$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer File: 2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer (raw, json) Hash identifier: N647cwvRUH/dfoYU7TST4FSi2QV7W2JNPweav1o/iKU= Subject key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848EB298C96AF7E234034F884F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 01:45:34 +0000 Certificate not after: Mon 24 May 2027 00:45:34 +0000 Subordinate resources: AS: 393319 IP: 77.233.32.0/19 IP: 2602:816:a000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:29:8c:96:af:7e:23:40:34:f8:84:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 18 01:45:34 2025 GMT Not After : May 24 00:45:34 2027 GMT Subject: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:49:40:d3:8a:2a:dc:e5:a2:42:37:4e:57:cb: a2:bd:98:8e:fa:52:c0:21:9d:e3:60:5c:75:ee:0e: c6:04:61:2e:72:9f:88:81:fc:a2:35:be:1f:b3:50: 4c:7f:90:57:e0:bc:94:9a:af:68:03:9f:c1:33:b7: bd:2b:26:08:d3:be:20:bb:23:53:99:fc:88:8c:fc: 7b:c1:eb:92:e3:bd:c9:fd:80:2d:fa:bf:43:02:aa: 26:2a:9d:79:63:35:a2:8d:69:b3:ec:b4:ee:5b:87: 88:cf:bc:35:ad:e2:f5:97:48:88:e9:79:84:93:6c: 6d:48:6e:fb:89:e0:2a:da:65:15:b5:8a:3a:9d:90: 07:be:90:e2:08:f6:74:95:a3:7d:d3:dc:a2:15:82: c1:c2:84:96:c4:e3:ab:19:d4:20:db:bc:7f:a9:f8: 21:81:da:72:8e:68:46:70:73:c0:fe:e4:b6:d7:d7: 24:9d:72:04:47:19:80:71:a7:77:2b:4f:a9:b8:57: 6c:af:75:8f:8a:04:45:e9:66:a4:72:82:88:0e:fc: cf:6a:e6:e0:f1:a2:f8:54:67:ca:ba:96:02:7e:d3: 9e:06:48:e7:af:40:8d:f8:6b:e0:7b:19:10:c9:99: 2a:df:57:e3:f9:da:3b:1f:82:98:e2:8a:b6:4e:cd: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 77.233.32.0/19 IPv6: 2602:816:a000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393319 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:be:37:53:f6:2c:61:bc:54:73:59:fe:e0:77:72:97:08:bc: 99:6b:6c:5f:d1:bb:2b:b8:0a:f2:74:41:2a:24:de:46:2c:c1: 14:eb:e7:e5:74:d8:25:d8:83:d5:04:1b:0e:a4:19:ea:e6:9b: 34:13:9e:c6:b1:3c:03:53:ea:72:fd:e2:e1:fb:c3:39:17:95: 89:75:59:21:63:e4:14:bf:15:55:b2:da:f7:64:d6:e7:3a:ab: a2:93:52:45:19:b1:e0:97:8c:e0:d8:03:5b:0f:67:74:25:66: 0d:7f:d4:3f:48:29:8a:94:1a:f5:f1:c5:0b:74:66:8c:44:61: f7:8a:77:ce:43:ae:f4:e9:31:2c:a3:a3:13:53:ad:a7:69:b1: ee:6c:b6:ee:c5:5c:6e:ca:e1:b5:2a:17:6b:1f:07:64:0b:d6: a2:b6:10:48:15:00:1c:dd:bb:7a:a5:20:a7:b5:3c:11:b3:12: 28:d9:37:91:d3:a8:c6:7a:5d:13:24:98:61:fb:e5:f3:32:90: 7b:a2:b4:86:0a:28:2f:8f:cc:7d:66:9b:0b:26:09:a7:37:e9: 93:af:16:b8:43:b4:81:5e:e6:a0:47:79:7f:81:bf:a9:c7:e3: b6:d5:27:22:a5:59:dc:bc:5c:e7:43:72:4b:71:ec:03:48:e3: 25:12:bd:8f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjrKYyWr34jQDT4hPYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxODAxNDUzNFoXDTI3MDUyNDAwNDUzNFowLzEtMCsGA1UEAxMk MmY0MWY1NWUtN2ZlNi00Yjg4LThkMWItZjNlMGZjNjI1OWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0lA04oq3OWiQjdOV8uivZiO+lLAIZ3jYFx1 7g7GBGEucp+IgfyiNb4fs1BMf5BX4LyUmq9oA5/BM7e9KyYI074guyNTmfyIjPx7 weuS473J/YAt+r9DAqomKp15YzWijWmz7LTuW4eIz7w1reL1l0iI6XmEk2xtSG77 ieAq2mUVtYo6nZAHvpDiCPZ0laN909yiFYLBwoSWxOOrGdQg27x/qfghgdpyjmhG cHPA/uS219cknXIERxmAcad3K0+puFdsr3WPigRF6WakcoKIDvzPaubg8aL4VGfK upYCftOeBkjnr0CN+GvgexkQyZkq31fj+do7H4KY4oq2Ts3VfQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFBAYf4knAxK6CkLzjdp6ewVUy8xMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y ZjQxZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2UwZmM2MjU5ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzJmNDFmNTVlLTdmZTYtNGI4OC04 ZDFiLWYzZTBmYzYyNTlmMy8yZjQxZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2UwZmM2 MjU5ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAVN6SAwDgQCAAIwCAMGACYCCBagMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYAZzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByvjdT9ixhvFRzWf7gd3KXCLyZ a2xf0bsruArydEEqJN5GLMEU6+fldNgl2IPVBBsOpBnq5ps0E57GsTwDU+py/eLh +8M5F5WJdVkhY+QUvxVVstr3ZNbnOquik1JFGbHgl4zg2ANbD2d0JWYNf9Q/SCmK lBr18cULdGaMRGH3infOQ6706TEso6MTU62nabHubLbuxVxuyuG1KhdrHwdkC9ai thBIFQAc3bt6pSCntTwRsxIo2TeR06jGel0TJJhh++XzMpB7orSGCigvj8x9ZpsL JgmnN+mTrxa4Q7SBXuagR3l/gb+px+O21ScipVncvFznQ3JLcewDSOMlEr2P -----END CERTIFICATE-----Generated at Thu Apr 3 02:45:16 2025 by rpki-client