$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer File: 7875058f-5363-4bbc-9de7-bfd669c88bd9.cer (raw, json) Hash identifier: 1dgcdW2h/+eI8YptBdOj+Z1jkRyDBfyXrHiB3zDKHSE= Subject key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858487B7E2D39FE53F01AB4341842 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jan 2025 01:45:33 +0000 Certificate not after: Wed 14 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 137.155.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:7e:2d:39:fe:53:f0:1a:b4:34:18:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 9 01:45:33 2025 GMT Not After : Apr 14 00:45:33 2027 GMT Subject: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:1b:71:28:78:a8:89:61:2e:a8:61:f3:bd: bb:9e:55:39:e7:c3:d1:ce:f1:3b:cd:9b:12:bc:67: 07:e5:6d:44:4f:3d:25:a8:31:a7:3d:28:47:4f:2b: 36:d7:3c:87:bb:80:3a:a0:7e:54:af:25:0f:b8:bc: 33:3a:22:84:89:b0:4b:bc:b3:6e:f7:89:b7:b3:4f: 6b:31:b5:bd:a8:05:27:66:3a:ad:12:b6:0c:e8:b0: b3:df:52:bd:b6:81:2e:a0:bf:8b:cc:94:1d:de:fe: f9:6d:23:2d:bc:7a:58:31:43:8b:10:19:e1:dd:6d: 24:6a:8c:d2:5f:a8:e8:bc:17:94:02:57:33:d4:3e: 49:72:27:2b:68:ef:99:f3:c2:9b:c8:b1:6a:45:93: c3:db:09:e3:27:4c:f9:6b:7f:09:f2:7b:8a:ea:80: 92:6a:44:df:52:e7:da:27:32:63:d7:b1:af:8b:c7: ce:43:79:fc:09:74:b7:b2:a8:e6:60:6a:30:74:9b: a5:27:90:39:7e:df:c5:87:d2:bc:f0:ec:fc:10:52: 20:b7:4e:e5:eb:6c:2e:e5:33:fe:93:0b:b8:9a:f6: fa:9f:0f:ab:26:d0:54:e6:1c:cb:45:a9:68:be:b6: a1:ad:5d:56:f6:ea:13:81:5b:41:8f:6c:b6:15:d0: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 137.155.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:cc:c0:d4:e2:48:e8:cd:f2:60:d1:b0:2b:56:0e:26:27:99: 00:4b:dc:96:c5:cf:2c:0d:4f:ca:94:f3:1b:53:3e:78:4f:80: 5d:6d:30:9a:9e:cc:2a:dc:58:bc:56:61:aa:a5:f7:28:82:ec: 84:ec:ba:e2:23:fe:23:00:a4:34:9b:47:e4:1c:a9:c0:61:bc: e1:22:11:40:e6:b0:bf:f0:e1:9d:33:a4:36:20:e9:eb:59:2c: ef:78:e7:78:39:6d:51:07:a7:63:3a:26:55:79:53:ba:c2:f9: 06:45:76:2b:d8:b5:4b:9e:3f:bf:21:ae:2e:1d:97:12:f4:21: 08:4e:4c:ff:d2:af:a1:2f:49:43:3b:e4:08:06:d8:cd:11:d0: 61:7e:d1:75:75:46:c4:cb:54:3b:9d:8b:3d:d0:01:ac:4a:1d: c4:b3:0c:49:eb:52:3e:95:77:95:0d:79:c9:50:d7:86:30:4d: 8e:32:39:73:0b:d8:1d:f0:01:26:5b:4e:06:81:e1:42:9f:07: 60:bf:e3:45:be:4b:4d:27:e0:96:e5:45:1f:e7:3b:ff:d6:f0: 82:e5:d3:a5:d9:d8:96:27:83:28:05:3a:96:6f:48:0c:96:4b: dd:52:5f:67:76:77:3d:8a:f4:d5:de:28:8d:e6:f8:de:24:c9: 73:1d:84:ba -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEh7fi05/lPwGrQ0GEIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEwOTAxNDUzM1oXDTI3MDQxNDAwNDUzM1owLzEtMCsGA1UEAxMk Nzg3NTA1OGYtNTM2My00YmJjLTlkZTctYmZkNjY5Yzg4YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ8bcSh4qIlhLqhh8727nlU558PRzvE7zZsS vGcH5W1ETz0lqDGnPShHTys21zyHu4A6oH5UryUPuLwzOiKEibBLvLNu94m3s09r MbW9qAUnZjqtErYM6LCz31K9toEuoL+LzJQd3v75bSMtvHpYMUOLEBnh3W0kaozS X6jovBeUAlcz1D5JcicraO+Z88KbyLFqRZPD2wnjJ0z5a38J8nuK6oCSakTfUufa JzJj17Gvi8fOQ3n8CXS3sqjmYGowdJulJ5A5ft/Fh9K88Oz8EFIgt07l62wu5TP+ kwu4mvb6nw+rJtBU5hzLRalovrahrV1W9uoTgVtBj2y2FdDKYwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFGD4WZp5VjdNReAC7VjAjRkYW6wDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 ODc1MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2NjljODhiZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc4NzUwNThmLTUzNjMtNGJiYy05 ZGU3LWJmZDY2OWM4OGJkOS83ODc1MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2Njlj ODhiZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJmzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2zMDU4kjozfJg0bArVg4m J5kAS9yWxc8sDU/KlPMbUz54T4BdbTCanswq3Fi8VmGqpfcoguyE7LriI/4jAKQ0 m0fkHKnAYbzhIhFA5rC/8OGdM6Q2IOnrWSzveOd4OW1RB6djOiZVeVO6wvkGRXYr 2LVLnj+/Ia4uHZcS9CEITkz/0q+hL0lDO+QIBtjNEdBhftF1dUbEy1Q7nYs90AGs Sh3EswxJ61I+lXeVDXnJUNeGME2OMjlzC9gd8AEmW04GgeFCnwdgv+NFvktNJ+CW 5UUf5zv/1vCC5dOl2diWJ4MoBTqWb0gMlkvdUl9ndnc9ivTV3iiN5vjeJMlzHYS6 -----END CERTIFICATE-----Generated at Thu Apr 3 02:52:53 2025 by rpki-client