$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.cer File: 9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.cer (raw, json) Hash identifier: LjlVzUXv2eWRIVnmkqS9xuCdIENFiPuv6YXkr35MSJo= Subject key identifier: D3:92:CC:31:43:E3:2B:30:BA:92:B6:88:FD:3B:51:49:A4:92:06:9F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848625E076D0EB4F69EFD8FDCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Dec 2024 01:45:33 +0000 Certificate not after: Mon 05 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 10261 IP: 2620:ba:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:62:5e:07:6d:0e:b4:f6:9e:fd:8f:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 31 01:45:33 2024 GMT Not After : Apr 5 00:45:33 2027 GMT Subject: CN=9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:aa:64:f6:5b:76:06:1c:7a:32:44:dc:56: 64:17:24:11:70:db:cd:73:71:22:43:b6:53:a7:c3: a0:b1:0b:98:94:4e:3a:aa:2d:6e:5d:05:1b:14:76: d4:15:c4:66:b3:79:37:60:ec:42:4a:2e:bc:8e:6e: 71:10:db:ed:1a:80:45:6d:71:b2:67:b3:d0:a6:ac: 26:88:9d:25:6d:0a:ff:65:fe:df:8a:57:91:c4:ea: d1:15:5d:c9:9b:c3:56:f6:44:47:aa:46:c6:87:48: 46:28:5b:58:34:9e:77:d0:b8:9c:cd:a5:fb:5b:a3: b2:e4:4f:d0:81:ee:41:cf:01:37:cf:5b:61:8e:70: 7a:74:ee:e6:dc:c7:9e:9f:ea:c0:be:ab:a1:f3:01: bd:de:58:51:a2:fc:e1:f2:a3:a2:5a:b2:83:ec:4c: d3:20:10:83:d3:35:ea:60:0b:e2:21:31:63:b4:f2: 01:fd:44:0c:61:7e:9d:bb:68:cf:5b:55:aa:51:7d: 12:e5:fd:33:c2:4f:be:6d:af:ea:27:80:25:3c:a1: ac:82:d8:38:87:46:fb:1e:27:60:67:66:21:66:f7: d7:94:db:5c:8f:6b:85:44:c1:ee:56:34:d2:1b:4c: 1e:3b:8f:00:3e:ec:8e:d3:9a:24:3b:83:6e:97:a9: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:92:CC:31:43:E3:2B:30:BA:92:B6:88:FD:3B:51:49:A4:92:06:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2620:ba:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10261 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:93:a5:8b:dd:b0:04:b8:66:ff:a1:32:d7:26:c6:7a:dc:84: 80:3e:1d:70:b1:cb:d2:ff:e6:cf:d0:dc:fe:9a:81:b2:3b:cd: a4:6d:6c:45:4f:26:33:85:bc:04:fc:f4:08:9c:bb:f6:b8:1b: b8:ec:2a:05:73:65:b9:a7:03:ad:0a:33:64:94:80:c2:ca:ef: 04:d6:49:85:79:75:56:00:f9:f2:24:f3:24:10:04:2f:dd:36: 40:01:c9:89:9d:65:20:d3:c4:0d:ee:b5:77:e6:44:b5:36:0c: e1:f5:0b:43:32:d0:71:9d:f3:88:5f:8c:1c:a3:11:72:0f:46: 72:04:18:a1:bb:52:bb:2a:de:e8:4f:a2:82:7d:51:e1:cf:b4: f0:72:24:6f:f3:9c:8b:d8:3f:1d:10:2e:f8:65:a0:61:7e:4d: b5:34:ca:63:ec:35:3c:63:81:28:c0:26:d4:09:8f:b4:0f:d9: 84:b5:7f:7a:cf:3b:14:10:71:72:ed:2f:93:53:73:0f:ff:54: 4b:5e:58:6e:c0:67:6a:4e:14:b5:fc:64:3b:81:44:bf:9a:8e: 2b:8f:3e:8d:b9:1f:db:b8:72:af:3a:9d:3a:00:99:0a:f8:68: 76:3b:eb:d6:7f:58:e3:56:40:c7:80:04:09:de:56:0e:c5:7b: a6:67:0f:ea -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEhiXgdtDrT2nv2P3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MTIzMTAxNDUzM1oXDTI3MDQwNTAwNDUzM1owLzEtMCsGA1UEAxMk OWU4YTY3OTgtMGIyZC00ZmYxLTk1NDctZjhiNmNjNmFmMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DSqZPZbdgYcejJE3FZkFyQRcNvNc3EiQ7ZT p8OgsQuYlE46qi1uXQUbFHbUFcRms3k3YOxCSi68jm5xENvtGoBFbXGyZ7PQpqwm iJ0lbQr/Zf7fileRxOrRFV3Jm8NW9kRHqkbGh0hGKFtYNJ530LiczaX7W6Oy5E/Q ge5BzwE3z1thjnB6dO7m3Meen+rAvquh8wG93lhRovzh8qOiWrKD7EzTIBCD0zXq YAviITFjtPIB/UQMYX6du2jPW1WqUX0S5f0zwk++ba/qJ4AlPKGsgtg4h0b7Hidg Z2YhZvfXlNtcj2uFRMHuVjTSG0weO48APuyO05okO4Nul6mFBQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFNOSzDFD4yswupK2iP07UUmkkgafMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 ZThhNjc5OC0wYjJkLTRmZjEtOTU0Ny1mOGI2Y2M2YWYzMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzllOGE2Nzk4LTBiMmQtNGZmMS05 NTQ3LWY4YjZjYzZhZjMwZS85ZThhNjc5OC0wYjJkLTRmZjEtOTU0Ny1mOGI2Y2M2 YWYzMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAC6YAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICKBUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAiJOli92wBLhm/6Ey1ybGetyEgD4dcLHL0v/mz9Dc/pqB sjvNpG1sRU8mM4W8BPz0CJy79rgbuOwqBXNluacDrQozZJSAwsrvBNZJhXl1VgD5 8iTzJBAEL902QAHJiZ1lINPEDe61d+ZEtTYM4fULQzLQcZ3ziF+MHKMRcg9GcgQY obtSuyre6E+ign1R4c+08HIkb/Oci9g/HRAu+GWgYX5NtTTKY+w1PGOBKMAm1AmP tA/ZhLV/es87FBBxcu0vk1NzD/9US15YbsBnak4UtfxkO4FEv5qOK48+jbkf27hy rzqdOgCZCvhodjvr1n9Y41ZAx4AECd5WDsV7pmcP6g== -----END CERTIFICATE-----Generated at Thu Apr 3 02:50:25 2025 by rpki-client