$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer File: 8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer (raw, json) Hash identifier: bxpVMlyHViQkcH7ldd3V95Xu4ozIFQtTc1k9rulCap8= Subject key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858490449B1DA84B9B760DEAFA680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Feb 2025 01:45:32 +0000 Certificate not after: Wed 02 Jun 2027 00:45:32 +0000 Subordinate resources: AS: 11653 IP: 69.89.32.0/20 IP: 2602:faca::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:04:49:b1:da:84:b9:b7:60:de:af:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 27 01:45:32 2025 GMT Not After : Jun 2 00:45:32 2027 GMT Subject: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:a1:18:dd:4f:16:62:09:e9:b2:30:cf:74: 65:66:7e:25:bc:e7:ae:f7:68:94:93:95:92:9e:e1: db:0f:5f:a4:24:a9:56:cf:45:f5:80:e6:86:5b:61: 94:af:19:48:31:cd:4e:a1:8a:3a:a2:d6:a7:a0:8a: 7a:c2:25:36:f6:c7:41:ed:51:8a:1e:3a:e4:23:18: 88:cb:2c:c1:33:ac:f3:55:a7:1d:7a:a3:f3:d5:23: dc:60:c0:e3:91:7f:9c:16:10:64:ce:94:37:e1:1f: 7b:98:4d:0d:bf:84:44:68:f4:10:e9:74:ef:6f:da: c1:ec:39:22:9a:b0:27:5b:f4:19:d5:4e:23:ac:64: b8:80:db:7b:c6:04:38:70:6d:f7:c9:6c:1d:0c:61: db:28:da:26:c7:1f:5b:53:00:eb:71:a6:e7:b6:cd: 84:ad:60:a0:95:72:a2:3a:69:c1:ff:a6:7e:01:f5: 66:20:73:ac:69:2c:62:bd:83:50:e8:92:3c:75:7e: f2:37:78:81:16:79:74:a7:38:6c:b4:f6:f4:a5:3d: 29:e5:30:af:2f:87:76:ec:93:38:01:23:8e:08:d4: ca:97:ac:03:67:4a:39:ba:e8:26:9d:d0:9b:54:a7: b3:0e:dc:c5:9b:3e:01:0e:8c:83:71:ed:b4:4a:d3: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 69.89.32.0/20 IPv6: 2602:faca::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11653 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:98:6f:0a:2b:bd:d1:1d:8d:37:5d:93:94:4c:ca:4f:cb:bb: b8:1b:90:dd:a0:bd:4d:1d:89:be:07:4b:e5:2a:ed:80:75:cd: ec:87:b3:69:09:ee:d3:01:82:e9:39:41:67:d3:d9:ad:23:15: 3a:1e:de:cc:37:7d:e2:a9:14:62:aa:bc:21:d0:e6:6b:1c:a9: a0:31:f9:25:cd:0c:c7:9b:5b:46:1c:21:85:f3:7b:e1:02:42: d6:28:fc:d7:34:94:2a:a4:45:61:97:94:f6:a7:df:aa:f2:48: 7f:de:19:a8:0a:63:ff:1e:bb:51:01:b6:94:37:fd:5f:50:70: b4:53:80:f4:92:ff:ae:b8:f0:01:e8:68:be:a3:88:4a:86:c7: 14:86:a4:ba:f6:b6:94:94:af:7c:cd:69:07:29:8e:2b:19:8e: 25:d2:24:7a:b6:11:f0:54:14:ab:4c:df:35:68:af:03:d9:2e: ef:07:a5:37:da:c9:55:e6:38:11:98:80:ea:34:86:8b:23:d4: 12:01:dc:5e:5b:7f:dc:9b:14:c6:8b:ac:92:48:62:3f:a2:04: 07:d8:8f:0a:e8:e6:08:9c:63:f1:1b:65:45:32:f2:1b:01:27: 42:f1:32:9c:35:cf:8c:06:3f:c2:f1:5b:74:10:ad:39:b2:71: c5:aa:d9:04 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkESbHahLm3YN6vpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIyNzAxNDUzMloXDTI3MDYwMjAwNDUzMlowLzEtMCsGA1UEAxMk OGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCGhGN1PFmIJ6bIwz3RlZn4lvOeu92iUk5WS nuHbD1+kJKlWz0X1gOaGW2GUrxlIMc1OoYo6otanoIp6wiU29sdB7VGKHjrkIxiI yyzBM6zzVacdeqPz1SPcYMDjkX+cFhBkzpQ34R97mE0Nv4REaPQQ6XTvb9rB7Dki mrAnW/QZ1U4jrGS4gNt7xgQ4cG33yWwdDGHbKNomxx9bUwDrcabnts2ErWCglXKi OmnB/6Z+AfVmIHOsaSxivYNQ6JI8dX7yN3iBFnl0pzhstPb0pT0p5TCvL4d27JM4 ASOOCNTKl6wDZ0o5uugmndCbVKezDtzFmz4BDoyDce20StOtawIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFH+UX9x9M3Ep1ER+HCdGb1hq1OInMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhlNDMzYzFmLWEwNzItNGRmZC04 MDk2LWM2Yzg2MzRhNDlmOC84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0 YTQ5ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBARFWSAwDgQCAAIwCAMGBCYC+soAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAi2FMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAASYbworvdEdjTddk5RMyk/Lu7gb kN2gvU0dib4HS+Uq7YB1zeyHs2kJ7tMBguk5QWfT2a0jFToe3sw3feKpFGKqvCHQ 5mscqaAx+SXNDMebW0YcIYXze+ECQtYo/Nc0lCqkRWGXlPan36rySH/eGagKY/8e u1EBtpQ3/V9QcLRTgPSS/6648AHoaL6jiEqGxxSGpLr2tpSUr3zNaQcpjisZjiXS JHq2EfBUFKtM3zVorwPZLu8HpTfayVXmOBGYgOo0hosj1BIB3F5bf9ybFMaLrJJI Yj+iBAfYjwro5gicY/EbZUUy8hsBJ0LxMpw1z4wGP8LxW3QQrTmyccWq2QQ= -----END CERTIFICATE-----Generated at Thu Apr 3 02:43:32 2025 by rpki-client