DE378AB7EEAE22D3B8A608 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jan 2025 01:45:31 +0000 Certificate not after: Sat 17 Apr 2027 00:45:31 +0000 Subordinate resources: AS: 75 AS: 683 IP: 130.202.0.0/16 IP: 140.221.0.0/16 IP: 146.137.0.0/16 IP: 146.139.0.0/16 IP: 164.54.0.0/16 IP: 192.5.170.0 -- 192.5.201.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:de:37:8a:b7:ee:ae:22:d3:b8:a6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 12 01:45:31 2025 GMT Not After : Apr 17 00:45:31 2027 GMT Subject: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:56:e6:13:66:24:a7:5c:ab:e0:4c:35:a3: e9:80:73:fe:94:39:cd:c2:df:5e:8b:70:51:96:ee: e9:9c:cb:4d:3f:0b:b9:8f:b4:f3:a3:b9:78:3a:61: a5:0a:2d:65:50:24:f4:b2:92:70:9d:02:50:78:0e: 8e:84:82:50:e1:2a:67:6b:86:16:6b:5a:cb:67:55: 8d:f6:4b:4c:83:a1:74:71:bf:c4:35:b5:05:ee:2e: ce:fa:a4:4b:3a:a5:bb:2c:3d:08:b0:8a:5f:be:47: 77:a9:ca:e3:a2:23:a3:b1:33:e7:93:0c:8b:ce:41: 0b:e7:18:c4:58:96:bd:31:7f:21:18:9f:c7:b6:ab: f9:12:8a:57:b6:09:3a:20:85:60:af:31:1d:a1:21: 4b:9d:1d:e6:09:89:7d:80:f2:9c:b0:eb:b9:8e:91: 41:84:c2:3c:2a:bf:8d:42:46:1f:95:fc:98:69:db: 79:5a:36:1f:1b:2d:05:34:01:7a:79:10:d7:e2:2b: b5:bd:4b:30:24:e2:fb:80:d0:80:61:e7:ed:43:e3: 57:c8:e5:ed:c5:ae:06:9b:2f:f1:2d:29:a2:4c:c4: d8:b8:da:ea:4b:3a:57:a1:07:9c:4c:f4:0c:bc:78: cf:2f:c2:2d:0e:f6:39:27:78:0f:74:39:78:a2:53: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 130.202.0.0/16 140.221.0.0/16 146.137.0.0/16 146.139.0.0/16 164.54.0.0/16 192.5.170.0-192.5.201.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 75 683 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fc:2e:75:6e:e2:1e:13:db:bd:b5:83:65:23:80:c0:93:d8: 03:98:72:92:a2:39:bd:0f:42:e9:f7:da:8b:5e:2c:63:fc:21: aa:b4:29:36:39:cb:44:dd:67:d3:ff:3e:69:0d:c1:c4:85:97: 05:3c:2c:be:3d:f7:3e:7d:6b:d4:6c:a8:40:56:ee:83:75:a2: 39:79:a5:ea:f0:56:e6:78:21:b4:bd:81:10:2b:2a:56:c2:6d: 70:e7:aa:e6:68:a4:10:22:14:c6:98:0f:4a:71:7c:0a:d5:0d: 92:2c:60:6e:79:72:8a:95:91:90:9b:77:77:41:28:83:fa:b8: 2f:75:b5:c7:d9:7f:24:fc:30:27:25:78:51:76:ba:de:69:1d: ed:62:ba:3c:e6:1f:c8:17:06:4e:1a:b0:d6:87:55:c9:68:3b: 65:16:67:2c:9a:3d:d7:1a:1d:08:eb:50:43:74:d5:67:2e:df: ec:2e:89:b4:28:87:04:71:56:a2:ea:3e:bd:2e:6f:8a:d0:04: 13:f2:bc:92:97:34:ff:a8:05:e8:f4:e5:7e:e9:b1:c2:de:b4: 8a:1b:d2:e2:16:8d:a5:93:01:60:26:a9:cc:7a:52:5c:d7:9b: 8d:5d:ab:1d:11:d4:52:56:4b:02:9a:86:c4:90:90:98:e3:66: dd:04:e8:be -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEiD3jeKt+6uItO4pggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExMjAxNDUzMVoXDTI3MDQxNzAwNDUzMVowLzEtMCsGA1UEAxMk MGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk45W5hNmJKdcq+BMNaPpgHP+lDnNwt9ei3BR lu7pnMtNPwu5j7Tzo7l4OmGlCi1lUCT0spJwnQJQeA6OhIJQ4Spna4YWa1rLZ1WN 9ktMg6F0cb/ENbUF7i7O+qRLOqW7LD0IsIpfvkd3qcrjoiOjsTPnkwyLzkEL5xjE WJa9MX8hGJ/Htqv5EopXtgk6IIVgrzEdoSFLnR3mCYl9gPKcsOu5jpFBhMI8Kr+N QkYflfyYadt5WjYfGy0FNAF6eRDX4iu1vUswJOL7gNCAYeftQ+NXyOXtxa4Gmy/x LSmiTMTYuNrqSzpXoQecTPQMvHjPL8ItDvY5J3gPdDl4olNguwIDAQABo4IEPjCC BDowHQYDVR0OBBYEFDdOKPQl6YzQcIn/STtrc/1iFb4mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w ZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzBlNDNkNjkzLTM5N2YtNGY5MC05 NmViLTJkYTllODQ2NWZmNS8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0 NjVmZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMC0EAgABMCcDAwCCygMDAIzdAwMAkokDAwCSiwMDAKQ2MAwDBAHA BaoDBAHABcgwHAYIKwYBBQUHAQgBAf8EDTALoAkwBwIBSwICAqswVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA K/wudW7iHhPbvbWDZSOAwJPYA5hykqI5vQ9C6ffai14sY/whqrQpNjnLRN1n0/8+ aQ3BxIWXBTwsvj33Pn1r1GyoQFbug3WiOXml6vBW5nghtL2BECsqVsJtcOeq5mik ECIUxpgPSnF8CtUNkixgbnlyipWRkJt3d0Eog/q4L3W1x9l/JPwwJyV4UXa63mkd 7WK6POYfyBcGThqw1odVyWg7ZRZnLJo91xodCOtQQ3TVZy7f7C6JtCiHBHFWouo+ vS5vitAEE/K8kpc0/6gF6PTlfumxwt60ihvS4haNpZMBYCapzHpSXNebjV2rHRHU UlZLApqGxJCQmONm3QTovg== -----END CERTIFICATE-----Generated at Thu Apr 3 02:40:10 2025 by rpki-client