$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer File: 1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer (raw, json) Hash identifier: NOqAWbYseiTmyqN6PwlsDbO4XzMj7b3jfKZFCgFBp00= Subject key identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858493936EC2AE2ED32F139ADEA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 00:45:33 +0000 Certificate not after: Mon 21 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 128.198.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:36:ec:2a:e2:ed:32:f1:39:ad:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 18 00:45:33 2025 GMT Not After : Jun 21 00:45:33 2027 GMT Subject: CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:5d:dd:bd:8d:01:b0:5f:ea:0f:74:88:03: 34:cd:49:af:ae:54:82:b7:3e:3a:fc:3e:9d:39:44: f7:6f:84:bb:ca:b4:0c:1d:7f:ae:70:a5:29:0e:da: d8:2e:e1:34:68:fc:b3:9b:30:07:52:12:3f:1b:3c: b6:bf:30:ac:70:20:92:df:1b:ad:af:c6:bd:72:df: f2:b6:37:58:61:f3:a3:41:2a:3f:0b:82:c1:4c:d5: 4c:14:c6:93:f8:aa:e8:c7:1a:a0:f1:33:f9:b2:98: a1:36:eb:b8:7d:c2:66:3a:a4:c0:ce:45:35:f5:65: 42:6e:b3:bd:e2:46:dd:0b:23:13:86:e5:3e:42:45: 75:ff:07:4f:16:91:9a:e2:31:9c:83:c4:95:3a:3f: 02:26:9d:da:96:a5:ff:8c:4a:e4:f5:f3:d0:ee:11: f0:95:97:ab:5b:3b:5f:e0:e0:80:5e:a0:75:d3:8f: 80:98:8f:a6:fc:c1:ea:11:ca:8f:c5:2a:44:06:de: d3:79:9e:a0:77:2d:a8:b0:0e:fc:c5:88:7a:3d:a3: c6:69:39:f9:3a:27:6d:5e:13:e2:60:c4:03:a0:a2: a0:cb:55:e5:ad:f4:10:60:01:b3:96:7a:2a:10:e6: 2a:be:1b:71:60:a6:be:24:fc:5c:cf:06:0e:75:92: 36:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 128.198.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fc:f5:cd:ec:a3:b3:b2:8f:0f:9b:37:04:46:d0:b8:03:32: 13:38:3e:52:eb:52:c6:00:ce:d4:6a:b0:c0:73:ab:5f:0c:d6: 81:46:c3:fb:7f:4d:1e:22:c7:66:92:0a:69:c8:50:f6:5b:66: b0:bf:85:06:a6:70:b0:bc:4c:66:34:e8:ad:8b:89:a3:9f:4e: a2:14:09:55:fe:78:5a:31:af:0a:41:7c:1c:bd:4a:af:a0:ae: 57:79:7f:65:7b:48:4e:ec:42:fc:94:39:35:0b:0f:96:0b:49: 52:53:4c:51:a4:8a:4a:4c:4a:4d:ca:82:09:c5:49:d2:0c:0b: a8:ac:07:f8:38:6a:62:7d:69:d4:85:bb:39:fb:32:a9:22:4a: a8:0d:50:11:82:2c:47:61:d1:b7:14:cb:ea:ce:ee:c5:36:e2: 16:5e:7f:c2:f6:4b:4b:e7:1c:52:52:04:48:e7:46:c0:6d:82: f1:92:48:0a:e9:2e:a2:78:4e:7d:43:ca:4e:3a:33:70:2d:de: 93:4a:db:bb:d8:17:8c:63:da:d1:c4:c3:cc:46:63:24:3c:24: 97:cf:c7:6b:da:18:45:a9:9e:73:e2:1c:93:ce:c7:32:36:ee: 61:00:e5:e9:a8:5e:15:7f:47:ca:09:1c:96:7d:3d:a8:79:40: e0:0d:5d:d4 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEk5Nuwq4u0y8Tmt6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxODAwNDUzM1oXDTI3MDYyMTAwNDUzM1owLzEtMCsGA1UEAxMk MWQyNjkzNGUtMGJiZi00MzljLWExMTUtNGU2ZjRhOGQ1M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ypd3b2NAbBf6g90iAM0zUmvrlSCtz46/D6d OUT3b4S7yrQMHX+ucKUpDtrYLuE0aPyzmzAHUhI/Gzy2vzCscCCS3xutr8a9ct/y tjdYYfOjQSo/C4LBTNVMFMaT+Kroxxqg8TP5spihNuu4fcJmOqTAzkU19WVCbrO9 4kbdCyMThuU+QkV1/wdPFpGa4jGcg8SVOj8CJp3alqX/jErk9fPQ7hHwlZerWztf 4OCAXqB104+AmI+m/MHqEcqPxSpEBt7TeZ6gdy2osA78xYh6PaPGaTn5OidtXhPi YMQDoKKgy1XlrfQQYAGzlnoqEOYqvhtxYKa+JPxczwYOdZI2eQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFJd0GAQV/QjhwH5JrOs6+D6BqaDLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x ZDI2OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZmNGE4ZDUzYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFkMjY5MzRlLTBiYmYtNDM5Yy1h MTE1LTRlNmY0YThkNTNhMi8xZDI2OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZmNGE4 ZDUzYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCAxjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg/PXN7KOzso8PmzcERtC4 AzITOD5S61LGAM7UarDAc6tfDNaBRsP7f00eIsdmkgppyFD2W2awv4UGpnCwvExm NOiti4mjn06iFAlV/nhaMa8KQXwcvUqvoK5XeX9le0hO7EL8lDk1Cw+WC0lSU0xR pIpKTEpNyoIJxUnSDAuorAf4OGpifWnUhbs5+zKpIkqoDVARgixHYdG3FMvqzu7F NuIWXn/C9ktL5xxSUgRI50bAbYLxkkgK6S6ieE59Q8pOOjNwLd6TStu72BeMY9rR xMPMRmMkPCSXz8dr2hhFqZ5z4hyTzscyNu5hAOXpqF4Vf0fKCRyWfT2oeUDgDV3U -----END CERTIFICATE-----Generated at Thu Apr 3 02:40:11 2025 by rpki-client