$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer File: 25b2aa03-de5a-47a9-a381-cc2b27451c28.cer (raw, json) Hash identifier: G1LANF1+hnYs4uvz81I/gx1XcJT91kZkPXZA7Jkc7zE= Subject key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285843BC0157EA41CDBA3532DA5780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Oct 2023 16:26:53 +0000 Certificate not after: Mon 02 Feb 2026 17:26:53 +0000 Subordinate resources: IP: 206.167.36.0 -- 206.167.47.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:bc:01:57:ea:41:cd:ba:35:32:da:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 31 16:26:53 2023 GMT Not After : Feb 2 17:26:53 2026 GMT Subject: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:05:d3:21:0e:b0:4e:bf:e6:6e:31:a4:47: 61:82:7f:4a:c4:f5:33:6d:8f:1c:71:f7:01:2e:14: ed:38:ea:b6:9b:a3:e7:bc:68:d7:10:11:34:97:ac: 07:e8:dd:95:b7:9a:44:17:3b:29:de:65:98:41:e4: 37:30:ca:8c:bc:12:99:3f:d8:d3:d9:de:ad:25:52: d6:34:25:0c:80:59:5d:1d:03:d6:20:c3:f0:a9:4b: 82:9c:d5:ed:59:c4:75:08:b1:fa:6d:53:ac:de:ee: 52:a7:30:14:2a:1a:5e:59:0b:0d:91:19:70:1f:15: d7:69:47:56:e0:0c:59:7a:b0:3b:84:bf:80:bc:2c: 44:a8:a0:37:79:9a:ed:69:74:00:1d:4c:a4:9f:06: 60:34:35:e3:59:27:e7:c6:4f:d6:a5:07:e8:bd:6e: 54:1b:a9:7f:9b:44:2b:71:b9:e6:84:c9:19:8e:54: c4:37:f2:99:70:77:1e:06:19:45:18:81:66:14:69: 99:e7:d1:f0:78:42:2c:1e:05:3d:fb:3f:e1:6a:80: d0:f3:a7:6d:87:31:42:7c:ab:3d:5a:a8:75:a4:a6: 0a:9f:de:1a:ce:9e:c8:1a:bb:7c:c0:a1:cb:55:ca: 5e:19:12:2a:dc:4a:2a:c4:86:12:09:81:af:50:f1: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 206.167.36.0-206.167.47.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5c:b4:23:64:01:16:7d:89:d4:00:f6:75:aa:ea:19:6d:1d: e3:8d:f5:28:08:09:59:50:cd:78:0e:07:e0:01:aa:ea:55:de: a8:f7:38:6b:09:bd:f7:9a:d2:35:71:fc:91:59:3f:00:06:e6: 71:8f:86:58:d6:30:9d:e3:7e:d0:07:19:6b:ea:60:cc:08:bb: c5:3b:87:39:14:bf:c7:b2:29:cc:18:1b:bf:07:da:90:e4:8b: f6:d7:7a:f5:fd:84:17:af:87:8a:24:24:b6:30:84:51:2f:e6: 77:5a:ed:73:ea:76:3c:38:4f:ca:64:ee:82:a5:f5:e4:aa:6c: cc:7e:d9:0b:26:a4:34:be:65:2a:3c:35:7a:4e:7f:94:04:03: b3:00:6a:5f:91:66:bb:48:53:a7:ea:0b:14:9d:45:44:23:f6: 06:79:f9:af:e7:2a:05:6b:51:f8:02:9a:1a:bc:5a:05:00:93: 84:05:48:23:1e:0f:c3:39:a0:d3:21:ad:bd:55:ef:11:4a:11: 8c:9a:37:07:2a:48:8c:f4:6a:91:79:d1:87:8b:70:0f:f1:95: 56:a3:1e:08:23:ee:aa:39:34:f2:41:c3:7a:2c:7e:34:36:c7: f9:98:66:a3:b0:01:20:f5:00:08:e7:71:43:89:07:9d:8c:23: b9:51:9f:71 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEO8AVfqQc26NTLaV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTAzMTE2MjY1M1oXDTI2MDIwMjE3MjY1M1owLzEtMCsGA1UEAxMk MjViMmFhMDMtZGU1YS00N2E5LWEzODEtY2MyYjI3NDUxYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphcF0yEOsE6/5m4xpEdhgn9KxPUzbY8ccfcB LhTtOOq2m6PnvGjXEBE0l6wH6N2Vt5pEFzsp3mWYQeQ3MMqMvBKZP9jT2d6tJVLW NCUMgFldHQPWIMPwqUuCnNXtWcR1CLH6bVOs3u5SpzAUKhpeWQsNkRlwHxXXaUdW 4AxZerA7hL+AvCxEqKA3eZrtaXQAHUyknwZgNDXjWSfnxk/WpQfovW5UG6l/m0Qr cbnmhMkZjlTEN/KZcHceBhlFGIFmFGmZ59HweEIsHgU9+z/haoDQ86dthzFCfKs9 Wqh1pKYKn94azp7IGrt8wKHLVcpeGRIq3EoqxIYSCYGvUPHeNwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFFsL2336Y1wR0Ng6u53zNZ6+pSsOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y NWIyYWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJiMjc0NTFjMjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI1YjJhYTAzLWRlNWEtNDdhOS1h MzgxLWNjMmIyNzQ1MWMyOC8yNWIyYWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJiMjc0 NTFjMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAs6nJAMEBM6nIDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+XLQjZAEW fYnUAPZ1quoZbR3jjfUoCAlZUM14DgfgAarqVd6o9zhrCb33mtI1cfyRWT8ABuZx j4ZY1jCd437QBxlr6mDMCLvFO4c5FL/HsinMGBu/B9qQ5Iv213r1/YQXr4eKJCS2 MIRRL+Z3Wu1z6nY8OE/KZO6CpfXkqmzMftkLJqQ0vmUqPDV6Tn+UBAOzAGpfkWa7 SFOn6gsUnUVEI/YGefmv5yoFa1H4ApoavFoFAJOEBUgjHg/DOaDTIa29Ve8RShGM mjcHKkiM9GqRedGHi3AP8ZVWox4II+6qOTTyQcN6LH40Nsf5mGajsAEg9QAI53FD iQedjCO5UZ9x -----END CERTIFICATE-----Generated at Fri May 10 16:55:45 2024 by rpki-client on console-ams.rpki-client.org