$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer File: 7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer (raw, json) Hash identifier: FcKi9xdBqbBsG4vqbKdGOMZxgs92Ef+jvZXyjMk64PQ= Subject key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848BE7E99A04C56BDDD2DAAF100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Feb 2025 01:45:33 +0000 Certificate not after: Sat 08 May 2027 00:45:33 +0000 Subordinate resources: AS: 22914 AS: 27419 AS: 399039 IP: 63.246.96.0/20 IP: 64.82.192.0/18 IP: 138.84.0.0/19 IP: 162.216.72.0/22 IP: 204.8.184.0/21 IP: 207.111.128.0/19 IP: 208.68.100.0/22 IP: 208.92.24.0/22 IP: 2606:2f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:7e:99:a0:4c:56:bd:dd:2d:aa:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 2 01:45:33 2025 GMT Not After : May 8 00:45:33 2027 GMT Subject: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:6c:9b:69:2a:b3:95:49:a1:c4:59:76:8d: a5:2c:0e:9f:be:d2:91:f0:f9:aa:3c:e9:0d:a5:cd: cc:4b:1a:8f:fb:cb:f1:26:fb:24:4c:50:0d:8b:39: 47:fd:53:8c:2e:d4:5e:c8:4f:b3:71:37:70:04:38: 55:e8:e0:10:4d:59:ad:8f:6c:66:69:6b:31:24:8e: 2a:68:63:5d:34:89:d8:41:5d:d4:a5:f7:05:d6:c9: cf:98:87:69:e0:67:d5:54:5c:c8:96:1c:82:c9:6e: b7:e7:8d:ea:b7:8c:08:24:76:70:fc:51:b7:5d:76: b7:7e:57:25:66:86:7a:06:42:2e:6e:76:53:b5:3d: 3d:e9:7a:a3:8d:fd:87:01:31:1c:02:f9:a8:1d:45: 48:c5:9f:35:1c:c4:8a:fb:37:13:57:93:6b:8f:53: bd:b8:37:1c:0e:f6:68:eb:3a:22:94:a2:15:72:8f: f3:68:c2:ad:20:e9:70:74:a5:ca:6f:7b:ec:f5:81: 09:53:31:b6:60:4d:64:76:d9:4d:4a:ab:a7:a3:c2: d0:8c:02:61:00:44:36:06:ae:96:8d:2d:06:32:d8: 2c:be:c6:9c:73:05:1e:a6:fa:76:fb:cb:e2:b8:30: 7c:bb:25:a8:fd:ac:cf:2d:a7:c3:e5:93:c7:a0:34: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 63.246.96.0/20 64.82.192.0/18 138.84.0.0/19 162.216.72.0/22 204.8.184.0/21 207.111.128.0/19 208.68.100.0/22 208.92.24.0/22 IPv6: 2606:2f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22914 27419 399039 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8c:6c:dc:ec:7d:71:9f:d1:5b:d5:82:2c:05:98:61:1b:a2: fc:3e:9b:a7:4c:15:f1:7a:f3:63:18:31:54:08:e4:eb:eb:16: 43:a3:77:d8:86:84:8a:f1:3f:9c:04:34:bc:10:73:64:f9:3c: c1:97:62:8a:00:1b:69:ba:98:1d:36:3e:55:1f:08:18:55:9c: e5:fe:3d:75:81:fb:77:de:62:70:c0:c2:30:c1:e7:39:38:c1: c3:85:9e:70:fe:47:db:f8:c4:3d:56:ce:43:ce:95:f4:08:17: c7:f7:85:50:d2:bd:b9:c6:3c:0d:b5:77:3c:4c:63:2d:8a:aa: 4d:b3:80:5e:ad:ff:7e:24:0a:13:fc:cd:66:14:83:81:69:59: 9b:6f:21:b5:39:99:e3:a5:d5:e5:61:e6:be:18:2f:ab:ce:04: 64:06:d2:e2:be:f1:52:56:5f:5b:ab:55:53:eb:87:8b:d7:95: 26:02:b2:11:71:08:71:76:f5:9e:cb:4c:5f:c0:1f:0c:33:77: 12:7c:f0:06:74:f5:48:d6:24:4f:4f:f3:0c:da:db:f8:59:bf: 96:ab:69:9c:3a:7b:79:86:e0:cc:1b:88:58:32:bb:3c:8b:ff: 70:bd:68:50:89:b8:a6:3a:84:fd:16:d3:d7:ac:a6:fb:28:b3: 2d:10:a5:60 -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgIUAQ0Mn0MoWEi+fpmgTFa93S2q8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIwMjAxNDUzM1oXDTI3MDUwODAwNDUzM1owLzEtMCsGA1UEAxMk N2ExMmZjYmUtYjY5MS00YWMzLWIwZGItOGRiMGMyN2YzNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz5sm2kqs5VJocRZdo2lLA6fvtKR8PmqPOkN pc3MSxqP+8vxJvskTFANizlH/VOMLtReyE+zcTdwBDhV6OAQTVmtj2xmaWsxJI4q aGNdNInYQV3UpfcF1snPmIdp4GfVVFzIlhyCyW63543qt4wIJHZw/FG3XXa3flcl ZoZ6BkIubnZTtT096Xqjjf2HATEcAvmoHUVIxZ81HMSK+zcTV5Nrj1O9uDccDvZo 6zoilKIVco/zaMKtIOlwdKXKb3vs9YEJUzG2YE1kdtlNSquno8LQjAJhAEQ2Bq6W jS0GMtgsvsaccwUepvp2+8viuDB8uyWo/azPLafD5ZPHoDT+nQIDAQABo4IEXDCC BFgwHQYDVR0OBBYEFOZIZYm1IxwvdAQazvnM7egjkbUQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 YTEyZmNiZS1iNjkxLTRhYzMtYjBkYi04ZGIwYzI3ZjM1NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzdhMTJmY2JlLWI2OTEtNGFjMy1i MGRiLThkYjBjMjdmMzU1NC83YTEyZmNiZS1iNjkxLTRhYzMtYjBkYi04ZGIwYzI3 ZjM1NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAQ/9mADBAZAUsADBAWKVAADBAKi2EgDBAPMCLgD BAXPb4ADBALQRGQDBALQXBgwDQQCAAIwBwMFACYGLwAwIgYIKwYBBQUHAQgBAf8E EzARoA8wDQICWYICAmsbAgMGFr8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcoxs3Ox9cZ/RW9WCLAWYYRui /D6bp0wV8XrzYxgxVAjk6+sWQ6N32IaEivE/nAQ0vBBzZPk8wZdiigAbabqYHTY+ VR8IGFWc5f49dYH7d95icMDCMMHnOTjBw4WecP5H2/jEPVbOQ86V9AgXx/eFUNK9 ucY8DbV3PExjLYqqTbOAXq3/fiQKE/zNZhSDgWlZm28htTmZ46XV5WHmvhgvq84E ZAbS4r7xUlZfW6tVU+uHi9eVJgKyEXEIcXb1nstMX8AfDDN3EnzwBnT1SNYkT0/z DNrb+Fm/lqtpnDp7eYbgzBuIWDK7PIv/cL1oUIm4pjqE/RbT16ym+yizLRClYA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:40:14 2025 by rpki-client