$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer File: 8c36215c-1577-42c1-a44f-f836bc4d03b3.cer (raw, json) Hash identifier: SQgDDzPQBrXaOSJNhWxbBJuRdk4fgXXZKS92aaje1KE= Subject key identifier: 4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584891D3A57F2C839C9056534380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Jan 2025 01:45:32 +0000 Certificate not after: Thu 22 Apr 2027 00:45:32 +0000 Subordinate resources: IP: 23.162.56.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:d3:a5:7f:2c:83:9c:90:56:53:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 17 01:45:32 2025 GMT Not After : Apr 22 00:45:32 2027 GMT Subject: CN=8c36215c-1577-42c1-a44f-f836bc4d03b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:ec:3c:08:a3:5e:54:d6:d5:7b:14:f3:e0: 63:9e:0d:be:07:fa:ab:55:47:15:30:eb:28:c1:d6: 4f:5f:ab:ce:2a:d4:14:a5:a9:01:82:a6:7d:a2:d6: 79:ff:8a:b2:99:d5:8c:a2:e2:75:a9:fa:0c:a5:38: 89:17:4b:3d:87:fd:bc:fa:86:85:2d:2c:c0:e9:2f: 24:74:dd:58:2d:5e:19:de:7a:54:f5:01:fa:a2:88: 9a:47:44:d2:0b:70:59:66:99:13:ba:56:6f:2f:c8: 46:11:73:90:4d:fe:6a:a7:00:4d:27:38:69:af:99: 7c:ce:8f:8c:0d:75:84:89:66:5b:d2:34:34:47:32: 24:0c:4f:c1:d8:9b:6d:f4:03:92:6d:9d:e6:3c:74: d0:22:4a:7d:18:bd:07:6c:35:0b:fa:7e:60:4f:47: be:6e:f6:85:4c:81:97:b9:44:c9:4e:36:df:f3:71: c6:a4:df:6c:f4:c8:1e:e4:1f:33:a6:9f:c9:34:91: 30:da:30:57:8e:d6:ca:9c:e6:48:b0:3a:7d:ed:db: ce:bc:50:8d:07:92:f0:f3:d6:14:27:2d:d7:7b:24: 3e:ae:be:32:42:4f:e1:95:ee:48:fc:a4:34:35:a0: 7b:8a:82:55:b0:da:2e:df:f9:d4:b1:1b:cf:f1:bd: df:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.162.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2e:f3:d2:5e:b1:82:16:03:26:d3:35:6d:36:a3:d6:0f:95: d3:c7:50:89:3e:94:00:47:d5:78:fb:cf:ba:e3:2c:0b:fa:5a: d7:cd:67:24:c3:3b:c8:da:3a:f9:0d:31:e4:f7:7a:34:98:b7: 22:1c:4d:06:b5:6d:e7:c6:34:9b:f9:37:77:04:33:7a:13:75: 8d:80:ba:c9:47:fa:ed:9f:a6:f8:86:2f:c6:66:c5:68:f0:95: 14:19:5b:36:09:fd:fd:69:74:54:8a:f1:6f:d6:58:3a:fa:97: 6f:5f:1e:67:0e:e3:7e:74:5e:f7:a0:39:d2:e7:0f:d8:26:70: c3:07:99:ce:9a:59:2b:03:6a:c5:bc:46:ae:d7:86:f6:d5:94: 60:0a:f6:b2:c4:f9:7d:69:06:8a:cd:33:01:c8:d4:87:01:ce: e9:b0:83:57:8c:2a:3a:98:58:92:97:45:b0:2b:94:a7:2d:fc: a1:54:f0:1b:3f:6a:5c:03:ce:7f:8c:89:22:9e:3e:8f:26:e7: 1b:30:94:2b:f7:64:d0:36:d0:32:63:34:46:e3:0b:12:16:23: 4e:4f:b0:4a:8b:f3:52:22:e2:02:84:94:18:b6:14:43:1e:ef: c0:9e:e3:9b:b2:6e:5d:c4:47:2c:58:45:21:28:1e:e2:e5:8f: 5c:0d:db:c4 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEiR06V/LIOckFZTQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExNzAxNDUzMloXDTI3MDQyMjAwNDUzMlowLzEtMCsGA1UEAxMk OGMzNjIxNWMtMTU3Ny00MmMxLWE0NGYtZjgzNmJjNGQwM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQrsPAijXlTW1XsU8+Bjng2+B/qrVUcVMOso wdZPX6vOKtQUpakBgqZ9otZ5/4qymdWMouJ1qfoMpTiJF0s9h/28+oaFLSzA6S8k dN1YLV4Z3npU9QH6ooiaR0TSC3BZZpkTulZvL8hGEXOQTf5qpwBNJzhpr5l8zo+M DXWEiWZb0jQ0RzIkDE/B2Jtt9AOSbZ3mPHTQIkp9GL0HbDUL+n5gT0e+bvaFTIGX uUTJTjbf83HGpN9s9Mge5B8zpp/JNJEw2jBXjtbKnOZIsDp97dvOvFCNB5Lw89YU Jy3XeyQ+rr4yQk/hle5I/KQ0NaB7ioJVsNou3/nUsRvP8b3fmQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEwreeSDjT98E8YiIHGqcYmXrX/AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 YzM2MjE1Yy0xNTc3LTQyYzEtYTQ0Zi1mODM2YmM0ZDAzYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhjMzYyMTVjLTE1NzctNDJjMS1h NDRmLWY4MzZiYzRkMDNiMy84YzM2MjE1Yy0xNTc3LTQyYzEtYTQ0Zi1mODM2YmM0 ZDAzYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXojgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFi7z0l6xghYDJtM1bTaj 1g+V08dQiT6UAEfVePvPuuMsC/pa181nJMM7yNo6+Q0x5Pd6NJi3IhxNBrVt58Y0 m/k3dwQzehN1jYC6yUf67Z+m+IYvxmbFaPCVFBlbNgn9/Wl0VIrxb9ZYOvqXb18e Zw7jfnRe96A50ucP2CZwwweZzppZKwNqxbxGrteG9tWUYAr2ssT5fWkGis0zAcjU hwHO6bCDV4wqOphYkpdFsCuUpy38oVTwGz9qXAPOf4yJIp4+jybnGzCUK/dk0DbQ MmM0RuMLEhYjTk+wSovzUiLiAoSUGLYUQx7vwJ7jm7JuXcRHLFhFISge4uWPXA3b xA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:39:25 2025 by rpki-client