$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0.cer File: 93c28a85-3c1d-4c8d-acda-3352597574a0.cer (raw, json) Hash identifier: wIXEpAWWLC2WYOl3QOX5JcwHUvtkUTOA56aU15L5gZA= Subject key identifier: D8:68:1D:93:17:DF:0D:69:D2:67:57:83:43:FF:51:AF:EA:71:C8:D4 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584867F364D3BF1499CE8CAC8700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/93c28a85-3c1d-4c8d-acda-3352597574a0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jan 2025 01:45:33 +0000 Certificate not after: Wed 07 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 5786 IP: 136.145.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:f3:64:d3:bf:14:99:ce:8c:ac:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 2 01:45:33 2025 GMT Not After : Apr 7 00:45:33 2027 GMT Subject: CN=93c28a85-3c1d-4c8d-acda-3352597574a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:85:d8:e3:09:95:17:19:3f:97:e0:be:3d: 29:cb:7b:49:e9:b4:dd:ff:fb:43:5b:8e:c7:e7:15: 83:c3:64:2e:b7:a0:98:51:5b:d7:50:6d:20:90:28: 28:a0:cc:fe:42:15:bd:93:fd:4e:ab:a7:34:47:6d: e3:78:09:41:c5:8e:a4:52:44:2a:ca:3e:3e:98:aa: 75:e4:65:ff:10:34:7b:1c:e5:e9:03:e7:77:5a:e9: 13:9b:17:f9:43:b7:57:0c:e1:37:e8:0a:eb:14:1a: 6f:72:6e:ee:9c:42:55:36:05:ae:b4:9d:02:79:35: b3:ae:43:b1:2d:03:db:41:5e:88:8c:a6:fd:4d:a8: 6c:62:30:90:cf:cb:05:ce:07:18:9a:fb:41:fa:71: 38:36:c7:c7:cc:ef:49:63:6c:e6:d7:ad:f6:83:8f: c7:cc:b9:2e:a5:67:40:fa:21:00:8f:1a:78:62:58: 3a:bc:a8:57:0d:9e:0c:a4:52:07:7a:c6:06:50:13: d7:a7:4e:b4:a5:a9:cf:41:bd:9e:4d:eb:b1:8d:d1: 72:2a:54:14:3e:34:17:87:f4:53:80:b0:b1:5c:99: 17:90:37:ef:b5:c2:ba:38:4f:6d:54:3f:8d:d1:37: 07:78:9c:65:27:de:43:8c:2e:55:66:9f:03:01:16: 1f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:1D:93:17:DF:0D:69:D2:67:57:83:43:FF:51:AF:EA:71:C8:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/93c28a85-3c1d-4c8d-acda-3352597574a0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 136.145.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5786 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:28:34:1c:31:40:94:db:8a:9e:10:ee:ee:45:87:c9:be:31: a3:22:d9:0e:4c:81:e2:cb:ec:9a:d4:d6:56:bc:75:cc:7e:cf: a4:ba:d6:3a:27:f7:a3:f9:b4:ff:c1:ec:63:c6:f0:26:dd:2a: c8:96:46:3c:47:0b:87:d6:60:5d:8d:fb:9a:fb:05:37:ee:af: 9c:25:61:ee:e0:9c:c1:da:d5:aa:8c:5d:f0:de:7b:ed:0f:44: 3a:2c:80:6b:1c:8f:9b:02:8e:f6:ea:0d:4b:b0:9c:80:da:1c: 59:51:14:85:3f:6a:fc:fe:18:9b:f6:94:47:01:5b:37:1a:e9: 26:dc:94:61:3c:9a:cc:a1:4a:27:99:27:fa:41:22:1c:23:34: a2:e6:4e:8a:43:07:f2:5e:cb:1a:5b:f9:fc:25:bb:1b:1a:f3: 7d:b5:01:6a:8b:3b:fa:e8:64:40:13:c5:4f:e7:07:e6:ec:78: 27:46:6a:92:94:9b:73:c8:55:26:53:c2:86:b8:44:ed:f2:21: 47:ba:c6:f4:23:4e:ee:26:b9:35:14:74:60:92:33:b6:df:3e: 55:be:63:3c:a2:42:cb:fc:82:53:8c:31:c4:58:48:ad:6c:49: a5:74:c6:4e:73:cd:f4:0b:eb:23:f1:a3:50:7c:4f:c9:fd:05: a1:44:fa:5f -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEhn82TTvxSZzoyshwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEwMjAxNDUzM1oXDTI3MDQwNzAwNDUzM1owLzEtMCsGA1UEAxMk OTNjMjhhODUtM2MxZC00YzhkLWFjZGEtMzM1MjU5NzU3NGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDyF2OMJlRcZP5fgvj0py3tJ6bTd//tDW47H 5xWDw2Qut6CYUVvXUG0gkCgooMz+QhW9k/1Oq6c0R23jeAlBxY6kUkQqyj4+mKp1 5GX/EDR7HOXpA+d3WukTmxf5Q7dXDOE36ArrFBpvcm7unEJVNgWutJ0CeTWzrkOx LQPbQV6IjKb9TahsYjCQz8sFzgcYmvtB+nE4NsfHzO9JY2zm1632g4/HzLkupWdA +iEAjxp4Ylg6vKhXDZ4MpFIHesYGUBPXp060panPQb2eTeuxjdFyKlQUPjQXh/RT gLCxXJkXkDfvtcK6OE9tVD+N0TcHeJxlJ95DjC5VZp8DARYffQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFNhoHZMX3w1p0mdXg0P/Ua/qccjUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 M2MyOGE4NS0zYzFkLTRjOGQtYWNkYS0zMzUyNTk3NTc0YTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzkzYzI4YTg1LTNjMWQtNGM4ZC1h Y2RhLTMzNTI1OTc1NzRhMC85M2MyOGE4NS0zYzFkLTRjOGQtYWNkYS0zMzUyNTk3 NTc0YTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCIkTAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIW mjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA7KDQcMUCU24qeEO7uRYfJvjGjItkOTIHiy+ya1NZWvHXMfs+k utY6J/ej+bT/wexjxvAm3SrIlkY8RwuH1mBdjfua+wU37q+cJWHu4JzB2tWqjF3w 3nvtD0Q6LIBrHI+bAo726g1LsJyA2hxZURSFP2r8/hib9pRHAVs3Gukm3JRhPJrM oUonmSf6QSIcIzSi5k6KQwfyXssaW/n8JbsbGvN9tQFqizv66GRAE8VP5wfm7Hgn RmqSlJtzyFUmU8KGuETt8iFHusb0I07uJrk1FHRgkjO23z5VvmM8okLL/IJTjDHE WEitbEmldMZOc830C+sj8aNQfE/J/QWhRPpf -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:39 2025 by rpki-client