$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer File: 4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer (raw, json) Hash identifier: Rx+mRCBwSY7iGEuy6mTcAIloOVW8VWEnKL/EVSQ6vlc= Subject key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584933A1909784605A3F96D26800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Mar 2025 00:45:35 +0000 Certificate not after: Sat 19 Jun 2027 00:45:35 +0000 Subordinate resources: IP: 142.207.0.0/16 IP: 199.175.105.0/24 IP: 204.239.83.0 -- 204.239.86.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:33:a1:90:97:84:60:5a:3f:96:d2:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 16 00:45:35 2025 GMT Not After : Jun 19 00:45:35 2027 GMT Subject: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:55:db:bf:21:36:1b:94:a7:fb:c2:d9:9b: 88:fa:6a:00:1e:8d:83:eb:6a:2d:04:62:85:4c:26: 72:b9:09:82:bc:fe:fe:a8:9c:18:2d:2c:81:e7:b7: 44:94:df:e7:44:cf:75:c2:df:e0:fd:34:2e:ae:6c: 4b:d0:a9:0a:a0:79:66:95:c6:5d:da:cf:98:af:b4: 29:6f:cc:b4:7d:29:40:e8:6a:34:05:3a:9f:73:d8: 2c:ca:02:bc:8a:56:98:d3:cf:86:49:1b:e5:d4:65: f0:28:a9:d8:36:74:b9:45:ac:3b:f1:94:b8:f8:a3: 40:70:b2:86:1a:72:f9:01:4b:ff:c1:6d:95:a4:aa: 50:6e:53:57:4d:6d:e5:c6:cc:df:fd:bb:4a:0c:7a: c3:84:76:23:3e:28:fd:ce:f1:98:84:71:00:58:90: 38:14:e8:d8:b6:f0:48:5b:0e:36:bb:02:71:43:12: 82:ca:b8:ed:53:ce:c9:28:0d:00:6e:61:7b:bf:e9: b6:11:07:16:c0:55:a6:37:1c:51:2e:4f:2c:59:7f: e6:b1:58:10:82:0d:f3:1b:eb:bd:bf:b7:ee:d0:8f: 69:ea:72:1c:07:7d:f2:e0:17:0b:c7:34:72:dd:7d: 4b:3b:35:00:bd:e0:f2:68:05:38:0b:fe:b5:11:71: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 142.207.0.0/16 199.175.105.0/24 204.239.83.0-204.239.86.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:1c:b8:a5:bc:1a:a9:0e:f6:d4:de:e6:97:86:79:3b:35:28: aa:f4:a8:57:60:e6:4d:63:4a:6b:f5:97:35:73:8b:e5:10:f3: f7:25:c5:73:e8:bd:3e:b2:86:34:c4:a7:0a:6f:1e:db:3e:f7: 59:ac:79:1f:ba:fb:8a:e0:23:68:d5:f5:45:ff:72:98:29:88: ae:a5:75:89:65:b1:b2:ca:25:62:09:18:35:32:ef:3f:67:c8: 0d:17:48:ab:a4:c6:1a:8c:10:c8:19:30:bc:97:68:46:74:54: ba:c8:ae:62:8f:49:79:89:1e:3e:b6:35:d3:5d:f1:b2:8f:73: be:a6:e1:f4:fc:c4:c0:11:61:e6:ac:42:4d:db:ee:8d:ff:48: 10:5f:be:69:b8:c8:43:7e:14:b8:8a:1c:f8:48:57:7d:67:b0: e8:2b:9d:c2:76:9c:9c:f6:c7:56:c1:4d:4d:a7:e5:f6:3d:ec: 53:7f:a7:94:7c:36:95:95:49:58:27:cd:a2:7e:00:39:45:65: 4a:56:09:81:5d:13:f1:33:91:94:3d:e6:4e:31:4d:de:b6:2d: b0:9e:66:67:5c:ed:1b:39:59:1a:6a:c7:94:2e:dc:41:90:d4: bd:73:5b:bf:dc:a6:69:77:1e:a5:79:3b:b6:b7:67:af:27:d8: 19:5c:73:a4 -----BEGIN CERTIFICATE----- MIIHADCCBeigAwIBAgIUAQ0Mn0MoWEkzoZCXhGBaP5bSaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxNjAwNDUzNVoXDTI3MDYxOTAwNDUzNVowLzEtMCsGA1UEAxMk NGQxMGFjNjctZDhmZi00ZTJlLTkyZTktOTliOGFhMjcxOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZtV278hNhuUp/vC2ZuI+moAHo2D62otBGKF TCZyuQmCvP7+qJwYLSyB57dElN/nRM91wt/g/TQurmxL0KkKoHlmlcZd2s+Yr7Qp b8y0fSlA6Go0BTqfc9gsygK8ilaY08+GSRvl1GXwKKnYNnS5Raw78ZS4+KNAcLKG GnL5AUv/wW2VpKpQblNXTW3lxszf/btKDHrDhHYjPij9zvGYhHEAWJA4FOjYtvBI Ww42uwJxQxKCyrjtU87JKA0AbmF7v+m2EQcWwFWmNxxRLk8sWX/msVgQgg3zG+u9 v7fu0I9p6nIcB33y4BcLxzRy3X1LOzUAveDyaAU4C/61EXHXFwIDAQABo4IEEjCC BA4wHQYDVR0OBBYEFC+EX0Osk4Fv+lSVFyr2tqdDCDb5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEyNzE4ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzRkMTBhYzY3LWQ4ZmYtNGUyZS05 MmU5LTk5YjhhYTI3MThlZi80ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEy NzE4ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMgYIKwYBBQUH AQcBAf8EIzAhMB8EAgABMBkDAwCOzwMEAMevaTAMAwQAzO9TAwQAzO9WMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAHkcuKW8GqkO9tTe5peGeTs1KKr0qFdg5k1jSmv1lzVzi+UQ8/clxXPovT6y hjTEpwpvHts+91mseR+6+4rgI2jV9UX/cpgpiK6ldYllsbLKJWIJGDUy7z9nyA0X SKukxhqMEMgZMLyXaEZ0VLrIrmKPSXmJHj62NdNd8bKPc76m4fT8xMARYeasQk3b 7o3/SBBfvmm4yEN+FLiKHPhIV31nsOgrncJ2nJz2x1bBTU2n5fY97FN/p5R8NpWV SVgnzaJ+ADlFZUpWCYFdE/EzkZQ95k4xTd62LbCeZmdc7Rs5WRpqx5Qu3EGQ1L1z W7/cpml3HqV5O7a3Z68n2Blcc6Q= -----END CERTIFICATE-----Generated at Thu Apr 3 02:42:42 2025 by rpki-client