$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.cer File: 19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.cer (raw, json) Hash identifier: uJIeNAnHPWSSON2UGBAIfsZF3ZGNCnmIOmxwwLZAhy8= Subject key identifier: 88:27:1E:5B:E5:35:7B:34:A2:A2:BD:76:AE:CF:0F:5B:48:DB:6D:86 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584963173137E778554CB7732120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Apr 2025 00:45:35 +0000 Certificate not after: Tue 06 Jul 2027 00:45:35 +0000 Subordinate resources: IP: 205.233.18.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:17:31:37:e7:78:55:4c:b7:73:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 2 00:45:35 2025 GMT Not After : Jul 6 00:45:35 2027 GMT Subject: CN=19dbf4a8-2a2a-4402-b66e-75dd65b4ef30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:36:5e:4b:76:17:89:ff:8e:11:f6:b4:39: d2:8b:36:74:0a:68:03:be:1a:33:74:c6:6e:4a:ab: 4d:78:a2:f7:9c:98:13:1e:4d:2b:24:d2:a2:0a:4f: f1:2f:37:28:f3:8f:45:fe:2d:98:4e:d2:ec:ae:27: 86:39:01:53:86:3b:84:c1:75:d3:ac:80:b0:cd:47: 99:44:ba:68:98:8c:d4:21:36:71:91:04:0a:76:f9: a1:e3:54:bf:cd:81:35:d5:de:f1:ab:1f:87:b3:96: e8:58:91:22:98:f9:9f:0c:38:24:2c:5c:6a:13:60: cc:08:4f:f8:66:81:48:3a:df:78:8c:f1:87:e2:f1: ad:68:3e:8e:f2:67:1d:5b:59:20:b2:e4:8f:d5:04: 4f:ea:76:d8:54:d5:05:ac:b3:ca:98:ff:6e:a3:d5: e8:fa:b4:9e:e6:7c:fc:e1:f8:32:cc:70:44:ba:43: e8:90:fd:56:2b:42:0a:bf:7c:ac:78:b4:ea:ea:49: 63:07:33:64:e3:e4:cb:e7:f1:ea:df:72:92:83:45: 18:01:02:0b:21:97:63:c4:ad:7b:9e:2d:cf:78:a0: 1a:6d:4c:b6:82:a0:e5:97:a7:cb:41:a3:95:d5:53: 14:0e:67:6d:31:98:a0:bb:81:f7:e5:10:a3:02:26: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:27:1E:5B:E5:35:7B:34:A2:A2:BD:76:AE:CF:0F:5B:48:DB:6D:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30/19dbf4a8-2a2a-4402-b66e-75dd65b4ef30.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.233.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:af:0c:9e:2a:c4:6e:85:6f:fd:ac:17:9a:66:a7:78:16:9d: 56:e6:83:35:52:8b:c9:41:25:52:f3:3b:12:54:d6:08:7f:13: c1:f9:d8:39:9b:8d:17:82:5d:1c:9f:f2:78:a0:b7:28:8a:33: 9d:f0:77:2a:07:48:ed:b2:67:d5:12:b1:5a:e4:0e:dc:81:9c: 68:da:b9:d0:2e:8a:c9:72:5a:a0:ff:cc:15:fa:15:c8:c5:89: 3b:ed:55:c6:7f:e9:9c:40:19:b0:54:05:60:81:9e:44:c3:b1: 28:97:40:7f:25:55:0d:c5:b7:11:2a:3d:f2:3c:ce:d2:09:15: 8f:57:33:cd:d3:b2:42:6a:de:88:58:cf:63:7a:41:4e:e1:bc: 99:9a:e8:8f:2b:d2:f7:14:d9:db:a9:52:88:c7:b7:33:cf:40: 42:d5:4f:06:67:d1:b3:3c:e2:0d:3f:3a:f2:df:06:da:f9:92: af:6a:b7:84:ea:88:4e:da:33:64:5b:9f:bb:97:9f:75:7b:c8: 2b:43:10:b9:49:b7:27:10:7a:1b:28:6b:78:f3:a2:81:3e:e1: a3:98:b2:df:34:0c:11:fc:86:d6:6e:4e:62:b7:fa:70:bb:a3: d7:d9:60:07:e7:fe:58:49:6c:8e:97:71:7d:3c:37:c5:dd:84: c0:9d:a4:cb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEljFzE353hVTLdzISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwMjAwNDUzNVoXDTI3MDcwNjAwNDUzNVowLzEtMCsGA1UEAxMk MTlkYmY0YTgtMmEyYS00NDAyLWI2NmUtNzVkZDY1YjRlZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxI2Xkt2F4n/jhH2tDnSizZ0CmgDvhozdMZu SqtNeKL3nJgTHk0rJNKiCk/xLzco849F/i2YTtLsrieGOQFThjuEwXXTrICwzUeZ RLpomIzUITZxkQQKdvmh41S/zYE11d7xqx+Hs5boWJEimPmfDDgkLFxqE2DMCE/4 ZoFIOt94jPGH4vGtaD6O8mcdW1kgsuSP1QRP6nbYVNUFrLPKmP9uo9Xo+rSe5nz8 4fgyzHBEukPokP1WK0IKv3yseLTq6kljBzNk4+TL5/Hq33KSg0UYAQILIZdjxK17 ni3PeKAabUy2gqDll6fLQaOV1VMUDmdtMZigu4H35RCjAibsDwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIgnHlvlNXs0oqK9dq7PD1tI222GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x OWRiZjRhOC0yYTJhLTQ0MDItYjY2ZS03NWRkNjViNGVmMzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzE5ZGJmNGE4LTJhMmEtNDQwMi1i NjZlLTc1ZGQ2NWI0ZWYzMC8xOWRiZjRhOC0yYTJhLTQ0MDItYjY2ZS03NWRkNjVi NGVmMzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN6RIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJa8MnirEboVv/awXmman eBadVuaDNVKLyUElUvM7ElTWCH8TwfnYOZuNF4JdHJ/yeKC3KIoznfB3KgdI7bJn 1RKxWuQO3IGcaNq50C6KyXJaoP/MFfoVyMWJO+1Vxn/pnEAZsFQFYIGeRMOxKJdA fyVVDcW3ESo98jzO0gkVj1czzdOyQmreiFjPY3pBTuG8mZrojyvS9xTZ26lSiMe3 M89AQtVPBmfRszziDT868t8G2vmSr2q3hOqITtozZFufu5efdXvIK0MQuUm3JxB6 GyhrePOigT7ho5iy3zQMEfyG1m5OYrf6cLuj19lgB+f+WElsjpdxfTw3xd2EwJ2k yw== -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:39 2025 by rpki-client