$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer File: 29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer (raw, json) Hash identifier: ErsztQtSowvbkUY+neN3/rOzpJ094HJFpW5M7pdtVUg= Subject key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848EDF439C375350441BD419DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 01:45:33 +0000 Certificate not after: Tue 25 May 2027 00:45:33 +0000 Subordinate resources: IP: 204.209.216.0 -- 204.209.221.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:f4:39:c3:75:35:04:41:bd:41:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 19 01:45:33 2025 GMT Not After : May 25 00:45:33 2027 GMT Subject: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:be:1d:aa:fb:e7:47:c1:05:fd:92:95:e5: 87:e1:a2:ab:b6:01:28:8d:bd:71:0a:06:8c:3b:bb: 3d:f9:95:8c:fd:d6:98:e7:48:8f:ab:45:21:9b:93: ba:ed:9c:de:89:ba:4e:00:2b:ee:bf:79:ec:b6:22: 1f:f3:ca:74:c6:b8:72:6f:fe:46:f8:b6:59:27:c7: 4c:b0:11:25:cc:35:2c:d2:0c:4c:d8:16:0d:97:c5: e9:a1:3c:26:1c:fe:f8:94:c6:e4:26:e7:ac:93:e6: 0d:8f:a6:21:76:a4:f2:74:a2:48:d9:0b:57:34:a5: b9:ef:d0:63:d3:29:5a:78:61:74:17:8e:c7:8e:84: d3:59:f1:60:17:59:f4:e5:30:a6:77:40:7c:d4:40: a9:ae:18:41:0a:08:31:0c:d8:a1:85:38:ff:c0:ff: c5:8f:d9:f0:b1:50:85:bd:ce:61:78:96:31:9b:3d: aa:d5:fa:a4:35:2d:b7:64:f6:6a:67:66:8c:7c:27: 24:5e:43:4a:5c:27:2e:ae:1f:66:d6:fd:15:e4:0d: ec:f8:f2:72:6b:1c:f8:af:36:82:9a:c4:27:b6:eb: f9:d6:be:e1:ca:2a:26:03:9b:dc:09:4f:e3:eb:92: 80:ab:88:9a:54:42:e9:21:3c:ba:87:bf:66:9e:77: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.209.216.0-204.209.221.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:00:18:5d:38:c5:b3:90:ed:52:d1:fd:a8:5e:87:ac:16:1e: 64:89:f7:01:40:84:ff:c4:52:85:c6:ea:55:29:93:d7:52:89: a0:e1:7c:73:31:a4:62:db:aa:b4:fa:62:16:8d:65:ae:68:d0: c7:70:2f:fa:8e:3e:8b:13:e3:b4:79:fb:15:bd:61:b9:c6:e4: dd:8b:df:45:b4:f3:8a:50:fe:f9:ea:ca:9c:f4:a2:dd:6c:bc: f0:28:74:a3:f4:ea:f1:2a:7b:3e:1f:b1:4d:fa:a4:e2:f7:89: 28:f0:24:e6:c8:ae:78:b8:ac:9a:57:66:91:87:b5:2c:e2:4f: 9d:6a:d4:ae:83:f7:8d:dd:a9:18:f6:ae:8c:da:20:e5:32:48: 89:df:6e:02:33:51:77:04:26:ff:67:7c:3c:8f:89:13:7e:fa: 56:fb:67:b6:92:11:a4:1f:ca:01:94:31:53:2f:16:7c:41:ba: fe:06:17:14:10:2d:f2:f7:2d:3c:f7:b8:37:b5:b3:42:2d:90: d2:5a:53:f3:d7:5a:63:bb:b0:98:49:8a:a5:8c:85:a2:96:a4: 70:ad:79:a6:0d:29:79:d5:06:83:e7:5f:74:bf:7e:2a:55:93: 80:58:3d:61:58:bf:f4:1c:40:95:46:3b:6c:26:72:39:69:f8: 61:c7:1a:ac -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEjt9DnDdTUEQb1BncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxOTAxNDUzM1oXDTI3MDUyNTAwNDUzM1owLzEtMCsGA1UEAxMk MjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAyZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBu+Har750fBBf2SleWH4aKrtgEojb1xCgaM O7s9+ZWM/daY50iPq0Uhm5O67ZzeibpOACvuv3nstiIf88p0xrhyb/5G+LZZJ8dM sBElzDUs0gxM2BYNl8XpoTwmHP74lMbkJuesk+YNj6YhdqTydKJI2QtXNKW579Bj 0ylaeGF0F47HjoTTWfFgF1n05TCmd0B81ECprhhBCggxDNihhTj/wP/Fj9nwsVCF vc5heJYxmz2q1fqkNS23ZPZqZ2aMfCckXkNKXCcurh9m1v0V5A3s+PJyaxz4rzaC msQntuv51r7hyiomA5vcCU/j65KAq4iaVELpITy6h79mnncH2wIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFArrbRPX8GB7itEAeyiglYtFEKQtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y OWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI5ZDM1YjVkLWI1NmEtNDllYS1i ZTAxLWZjYmZmOGUwMmZjZi8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhl MDJmY2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEA8zR2AMEAczR3DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9ABhdOMWz kO1S0f2oXoesFh5kifcBQIT/xFKFxupVKZPXUomg4XxzMaRi26q0+mIWjWWuaNDH cC/6jj6LE+O0efsVvWG5xuTdi99FtPOKUP756sqc9KLdbLzwKHSj9OrxKns+H7FN +qTi94ko8CTmyK54uKyaV2aRh7Us4k+datSug/eN3akY9q6M2iDlMkiJ324CM1F3 BCb/Z3w8j4kTfvpW+2e2khGkH8oBlDFTLxZ8Qbr+BhcUEC3y9y0897g3tbNCLZDS WlPz11pju7CYSYqljIWilqRwrXmmDSl51QaD5190v34qVZOAWD1hWL/0HECVRjts JnI5afhhxxqs -----END CERTIFICATE-----Generated at Thu Apr 3 02:49:40 2025 by rpki-client