$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4c76283b-1088-4865-a8d6-56cba593cd0f.cer File: 4c76283b-1088-4865-a8d6-56cba593cd0f.cer (raw, json) Hash identifier: CGrH0y9bMfp9uvaqkAZExM9xB30uS+ylgznjjRH16qc= Subject key identifier: 08:82:84:96:8E:28:9A:DD:2A:81:74:85:04:1C:59:5B:BE:7C:9C:88 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858494CC1B4831726AABA14FF44C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4c76283b-1088-4865-a8d6-56cba593cd0f/4c76283b-1088-4865-a8d6-56cba593cd0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4c76283b-1088-4865-a8d6-56cba593cd0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Mar 2025 00:45:33 +0000 Certificate not after: Mon 28 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 10966 AS: 29702 AS: 29750 AS: 29920 AS: 33457 IP: 162.211.8.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c1:b4:83:17:26:aa:ba:14:ff:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 25 00:45:33 2025 GMT Not After : Jun 28 00:45:33 2027 GMT Subject: CN=4c76283b-1088-4865-a8d6-56cba593cd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:89:13:ad:80:5e:d6:5a:49:8d:0b:98:f5: 42:7d:04:e0:59:82:63:59:9b:33:80:63:95:85:48: a0:78:3b:ae:28:9c:72:e1:b4:7b:d5:90:c5:f4:83: 7a:df:ce:d9:c6:ec:76:6b:07:df:fb:af:72:22:26: 94:1a:1c:96:d5:1c:a9:02:57:fc:ba:5f:e2:21:58: 0c:48:97:63:d5:81:be:34:c3:48:58:a5:88:74:c0: a8:07:0c:69:4c:18:d9:9c:dc:a0:9a:0f:4c:85:c3: 2c:0e:ae:ee:e7:85:6b:38:f1:5e:40:c8:32:0e:33: 72:6b:25:7e:1c:66:99:f6:81:4f:d2:76:98:e0:c8: 64:ec:bc:de:9f:c8:79:7b:8f:03:63:b8:44:86:51: c9:d8:50:ff:0a:2f:ab:b9:c4:57:8b:0f:02:11:2d: 06:37:df:c1:d4:62:c0:9f:ee:cc:0a:b6:e7:a5:ce: fa:15:8a:74:86:0d:c7:22:0a:a9:fe:e9:dd:6b:55: 36:f1:0f:6e:0d:43:9f:e0:17:35:40:24:af:da:d9: 12:49:39:ed:7c:c0:9d:96:f2:bc:1b:0f:54:6c:bf: ef:9f:d7:fa:e1:51:a3:11:0d:ed:fa:84:4b:ff:fb: 72:72:35:e7:1f:bd:ca:5f:fa:c4:dc:be:45:05:b2: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:82:84:96:8E:28:9A:DD:2A:81:74:85:04:1C:59:5B:BE:7C:9C:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4c76283b-1088-4865-a8d6-56cba593cd0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4c76283b-1088-4865-a8d6-56cba593cd0f/4c76283b-1088-4865-a8d6-56cba593cd0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 162.211.8.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10966 29702 29750 29920 33457 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:05:6f:bd:28:3a:1d:43:f1:59:a8:2b:7d:31:7e:b1:0e:24: fb:79:13:b9:e1:19:e3:4d:17:c2:5f:36:72:35:65:ca:04:bb: de:96:99:c2:71:ec:72:84:0b:6d:d3:80:f1:97:b7:2c:16:0d: 25:9d:2b:39:e6:47:24:19:0c:34:99:69:2b:4e:42:4f:db:44: ea:a6:3c:a3:c6:fb:49:c5:ca:8c:80:38:6c:ca:94:1c:b4:cd: 9a:66:88:f3:5d:d3:ba:25:68:4f:17:7f:cb:b7:cd:2e:71:36: 55:7c:79:b7:99:d2:a6:e2:52:28:6b:55:53:05:5d:3a:40:51: bd:5e:a7:76:69:01:7a:f4:c0:8d:17:c4:0a:ae:eb:f5:04:c1: 2e:5a:67:98:03:e6:d9:20:36:34:2c:7c:72:01:97:b9:98:44: 34:6f:f7:5e:de:7c:7b:87:87:6b:8c:3d:ed:79:88:04:0b:a1: 60:71:97:7d:7d:e1:15:59:1e:b6:cb:78:de:97:42:df:e4:12: 49:8c:5e:96:6f:2a:02:b5:e2:37:96:77:8d:e5:c3:3e:a3:f5: 5a:5b:6d:03:37:d2:ec:57:98:88:93:99:61:0b:98:f7:48:67: 26:65:cb:a0:dd:2f:ad:81:f6:5a:c2:ed:a3:75:5e:4b:6d:62: 4f:11:b0:fe -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElMwbSDFyaquhT/RMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMyNTAwNDUzM1oXDTI3MDYyODAwNDUzM1owLzEtMCsGA1UEAxMk NGM3NjI4M2ItMTA4OC00ODY1LWE4ZDYtNTZjYmE1OTNjZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyOJE62AXtZaSY0LmPVCfQTgWYJjWZszgGOV hUigeDuuKJxy4bR71ZDF9IN6387Zxux2awff+69yIiaUGhyW1RypAlf8ul/iIVgM SJdj1YG+NMNIWKWIdMCoBwxpTBjZnNygmg9MhcMsDq7u54VrOPFeQMgyDjNyayV+ HGaZ9oFP0naY4Mhk7Lzen8h5e48DY7hEhlHJ2FD/Ci+rucRXiw8CES0GN9/B1GLA n+7MCrbnpc76FYp0hg3HIgqp/unda1U28Q9uDUOf4Bc1QCSv2tkSSTntfMCdlvK8 Gw9UbL/vn9f64VGjEQ3t+oRL//tycjXnH73KX/rE3L5FBbKYlwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAiChJaOKJrdKoF0hQQcWVu+fJyIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 Yzc2MjgzYi0xMDg4LTQ4NjUtYThkNi01NmNiYTU5M2NkMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzRjNzYyODNiLTEwODgtNDg2NS1h OGQ2LTU2Y2JhNTkzY2QwZi80Yzc2MjgzYi0xMDg4LTQ4NjUtYThkNi01NmNiYTU5 M2NkMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGi0wgwKgYIKwYBBQUHAQgBAf8EGzAZoBcwFQIC KtYCAnQGAgJ0NgICdOACAwCCsTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+BW+9KDodQ/FZqCt9MX6xDiT7 eRO54RnjTRfCXzZyNWXKBLvelpnCcexyhAtt04Dxl7csFg0lnSs55kckGQw0mWkr TkJP20TqpjyjxvtJxcqMgDhsypQctM2aZojzXdO6JWhPF3/Lt80ucTZVfHm3mdKm 4lIoa1VTBV06QFG9Xqd2aQF69MCNF8QKruv1BMEuWmeYA+bZIDY0LHxyAZe5mEQ0 b/de3nx7h4drjD3teYgEC6FgcZd9feEVWR62y3jel0Lf5BJJjF6WbyoCteI3lneN 5cM+o/VaW20DN9LsV5iIk5lhC5j3SGcmZcug3S+tgfZawu2jdV5LbWJPEbD+ -----END CERTIFICATE-----Generated at Thu Apr 3 02:52:51 2025 by rpki-client