$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer File: 5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer (raw, json) Hash identifier: yPB1S3oSU3bJwOMCS9HaN6UNb/2UGgKs9DIJTGkcW3s= Subject key identifier: 93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584867F3664D04B01F7700388040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jan 2025 01:45:33 +0000 Certificate not after: Wed 07 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 26771 IP: 66.179.59.0/24 IP: 67.202.213.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:f3:66:4d:04:b0:1f:77:00:38:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 2 01:45:33 2025 GMT Not After : Apr 7 00:45:33 2027 GMT Subject: CN=5c6c3a7f-86b7-4f9a-b2ab-04c827927389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c5:96:98:a4:05:52:64:09:2b:11:3a:11:8e: 33:30:54:5f:e0:cd:17:51:c3:95:ba:8f:ea:9f:ca: 8c:f4:78:f3:47:be:d9:f3:7c:84:ac:2b:65:b2:d1: 04:ef:ef:b8:2c:de:51:92:cf:ee:6b:81:24:20:ed: 6b:2a:12:c4:1f:2d:49:e9:05:08:8d:55:22:36:0c: a8:d1:80:05:39:6f:08:3c:59:df:e6:f5:01:98:22: 6a:c7:e8:8f:a7:9b:5c:34:07:e8:89:c4:1a:c9:a4: 44:01:d6:ab:c1:63:06:f2:93:72:7e:77:06:f4:b6: 93:1b:fa:79:43:2b:eb:11:c1:ba:b2:32:d1:cb:df: d7:5d:92:59:be:cf:91:d8:d5:8c:80:55:81:0a:ff: cb:d3:d0:6b:23:f4:1e:41:b4:68:2c:78:9f:c6:db: 46:94:62:b3:a3:2f:73:20:12:ed:3a:37:cc:b4:5f: ad:d8:52:94:cb:d3:9d:ac:09:e4:c8:99:29:7d:c5: 06:5b:60:31:35:4f:e0:12:56:77:ed:13:9d:b6:15: 5b:96:51:ee:03:73:92:4d:f3:90:b9:6a:b6:10:27: 25:68:7c:83:22:f5:36:2d:30:e7:41:ec:83:f7:3d: 5c:f0:5e:c6:c0:b9:9f:5d:df:63:6f:3e:7a:c8:34: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 66.179.59.0/24 67.202.213.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26771 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f7:e5:46:a9:bc:61:26:dd:e7:c2:ed:c2:2d:72:37:43:3d: f0:95:e7:ac:07:95:11:70:e1:27:1c:20:2b:8a:67:b2:16:0c: ab:e7:a0:a5:fb:66:59:5b:68:47:7a:2e:f7:6e:fb:c8:e5:1b: db:c0:de:b2:92:7b:87:51:30:57:73:1e:8d:56:42:7c:97:04: 89:96:4a:0f:87:e1:d3:37:a4:bb:75:64:8e:11:5d:23:81:c2: 54:e9:a7:c7:33:f7:52:1d:3a:cf:13:5d:b1:57:31:90:dc:f0: 47:c3:59:3f:bb:8f:f2:6a:22:41:4f:bd:48:54:b8:93:fd:9b: 0b:2a:cc:af:a0:84:07:52:fa:4c:27:6e:5a:e5:18:57:b1:8e: 05:65:a4:09:ba:d3:56:0e:5d:fc:72:98:95:7c:16:f0:d7:2d: a1:14:0f:bf:9d:76:e5:09:7b:4e:5b:a2:37:86:37:45:2e:66: 06:1f:00:fb:8a:56:1a:42:67:c1:ae:1e:38:65:3d:33:93:89: 8f:70:97:5b:c5:f4:25:9b:58:52:09:dd:ad:97:f1:05:f0:98: e5:1d:f2:8f:6b:6b:e7:76:43:10:33:c5:88:48:ef:74:de:93: 36:be:80:87:f1:c6:2f:66:e0:e5:84:57:6a:c6:cc:55:86:a9: f6:5b:7a:20 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEhn82ZNBLAfdwA4gEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEwMjAxNDUzM1oXDTI3MDQwNzAwNDUzM1owLzEtMCsGA1UEAxMk NWM2YzNhN2YtODZiNy00ZjlhLWIyYWItMDRjODI3OTI3Mzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MWWmKQFUmQJKxE6EY4zMFRf4M0XUcOVuo/q n8qM9HjzR77Z83yErCtlstEE7++4LN5Rks/ua4EkIO1rKhLEHy1J6QUIjVUiNgyo 0YAFOW8IPFnf5vUBmCJqx+iPp5tcNAfoicQayaREAdarwWMG8pNyfncG9LaTG/p5 QyvrEcG6sjLRy9/XXZJZvs+R2NWMgFWBCv/L09BrI/QeQbRoLHifxttGlGKzoy9z IBLtOjfMtF+t2FKUy9OdrAnkyJkpfcUGW2AxNU/gElZ37ROdthVbllHuA3OSTfOQ uWq2ECclaHyDIvU2LTDnQeyD9z1c8F7GwLmfXd9jbz56yDTOIwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFJNPwGgPtnNEC9Al62PH588K3QBRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 YzZjM2E3Zi04NmI3LTRmOWEtYjJhYi0wNGM4Mjc5MjczODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzVjNmMzYTdmLTg2YjctNGY5YS1i MmFiLTA0YzgyNzkyNzM4OS81YzZjM2E3Zi04NmI3LTRmOWEtYjJhYi0wNGM4Mjc5 MjczODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABCszsDBABDytUwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICaJMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAhfflRqm8YSbd58Ltwi1yN0M98JXnrAeVEXDhJxwg K4pnshYMq+egpftmWVtoR3ou9277yOUb28DespJ7h1EwV3MejVZCfJcEiZZKD4fh 0zeku3VkjhFdI4HCVOmnxzP3Uh06zxNdsVcxkNzwR8NZP7uP8moiQU+9SFS4k/2b CyrMr6CEB1L6TCduWuUYV7GOBWWkCbrTVg5d/HKYlXwW8NctoRQPv5125Ql7Tlui N4Y3RS5mBh8A+4pWGkJnwa4eOGU9M5OJj3CXW8X0JZtYUgndrZfxBfCY5R3yj2tr 53ZDEDPFiEjvdN6TNr6Ah/HGL2bg5YRXasbMVYap9lt6IA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:49:40 2025 by rpki-client