$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.cer (raw, json) Hash identifier: t+zNeohbY6ZGqEt4Wa8vSduKzQJ+MJMaS+Z3YzH+Zio= Subject key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858485B635127EA8D9D1B6B307A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Dec 2024 13:45:33 +0000 Certificate not after: Fri 02 Apr 2027 12:45:33 +0000 Subordinate resources: AS: 399521 IP: 172.98.8.0/22 IP: 2606:4640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:63:51:27:ea:8d:9d:1b:6b:30:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 28 13:45:33 2024 GMT Not After : Apr 2 12:45:33 2027 GMT Subject: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:57:13:70:80:0c:9e:f7:22:84:b6:0b:5f:2e: 55:c7:44:60:ed:87:3e:a0:7a:d8:54:0d:85:64:9e: b0:b6:94:ad:ae:92:7b:e0:14:8d:de:51:9a:ef:55: bb:c4:93:0e:c5:07:43:b3:f9:bb:b4:32:1d:9a:22: 0a:f8:68:d6:f7:94:b2:7e:b3:48:ad:81:32:d7:13: ea:d2:44:38:e5:ac:4c:21:06:e7:d7:3a:1e:bd:c7: b0:a5:60:33:8b:98:ae:e5:78:67:c9:32:ca:24:57: d1:1f:8e:fb:b2:85:c8:ca:03:01:b9:39:ea:b6:02: a5:a3:80:b2:93:4e:e4:f4:1a:17:2e:30:48:5f:1b: 5b:9e:90:ad:11:f6:e8:48:a1:39:e1:ff:b2:80:e3: ba:73:86:20:f3:d0:41:55:2a:e1:8f:a3:87:34:02: b3:45:be:3a:35:0b:ec:62:1e:2d:29:9c:d7:06:22: 4e:fb:bf:26:98:e0:96:b5:a9:b2:1e:7f:d9:bd:92: d5:52:4c:8b:10:91:2d:30:19:23:bf:1a:61:54:a4: 79:6b:dd:66:3e:0c:6c:63:14:c6:d1:5c:f1:c4:dd: b0:2b:7f:23:59:44:1c:cd:97:5d:6b:44:d1:37:9d: 36:8e:8f:9a:f5:b1:63:e0:db:10:ab:36:4d:d7:7c: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 172.98.8.0/22 IPv6: 2606:4640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399521 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8a:95:13:71:96:18:e2:1b:3f:22:d2:3f:b6:c7:50:5b:8a: 56:6d:8b:f0:3d:ad:14:70:f3:50:4d:dc:1f:cc:4f:8f:ab:1b: 7a:21:69:5b:6b:c1:15:05:27:54:1f:6f:c8:1d:45:08:0b:24: 9c:06:60:42:df:3a:ec:e5:23:82:a4:84:8d:77:7f:c6:5f:a4: 30:75:3a:c4:e0:ff:b7:a7:ab:33:d6:a4:c3:af:7b:78:d4:4c: 2c:43:8b:c0:e1:d5:00:ff:69:e0:18:52:46:e9:b0:0a:c3:7d: 0b:da:a2:50:61:b7:60:ee:b9:43:3d:c7:44:e7:cd:36:35:b8: b7:6b:4e:57:bf:75:d6:11:1f:8d:6b:71:ac:d1:01:00:da:89: 93:bc:7d:3f:17:dc:7e:ff:c2:b6:4d:b9:8e:5b:5d:3b:ba:af: 26:f2:e6:82:e1:4f:c1:ff:9c:a5:a0:67:f0:1c:9f:46:fe:be: d6:b7:66:80:1a:13:f7:72:36:c6:54:be:32:37:84:54:4b:e8: 5b:f9:89:eb:25:8c:7e:aa:eb:c1:5f:ce:78:c8:5d:06:f6:37: 94:28:6e:f1:c2:b5:55:b6:1b:cf:80:c1:ba:c6:86:4e:21:ed: 22:a7:9c:6c:ae:f9:c3:9b:e8:59:14:d3:dc:88:58:c0:a2:8e: cc:63:17:eb -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEhbY1En6o2dG2swegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MTIyODEzNDUzM1oXDTI3MDQwMjEyNDUzM1owLzEtMCsGA1UEAxMk M2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVcTcIAMnvcihLYLXy5Vx0Rg7Yc+oHrYVA2F ZJ6wtpStrpJ74BSN3lGa71W7xJMOxQdDs/m7tDIdmiIK+GjW95SyfrNIrYEy1xPq 0kQ45axMIQbn1zoevcewpWAzi5iu5XhnyTLKJFfRH477soXIygMBuTnqtgKlo4Cy k07k9BoXLjBIXxtbnpCtEfboSKE54f+ygOO6c4Yg89BBVSrhj6OHNAKzRb46NQvs Yh4tKZzXBiJO+78mmOCWtamyHn/ZvZLVUkyLEJEtMBkjvxphVKR5a91mPgxsYxTG 0VzxxN2wK38jWUQczZdda0TRN502jo+a9bFj4NsQqzZN13xttwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBvNBQMS6/zXktb+qrmWafoNbLDAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z YmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzNiZTcxMzNlLTdlNDYtNGZjNi05 NDEwLWUxOGJhZmI4ODVkOC8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZi ODg1ZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKsYggwDQQCAAIwBwMFACYGRkAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhihMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAASKlRNxlhjiGz8i0j+2x1BbilZt i/A9rRRw81BN3B/MT4+rG3ohaVtrwRUFJ1Qfb8gdRQgLJJwGYELfOuzlI4KkhI13 f8ZfpDB1OsTg/7enqzPWpMOve3jUTCxDi8Dh1QD/aeAYUkbpsArDfQvaolBht2Du uUM9x0TnzTY1uLdrTle/ddYRH41rcazRAQDaiZO8fT8X3H7/wrZNuY5bXTu6ryby 5oLhT8H/nKWgZ/Acn0b+vta3ZoAaE/dyNsZUvjI3hFRL6Fv5iesljH6q68FfznjI XQb2N5QobvHCtVW2G8+AwbrGhk4h7SKnnGyu+cOb6FkU09yIWMCijsxjF+s= -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:01 2025 by rpki-client