$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365.cer File: 27a0a206-0e8b-48c1-9191-51dfb13bd365.cer (raw, json) Hash identifier: +nwxAiUDwa+nMaSOfUkyJjrg8ST8qAFXIWqpuwZwtO0= Subject key identifier: 5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848F0BEEA64E3B6A2F97A848870 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Feb 2025 01:45:34 +0000 Certificate not after: Wed 26 May 2027 00:45:34 +0000 Subordinate resources: IP: 167.251.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:be:ea:64:e3:b6:a2:f9:7a:84:88:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 20 01:45:34 2025 GMT Not After : May 26 00:45:34 2027 GMT Subject: CN=27a0a206-0e8b-48c1-9191-51dfb13bd365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:ea:f7:9d:3c:45:19:10:f1:10:a1:4b:74: 8f:e1:2b:49:6d:a5:02:07:68:b9:87:6c:5f:9c:11: dc:d1:2f:61:c2:00:7f:41:54:56:17:01:42:68:ec: f2:1a:ed:9d:13:6d:52:0f:36:f6:ea:88:bf:cf:37: 40:98:47:bd:6a:c4:62:69:7c:f5:51:56:8f:8d:d7: f3:04:4f:70:59:63:7a:3c:b4:6b:d1:0a:17:ac:eb: 27:a6:32:09:7b:7b:9d:6f:e1:da:c5:61:6f:a1:2f: d5:34:e7:be:d2:17:7f:3a:98:fc:59:72:11:1d:e4: 87:a1:80:b9:e3:b7:04:b2:c2:46:2c:43:07:92:f7: 92:f7:10:58:c1:06:3c:57:10:ea:26:76:ad:b1:bf: ff:2c:ee:07:20:9c:e9:cb:f4:0e:a1:d4:53:00:10: 4a:9c:1d:ac:45:2f:0d:9f:bf:f3:14:4e:d3:ea:94: f0:45:80:5b:79:b3:e7:a9:9f:18:6e:c7:c9:26:aa: 95:80:9c:49:0d:95:46:e8:37:46:b3:8e:62:e7:2c: 97:81:e2:fc:3d:6c:57:c9:e3:ad:2a:a0:39:e2:62: 01:ab:d4:18:7e:77:98:b2:1c:79:c7:80:b1:ac:19: 41:f8:5d:dc:74:20:57:5c:3b:d3:8f:22:1e:53:bf: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:95:8C:B3:2D:4E:31:15:67:60:DB:39:65:FB:70:E8:11:B9:35:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27a0a206-0e8b-48c1-9191-51dfb13bd365/27a0a206-0e8b-48c1-9191-51dfb13bd365.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 167.251.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c2:eb:99:eb:f2:b5:3d:85:dd:6f:26:a5:3e:f6:3e:ae:90: f1:a6:9c:be:48:8a:49:a3:2d:67:f0:7f:eb:d2:28:2d:37:0a: 9a:23:26:29:b7:bb:4c:4e:94:8c:3a:16:63:f5:7d:81:f0:f0: 98:fe:32:6c:77:91:d2:5a:98:a4:66:c0:25:ed:ff:40:27:a6: 7e:a5:ba:25:01:34:45:b3:a7:14:0f:ef:b6:13:e6:d2:f4:6c: 12:dd:c8:cc:a6:21:50:de:46:f7:c6:5f:1d:a6:a6:70:c9:a5: c9:61:e9:d7:b8:a9:ba:b3:70:e8:02:ee:cc:59:93:3f:f6:54: 43:fc:86:e2:ff:f4:2d:85:58:90:16:a7:92:72:eb:99:71:39: 3a:de:93:9d:3a:3e:ca:56:35:09:e1:95:23:e4:6b:44:1f:12: bd:46:9e:56:f0:48:b7:2a:9b:18:09:5b:fb:de:2d:e9:af:2b: 41:8a:6c:17:6d:92:d9:bc:dd:1b:a2:73:e2:31:a4:14:58:59: ff:4c:16:52:ea:fe:ba:e5:8a:c4:43:0b:cd:48:bc:5e:f9:e3: ef:5f:94:d1:46:cb:53:df:be:ac:48:2c:ee:92:82:9d:8f:ec: 34:f6:3c:59:e6:6a:54:f8:4c:c0:81:16:67:87:6c:b8:5e:b8: 94:c4:74:46 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEjwvupk47ai+XqEiHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIyMDAxNDUzNFoXDTI3MDUyNjAwNDUzNFowLzEtMCsGA1UEAxMk MjdhMGEyMDYtMGU4Yi00OGMxLTkxOTEtNTFkZmIxM2JkMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyzq9508RRkQ8RChS3SP4StJbaUCB2i5h2xf nBHc0S9hwgB/QVRWFwFCaOzyGu2dE21SDzb26oi/zzdAmEe9asRiaXz1UVaPjdfz BE9wWWN6PLRr0QoXrOsnpjIJe3udb+HaxWFvoS/VNOe+0hd/Opj8WXIRHeSHoYC5 47cEssJGLEMHkveS9xBYwQY8VxDqJnatsb//LO4HIJzpy/QOodRTABBKnB2sRS8N n7/zFE7T6pTwRYBbebPnqZ8YbsfJJqqVgJxJDZVG6DdGs45i5yyXgeL8PWxXyeOt KqA54mIBq9QYfneYshx5x4CxrBlB+F3cdCBXXDvTjyIeU79qhwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFFqVjLMtTjEVZ2DbOWX7cOgRuTXEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y N2EwYTIwNi0wZThiLTQ4YzEtOTE5MS01MWRmYjEzYmQzNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI3YTBhMjA2LTBlOGItNDhjMS05 MTkxLTUxZGZiMTNiZDM2NS8yN2EwYTIwNi0wZThiLTQ4YzEtOTE5MS01MWRmYjEz YmQzNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCn+zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPwuuZ6/K1PYXdbyalPvY+ rpDxppy+SIpJoy1n8H/r0igtNwqaIyYpt7tMTpSMOhZj9X2B8PCY/jJsd5HSWpik ZsAl7f9AJ6Z+pbolATRFs6cUD++2E+bS9GwS3cjMpiFQ3kb3xl8dpqZwyaXJYenX uKm6s3DoAu7MWZM/9lRD/Ibi//QthViQFqeScuuZcTk63pOdOj7KVjUJ4ZUj5GtE HxK9Rp5W8Ei3KpsYCVv73i3prytBimwXbZLZvN0bonPiMaQUWFn/TBZS6v665YrE QwvNSLxe+ePvX5TRRstT376sSCzukoKdj+w09jxZ5mpU+EzAgRZnh2y4XriUxHRG -----END CERTIFICATE-----Generated at Thu Apr 3 02:49:42 2025 by rpki-client