$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer File: a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer (raw, json) Hash identifier: GDHjE6ZqSzKaf4cT06ELXYiY0IH+Hw6qVKcY/OKRofg= Subject key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858490F746F0A38E37A44A6F03E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Mar 2025 01:45:33 +0000 Certificate not after: Sun 06 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 398564 AS: 398655 AS: 398774 IP: 204.108.174.0/23 IP: 204.108.188.0/23 IP: 204.235.172.0/23 IP: 209.250.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:74:6f:0a:38:e3:7a:44:a6:f0:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 3 01:45:33 2025 GMT Not After : Jun 6 00:45:33 2027 GMT Subject: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:81:14:88:fa:a8:69:ea:80:0d:f5:82:e0: 1d:57:6e:71:e4:2b:a5:95:02:2f:27:33:65:82:1c: 54:9b:f9:90:a3:04:b3:41:7d:3f:82:17:3d:39:fa: 8f:63:90:11:f7:76:6a:a8:28:98:ac:a0:50:ae:46: 47:0f:07:c9:db:e3:95:fc:0d:db:e8:a3:9d:f4:9e: 8c:85:30:23:9d:e2:7c:2e:9f:a3:c9:77:96:17:ab: 16:c6:a7:f1:cb:fe:2a:8a:74:b6:ed:f2:73:7e:53: 7d:cc:d0:29:33:15:94:74:92:96:5f:34:f4:34:9c: 07:95:06:d2:14:fc:d5:38:bd:bb:db:6f:e6:c0:8d: 2f:92:0d:03:83:fb:3d:f1:27:98:6c:7e:18:6c:d0: 2c:4b:d5:83:bf:27:7d:b4:42:19:44:83:0f:fe:d7: cd:c8:f2:e7:e6:01:d3:51:1c:94:1d:de:12:e6:82: 31:d3:33:3e:5a:9a:95:40:10:aa:cd:1e:33:1d:10: 42:65:2b:a7:f2:9c:41:a8:5e:0c:ab:75:52:7b:69: f5:72:9b:c9:af:47:37:06:72:90:0a:27:44:17:67: 6d:93:86:63:75:cd:c4:96:01:ff:7b:03:9e:7d:17: f4:f1:e0:66:aa:7c:05:6b:e8:db:6e:0b:2f:c5:af: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.108.174.0/23 204.108.188.0/23 204.235.172.0/23 209.250.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398564 398655 398774 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:88:d3:94:b4:53:3a:ea:51:fb:63:02:c6:c8:5a:15:f2:36: 2c:1f:c8:d1:b3:ae:e8:88:b1:fa:cb:7a:28:8d:cc:45:b1:6e: f5:22:d5:ab:fd:30:d1:e5:cf:eb:99:24:3d:db:e2:4a:99:d1: 36:8d:84:26:07:15:e2:6b:e3:ec:5e:c4:ec:5f:fb:d2:5f:a1: 03:84:e3:bb:cc:ff:24:2c:08:83:02:1f:d6:63:32:2e:cf:a5: db:e4:ab:32:7c:8f:9f:ee:f5:66:ef:17:9d:7a:13:42:70:05: fc:d8:64:ce:de:96:aa:d8:56:9f:7b:1e:bd:1b:56:01:9a:b9: 2c:e9:ba:93:3f:79:d9:be:50:1e:43:6e:f6:86:8b:5d:27:14: 30:03:9a:d4:85:27:ef:64:e4:ed:5f:b3:fe:3a:a4:d1:63:f3: fb:da:3b:03:84:22:80:df:7c:ad:c0:ec:ba:a9:7e:44:98:c1: 31:89:c9:9e:a7:f3:a2:1d:4d:10:97:e1:2d:d9:79:b8:11:15: 84:99:c3:bd:61:67:f2:b6:8e:52:c9:98:3f:02:4e:b8:ca:38: 39:7f:71:13:f2:ee:04:e0:24:49:33:82:0b:dc:c4:52:ce:e0: 28:f8:80:16:bc:75:b1:ab:44:f4:38:cd:e7:af:d8:a6:16:c4: f5:de:b9:96 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEkPdG8KOON6RKbwPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwMzAxNDUzM1oXDTI3MDYwNjAwNDUzM1owLzEtMCsGA1UEAxMk YTFmZmMxOTItZDRhOC00MTg5LWJhYjItY2U3YTM3ZWE2ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFSBFIj6qGnqgA31guAdV25x5CullQIvJzNl ghxUm/mQowSzQX0/ghc9OfqPY5AR93ZqqCiYrKBQrkZHDwfJ2+OV/A3b6KOd9J6M hTAjneJ8Lp+jyXeWF6sWxqfxy/4qinS27fJzflN9zNApMxWUdJKWXzT0NJwHlQbS FPzVOL2722/mwI0vkg0Dg/s98SeYbH4YbNAsS9WDvyd9tEIZRIMP/tfNyPLn5gHT URyUHd4S5oIx0zM+WpqVQBCqzR4zHRBCZSun8pxBqF4Mq3VSe2n1cpvJr0c3BnKQ CidEF2dtk4Zjdc3ElgH/ewOefRf08eBmqnwFa+jbbgsvxa+NXwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFGi7rGaoB4uF5u2cAT3CNb3Sp6vzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h MWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdlYTY4M2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ExZmZjMTkyLWQ0YTgtNDE4OS1i YWIyLWNlN2EzN2VhNjgzYy9hMWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdl YTY4M2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAHMbK4DBAHMbLwDBAHM66wDBAXR+sAwJAYIKwYB BQUHAQgBAf8EFTAToBEwDwIDBhTkAgMGFT8CAwYVtjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuiNOUtFM6 6lH7YwLGyFoV8jYsH8jRs67oiLH6y3oojcxFsW71ItWr/TDR5c/rmSQ92+JKmdE2 jYQmBxXia+PsXsTsX/vSX6EDhOO7zP8kLAiDAh/WYzIuz6Xb5KsyfI+f7vVm7xed ehNCcAX82GTO3paq2Fafex69G1YBmrks6bqTP3nZvlAeQ272hotdJxQwA5rUhSfv ZOTtX7P+OqTRY/P72jsDhCKA33ytwOy6qX5EmMExicmep/OiHU0Ql+Et2Xm4ERWE mcO9YWfyto5SyZg/Ak64yjg5f3ET8u4E4CRJM4IL3MRSzuAo+IAWvHWxq0T0OM3n r9imFsT13rmW -----END CERTIFICATE-----Generated at Thu Apr 3 02:49:42 2025 by rpki-client