$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer File: 324a8cbd-4953-435c-bace-07af1279e9bc.cer (raw, json) Hash identifier: IBPWFhPtolcA5u2wnsir+/CpCNQ6TXAM8pklB8l+tI8= Subject key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858490CA9BF3E584B07DADF2A4450 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Mar 2025 01:45:33 +0000 Certificate not after: Sat 05 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 398025 IP: 67.219.0.0/20 IP: 69.1.224.0/19 IP: 143.109.0.0/19 IP: 161.82.64.0/18 IP: 170.103.64.0/18 IP: 204.63.0.0/20 IP: 207.29.224.0/19 IP: 208.100.192.0/18 IP: 216.128.64.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:a9:bf:3e:58:4b:07:da:df:2a:44:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 2 01:45:33 2025 GMT Not After : Jun 5 00:45:33 2027 GMT Subject: CN=324a8cbd-4953-435c-bace-07af1279e9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:ad:ec:c7:66:50:27:7d:84:da:71:fb:a3: da:80:af:92:8f:f3:35:75:d2:60:9e:df:c1:a2:82: d8:40:4b:eb:a5:50:5b:6a:c6:c6:c8:7e:24:44:d0: 8b:1b:b3:7c:ca:1b:45:19:dc:f9:da:f1:5d:07:e4: 64:b6:76:2c:da:3d:01:c6:b7:6b:ac:01:9c:1d:92: 71:14:bd:47:62:17:ca:41:ed:2e:73:22:94:1e:7b: dc:f9:08:e3:fd:2b:06:d1:63:fb:ec:a2:20:20:7d: 47:10:09:f2:d6:e7:d9:7a:fe:48:71:cb:19:a3:96: 7b:94:81:c5:d3:b3:ee:81:c8:26:3e:89:d9:3d:7c: 18:68:55:3f:66:64:93:e8:3b:48:3f:0f:e0:08:8e: 59:1b:28:d7:df:5d:03:95:9d:19:59:34:4a:7e:49: 2d:7a:f1:2d:18:3f:af:94:50:f4:10:b5:54:43:be: 58:ca:d1:02:d5:fc:a8:c5:47:8c:d5:a1:f9:1b:b8: d0:13:90:70:f5:50:a1:03:c1:db:89:f6:9b:98:8a: 51:08:b4:67:a8:9a:4e:a4:42:75:73:d4:51:5c:95: 3d:bf:c2:9d:03:92:3c:f9:9f:c4:41:53:74:4f:f1: ff:d8:4a:ef:29:fb:ac:01:8e:f9:50:38:43:34:15: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 67.219.0.0/20 69.1.224.0/19 143.109.0.0/19 161.82.64.0/18 170.103.64.0/18 204.63.0.0/20 207.29.224.0/19 208.100.192.0/18 216.128.64.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398025 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:05:72:4d:ba:a7:20:fc:9a:f0:df:c8:2c:50:cb:28:b8:d5: d9:16:44:66:e4:96:f1:ba:c9:5a:ca:c2:27:71:20:2b:41:c8: 59:ec:5c:0a:04:2a:28:ba:b7:e8:fa:1b:30:1e:d5:20:1c:70: 8b:b4:58:32:aa:5a:bc:c7:43:8c:ed:63:aa:38:e6:41:f1:05: 3c:b4:24:a7:de:78:66:7e:00:2a:07:a1:7a:5f:30:c5:3d:fa: c4:6d:6b:df:1b:2a:9f:d0:cb:62:bd:d7:5a:31:58:f7:0e:18: 3e:3f:be:45:0f:6e:a4:d9:4f:62:43:57:07:56:ba:dc:a6:f6: 92:96:ad:04:92:32:d9:82:2a:e0:1d:56:93:ec:fd:8b:08:1d: ef:db:9d:7f:1e:31:cd:e6:4d:36:8f:d0:ae:a2:6f:d7:15:ba: d3:a4:94:74:32:89:6f:d2:23:eb:ab:07:27:af:b3:62:83:d8: a3:c5:82:f3:b5:44:4c:0f:52:d7:43:54:13:7c:5a:b5:0e:d4: b5:24:b8:0c:05:52:13:80:3a:bf:2e:dd:cd:e5:07:bd:67:ec: 3c:67:d5:c0:54:97:f6:1c:da:c8:f3:ad:f5:21:df:4a:f0:36: 4b:5f:e8:92:1d:64:8f:b9:f0:2d:39:58:14:13:a3:74:7a:a6: f3:5c:6c:93 -----BEGIN CERTIFICATE----- MIIHOTCCBiGgAwIBAgIUAQ0Mn0MoWEkMqb8+WEsH2t8qRFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwMjAxNDUzM1oXDTI3MDYwNTAwNDUzM1owLzEtMCsGA1UEAxMk MzI0YThjYmQtNDk1My00MzVjLWJhY2UtMDdhZjEyNzllOWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn+t7MdmUCd9hNpx+6PagK+Sj/M1ddJgnt/B ooLYQEvrpVBbasbGyH4kRNCLG7N8yhtFGdz52vFdB+RktnYs2j0BxrdrrAGcHZJx FL1HYhfKQe0ucyKUHnvc+Qjj/SsG0WP77KIgIH1HEAny1ufZev5IccsZo5Z7lIHF 07PugcgmPonZPXwYaFU/ZmST6DtIPw/gCI5ZGyjX310DlZ0ZWTRKfkktevEtGD+v lFD0ELVUQ75YytEC1fyoxUeM1aH5G7jQE5Bw9VChA8HbifabmIpRCLRnqJpOpEJ1 c9RRXJU9v8KdA5I8+Z/EQVN0T/H/2ErvKfusAY75UDhDNBXh/wIDAQABo4IESzCC BEcwHQYDVR0OBBYEFLlRjWAthz6wXwkoIqczlsZLJT7QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z MjRhOGNiZC00OTUzLTQzNWMtYmFjZS0wN2FmMTI3OWU5YmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzMyNGE4Y2JkLTQ5NTMtNDM1Yy1i YWNlLTA3YWYxMjc5ZTliYy8zMjRhOGNiZC00OTUzLTQzNWMtYmFjZS0wN2FmMTI3 OWU5YmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MDwEAgABMDYDBARD2wADBAVFAeADBAWPbQADBAahUkADBAaqZ0AD BATMPwADBAXPHeADBAbQZMADBAXYgEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhLJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH0Fck26pyD8mvDfyCxQyyi41dkWRGbklvG6yVrKwidxICtB yFnsXAoEKii6t+j6GzAe1SAccIu0WDKqWrzHQ4ztY6o45kHxBTy0JKfeeGZ+ACoH oXpfMMU9+sRta98bKp/Qy2K911oxWPcOGD4/vkUPbqTZT2JDVwdWutym9pKWrQSS MtmCKuAdVpPs/YsIHe/bnX8eMc3mTTaP0K6ib9cVutOklHQyiW/SI+urByevs2KD 2KPFgvO1REwPUtdDVBN8WrUO1LUkuAwFUhOAOr8u3c3lB71n7Dxn1cBUl/Yc2sjz rfUh30rwNktf6JIdZI+58C05WBQTo3R6pvNcbJM= -----END CERTIFICATE-----Generated at Thu Apr 3 02:54:26 2025 by rpki-client