$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd.cer File: 7486d668-0b59-485d-a30a-dbd53fab21fd.cer (raw, json) Hash identifier: umNmWVf8kUZmsCVrnDXycVeB6XFihRcjheX0mxHRiAs= Subject key identifier: 6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848DFFECE5283764AEA633EB400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Feb 2025 01:45:33 +0000 Certificate not after: Thu 20 May 2027 00:45:33 +0000 Subordinate resources: IP: 198.202.148.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:fe:ce:52:83:76:4a:ea:63:3e:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 14 01:45:33 2025 GMT Not After : May 20 00:45:33 2027 GMT Subject: CN=7486d668-0b59-485d-a30a-dbd53fab21fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:d4:c8:cf:74:63:b6:3e:aa:0d:91:eb:1f: 13:e5:20:7e:af:4c:c2:08:53:93:f8:a0:0a:c4:53: 54:70:17:21:ba:e3:1e:b0:16:11:b7:58:99:8f:52: 42:ce:4c:13:fd:07:8a:11:9d:9e:ae:f9:f6:e2:a3: 0e:35:55:4a:16:1d:0a:3a:fb:a7:1d:b5:3b:62:29: 44:53:f8:be:b2:a1:90:5c:9a:be:09:15:23:33:91: 1a:96:95:36:63:16:9b:d6:c4:2e:42:35:18:a9:c9: b2:80:62:ba:2f:c5:e1:37:4b:4e:18:d1:1f:71:10: 01:bb:48:51:5b:ec:da:63:e0:bf:6e:d3:fd:2e:dc: 4f:9d:0e:20:2d:42:1b:28:d0:3a:b1:14:46:17:fb: 9a:c2:bb:e5:a0:54:9c:c4:52:34:96:ba:51:26:f6: d2:f6:7a:70:3e:76:d5:36:1b:6b:b2:08:a4:c9:45: 4d:ba:a0:be:38:07:4c:46:37:ef:36:d9:64:d0:99: 12:51:00:f7:91:62:c7:79:27:06:da:7f:98:a8:61: ba:6e:7a:74:d3:b9:77:dd:dd:69:78:67:a7:14:b7: 62:94:2c:09:db:fa:83:64:0a:64:63:76:01:b0:86: 12:97:16:d7:33:89:59:8c:a8:c4:74:4d:de:6f:02: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DF:86:CB:6D:CE:EE:BA:13:2E:03:69:A7:7A:5E:A6:F5:02:41:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7486d668-0b59-485d-a30a-dbd53fab21fd/7486d668-0b59-485d-a30a-dbd53fab21fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 198.202.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:8e:97:17:b3:a0:a2:01:3c:ae:1c:13:9f:47:d3:c1:d2:8b: 99:1c:68:8e:c9:02:f1:80:11:c2:35:fb:5f:39:91:b9:96:e9: ac:fd:06:75:78:39:17:02:21:87:eb:4d:f2:fb:9c:bc:53:97: 30:bd:b8:2c:a6:f1:88:fc:c7:0d:a0:0c:a2:ab:d4:64:5b:d2: e9:1c:dd:56:13:24:ab:75:44:49:b7:fd:cc:53:2f:77:ec:32: 05:f7:f3:ca:04:dc:e7:11:bd:e6:d8:fb:7f:db:c4:3d:6c:b6: a0:07:ba:18:1f:ae:44:27:a2:c4:21:31:fd:b1:d7:0c:12:0e: f6:67:c5:77:73:d1:23:e0:9e:1e:36:0d:3f:45:54:f7:76:e8: e9:e7:56:d5:29:2d:2a:fe:58:d3:43:bc:00:f1:6d:11:4e:91: a8:90:73:5b:a5:f1:5d:f5:cf:99:64:26:38:7e:4b:4a:a3:21: 2d:47:a7:bb:4a:17:0d:ea:12:6b:4e:09:27:ad:cd:52:34:7c: d9:7d:c4:d2:6d:48:82:9d:55:4d:a9:fd:db:a5:67:51:2d:91: a0:6f:d1:67:20:34:a6:ce:5a:9f:ee:b5:0d:9d:18:ab:80:f2: 31:91:98:07:84:9e:c4:32:29:a7:bb:0d:98:59:43:39:1e:5d: 6c:a4:41:98 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjf/s5Sg3ZK6mM+tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxNDAxNDUzM1oXDTI3MDUyMDAwNDUzM1owLzEtMCsGA1UEAxMk NzQ4NmQ2NjgtMGI1OS00ODVkLWEzMGEtZGJkNTNmYWIyMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDvUyM90Y7Y+qg2R6x8T5SB+r0zCCFOT+KAK xFNUcBchuuMesBYRt1iZj1JCzkwT/QeKEZ2ervn24qMONVVKFh0KOvunHbU7YilE U/i+sqGQXJq+CRUjM5EalpU2Yxab1sQuQjUYqcmygGK6L8XhN0tOGNEfcRABu0hR W+zaY+C/btP9LtxPnQ4gLUIbKNA6sRRGF/uawrvloFScxFI0lrpRJvbS9npwPnbV NhtrsgikyUVNuqC+OAdMRjfvNtlk0JkSUQD3kWLHeScG2n+YqGG6bnp007l33d1p eGenFLdilCwJ2/qDZApkY3YBsIYSlxbXM4lZjKjEdE3ebwJNfQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFG3fhsttzu66Ey4Daad6Xqb1AkHcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 NDg2ZDY2OC0wYjU5LTQ4NWQtYTMwYS1kYmQ1M2ZhYjIxZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc0ODZkNjY4LTBiNTktNDg1ZC1h MzBhLWRiZDUzZmFiMjFmZC83NDg2ZDY2OC0wYjU5LTQ4NWQtYTMwYS1kYmQ1M2Zh YjIxZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGypQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj46XF7OgogE8rhwTn0fT wdKLmRxojskC8YARwjX7XzmRuZbprP0GdXg5FwIhh+tN8vucvFOXML24LKbxiPzH DaAMoqvUZFvS6RzdVhMkq3VESbf9zFMvd+wyBffzygTc5xG95tj7f9vEPWy2oAe6 GB+uRCeixCEx/bHXDBIO9mfFd3PRI+CeHjYNP0VU93bo6edW1SktKv5Y00O8APFt EU6RqJBzW6XxXfXPmWQmOH5LSqMhLUenu0oXDeoSa04JJ63NUjR82X3E0m1Igp1V Tan926VnUS2RoG/RZyA0ps5an+61DZ0Yq4DyMZGYB4SexDIpp7sNmFlDOR5dbKRB mA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:40:13 2025 by rpki-client