$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer File: 688165c5-c42e-4c66-a760-e605ebd8b2a3.cer (raw, json) Hash identifier: MaH6fYs6xI3I6uc+BOgig4w9B0BAsQe16q6hO+69ksE= Subject key identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848F0BEEAF4940E53AB0C313900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Feb 2025 01:45:34 +0000 Certificate not after: Wed 26 May 2027 00:45:34 +0000 Subordinate resources: AS: 395089 IP: 192.160.102.0/24 IP: 2620:132:3000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:be:ea:f4:94:0e:53:ab:0c:31:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 20 01:45:34 2025 GMT Not After : May 26 00:45:34 2027 GMT Subject: CN=688165c5-c42e-4c66-a760-e605ebd8b2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:94:d1:1e:36:2b:f2:ec:59:69:73:ab:4e:ce: fc:f2:a7:8f:3a:f0:9e:8a:af:7d:2d:8e:c9:4d:c0: 3d:e7:38:7e:05:bd:0d:6b:ad:7f:84:52:cc:e1:86: 1c:6b:aa:f7:c1:fd:59:af:44:a3:a5:1d:ee:2b:f5: 5e:28:a6:af:73:1a:8c:61:1b:27:6f:b2:f5:03:8a: e1:f4:70:f0:d2:3f:f9:25:10:99:c8:15:c9:b8:c4: 0b:a2:8a:79:87:12:c8:6f:4d:74:b5:03:e7:ca:f1: ed:11:28:1b:d8:0b:83:01:3e:54:d0:94:c4:70:32: 51:6f:46:d9:05:ba:5e:56:7b:5d:73:a3:ae:eb:05: 8b:f6:7f:42:2a:45:53:06:3e:27:4e:0f:91:f9:e6: cf:e6:bb:5a:5b:73:f0:24:e7:f6:1e:45:af:06:50: d8:d5:e8:88:50:c0:25:6d:bb:b1:f1:8b:6b:3f:1d: 5a:5a:84:6b:b5:28:71:7e:c1:a5:e7:c5:0e:bb:ac: 55:44:7d:95:81:8d:6d:6d:7c:18:18:8b:cc:31:67: 75:d7:cf:cd:06:d7:13:51:88:7f:25:e5:17:d1:3b: 4e:16:7b:b0:1c:00:bb:d8:0f:16:a2:4a:10:39:c3: 06:3c:a3:39:56:a0:09:f0:fe:c7:fd:bb:18:4c:26: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.160.102.0/24 IPv6: 2620:132:3000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395089 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e0:80:b2:ab:36:e6:01:75:4c:58:dd:b0:f0:bf:80:5e:51: bc:54:75:6e:21:2e:bb:43:60:92:9d:36:ac:35:ed:19:8c:c9: 8b:c7:f0:c8:8f:c9:5d:6e:ac:af:6f:c4:29:f4:97:7c:ea:a9: 60:e7:55:40:1c:dd:f8:61:b1:c9:b8:be:9a:5e:ca:d4:f7:0d: 0c:53:ae:0d:f6:cd:e9:78:e3:93:67:2b:67:f8:31:e5:74:d6: b6:1f:24:9e:00:b4:bf:82:d5:3a:27:12:24:4f:ef:cc:27:03: 32:35:ea:45:1c:c3:90:ce:34:58:3e:42:1c:b4:c5:bf:7f:7c: 41:7b:96:b4:b7:bf:af:f4:8a:f8:dd:78:cb:10:4d:37:a0:34: 55:68:54:b8:06:07:b1:c3:fb:9d:b6:e6:4a:88:41:94:e9:c4: d8:b7:b9:84:35:01:b7:43:a9:53:d5:6d:8e:91:b5:d5:c7:41: fc:0a:da:96:8c:cd:2b:12:dd:5a:b8:9c:2b:a9:2b:ba:56:09: 25:8c:ed:67:eb:77:b9:43:c3:d1:eb:94:03:50:19:ab:23:8a: 50:77:b0:a8:cf:66:c1:db:e0:41:79:ee:42:16:d1:61:90:1b: 36:00:d5:10:38:a7:c5:24:8c:2b:ba:02:a2:24:19:91:d9:05: ad:c2:04:30 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjwvur0lA5TqwwxOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIyMDAxNDUzNFoXDTI3MDUyNjAwNDUzNFowLzEtMCsGA1UEAxMk Njg4MTY1YzUtYzQyZS00YzY2LWE3NjAtZTYwNWViZDhiMmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJTRHjYr8uxZaXOrTs788qePOvCeiq99LY7J TcA95zh+Bb0Na61/hFLM4YYca6r3wf1Zr0SjpR3uK/VeKKavcxqMYRsnb7L1A4rh 9HDw0j/5JRCZyBXJuMQLoop5hxLIb010tQPnyvHtESgb2AuDAT5U0JTEcDJRb0bZ BbpeVntdc6Ou6wWL9n9CKkVTBj4nTg+R+ebP5rtaW3PwJOf2HkWvBlDY1eiIUMAl bbux8YtrPx1aWoRrtShxfsGl58UOu6xVRH2VgY1tbXwYGIvMMWd118/NBtcTUYh/ JeUX0TtOFnuwHAC72A8WokoQOcMGPKM5VqAJ8P7H/bsYTCZlhQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAhSsbhOGUF4CqMQsdZBDOerIrdoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 ODgxNjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1ZWJkOGIyYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY4ODE2NWM1LWM0MmUtNGM2Ni1h NzYwLWU2MDVlYmQ4YjJhMy82ODgxNjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1ZWJk OGIyYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAoGYwDgQCAAIwCAMGACYgATIwMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYHUTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAY4ICyqzbmAXVMWN2w8L+AXlG8 VHVuIS67Q2CSnTasNe0ZjMmLx/DIj8ldbqyvb8Qp9Jd86qlg51VAHN34YbHJuL6a XsrU9w0MU64N9s3peOOTZytn+DHldNa2HySeALS/gtU6JxIkT+/MJwMyNepFHMOQ zjRYPkIctMW/f3xBe5a0t7+v9Ir43XjLEE03oDRVaFS4Bgexw/udtuZKiEGU6cTY t7mENQG3Q6lT1W2OkbXVx0H8CtqWjM0rEt1auJwrqSu6VgkljO1n63e5Q8PR65QD UBmrI4pQd7Coz2bB2+BBee5CFtFhkBs2ANUQOKfFJIwrugKiJBmR2QWtwgQw -----END CERTIFICATE-----Generated at Thu Apr 3 02:50:26 2025 by rpki-client