$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer File: 6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer (raw, json) Hash identifier: 09uDxUTAEjpboBwRSJMRvn/ORvoWKB1h/uhUsGiJfeY= Subject key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849123F1E5D33298A20836FE380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 01:45:33 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 6508 AS: 11648 AS: 20148 AS: 30711 IP: 74.118.168.0/21 IP: 205.143.192.0/21 IP: 205.159.1.0/24 IP: 208.83.88.0/22 IP: 2001:5c8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:3f:1e:5d:33:29:8a:20:83:6f:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 4 01:45:33 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:3d:45:1e:2e:c2:f1:3c:ee:39:50:48:ca: 48:05:45:92:5d:03:07:e4:30:a7:ab:0f:bf:cc:90: 59:31:bb:ff:d4:91:69:aa:0f:8a:5b:fb:aa:1a:5b: de:56:00:f9:fe:a8:d8:55:71:2c:eb:d0:83:31:be: 0c:2c:b7:a4:d6:1a:ee:b9:fc:1b:d0:d8:c8:41:74: e7:29:89:f1:af:33:af:c3:bd:fe:37:11:53:57:b2: 44:65:27:9d:4f:1c:7b:bc:3b:fd:90:d9:2d:ae:91: f3:09:dc:6e:a4:02:5d:a2:0f:94:9b:56:9c:47:0e: f5:dd:b4:f8:55:3f:0c:f4:6a:58:b3:43:25:b4:6d: 68:b0:7a:74:09:41:90:f5:bc:e4:c1:8d:9d:fd:ba: 21:c8:4f:c7:a4:9d:e2:c3:56:7c:ea:2e:48:43:3f: 18:ed:7c:cf:8d:0e:a6:ca:dd:7f:06:95:4f:bb:0b: 1e:4f:13:39:37:91:8e:54:f6:c0:4f:75:49:8a:96: 0c:0e:b7:98:82:41:81:32:ed:cb:9a:bd:59:d6:b5: 52:3d:e1:22:9e:04:64:5e:ef:16:e7:62:c3:e3:06: 50:71:2e:be:65:3a:ee:19:1f:e9:04:96:32:41:cd: 71:e2:27:af:20:81:66:82:b8:03:ca:ab:b7:0e:b6: 41:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 74.118.168.0/21 205.143.192.0/21 205.159.1.0/24 208.83.88.0/22 IPv6: 2001:5c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6508 11648 20148 30711 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0d:ac:84:48:ca:e8:8d:01:26:94:f0:25:3f:93:f5:fe:88: db:be:4c:e4:e7:be:48:53:8b:21:16:7c:69:df:bc:7e:fa:95: 6e:ca:74:f0:94:ed:30:16:f7:65:d1:51:cb:a2:b7:70:2c:ab: b1:0b:77:44:1b:0a:62:30:5b:ba:0b:58:98:c4:93:8e:97:dd: 47:09:77:13:e6:ff:86:85:62:68:c0:24:86:d6:e7:01:e7:86: 63:c7:65:74:b5:dd:e8:68:b0:54:42:5a:b4:90:42:cb:9d:9f: 33:04:ae:8d:6e:8c:a9:39:41:de:ac:d6:c9:e7:cd:c5:52:86: fc:89:d5:d1:80:e3:29:5a:0e:3e:e2:50:ed:98:d7:a9:e0:4d: c8:44:fa:d4:65:fb:14:30:1f:fe:e9:13:3e:f6:9c:d6:0c:81: ea:83:1d:13:cb:57:4d:17:3b:0b:8f:fc:59:90:f9:28:67:aa: f2:60:40:a2:4a:36:cc:90:0f:10:c6:23:4d:19:a7:7e:66:04: 28:83:e0:d1:77:4b:04:40:4a:e4:a8:58:94:4e:e7:e4:5c:87: a5:6b:09:64:30:a0:52:62:07:96:51:91:41:a9:65:ff:bf:76: 61:78:5e:92:89:d7:cb:e3:96:57:72:3d:bf:71:42:1a:f2:11: 47:dc:75:25 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEkSPx5dMymKIINv44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwNDAxNDUzM1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk NmIxYmZiOWQtM2NlNS00ZmEwLTg3YTItNzM1M2VlOGNjMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMg9RR4uwvE87jlQSMpIBUWSXQMH5DCnqw+/ zJBZMbv/1JFpqg+KW/uqGlveVgD5/qjYVXEs69CDMb4MLLek1hruufwb0NjIQXTn KYnxrzOvw73+NxFTV7JEZSedTxx7vDv9kNktrpHzCdxupAJdog+Um1acRw713bT4 VT8M9GpYs0MltG1osHp0CUGQ9bzkwY2d/bohyE/HpJ3iw1Z86i5IQz8Y7XzPjQ6m yt1/BpVPuwseTxM5N5GOVPbAT3VJipYMDreYgkGBMu3Lmr1Z1rVSPeEingRkXu8W 52LD4wZQcS6+ZTruGR/pBJYyQc1x4ievIIFmgrgDyqu3DrZB8QIDAQABo4IERzCC BEMwHQYDVR0OBBYEFImez4yBYRnN9AnkZKC4ea1WV4E0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4Y2MyOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZiMWJmYjlkLTNjZTUtNGZhMC04 N2EyLTczNTNlZThjYzI5Yy82YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4 Y2MyOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBANKdqgDBAPNj8ADBADNnwEDBALQU1gwDQQCAAIw BwMFACABBcgwJQYIKwYBBQUHAQgBAf8EFjAUoBIwEAICGWwCAi2AAgJOtAICd/cw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGg2shEjK6I0BJpTwJT+T9f6I275M5Oe+SFOLIRZ8ad+8fvqVbsp0 8JTtMBb3ZdFRy6K3cCyrsQt3RBsKYjBbugtYmMSTjpfdRwl3E+b/hoViaMAkhtbn AeeGY8dldLXd6GiwVEJatJBCy52fMwSujW6MqTlB3qzWyefNxVKG/InV0YDjKVoO PuJQ7ZjXqeBNyET61GX7FDAf/ukTPvac1gyB6oMdE8tXTRc7C4/8WZD5KGeq8mBA oko2zJAPEMYjTRmnfmYEKIPg0XdLBEBK5KhYlE7n5FyHpWsJZDCgUmIHllGRQall /792YXhekonXy+OWV3I9v3FCGvIRR9x1JQ== -----END CERTIFICATE-----Generated at Thu Apr 3 02:47:24 2025 by rpki-client