$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer File: 72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer (raw, json) Hash identifier: 8CmmlgcDQX78Tz4bkNCjWh0wXfm9eAotIilFq9w3rOc= Subject key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858494F8C6507D1E271B6AF062080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Mar 2025 00:45:34 +0000 Certificate not after: Tue 29 Jun 2027 00:45:34 +0000 Subordinate resources: AS: 6122 IP: 165.206.0.0/16 IP: 207.28.0.0/16 IP: 207.165.0.0/16 IP: 209.56.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:8c:65:07:d1:e2:71:b6:af:06:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 26 00:45:34 2025 GMT Not After : Jun 29 00:45:34 2027 GMT Subject: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:52:94:32:9d:66:1a:88:5f:3b:ae:56:8b: 96:a7:8e:77:0b:ea:ed:28:9c:92:21:16:d3:5d:88: 9c:aa:00:3e:e7:4a:ea:bf:5b:b2:58:e6:3d:98:a0: 54:0d:71:1e:78:82:c7:c7:a8:00:a6:7d:56:20:37: f0:da:fa:1b:66:95:95:bb:4f:c3:85:72:ab:ed:de: b9:68:89:7f:a9:96:15:c2:80:9a:cd:4b:b5:87:bb: 0c:e7:b6:d9:24:c0:5b:29:db:9f:2a:9e:a2:c2:84: 25:79:43:5b:29:68:16:66:4c:b0:2f:ed:9c:86:69: 2f:78:dd:c3:65:67:87:1b:2d:5f:da:c6:23:e7:32: 1c:45:e9:6f:84:a1:71:3d:e1:20:6a:71:63:f0:28: 5f:a3:5e:ff:cf:bf:ce:b4:57:42:4e:0f:d0:27:e3: de:09:87:b1:c0:ad:3d:d6:f7:a0:44:46:2e:eb:33: 75:ee:49:82:ac:91:36:1a:cc:6a:6d:c8:6f:c0:f8: 5d:94:88:fd:27:34:ab:fb:53:02:c1:2c:9c:9f:ab: 07:88:eb:a8:d8:4e:5d:3e:74:b0:13:c0:fe:d8:b7: 93:29:94:de:eb:bd:d5:35:b6:3a:4e:3c:67:38:ca: 49:03:26:a7:36:9f:b0:6e:95:7d:68:aa:0b:ae:a9: 7b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 165.206.0.0/16 207.28.0.0/16 207.165.0.0/16 209.56.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6122 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:86:5c:46:4d:dc:38:1d:0a:43:2d:74:71:96:72:0a:7a:71: 6b:21:ff:c0:70:a6:ba:7b:26:2c:92:8f:23:c5:17:b5:ad:c3: 12:30:3c:2e:ce:4a:0b:ee:eb:5f:d2:85:de:2f:24:f1:4c:93: d0:29:b2:bd:a0:6e:59:a8:e8:fa:7b:0c:0e:3b:56:30:05:ea: 2b:62:0b:a7:4f:b6:3a:9c:33:50:b2:19:56:9d:62:73:66:2b: fd:26:d2:fa:7f:ee:42:69:bf:09:ea:dd:d4:1b:aa:28:ce:6f: 41:2e:75:bd:ff:85:91:59:46:07:b4:36:dd:a9:b4:f7:ad:1b: 63:03:8a:cc:e6:16:f0:fb:38:9e:65:6c:2a:28:d7:ae:53:2b: 61:db:a9:3b:17:8a:98:7b:ac:ca:83:69:88:36:e5:57:1d:48: 01:45:67:ea:00:b3:f1:e6:27:3d:79:06:08:3c:d9:54:d7:17: 1d:41:56:07:87:a8:6d:d8:22:4d:39:0c:af:e4:d8:5c:06:13: 81:4b:9f:e7:f1:f0:5c:4a:29:03:2f:75:ed:53:c7:c7:d4:9e: 93:e6:bf:35:29:73:5e:ee:e2:ea:f3:03:63:fb:d1:59:d7:b0: 60:6e:0c:6e:76:8e:a4:51:d0:6a:87:73:5b:64:a0:93:81:6e: 06:75:8b:6d -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWElPjGUH0eJxtq8GIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMyNjAwNDUzNFoXDTI3MDYyOTAwNDUzNFowLzEtMCsGA1UEAxMk NzJlZjdjOWItYzc1Ni00MzlhLWFjNTktMGZiNWU1ZThjMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ5SlDKdZhqIXzuuVouWp453C+rtKJySIRbT XYicqgA+50rqv1uyWOY9mKBUDXEeeILHx6gApn1WIDfw2vobZpWVu0/DhXKr7d65 aIl/qZYVwoCazUu1h7sM57bZJMBbKdufKp6iwoQleUNbKWgWZkywL+2chmkveN3D ZWeHGy1f2sYj5zIcRelvhKFxPeEganFj8Chfo17/z7/OtFdCTg/QJ+PeCYexwK09 1vegREYu6zN17kmCrJE2GsxqbchvwPhdlIj9JzSr+1MCwSycn6sHiOuo2E5dPnSw E8D+2LeTKZTe673VNbY6TjxnOMpJAyanNp+wbpV9aKoLrql7zQIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFCe4o91J9dnzEFO2Q1rCOLglp9d9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 MmVmN2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1ZTVlOGMxZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzcyZWY3YzliLWM3NTYtNDM5YS1h YzU5LTBmYjVlNWU4YzFlZS83MmVmN2M5Yi1jNzU2LTQzOWEtYWM1OS0wZmI1ZTVl OGMxZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDAwClzgMDAM8cAwMAz6UDAwDRODAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgIX6jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAchlxGTdw4HQpDLXRxlnIKenFrIf/A cKa6eyYsko8jxRe1rcMSMDwuzkoL7utf0oXeLyTxTJPQKbK9oG5ZqOj6ewwOO1Yw BeorYgunT7Y6nDNQshlWnWJzZiv9JtL6f+5Cab8J6t3UG6oozm9BLnW9/4WRWUYH tDbdqbT3rRtjA4rM5hbw+zieZWwqKNeuUyth26k7F4qYe6zKg2mINuVXHUgBRWfq ALPx5ic9eQYIPNlU1xcdQVYHh6ht2CJNOQyv5NhcBhOBS5/n8fBcSikDL3XtU8fH 1J6T5r81KXNe7uLq8wNj+9FZ17Bgbgxudo6kUdBqh3NbZKCTgW4GdYtt -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:37 2025 by rpki-client