$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer File: 23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer (raw, json) Hash identifier: WQC7bSiGBMRUstmK1DULrqLdTXRDAc5yTJEwY4QNBJA= Subject key identifier: 04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848BE7E996280C515630B26FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Feb 2025 01:45:33 +0000 Certificate not after: Sat 08 May 2027 00:45:33 +0000 Subordinate resources: IP: 192.197.51.0/24 IP: 205.236.8.0 -- 205.236.12.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:7e:99:62:80:c5:15:63:0b:26:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 2 01:45:33 2025 GMT Not After : May 8 00:45:33 2027 GMT Subject: CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4e:8d:be:fc:c7:5f:0e:93:f2:4c:3c:27:11: 0d:05:8f:96:ac:88:85:75:89:4c:13:75:1c:ba:f2: 5b:41:1d:72:36:f4:5d:1a:ae:34:79:85:5f:e7:9a: 27:45:67:b0:f0:c1:69:0b:01:fd:25:ac:61:48:6d: d6:5c:42:a2:a6:0e:1f:95:63:27:9b:27:02:d3:20: 75:00:29:1e:ce:d2:2e:a1:08:38:f9:9f:60:3b:7d: d8:cf:81:9b:ca:4d:63:4a:db:8e:4f:ef:da:ea:c5: 93:ee:f4:ef:cb:eb:8d:6d:01:9d:24:be:4f:aa:83: ef:87:3f:bf:c5:b2:ed:ec:70:31:45:13:e9:85:50: 20:9d:21:e0:3f:0e:3e:ee:7a:6a:d5:48:b0:7f:ae: 83:3c:b9:72:9c:77:bf:84:b8:53:ba:80:0d:2f:c5: 39:c9:82:81:60:22:bc:d2:b8:22:43:8a:7d:99:d0: 9e:97:32:e6:58:1c:0d:7d:83:c2:21:27:f4:37:fa: 29:c2:12:4a:f2:a2:3a:dc:53:6a:d1:95:9e:fe:91: 13:fb:ad:b0:de:3e:5b:75:c4:54:34:dd:d1:34:b7: 1f:f5:a3:61:f5:0a:61:75:25:ec:07:96:96:1f:71: 41:66:5d:27:a0:bb:02:49:d3:ca:5d:75:d7:3e:5b: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.197.51.0/24 205.236.8.0-205.236.12.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ef:7f:7e:0e:d5:1e:78:db:30:66:09:3c:ad:9e:0b:91:b8: f3:6c:eb:cf:57:25:3d:b2:c5:c1:fb:78:cb:b5:88:ca:9b:9e: 5f:df:4d:28:dd:e8:f3:00:08:70:f1:38:52:dc:08:fa:9f:11: 31:8e:c8:41:e6:95:4d:17:00:d8:b8:e9:29:ac:42:54:64:13: 21:6e:10:bd:de:59:e9:0f:b3:4c:1d:fe:44:bd:e1:5d:66:e8: c9:b9:70:39:b8:d8:46:f6:8c:a5:be:59:c3:03:38:55:3d:a8: ef:08:23:a3:f1:34:08:73:a4:c0:6c:6d:37:4c:9e:cb:98:7e: 67:df:62:f1:f1:4a:75:b1:38:09:3c:20:3e:73:87:e9:fa:ad: be:9e:10:d3:e7:fa:0c:e6:f3:18:cc:f2:25:a2:a0:06:1b:69: f3:b7:91:d4:3f:cd:6e:a6:3e:f1:02:cd:8e:0b:e8:e7:99:80: 29:9f:6e:f4:d7:62:17:3f:5c:66:18:c7:25:f2:f5:c4:41:e4: 51:7e:10:c0:ac:94:31:25:81:d6:59:ac:05:66:bd:b2:f8:6a: 8d:98:12:6e:7c:ac:80:55:69:79:cf:dc:7a:00:e8:4c:34:e1: ac:8f:48:64:ec:a8:53:02:f6:c6:cc:dd:7f:ac:60:12:b5:a9: 1a:57:0a:a9 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEi+fpligMUVYwsm/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIwMjAxNDUzM1oXDTI3MDUwODAwNDUzM1owLzEtMCsGA1UEAxMk MjNlZmZmOTktNWRiMS00ZDA5LWIwZGMtZjdmMmYwZmVkNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok6NvvzHXw6T8kw8JxENBY+WrIiFdYlME3Uc uvJbQR1yNvRdGq40eYVf55onRWew8MFpCwH9JaxhSG3WXEKipg4flWMnmycC0yB1 ACkeztIuoQg4+Z9gO33Yz4Gbyk1jStuOT+/a6sWT7vTvy+uNbQGdJL5PqoPvhz+/ xbLt7HAxRRPphVAgnSHgPw4+7npq1Uiwf66DPLlynHe/hLhTuoANL8U5yYKBYCK8 0rgiQ4p9mdCelzLmWBwNfYPCISf0N/opwhJK8qI63FNq0ZWe/pET+62w3j5bdcRU NN3RNLcf9aNh9QphdSXsB5aWH3FBZl0noLsCSdPKXXXXPlvJRwIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFAQ54KlmhnknRyyeY/GJSN+IUeeSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y M2VmZmY5OS01ZGIxLTRkMDktYjBkYy1mN2YyZjBmZWQ0ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzIzZWZmZjk5LTVkYjEtNGQwOS1i MGRjLWY3ZjJmMGZlZDRmZC8yM2VmZmY5OS01ZGIxLTRkMDktYjBkYy1mN2YyZjBm ZWQ0ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADAxTMwDAMEA83sCAMEAM3sDDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAX 739+DtUeeNswZgk8rZ4LkbjzbOvPVyU9ssXB+3jLtYjKm55f300o3ejzAAhw8ThS 3Aj6nxExjshB5pVNFwDYuOkprEJUZBMhbhC93lnpD7NMHf5EveFdZujJuXA5uNhG 9oylvlnDAzhVPajvCCOj8TQIc6TAbG03TJ7LmH5n32Lx8Up1sTgJPCA+c4fp+q2+ nhDT5/oM5vMYzPIloqAGG2nzt5HUP81upj7xAs2OC+jnmYApn27012IXP1xmGMcl 8vXEQeRRfhDArJQxJYHWWawFZr2y+GqNmBJufKyAVWl5z9x6AOhMNOGsj0hk7KhT AvbGzN1/rGAStakaVwqp -----END CERTIFICATE-----Generated at Thu Apr 3 02:40:10 2025 by rpki-client