$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer File: 791fee1c-1b1f-448c-8937-9a315eb8e9de.cer (raw, json) Hash identifier: v8stvHK5k/NB/hFgxAOnm/omJVzU0PUny1pkkoUOwxo= Subject key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858491509D0D7E3B6B6A2CA47395C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 01:45:34 +0000 Certificate not after: Tue 08 Jun 2027 00:45:34 +0000 Subordinate resources: IP: 192.197.225.0 -- 192.197.226.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:09:d0:d7:e3:b6:b6:a2:ca:47:39:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 5 01:45:34 2025 GMT Not After : Jun 8 00:45:34 2027 GMT Subject: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c4:63:b7:8b:50:c3:85:67:3b:61:17:d8:e7: f5:fc:f8:d9:34:9d:0f:1b:64:56:75:8f:8e:dd:4b: b6:85:27:7b:bb:93:b0:f1:4a:35:06:43:8f:5a:10: f0:95:0c:d7:c0:4f:4f:ef:e4:60:1a:db:47:53:67: 61:71:02:fa:e3:fb:0e:0e:c5:e5:68:b6:18:b1:fa: 3c:10:20:88:1d:ad:6e:f4:de:15:64:0c:3b:c1:de: 05:75:72:1d:06:4f:f0:54:27:96:aa:a8:dd:b3:67: 1d:4a:90:ae:b8:43:84:1e:01:23:1a:9a:b1:60:c5: a5:d6:fd:01:4f:7a:69:a3:5c:c2:40:b7:c2:dc:4d: 46:f6:cb:6f:7a:aa:a6:b4:6c:96:c5:f6:89:30:e3: 75:db:14:eb:b6:8e:e0:4d:33:10:8c:2c:38:4d:4f: 2f:77:53:fa:13:06:a8:52:9e:d4:52:60:ba:0e:c4: 19:a0:7f:92:ab:16:48:7f:e2:5a:2a:38:40:02:6a: 85:68:d1:96:96:f0:2c:e2:f2:bc:da:72:f1:49:46: 40:5f:e4:ab:54:d2:c7:d1:ec:6b:51:14:07:19:5b: 73:aa:dc:12:43:7a:cc:86:d1:18:c8:21:3b:8b:b3: 99:91:e2:2d:ec:59:dd:95:8d:3e:2c:45:d4:1a:9a: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.197.225.0-192.197.226.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e2:c8:da:f7:f1:82:f9:92:83:51:63:5f:fe:f8:8b:fa:02: c3:f2:42:51:74:ef:c2:01:8e:f6:d3:2d:a2:19:bd:d4:d3:5b: ab:d1:03:b3:d0:b2:0a:21:39:25:24:9e:e3:79:99:10:de:f0: 32:d5:68:7e:a3:0d:cd:4d:b2:96:c7:cf:ed:69:d1:0b:65:2b: 9f:d0:5a:b9:24:30:43:c9:e1:80:04:a4:0c:cc:38:15:3c:ed: 79:19:d7:b1:b1:5d:dd:1b:3a:c1:74:3c:23:b6:1e:9b:29:46: 51:a4:94:90:1d:b0:d1:2e:e2:de:d7:7e:b4:e3:fc:27:d0:ec: e0:04:35:4d:cc:fe:da:88:2b:b8:77:5e:f2:43:86:02:a5:7e: 3f:55:41:9c:8d:5c:3b:df:0b:37:fb:c0:d0:a1:3f:3d:d7:d0: fc:7b:70:b1:4d:73:c1:9a:ad:5b:01:57:f9:fc:e0:f2:bc:04: e8:fb:c4:aa:35:ba:1a:ef:25:fc:58:20:e7:39:44:98:2d:a8: 18:af:b3:7f:68:39:b0:0a:56:77:91:24:d2:b2:6e:d8:7a:ae: bc:e0:3f:37:17:59:40:4b:73:2f:5b:c8:4f:aa:f1:a6:b6:61: 40:d6:e5:f9:28:db:d7:7d:8d:71:75:93:b2:4f:f0:75:a5:2f: 94:c4:6d:de -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEkVCdDX47a2ospHOVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwNTAxNDUzNFoXDTI3MDYwODAwNDUzNFowLzEtMCsGA1UEAxMk NzkxZmVlMWMtMWIxZi00NDhjLTg5MzctOWEzMTVlYjhlOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsRjt4tQw4VnO2EX2Of1/PjZNJ0PG2RWdY+O 3Uu2hSd7u5Ow8Uo1BkOPWhDwlQzXwE9P7+RgGttHU2dhcQL64/sODsXlaLYYsfo8 ECCIHa1u9N4VZAw7wd4FdXIdBk/wVCeWqqjds2cdSpCuuEOEHgEjGpqxYMWl1v0B T3ppo1zCQLfC3E1G9stveqqmtGyWxfaJMON12xTrto7gTTMQjCw4TU8vd1P6Ewao Up7UUmC6DsQZoH+SqxZIf+JaKjhAAmqFaNGWlvAs4vK82nLxSUZAX+SrVNLH0exr URQHGVtzqtwSQ3rMhtEYyCE7i7OZkeIt7FndlY0+LEXUGpo6HQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFLpPK24r6OneEhrkv2Mwf2PDoDvSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 OTFmZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMxNWViOGU5ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc5MWZlZTFjLTFiMWYtNDQ4Yy04 OTM3LTlhMzE1ZWI4ZTlkZS83OTFmZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMxNWVi OGU5ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMDF4QMEAMDF4jBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAu4sja9/GC +ZKDUWNf/viL+gLD8kJRdO/CAY720y2iGb3U01ur0QOz0LIKITklJJ7jeZkQ3vAy 1Wh+ow3NTbKWx8/tadELZSuf0Fq5JDBDyeGABKQMzDgVPO15GdexsV3dGzrBdDwj th6bKUZRpJSQHbDRLuLe13604/wn0OzgBDVNzP7aiCu4d17yQ4YCpX4/VUGcjVw7 3ws3+8DQoT8919D8e3CxTXPBmq1bAVf5/ODyvATo+8SqNboa7yX8WCDnOUSYLagY r7N/aDmwClZ3kSTSsm7Yeq684D83F1lAS3MvW8hPqvGmtmFA1uX5KNvXfY1xdZOy T/B1pS+UxG3e -----END CERTIFICATE-----Generated at Thu Apr 3 02:43:31 2025 by rpki-client