$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804.cer File: 918aa42a-20cc-4d33-9cbb-056cffa16804.cer (raw, json) Hash identifier: gaE7pZ2vVO6SqY/JJ7A5NFvLsPPssg27vefj5BxpQiA= Subject key identifier: 22:6D:49:7B:7B:A0:F3:2A:27:98:4E:09:9C:38:F6:F5:30:E7:45:EF Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848976906B50931AF10086CF240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/918aa42a-20cc-4d33-9cbb-056cffa16804.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Jan 2025 01:45:34 +0000 Certificate not after: Sat 24 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 32151 IP: 192.245.168.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:69:06:b5:09:31:af:10:08:6c:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 19 01:45:34 2025 GMT Not After : Apr 24 00:45:34 2027 GMT Subject: CN=918aa42a-20cc-4d33-9cbb-056cffa16804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:67:0c:e1:69:ce:a3:f1:5a:0f:5a:aa:be:ef: b5:16:90:13:95:6a:28:36:6c:0a:73:06:d2:a0:e0: c9:ce:48:c2:07:07:96:d2:e6:1e:12:d3:07:ec:07: f6:94:10:26:fc:3a:88:e0:a1:bd:30:1c:fe:22:62: 6a:00:71:d7:ef:15:75:33:d5:e5:71:ba:a5:38:73: d0:d9:96:07:17:33:f3:19:07:38:a1:f1:76:f1:29: fc:d5:47:31:02:1a:4a:7f:50:77:9b:6b:f4:06:25: 26:e3:51:a0:2d:4e:9d:9f:bc:bc:6b:40:69:e7:22: e6:34:43:9f:82:ec:28:1c:e4:b8:78:0b:3c:3d:de: b0:b7:51:c8:37:dd:0f:77:77:ed:c6:1b:13:5c:1d: 50:e3:66:ed:4b:87:3e:bc:f1:27:03:ab:60:cd:cf: e0:96:32:a2:be:31:93:8a:39:fa:45:0d:cb:24:07: b8:54:84:52:9b:4e:f0:9c:de:54:52:b0:00:4d:76: d7:d1:13:01:f8:82:13:62:91:54:28:6f:10:a0:19: 5a:51:31:c0:bf:95:a0:1d:8e:fb:fb:c2:e1:52:d9: 6e:16:bf:e6:95:ef:a0:66:f4:5b:a7:f2:ac:53:cd: 26:e2:16:2a:91:ef:d9:68:e4:df:d3:ed:fb:dd:47: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6D:49:7B:7B:A0:F3:2A:27:98:4E:09:9C:38:F6:F5:30:E7:45:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/918aa42a-20cc-4d33-9cbb-056cffa16804.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.245.168.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32151 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5f:23:fc:6b:f2:11:de:e8:e3:21:cb:ad:f0:5b:75:7d:8a: d8:23:88:4c:4d:ec:1c:6e:25:d1:0d:a8:32:5d:2f:6b:f0:60: 95:4e:7b:4e:8a:aa:41:45:35:b5:d0:42:b4:43:35:a5:a8:41: 31:85:87:78:f4:fc:6c:81:66:ec:a1:f5:de:90:d7:27:74:fd: a0:cf:58:41:ab:e3:bd:81:fe:c0:0e:d2:da:f3:e0:02:74:69: 33:64:27:3b:0f:e1:eb:87:86:17:a1:89:d8:48:dd:d1:08:96: 71:9e:af:42:b0:15:68:13:d8:39:c8:d8:78:ae:62:74:92:02: 5c:62:76:d0:74:33:cc:f1:1d:34:9c:bf:44:d5:a8:8e:9c:16: 91:0d:6c:8f:4b:69:31:c2:6e:2e:6e:b7:56:cb:0c:7f:73:5e: d0:dd:1e:48:52:ff:7e:c3:8a:0f:46:43:69:81:17:5e:17:63: 55:ff:fd:e7:23:ca:8f:a8:ff:a1:b0:38:0c:b8:a9:86:a6:07: 31:0c:07:b9:4b:c1:5f:25:04:a0:00:7b:ab:36:d4:04:6f:4d: 10:2b:8a:c0:38:59:49:85:ca:7b:f3:55:8b:ad:31:e9:77:e9: 9d:28:b0:2f:c8:48:c0:51:9c:6b:52:41:2d:ba:cf:f2:ed:8a: 33:05:25:21 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEiXaQa1CTGvEAhs8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExOTAxNDUzNFoXDTI3MDQyNDAwNDUzNFowLzEtMCsGA1UEAxMk OTE4YWE0MmEtMjBjYy00ZDMzLTljYmItMDU2Y2ZmYTE2ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mcM4WnOo/FaD1qqvu+1FpATlWooNmwKcwbS oODJzkjCBweW0uYeEtMH7Af2lBAm/DqI4KG9MBz+ImJqAHHX7xV1M9XlcbqlOHPQ 2ZYHFzPzGQc4ofF28Sn81UcxAhpKf1B3m2v0BiUm41GgLU6dn7y8a0Bp5yLmNEOf guwoHOS4eAs8Pd6wt1HIN90Pd3ftxhsTXB1Q42btS4c+vPEnA6tgzc/gljKivjGT ijn6RQ3LJAe4VIRSm07wnN5UUrAATXbX0RMB+IITYpFUKG8QoBlaUTHAv5WgHY77 +8LhUtluFr/mle+gZvRbp/KsU80m4hYqke/ZaOTf0+373Ue5VQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFCJtSXt7oPMqJ5hOCZw49vUw50XvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 MThhYTQyYS0yMGNjLTRkMzMtOWNiYi0wNTZjZmZhMTY4MDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzkxOGFhNDJhLTIwY2MtNGQzMy05 Y2JiLTA1NmNmZmExNjgwNC85MThhYTQyYS0yMGNjLTRkMzMtOWNiYi0wNTZjZmZh MTY4MDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA9agwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fZcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAA18j/GvyEd7o4yHLrfBbdX2K2COITE3sHG4l0Q2oMl0va/Bg lU57ToqqQUU1tdBCtEM1pahBMYWHePT8bIFm7KH13pDXJ3T9oM9YQavjvYH+wA7S 2vPgAnRpM2QnOw/h64eGF6GJ2Ejd0QiWcZ6vQrAVaBPYOcjYeK5idJICXGJ20HQz zPEdNJy/RNWojpwWkQ1sj0tpMcJuLm63VssMf3Ne0N0eSFL/fsOKD0ZDaYEXXhdj Vf/95yPKj6j/obA4DLiphqYHMQwHuUvBXyUEoAB7qzbUBG9NECuKwDhZSYXKe/NV i60x6XfpnSiwL8hIwFGca1JBLbrP8u2KMwUlIQ== -----END CERTIFICATE-----Generated at Thu Apr 3 02:57:37 2025 by rpki-client