$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer File: 260cabab-b89d-4556-b9b1-e5a87b9523b9.cer (raw, json) Hash identifier: qHyCMCU+xbF8dzuSd8RXGDRPVfHxWVhNtd0bgMmQsRE= Subject key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584883DE39119EA7A2DA21A4B300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jan 2025 01:45:31 +0000 Certificate not after: Sat 17 Apr 2027 00:45:31 +0000 Subordinate resources: AS: 12119 IP: 23.249.32.0/20 IP: 216.169.0.0/19 IP: 2606:a880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:de:39:11:9e:a7:a2:da:21:a4:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 12 01:45:31 2025 GMT Not After : Apr 17 00:45:31 2027 GMT Subject: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:ff:46:77:93:6c:e7:cc:d8:e8:7f:65:bd: 07:f3:68:e8:97:2d:99:c1:0e:c6:03:00:a5:26:aa: 5f:92:81:a8:bf:d0:21:43:2f:87:60:15:26:14:fa: 74:bd:a4:e6:e0:ef:7a:1e:19:4a:46:1c:b8:bb:6f: 35:7e:cb:57:52:2c:8e:20:35:75:40:da:0e:2e:04: bc:cc:23:c7:00:17:ff:ba:06:8e:90:5f:3c:66:12: e0:62:2d:a9:a9:9e:d5:d1:d7:56:17:46:9c:40:8b: fb:35:d4:18:16:5a:e3:b0:1d:2a:ed:84:ee:8b:8f: 47:41:56:4c:4d:f2:68:23:d4:90:31:fa:61:00:af: fc:0f:bd:1a:35:95:45:3e:e9:98:b6:52:4a:b4:e9: 36:3f:d0:fd:88:f5:f7:9d:b5:f4:58:40:c4:de:d2: b9:b1:61:dd:70:94:52:b9:ce:cd:35:bd:f0:8c:60: e5:e5:e1:80:17:87:c2:bb:e7:95:a2:ef:96:f0:e4: 7b:7c:1f:da:6c:2d:45:0e:f1:9a:55:79:00:59:cc: cb:52:47:e8:91:28:d8:c6:fe:b7:97:16:35:74:91: 60:2b:91:df:f0:e0:e0:80:48:99:ee:fc:fb:bf:60: 56:4e:29:d7:a0:df:75:09:16:08:59:96:91:b2:b6: 4a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.249.32.0/20 216.169.0.0/19 IPv6: 2606:a880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12119 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e2:3d:58:09:c9:46:5d:30:83:8f:fe:90:eb:81:b8:a3:3f: 8b:1f:04:44:a7:66:d3:d7:6e:c5:92:a8:c5:83:fd:8c:ca:a7: 17:89:04:29:e6:90:92:2f:50:03:6a:7b:5f:6e:ff:4e:b6:64: 4d:70:11:05:59:5d:f9:88:11:c1:a6:87:e5:5b:d7:2b:66:5e: fc:95:94:73:79:97:e6:6a:08:d7:68:5e:e8:a8:8c:da:18:da: 06:0f:d7:e7:74:b5:72:ca:d7:ae:e7:ae:7c:67:c7:ce:49:a0: 71:43:be:c8:c1:96:e9:13:6b:b3:98:32:95:42:db:dd:08:d3: 2b:0b:ba:01:4e:d7:36:56:7a:80:ca:83:e6:27:97:11:cf:c7: c1:b9:0f:c9:72:58:0d:0e:53:39:d0:1b:e7:2c:6b:eb:a7:61: a6:ca:aa:1b:44:a7:fd:f2:b5:89:8a:ec:d3:ad:21:94:fc:e8: ce:fa:4d:9f:d6:67:64:0b:fd:25:fa:ee:ad:15:9e:33:5f:b5: 85:71:ae:50:d2:80:5a:18:55:74:23:bd:c8:e8:4a:02:49:50: c2:9c:f2:c6:86:6e:fb:94:97:d2:ef:9e:7b:1c:62:7c:2f:fc: 4e:05:46:a1:a5:f0:52:3f:88:cc:bd:e5:f0:3c:06:62:31:78: 30:02:2e:9c -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEiD3jkRnqei2iGkswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExMjAxNDUzMVoXDTI3MDQxNzAwNDUzMVowLzEtMCsGA1UEAxMk MjYwY2FiYWItYjg5ZC00NTU2LWI5YjEtZTVhODdiOTUyM2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4v/RneTbOfM2Oh/Zb0H82joly2ZwQ7GAwCl JqpfkoGov9AhQy+HYBUmFPp0vaTm4O96HhlKRhy4u281fstXUiyOIDV1QNoOLgS8 zCPHABf/ugaOkF88ZhLgYi2pqZ7V0ddWF0acQIv7NdQYFlrjsB0q7YTui49HQVZM TfJoI9SQMfphAK/8D70aNZVFPumYtlJKtOk2P9D9iPX3nbX0WEDE3tK5sWHdcJRS uc7NNb3wjGDl5eGAF4fCu+eVou+W8OR7fB/abC1FDvGaVXkAWczLUkfokSjYxv63 lxY1dJFgK5Hf8ODggEiZ7vz7v2BWTinXoN91CRYIWZaRsrZKjwIDAQABo4IELzCC BCswHQYDVR0OBBYEFICHw8QQDvNtZJs/rIJnSEN05e7uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y NjBjYWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4N2I5NTIzYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI2MGNhYmFiLWI4OWQtNDU1Ni1i OWIxLWU1YTg3Yjk1MjNiOS8yNjBjYWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4N2I5 NTIzYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAQX+SADBAXYqQAwDQQCAAIwBwMFACYGqIAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICL1cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADeI9WAnJRl0wg4/+kOuB uKM/ix8ERKdm09duxZKoxYP9jMqnF4kEKeaQki9QA2p7X27/TrZkTXARBVld+YgR waaH5VvXK2Ze/JWUc3mX5moI12he6KiM2hjaBg/X53S1csrXrueufGfHzkmgcUO+ yMGW6RNrs5gylULb3QjTKwu6AU7XNlZ6gMqD5ieXEc/HwbkPyXJYDQ5TOdAb5yxr 66dhpsqqG0Sn/fK1iYrs060hlPzozvpNn9ZnZAv9JfrurRWeM1+1hXGuUNKAWhhV dCO9yOhKAklQwpzyxoZu+5SX0u+eexxifC/8TgVGoaXwUj+IzL3l8DwGYjF4MAIu nA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:58:18 2025 by rpki-client