$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer File: 32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer (raw, json) Hash identifier: qej4/pxeILE2R63Y4Bk4JRfbxwaTorja1vgG45pHOBs= Subject key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848E5942B3C79DA142639907CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Feb 2025 01:45:32 +0000 Certificate not after: Sat 22 May 2027 00:45:32 +0000 Subordinate resources: AS: 3555 IP: 192.31.9.0/24 IP: 198.17.99.0/24 IP: 198.22.152.0/24 IP: 198.137.234.0/23 IP: 199.74.244.0/24 IP: 199.79.216.0/24 IP: 199.89.132.0/23 IP: 199.89.158.0 -- 199.89.160.255 IP: 204.89.153.0 -- 204.89.154.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:94:2b:3c:79:da:14:26:39:90:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 16 01:45:32 2025 GMT Not After : May 22 00:45:32 2027 GMT Subject: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:37:c0:e1:41:4d:b6:2f:b4:1c:62:dc:97:9a: b8:e4:4b:0f:66:bf:cc:47:ed:ea:3e:9f:66:5b:13: 71:38:98:51:99:48:b6:34:ab:49:41:c5:d5:22:f3: bc:3e:13:2f:22:3c:3a:5a:9f:d6:31:5f:b5:5f:f4: ba:e4:56:ff:0d:ea:d1:f5:14:3a:49:69:26:12:10: 3f:f5:c0:9a:64:3f:14:da:a5:06:ae:57:ed:42:e5: a0:ef:0c:0c:d7:87:1f:eb:1f:a5:0c:dd:57:df:0b: 86:24:dc:c3:bd:24:bd:ff:a4:4b:9b:77:7f:a6:c8: 8a:91:8a:da:97:d0:ab:0d:9c:55:b6:ba:1c:5c:9e: 70:e5:e4:0c:57:e7:36:35:5c:c8:3e:a8:c4:bb:0c: 82:e8:ed:1e:29:52:32:79:a3:c9:49:8a:0e:73:e0: 47:f6:8e:e9:c8:7f:fe:43:c4:e5:c1:8b:67:67:01: 69:cc:13:a6:a9:d7:db:ce:c0:8b:75:a1:e4:82:cb: 05:b0:a3:06:cd:fe:25:49:b1:d4:d7:88:57:85:56: cd:db:d2:cb:61:df:ba:20:ee:b1:21:d0:e7:79:a5: 9a:c8:2b:a8:92:45:74:4d:ba:79:9f:bd:24:74:7c: b1:f8:c0:6f:08:dd:78:62:f1:81:fb:d9:0f:e5:28: a9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.31.9.0/24 198.17.99.0/24 198.22.152.0/24 198.137.234.0/23 199.74.244.0/24 199.79.216.0/24 199.89.132.0/23 199.89.158.0-199.89.160.255 204.89.153.0-204.89.154.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3555 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e6:f8:e4:68:bd:c7:70:95:f4:63:95:52:01:ab:8c:0d:96: 11:51:90:3f:f4:bc:85:f0:2b:ae:76:68:48:59:50:03:9c:7d: 43:a7:80:b5:77:5f:83:9c:23:03:99:ed:bd:ed:97:38:4f:d8: 42:b8:cb:4f:00:25:af:42:bd:de:48:96:a7:9d:d6:1c:26:4c: 6b:bb:f4:92:bc:42:e0:d2:75:cb:13:cb:0d:52:96:17:d3:a4: fb:82:06:d8:3c:1c:52:cd:15:4e:a1:ca:da:09:0b:49:03:ab: 1c:a3:3a:59:a2:8c:3d:de:b1:bd:b9:22:b8:6a:3f:38:a1:ac: 0d:82:c8:ad:36:fe:46:68:86:c8:50:19:d5:07:51:a0:81:14: 5b:e5:90:ce:11:15:98:36:75:55:ca:8d:13:dc:8d:c0:ff:d0: 8f:d8:34:37:a6:c0:9b:6a:61:27:12:55:08:8f:17:72:15:ef: 20:25:9b:1e:10:4c:21:b8:2a:f8:2b:a4:cf:84:cc:dc:a2:ce: dc:a8:c6:16:61:f1:16:bd:7c:ca:7f:18:1f:56:9c:bb:10:5b: 79:ad:06:7e:3a:24:84:0c:77:1b:d4:76:9f:db:9f:91:e7:cf: c9:94:68:0e:a5:e3:56:7b:79:1c:55:ae:dc:46:90:1c:54:9e: 4b:02:8b:98 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWEjllCs8edoUJjmQfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxNjAxNDUzMloXDTI3MDUyMjAwNDUzMlowLzEtMCsGA1UEAxMk MzJiY2YzOGItYzQ2ZC00YmYxLTg3MDUtODhhZWVjMTlhYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDfA4UFNti+0HGLcl5q45EsPZr/MR+3qPp9m WxNxOJhRmUi2NKtJQcXVIvO8PhMvIjw6Wp/WMV+1X/S65Fb/DerR9RQ6SWkmEhA/ 9cCaZD8U2qUGrlftQuWg7wwM14cf6x+lDN1X3wuGJNzDvSS9/6RLm3d/psiKkYra l9CrDZxVtrocXJ5w5eQMV+c2NVzIPqjEuwyC6O0eKVIyeaPJSYoOc+BH9o7pyH/+ Q8TlwYtnZwFpzBOmqdfbzsCLdaHkgssFsKMGzf4lSbHU14hXhVbN29LLYd+6IO6x IdDneaWayCuokkV0Tbp5n70kdHyx+MBvCN14YvGB+9kP5SipSwIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFGeJBF16P0Yxjhw8+BfDVvLjhvibMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z MmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMxOWFiZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzMyYmNmMzhiLWM0NmQtNGJmMS04 NzA1LTg4YWVlYzE5YWJmMS8zMmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMx OWFiZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwXwYIKwYBBQUH AQcBAf8EUDBOMEwEAgABMEYDBADAHwkDBADGEWMDBADGFpgDBAHGieoDBADHSvQD BADHT9gDBAHHWYQwDAMEAcdZngMEAMdZoDAMAwQAzFmZAwQAzFmaMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAg3jMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJbm+ORovcdwlfRjlVIBq4wNlhFR kD/0vIXwK652aEhZUAOcfUOngLV3X4OcIwOZ7b3tlzhP2EK4y08AJa9Cvd5Ilqed 1hwmTGu79JK8QuDSdcsTyw1SlhfTpPuCBtg8HFLNFU6hytoJC0kDqxyjOlmijD3e sb25IrhqPzihrA2CyK02/kZohshQGdUHUaCBFFvlkM4RFZg2dVXKjRPcjcD/0I/Y NDemwJtqYScSVQiPF3IV7yAlmx4QTCG4KvgrpM+EzNyiztyoxhZh8Ra9fMp/GB9W nLsQW3mtBn46JIQMdxvUdp/bn5Hnz8mUaA6l41Z7eRxVrtxGkBxUnksCi5g= -----END CERTIFICATE-----Generated at Thu Apr 3 02:41:13 2025 by rpki-client