$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer File: 484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer (raw, json) Hash identifier: pYvHSjENLBqwZ9DzHLCma9fXHIHUkZCGsNCbQrbeovg= Subject key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584925AC1F42720BB93ABFD03010 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Mar 2025 00:45:32 +0000 Certificate not after: Mon 14 Jun 2027 00:45:32 +0000 Subordinate resources: AS: 32554 IP: 216.162.80.0/20 IP: 2607:6b40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:ac:1f:42:72:0b:b9:3a:bf:d0:30:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 11 00:45:32 2025 GMT Not After : Jun 14 00:45:32 2027 GMT Subject: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:08:76:a7:32:4e:3f:2e:f7:81:dd:f0:82: 9b:19:3c:b0:d3:55:61:11:52:96:1d:f6:5f:d5:92: e9:ca:b0:49:f8:02:db:af:74:9b:62:2f:28:b4:c7: 2b:0f:a1:3a:b4:8c:b3:9c:6e:7d:9d:98:6c:9a:4b: 30:5d:1f:74:a7:fc:45:6b:ab:af:39:48:02:6d:f1: b7:69:d5:81:33:81:f2:4f:05:ba:24:20:8f:7f:d9: 29:50:ed:90:1e:21:19:3b:84:e2:79:55:9c:d9:79: e9:77:61:13:89:2d:3b:96:5b:78:8f:2c:ce:3c:d7: 13:af:1b:c5:b8:2b:d3:80:02:3c:ad:11:b1:43:07: 29:de:01:6e:0e:dc:99:cd:c5:a6:c9:d7:1f:77:1a: 56:e1:a6:b0:10:0e:3f:64:c5:e1:d8:f4:f1:4b:13: 0f:25:26:ea:99:98:d7:56:df:3d:08:eb:3f:10:41: d2:ef:c3:36:41:7c:57:b8:da:d7:a4:81:3f:7f:f9: 96:62:0c:25:e7:19:ed:68:b2:aa:81:47:c0:ac:ec: 6d:a4:91:29:e9:3a:ba:01:7a:8b:5f:08:a5:f4:9b: 09:53:80:d0:69:f0:e0:d0:5e:34:57:48:c1:bc:32: aa:d2:06:67:8d:52:ed:12:21:99:c0:fb:9d:5a:5b: 6b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 216.162.80.0/20 IPv6: 2607:6b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32554 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2b:5b:2f:d1:fd:79:96:1e:d2:62:18:03:25:8b:00:ce:65: 66:ec:2b:dd:46:af:58:2b:e5:86:af:34:68:a4:9b:dd:28:c3: 34:e9:1e:ea:5b:af:32:01:02:2b:ec:98:58:f4:c0:e8:87:32: 17:d1:a8:71:3a:9a:40:11:97:aa:34:dd:6d:f9:dc:fa:2f:84: 64:12:42:61:d8:4b:7b:83:90:4d:d9:12:32:b9:f1:c1:0d:95: 0f:d4:80:df:95:47:53:fc:4e:3e:1b:36:1b:0c:3a:b5:9d:20: dd:0e:b7:5f:76:d2:65:9e:c3:1d:06:ae:a9:ef:53:26:05:71: 56:bb:04:cf:1d:cf:22:1b:5b:8a:15:ac:70:31:a7:89:b4:c0: b0:03:3a:af:52:fc:03:d5:6a:ec:56:1f:f3:d7:02:92:fe:ba: 5b:ba:a5:9a:67:2b:1f:fc:c2:15:86:61:46:44:37:26:d2:03: 29:8c:25:59:78:f9:8a:45:07:d3:a5:bd:38:a4:a2:c3:9e:fb: ad:f7:2d:9b:89:d3:f4:be:d8:c8:91:bc:db:7c:7b:43:70:dd: fc:92:04:0c:ac:8c:f6:50:63:c1:69:ea:ca:d8:67:f8:80:90: 98:bc:40:57:a0:11:ca:27:a1:79:7d:cd:74:d8:08:c4:2f:52: 59:2e:21:cc -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEklrB9Ccgu5Or/QMBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxMTAwNDUzMloXDTI3MDYxNDAwNDUzMlowLzEtMCsGA1UEAxMk NDg0ZjljMmMtMjM4Yi00ZDIzLThlOGItYWIyZjVhMDE0N2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0McIdqcyTj8u94Hd8IKbGTyw01VhEVKWHfZf 1ZLpyrBJ+ALbr3SbYi8otMcrD6E6tIyznG59nZhsmkswXR90p/xFa6uvOUgCbfG3 adWBM4HyTwW6JCCPf9kpUO2QHiEZO4TieVWc2Xnpd2ETiS07llt4jyzOPNcTrxvF uCvTgAI8rRGxQwcp3gFuDtyZzcWmydcfdxpW4aawEA4/ZMXh2PTxSxMPJSbqmZjX Vt89COs/EEHS78M2QXxXuNrXpIE/f/mWYgwl5xntaLKqgUfArOxtpJEp6Tq6AXqL Xwil9JsJU4DQafDg0F40V0jBvDKq0gZnjVLtEiGZwPudWltrIwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFCb2FMezOLjm2JloAwHasjp3M7PQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 ODRmOWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJmNWEwMTQ3YzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQ4NGY5YzJjLTIzOGItNGQyMy04 ZThiLWFiMmY1YTAxNDdjMS80ODRmOWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJmNWEw MTQ3YzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBATYolAwDQQCAAIwBwMFACYHa0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfyowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZitbL9H9eZYe0mIYAyWLAM5lZuwr 3UavWCvlhq80aKSb3SjDNOke6luvMgECK+yYWPTA6IcyF9GocTqaQBGXqjTdbfnc +i+EZBJCYdhLe4OQTdkSMrnxwQ2VD9SA35VHU/xOPhs2Gww6tZ0g3Q63X3bSZZ7D HQauqe9TJgVxVrsEzx3PIhtbihWscDGnibTAsAM6r1L8A9Vq7FYf89cCkv66W7ql mmcrH/zCFYZhRkQ3JtIDKYwlWXj5ikUH06W9OKSiw577rfctm4nT9L7YyJG823x7 Q3Dd/JIEDKyM9lBjwWnqythn+ICQmLxAV6ARyieheX3NdNgIxC9SWS4hzA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:38:45 2025 by rpki-client