$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer File: 459d6e61-8613-4289-be34-cb0fe0aeea6e.cer (raw, json) Hash identifier: AWBgHEcwACd/TlVL2d6Rphv0Hi5bfRrbGMnGD9VZZb4= Subject key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584920348990E6DCB0124569C100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 09 Mar 2025 01:45:32 +0000 Certificate not after: Sat 12 Jun 2027 00:45:32 +0000 Subordinate resources: AS: 31919 IP: 66.119.96.0/20 IP: 162.250.128.0/22 IP: 204.10.56.0/22 IP: 2604:b080::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:34:89:90:e6:dc:b0:12:45:69:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 9 01:45:32 2025 GMT Not After : Jun 12 00:45:32 2027 GMT Subject: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:e2:20:78:82:d4:91:7e:f6:a8:5b:57:83: fb:4b:1b:c5:6f:48:e2:9b:66:02:90:45:bf:d7:12: 07:a4:26:a5:40:04:01:c1:38:64:d1:e0:d9:47:64: a6:77:54:cd:db:bf:8e:94:c3:e3:29:5e:c9:9d:bc: 1b:98:6f:22:e6:7e:ba:79:87:de:db:4c:31:83:18: a1:30:5e:76:f1:67:fd:db:96:f6:6c:c5:2d:6e:5e: 52:6f:ee:a5:1e:24:4a:c1:68:3f:b0:50:a7:9c:d3: 7a:4e:8a:83:80:75:9a:3a:25:37:b3:cc:d8:75:1e: 1d:ae:ea:1f:a2:7c:ec:73:96:6f:5c:64:26:9e:49: 99:28:ad:25:f7:fc:a1:f8:5d:ee:d6:76:e6:d6:87: 65:ec:e5:75:8e:f6:71:2f:cf:ef:7f:32:24:63:e6: 05:58:db:c0:13:82:20:6f:0d:ac:c3:7e:47:2c:ca: 43:94:05:73:0c:e3:16:11:e9:d1:f4:3c:54:27:c8: b8:84:5c:2d:c8:c9:99:6b:58:92:d8:67:90:20:7c: da:fb:2d:66:46:7b:b1:01:5d:ad:94:4c:83:ae:26: 8b:af:fe:5c:58:be:36:ae:39:a0:0b:b5:0e:40:fe: f5:c3:55:cd:ce:ed:f1:94:22:ca:f1:49:30:c7:ac: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 66.119.96.0/20 162.250.128.0/22 204.10.56.0/22 IPv6: 2604:b080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31919 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e8:d9:77:44:38:05:22:4a:6d:ee:a2:3c:3c:23:9b:83:7b: 61:c9:0f:7a:a3:18:3e:de:74:b1:b6:2c:af:d1:60:6e:67:2d: 9d:7d:d6:65:88:ce:e4:57:55:e2:14:5a:16:66:af:7b:78:82: 4b:a4:7d:a5:b3:dd:69:4e:61:ef:72:45:f2:93:e1:9e:a9:3d: fc:ad:cf:e7:88:41:3d:99:fd:0a:f8:39:ea:7a:73:28:d5:2c: c3:12:60:02:90:28:1d:68:c8:c7:8a:46:0a:e5:60:dd:25:56: a9:7b:22:f4:be:e9:a3:45:7e:1d:43:4f:27:a9:0b:2b:db:be: 97:f9:56:17:8f:27:6e:01:fe:4b:2e:c2:9c:0d:2e:1f:a5:06: bd:c2:0e:4e:98:f1:f8:9c:25:33:bc:12:f3:b8:0b:37:6e:db: d8:bb:5c:e2:1e:43:96:46:a6:4f:a2:d9:16:5b:08:98:00:7e: d8:4a:d0:80:be:a5:3a:4b:35:bc:28:4a:6e:3b:75:8a:7b:d9: b5:14:b0:04:c1:24:23:3a:e2:c0:d5:f6:4b:60:a4:05:5f:19: 9b:98:c4:b0:c7:06:1e:5a:4e:4b:d4:07:14:98:3e:30:30:34: 17:b4:18:ab:e5:67:fe:cd:b3:03:9e:d9:54:a9:69:9a:31:61: 8b:1e:7a:ee -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEkgNImQ5tywEkVpwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwOTAxNDUzMloXDTI3MDYxMjAwNDUzMlowLzEtMCsGA1UEAxMk NDU5ZDZlNjEtODYxMy00Mjg5LWJlMzQtY2IwZmUwYWVlYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCziIHiC1JF+9qhbV4P7SxvFb0jim2YCkEW/ 1xIHpCalQAQBwThk0eDZR2Smd1TN27+OlMPjKV7JnbwbmG8i5n66eYfe20wxgxih MF528Wf925b2bMUtbl5Sb+6lHiRKwWg/sFCnnNN6ToqDgHWaOiU3s8zYdR4druof onzsc5ZvXGQmnkmZKK0l9/yh+F3u1nbm1odl7OV1jvZxL8/vfzIkY+YFWNvAE4Ig bw2sw35HLMpDlAVzDOMWEenR9DxUJ8i4hFwtyMmZa1iS2GeQIHza+y1mRnuxAV2t lEyDriaLr/5cWL42rjmgC7UOQP71w1XNzu3xlCLK8Ukwx6yzOQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFOHA0D4AS2FjSkcdWyNELYR6+WvBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 NTlkNmU2MS04NjEzLTQyODktYmUzNC1jYjBmZTBhZWVhNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQ1OWQ2ZTYxLTg2MTMtNDI4OS1i ZTM0LWNiMGZlMGFlZWE2ZS80NTlkNmU2MS04NjEzLTQyODktYmUzNC1jYjBmZTBh ZWVhNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARCd2ADBAKi+oADBALMCjgwDQQCAAIwBwMFACYE sIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfK8wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbujZd0Q4BSJK be6iPDwjm4N7YckPeqMYPt50sbYsr9FgbmctnX3WZYjO5FdV4hRaFmave3iCS6R9 pbPdaU5h73JF8pPhnqk9/K3P54hBPZn9Cvg56npzKNUswxJgApAoHWjIx4pGCuVg 3SVWqXsi9L7po0V+HUNPJ6kLK9u+l/lWF48nbgH+Sy7CnA0uH6UGvcIOTpjx+Jwl M7wS87gLN27b2Ltc4h5DlkamT6LZFlsImAB+2ErQgL6lOks1vChKbjt1invZtRSw BMEkIzriwNX2S2CkBV8Zm5jEsMcGHlpOS9QHFJg+MDA0F7QYq+Vn/s2zA57ZVKlp mjFhix567g== -----END CERTIFICATE-----Generated at Thu Apr 3 02:52:53 2025 by rpki-client