$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer File: 706d4f00-fa89-4b22-8684-b968d577fab7.cer (raw, json) Hash identifier: SxpOizcjtdv1Ypodv/YSSwE+5F7ce1OtMITFEEN9blE= Subject key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858492B417F930B1CBFA697573840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Mar 2025 00:45:33 +0000 Certificate not after: Wed 16 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 2610:20:: -- 2610:20:5fff:ffff:ffff:ffff:ffff:ffff IP: 2610:20:7000::/36 IP: 2610:20:a000:: -- 2610:20:ffff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2b:41:7f:93:0b:1c:bf:a6:97:57:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 13 00:45:33 2025 GMT Not After : Jun 16 00:45:33 2027 GMT Subject: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:57:8d:60:9d:6f:e7:29:6d:0a:8b:6a:20:18: 99:e6:ce:e8:a5:fe:2e:71:0d:d4:25:31:18:e7:8c: 65:e9:32:ed:9a:09:39:9a:2f:b3:f7:da:52:c0:a4: 8c:de:c0:93:56:2a:b7:a2:43:f5:3a:ad:52:72:bd: 6c:3a:91:50:e6:72:9f:e7:e1:ad:8b:2a:7b:05:09: 77:31:2b:75:5e:e6:9b:89:ae:67:91:51:c8:ad:3b: 3a:8c:7b:19:9f:25:58:8b:47:c5:0b:73:82:de:da: 36:d7:9d:ef:7a:68:83:f5:b6:97:6b:00:d9:b4:6c: 6d:04:12:68:5b:9c:c8:49:a5:e5:23:42:5a:64:f8: 6f:44:a2:75:21:39:18:c9:b9:4f:f8:6a:a1:9c:2b: 6d:96:6b:28:38:f1:8b:41:49:3c:a3:54:d4:8c:41: 12:cf:b0:f3:ae:bf:ec:9b:76:24:6f:9e:70:1c:e9: 3c:a4:cc:25:ff:d4:6c:70:e1:6f:62:e3:c7:3f:a4: fb:88:5d:e5:86:f2:b3:f7:92:4a:03:35:60:ad:b1: 93:69:27:b3:80:13:21:65:dc:9f:4b:2b:26:da:6e: 82:2f:19:44:25:12:d8:8b:ea:f0:2c:74:ef:cc:ea: e3:50:ac:74:88:35:7a:8b:bf:7f:03:34:27:c6:6f: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2610:20::-2610:20:5fff:ffff:ffff:ffff:ffff:ffff 2610:20:7000::/36 2610:20:a000::-2610:20:ffff:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:02:0b:72:34:00:fa:6e:51:a3:52:a5:ed:d1:7e:af:a9:51: b0:99:bd:d9:66:b7:e7:0d:a3:41:8c:33:c2:76:fa:2e:e0:e8: ae:d4:b2:12:43:3a:6e:6d:76:a1:7c:ef:a8:3b:56:aa:d3:3b: 59:d3:a2:c5:1a:8a:6c:d3:0d:d6:cc:a3:2c:cb:c4:2b:a3:8c: 90:d5:8e:24:af:5e:e5:80:09:98:35:fe:b7:90:81:f9:19:c4: fd:c4:53:57:81:30:fc:ca:58:2f:a1:98:fc:73:70:b2:f3:3e: a4:e1:d5:5d:4e:e2:b7:ec:16:93:60:3e:14:7c:30:53:c4:33: 92:a8:8a:71:30:ce:14:58:a9:0d:9d:8c:58:b1:a7:af:7d:f3: 54:e2:e6:a8:78:b4:35:e0:09:09:95:f0:00:ec:e2:75:50:8d: 8d:d1:79:0c:e5:38:c0:ed:77:ef:48:db:df:2d:f3:c6:02:34: e0:d0:49:37:4a:ef:d1:c7:ad:2a:6b:d8:5a:bd:8d:ee:b8:9b: f4:ee:2b:5e:8b:97:82:28:dc:1a:01:bb:83:06:b0:8c:2d:7f: c8:93:33:20:7b:28:4f:e0:75:40:c9:54:0e:72:da:20:0d:31: 7f:4d:22:7b:af:34:8a:00:9e:b9:27:44:52:35:59:f4:33:53: fd:9c:f1:34 -----BEGIN CERTIFICATE----- MIIHETCCBfmgAwIBAgIUAQ0Mn0MoWEkrQX+TCxy/ppdXOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxMzAwNDUzM1oXDTI3MDYxNjAwNDUzM1owLzEtMCsGA1UEAxMk NzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1NzdmYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhleNYJ1v5yltCotqIBiZ5s7opf4ucQ3UJTEY 54xl6TLtmgk5mi+z99pSwKSM3sCTViq3okP1Oq1Scr1sOpFQ5nKf5+Gtiyp7BQl3 MSt1Xuabia5nkVHIrTs6jHsZnyVYi0fFC3OC3to2153vemiD9baXawDZtGxtBBJo W5zISaXlI0JaZPhvRKJ1ITkYyblP+GqhnCttlmsoOPGLQUk8o1TUjEESz7Dzrr/s m3Ykb55wHOk8pMwl/9RscOFvYuPHP6T7iF3lhvKz95JKAzVgrbGTaSezgBMhZdyf Sysm2m6CLxlEJRLYi+rwLHTvzOrjUKx0iDV6i79/AzQnxm/z5QIDAQABo4IEIzCC BB8wHQYDVR0OBBYEFCjNIhJ8LxnYG2RPVB8SJ/siyeQFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzcwNmQ0ZjAwLWZhODktNGIyMi04 Njg0LWI5NjhkNTc3ZmFiNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3 N2ZhYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMDAEAgACMCowDwMFBSYQACADBgUmEAAgQAMGBCYQACBwMA8DBgUm EAAgoAMFACYQACAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAcAILcjQA+m5Ro1Kl7dF+r6lRsJm92Wa35w2j QYwzwnb6LuDortSyEkM6bm12oXzvqDtWqtM7WdOixRqKbNMN1syjLMvEK6OMkNWO JK9e5YAJmDX+t5CB+RnE/cRTV4Ew/MpYL6GY/HNwsvM+pOHVXU7it+wWk2A+FHww U8QzkqiKcTDOFFipDZ2MWLGnr33zVOLmqHi0NeAJCZXwAOzidVCNjdF5DOU4wO13 70jb3y3zxgI04NBJN0rv0cetKmvYWr2N7rib9O4rXouXgijcGgG7gwawjC1/yJMz IHsoT+B1QMlUDnLaIA0xf00ie680igCeuSdEUjVZ9DNT/ZzxNA== -----END CERTIFICATE-----Generated at Thu Apr 3 03:00:28 2025 by rpki-client