$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer File: 6ec5d668-721f-4186-82e6-1391fb7784bb.cer (raw, json) Hash identifier: AlAJ98E4DjTJmv0SE3rzFeHiam9uRu7Yeb22Z4XqyUc= Subject key identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858494F8C65C8410376BCD6DCE240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Mar 2025 00:45:34 +0000 Certificate not after: Tue 29 Jun 2027 00:45:34 +0000 Subordinate resources: IP: 172.81.144.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:8c:65:c8:41:03:76:bc:d6:dc:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 26 00:45:34 2025 GMT Not After : Jun 29 00:45:34 2027 GMT Subject: CN=6ec5d668-721f-4186-82e6-1391fb7784bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:db:01:09:46:ae:9b:50:d6:38:ac:e5:8f: 0d:43:1b:83:f3:70:35:b3:c8:08:de:65:4d:04:c1: 25:21:a8:d3:c1:cc:b4:80:be:fb:4d:a8:57:63:7e: 8d:da:a2:76:92:90:bd:05:2e:21:b9:76:a3:09:85: 3f:d0:0d:8a:2e:94:25:5a:ad:be:e3:86:76:ef:0a: 1d:d7:cf:99:67:dc:3a:91:12:fd:1f:a3:11:5f:0f: 0f:d0:78:d4:1f:52:53:0f:c9:28:de:9a:51:0a:8c: 6f:80:e4:37:87:5f:ca:d5:5c:22:79:3f:9f:d2:03: fb:ec:cc:2b:4d:9f:93:71:bb:1b:ee:f6:6c:01:78: a6:2f:96:8b:4e:e9:98:ad:d2:3f:2d:45:a4:2c:ed: 59:2d:23:87:53:44:d1:53:e7:ed:59:7b:6b:36:a5: 98:0a:96:f5:90:2b:e9:06:aa:fd:12:de:2e:7e:43: af:0a:dd:3f:7c:55:d8:ea:ca:32:09:91:04:c2:7e: c8:45:61:d1:59:ac:24:ce:85:08:9d:6a:13:61:4d: 00:a1:44:64:ee:ab:d4:c6:9e:13:bd:8e:33:99:96: d5:59:c1:73:9d:32:e0:d6:fb:fa:b5:8f:a7:3a:3b: ed:25:31:34:96:91:13:ea:60:40:59:07:3b:d0:38: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 172.81.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:39:db:8e:b0:3a:6d:36:60:7a:94:13:2e:70:12:58:89:04: 7d:a9:6f:ac:6d:25:18:81:db:a5:58:f2:af:53:fa:7b:6d:32: 59:69:85:a4:bd:03:b6:31:d2:09:c8:74:02:94:e6:ba:6b:d2: 54:e6:18:86:4d:74:0f:94:02:d1:5e:c8:75:c5:08:51:38:37: ee:fe:7c:96:2f:d9:12:7c:cc:6b:0b:f7:7a:44:ac:b7:37:d2: e5:c7:d5:28:79:91:ea:ef:92:e2:34:ff:90:7b:b4:0e:32:8a: e3:c0:e7:c8:87:9c:31:89:0e:ed:b3:20:66:8d:e1:a8:df:82: 4c:39:bd:83:c0:ed:67:72:c4:19:53:92:1f:18:82:52:2e:1b: f3:f1:63:9d:3b:01:ca:89:b4:d8:f5:6d:76:84:f6:87:4e:88: 8f:05:dc:dd:c4:43:b0:53:f4:19:5e:95:d6:88:c3:15:53:20: 4a:fe:42:51:6f:0b:d7:ba:81:76:5e:62:72:10:1f:59:4e:09: 3e:a9:85:09:85:46:4d:f7:15:1e:89:21:ab:81:83:b3:7d:9d: 13:69:6f:8e:50:dd:19:be:05:c1:54:83:fc:a0:47:1a:cd:5e: 63:4d:c4:7f:5d:cb:dd:35:e1:db:93:f3:1b:a1:e4:e7:54:95: 80:3a:c9:4e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElPjGXIQQN2vNbc4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMyNjAwNDUzNFoXDTI3MDYyOTAwNDUzNFowLzEtMCsGA1UEAxMk NmVjNWQ2NjgtNzIxZi00MTg2LTgyZTYtMTM5MWZiNzc4NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4DbAQlGrptQ1jis5Y8NQxuD83A1s8gI3mVN BMElIajTwcy0gL77TahXY36N2qJ2kpC9BS4huXajCYU/0A2KLpQlWq2+44Z27wod 18+ZZ9w6kRL9H6MRXw8P0HjUH1JTD8ko3ppRCoxvgOQ3h1/K1VwieT+f0gP77Mwr TZ+Tcbsb7vZsAXimL5aLTumYrdI/LUWkLO1ZLSOHU0TRU+ftWXtrNqWYCpb1kCvp Bqr9Et4ufkOvCt0/fFXY6soyCZEEwn7IRWHRWawkzoUInWoTYU0AoURk7qvUxp4T vY4zmZbVWcFznTLg1vv6tY+nOjvtJTE0lpET6mBAWQc70DjKPQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFH0rxeZOpHow8gH3N0f700e3FGMkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 ZWM1ZDY2OC03MjFmLTQxODYtODJlNi0xMzkxZmI3Nzg0YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZlYzVkNjY4LTcyMWYtNDE4Ni04 MmU2LTEzOTFmYjc3ODRiYi82ZWM1ZDY2OC03MjFmLTQxODYtODJlNi0xMzkxZmI3 Nzg0YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKsUZAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbznbjrA6bTZgepQTLnAS WIkEfalvrG0lGIHbpVjyr1P6e20yWWmFpL0DtjHSCch0ApTmumvSVOYYhk10D5QC 0V7IdcUIUTg37v58li/ZEnzMawv3ekSstzfS5cfVKHmR6u+S4jT/kHu0DjKK48Dn yIecMYkO7bMgZo3hqN+CTDm9g8DtZ3LEGVOSHxiCUi4b8/FjnTsByom02PVtdoT2 h06IjwXc3cRDsFP0GV6V1ojDFVMgSv5CUW8L17qBdl5ichAfWU4JPqmFCYVGTfcV Hokhq4GDs32dE2lvjlDdGb4FwVSD/KBHGs1eY03Ef13L3TXh25PzG6Hk51SVgDrJ Tg== -----END CERTIFICATE-----Generated at Thu Apr 3 02:56:01 2025 by rpki-client