$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer File: 1140553e-654b-4538-9cd3-d94d30ee0482.cer (raw, json) Hash identifier: b1l00sBx2cRUHfaML/fXvKS1CawHdIPo3vuqRf32h3A= Subject key identifier: 58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848B783E4C548C83896BC97F080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Jan 2025 13:45:34 +0000 Certificate not after: Wed 05 May 2027 12:45:34 +0000 Subordinate resources: IP: 2620:0:930::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:83:e4:c5:48:c8:38:96:bc:97:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 30 13:45:34 2025 GMT Not After : May 5 12:45:34 2027 GMT Subject: CN=1140553e-654b-4538-9cd3-d94d30ee0482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:85:6c:35:71:54:10:8b:93:57:2b:0f:0b: 23:2a:4d:2e:c8:84:2f:1d:74:f5:ca:ea:98:bd:b3: 9b:97:f2:6c:3b:ce:b8:81:19:64:3d:1a:a5:40:82: 91:00:21:16:16:59:9d:df:2d:b8:95:c9:e7:77:5b: cd:e0:f7:29:8b:40:11:6e:af:5a:75:08:dc:32:14: a4:51:df:5f:83:b8:07:aa:fe:d4:12:d8:b9:f8:60: 99:e0:67:93:18:29:48:a5:90:4d:8d:e2:58:90:a7: d2:40:4f:50:51:64:35:fe:c8:b8:9d:3b:aa:07:8e: 66:d4:a8:ec:07:d5:b2:fb:26:70:80:37:cd:11:f7: e8:18:34:6e:6f:1d:a9:de:96:d0:b0:fd:17:ae:b5: b3:b5:c9:f4:d9:f8:b6:4f:73:f3:79:0c:57:7d:fd: 86:34:32:64:50:b8:03:b5:6e:4c:9c:9b:0e:35:dd: c8:2e:45:fa:f3:0a:59:0c:26:b7:cb:47:e4:52:1c: 86:d5:ea:d5:29:37:7d:d4:8d:91:27:23:39:5c:9c: d4:e6:6c:b9:ae:b9:30:74:e9:aa:26:07:a4:d3:03: 4a:7a:3d:44:35:69:15:9f:54:d5:71:ea:f6:cc:b4: 45:69:39:71:65:d6:f1:e2:5c:a6:36:65:53:dc:16: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:930::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ca:17:08:de:5f:db:39:ab:2c:74:9c:ca:52:95:c9:ea:29: e1:44:53:1a:1d:e2:82:77:23:d7:43:75:17:6c:db:5e:24:1d: 87:5f:86:80:7a:69:52:e4:7e:46:4e:9a:62:2b:33:4c:43:8c: 5e:c8:e9:05:27:44:fa:7b:9c:a0:a3:69:ad:8f:82:0f:12:91: 6e:7c:62:ae:6f:22:bc:2d:50:cf:12:d3:39:b6:5c:62:bf:a5: fa:76:99:e2:09:25:b2:7d:da:5d:58:36:26:7e:88:fd:98:1e: cb:d4:5c:78:4c:46:e8:47:25:e6:f2:f1:48:7c:ed:a5:07:b2: 73:9f:87:c3:86:53:41:d1:f7:ed:c9:81:f2:53:14:be:e2:43: 41:7d:8b:3c:e4:19:a5:f2:5d:58:ad:e7:ca:01:cc:f7:2d:f0: 45:5b:41:7f:d7:01:68:f2:6c:31:cf:0a:e8:ed:cb:8a:49:0d: dc:35:7e:b6:41:6b:f5:6e:c8:fa:f4:51:71:9f:02:9b:cf:39: 4d:03:58:a4:40:26:f9:3a:9a:76:95:c5:bf:17:80:75:c3:42: 52:ce:62:40:ef:77:84:53:51:34:8e:9c:21:11:c0:89:b8:95: ec:e2:60:1c:88:79:4c:84:0a:1b:63:53:69:2d:9c:a7:24:23: 15:27:74:ab -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEi3g+TFSMg4lryX8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEzMDEzNDUzNFoXDTI3MDUwNTEyNDUzNFowLzEtMCsGA1UEAxMk MTE0MDU1M2UtNjU0Yi00NTM4LTljZDMtZDk0ZDMwZWUwNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg+FbDVxVBCLk1crDwsjKk0uyIQvHXT1yuqY vbObl/JsO864gRlkPRqlQIKRACEWFlmd3y24lcnnd1vN4Pcpi0ARbq9adQjcMhSk Ud9fg7gHqv7UEti5+GCZ4GeTGClIpZBNjeJYkKfSQE9QUWQ1/si4nTuqB45m1Kjs B9Wy+yZwgDfNEffoGDRubx2p3pbQsP0XrrWztcn02fi2T3PzeQxXff2GNDJkULgD tW5MnJsONd3ILkX68wpZDCa3y0fkUhyG1erVKTd91I2RJyM5XJzU5my5rrkwdOmq Jgek0wNKej1ENWkVn1TVcer2zLRFaTlxZdbx4lymNmVT3BbQTQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFFg9SmtKPn9CszYfYJlp0KIdGXHQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x MTQwNTUzZS02NTRiLTQ1MzgtOWNkMy1kOTRkMzBlZTA0ODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzExNDA1NTNlLTY1NGItNDUzOC05 Y2QzLWQ5NGQzMGVlMDQ4Mi8xMTQwNTUzZS02NTRiLTQ1MzgtOWNkMy1kOTRkMzBl ZTA0ODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAACTAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALMoXCN5f2zmrLHSc ylKVyeop4URTGh3igncj10N1F2zbXiQdh1+GgHppUuR+Rk6aYiszTEOMXsjpBSdE +nucoKNprY+CDxKRbnxirm8ivC1QzxLTObZcYr+l+naZ4gklsn3aXVg2Jn6I/Zge y9RceExG6Ecl5vLxSHztpQeyc5+Hw4ZTQdH37cmB8lMUvuJDQX2LPOQZpfJdWK3n ygHM9y3wRVtBf9cBaPJsMc8K6O3LikkN3DV+tkFr9W7I+vRRcZ8Cm885TQNYpEAm +TqadpXFvxeAdcNCUs5iQO93hFNRNI6cIRHAibiV7OJgHIh5TIQKG2NTaS2cpyQj FSd0qw== -----END CERTIFICATE-----Generated at Thu Apr 3 02:52:55 2025 by rpki-client