$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer File: 336db060-273c-4da7-88b6-6f47c8830474.cer (raw, json) Hash identifier: XINTwDpBKRVQJPSm4d26CdAe7i7dwyDvLARyzjDD9k4= Subject key identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584886A8EAF25B243090012D5A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jan 2025 01:45:33 +0000 Certificate not after: Sun 18 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 157.160.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:a8:ea:f2:5b:24:30:90:01:2d:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 13 01:45:33 2025 GMT Not After : Apr 18 00:45:33 2027 GMT Subject: CN=336db060-273c-4da7-88b6-6f47c8830474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:bd:dd:61:4e:56:ce:45:8d:d0:ec:0e:a1: 5f:b0:e0:2e:2f:8e:db:99:df:14:69:24:f4:68:2b: c5:f1:0f:03:6a:97:b8:39:85:62:44:4a:c5:42:c1: 4b:35:ff:28:02:8e:67:de:a1:11:24:e8:cb:99:8c: f6:6c:2d:37:04:00:9e:02:40:64:e6:3f:a6:67:5f: 88:7f:82:0b:d1:12:fb:67:7b:7b:cc:5e:b0:3b:98: bb:c6:1e:f1:41:c7:38:75:77:d2:7f:6e:46:4b:75: 36:18:89:25:cc:f4:7f:9f:79:e4:3c:b7:c8:0e:ae: 2c:cc:03:4b:c6:41:85:04:bf:ac:76:24:ef:88:1c: 00:4d:2e:45:a7:fa:79:86:46:55:30:2d:fd:12:2e: 36:1e:53:df:9c:b5:62:b5:08:0f:a1:c3:41:ae:24: dd:e1:84:50:ce:91:04:d8:80:a6:33:0e:05:cb:71: b0:75:1f:fb:d8:09:d3:fa:35:cc:80:0f:09:85:2d: b9:09:a4:02:b7:b0:b0:a4:9d:71:98:7e:25:9d:94: aa:7e:19:16:26:1d:a8:40:12:af:22:a3:da:98:52: 04:0a:84:22:82:99:56:3c:4a:f4:65:75:1e:57:47: c9:4e:f2:97:24:6c:ec:f6:74:17:c0:33:fa:44:84: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 157.160.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:04:63:65:07:0b:95:9f:88:1a:de:65:0e:a6:6a:02:02:02: 15:af:75:b0:ee:c3:97:b5:54:3a:b8:3f:48:ef:be:43:92:7c: 9b:08:3d:c4:39:17:45:16:d0:5e:94:15:7c:69:3d:85:ac:d1: 2b:a5:95:db:08:9b:93:c8:a8:b4:04:22:07:38:fa:79:ba:a3: 5f:34:87:a8:bd:f0:a9:73:12:f1:c9:04:df:48:e6:ae:69:aa: a1:4d:94:0c:da:73:c3:8e:26:56:a7:d4:4c:57:1e:81:74:76: 3f:63:e8:df:a9:0b:1b:cc:8e:b1:5d:3e:72:19:aa:54:56:96: 3a:16:32:68:f5:64:eb:47:ee:ab:cf:63:85:fe:79:21:04:e5: a0:f5:33:32:a0:28:7c:6d:f9:13:c2:4e:e2:89:8a:d3:e9:28: 5e:50:7a:76:bd:73:e7:35:85:b6:76:2e:98:1a:ff:d2:38:84: bc:31:9e:1c:17:f9:5b:ab:d9:1e:ab:b7:f8:54:74:0e:39:7d: 18:a3:5f:5d:c2:a6:27:04:b3:57:d1:16:50:a7:a9:8b:87:2e: 85:7c:4f:02:55:92:b3:46:06:81:94:10:bb:1c:5e:f3:58:fd: 4a:c8:c3:da:e8:bc:1a:ef:08:92:c4:66:cc:66:6a:94:12:f0: 30:f6:47:05 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEiGqOryWyQwkAEtWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExMzAxNDUzM1oXDTI3MDQxODAwNDUzM1owLzEtMCsGA1UEAxMk MzM2ZGIwNjAtMjczYy00ZGE3LTg4YjYtNmY0N2M4ODMwNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu693WFOVs5FjdDsDqFfsOAuL47bmd8UaST0 aCvF8Q8Dape4OYViRErFQsFLNf8oAo5n3qERJOjLmYz2bC03BACeAkBk5j+mZ1+I f4IL0RL7Z3t7zF6wO5i7xh7xQcc4dXfSf25GS3U2GIklzPR/n3nkPLfIDq4szANL xkGFBL+sdiTviBwATS5Fp/p5hkZVMC39Ei42HlPfnLVitQgPocNBriTd4YRQzpEE 2ICmMw4Fy3GwdR/72AnT+jXMgA8JhS25CaQCt7CwpJ1xmH4lnZSqfhkWJh2oQBKv IqPamFIECoQigplWPEr0ZXUeV0fJTvKXJGzs9nQXwDP6RIQAFwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFHWMXKPQg3OgKzuc33RZ8YeiaRSCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z MzZkYjA2MC0yNzNjLTRkYTctODhiNi02ZjQ3Yzg4MzA0NzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzMzNmRiMDYwLTI3M2MtNGRhNy04 OGI2LTZmNDdjODgzMDQ3NC8zMzZkYjA2MC0yNzNjLTRkYTctODhiNi02ZjQ3Yzg4 MzA0NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCdoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJBGNlBwuVn4ga3mUOpmoC AgIVr3Ww7sOXtVQ6uD9I775DknybCD3EORdFFtBelBV8aT2FrNErpZXbCJuTyKi0 BCIHOPp5uqNfNIeovfCpcxLxyQTfSOauaaqhTZQM2nPDjiZWp9RMVx6BdHY/Y+jf qQsbzI6xXT5yGapUVpY6FjJo9WTrR+6rz2OF/nkhBOWg9TMyoCh8bfkTwk7iiYrT 6SheUHp2vXPnNYW2di6YGv/SOIS8MZ4cF/lbq9keq7f4VHQOOX0Yo19dwqYnBLNX 0RZQp6mLhy6FfE8CVZKzRgaBlBC7HF7zWP1KyMPa6Lwa7wiSxGbMZmqUEvAw9kcF -----END CERTIFICATE-----Generated at Thu Apr 3 02:45:59 2025 by rpki-client