$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer File: a31515c0-c04f-41e6-958d-172bcd0e21de.cer (raw, json) Hash identifier: RNSq0zNw+p9ntCeE8Awv1/sEeTheJkfmzGJZtpvoL3E= Subject key identifier: 34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848F0BEEAC10ED6EA8165F5CC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Feb 2025 01:45:34 +0000 Certificate not after: Wed 26 May 2027 00:45:34 +0000 Subordinate resources: IP: 131.104.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:be:ea:c1:0e:d6:ea:81:65:f5:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 20 01:45:34 2025 GMT Not After : May 26 00:45:34 2027 GMT Subject: CN=a31515c0-c04f-41e6-958d-172bcd0e21de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:5c:cc:d3:23:97:80:77:25:02:8b:6b:c6: c4:ed:cc:66:da:eb:f9:33:98:2a:16:95:f8:8e:64: 8c:11:7e:c2:4d:c3:ef:f1:fd:b6:de:e2:aa:20:fe: 3a:92:e3:a1:0a:39:f4:f4:c5:31:fc:4a:af:bf:56: 01:11:8c:80:31:9d:75:69:45:b3:61:f8:e1:ca:45: 46:d2:de:cd:38:78:48:1c:eb:08:db:25:80:6e:83: 3c:c5:ca:1f:f1:5b:10:1b:6c:2a:2a:21:9b:05:ef: 03:95:b7:0b:69:c8:a7:91:86:6b:db:06:35:bb:bc: 45:80:01:c7:d7:c9:be:04:26:3d:6e:2a:ee:99:d0: ee:c3:55:46:b0:9e:95:86:a4:19:64:a5:d5:91:60: bd:a3:95:d5:b8:df:a7:a5:f2:17:e9:ed:9b:80:5e: 9f:4b:14:73:e7:0c:5e:28:00:75:23:ba:94:2f:30: 4d:c0:ff:4d:0b:96:56:c6:5c:ec:df:5e:c5:71:a8: 87:d4:63:1d:da:8e:88:21:cb:8d:3c:a4:d9:98:10: 5d:b7:75:0e:93:62:bf:65:b8:4e:f4:68:99:09:67: 1d:d8:64:d0:a2:67:6a:26:8c:5a:82:2f:a6:7f:f5: 7a:cc:3f:24:6e:4b:6e:ed:df:23:6b:48:ec:8c:47: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 131.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:50:8a:eb:28:88:f9:0b:75:58:68:8c:f4:f0:5a:23:61:d5: 03:80:0a:fe:dc:2c:64:8b:26:eb:5c:01:ac:51:a3:15:9e:a6: 79:44:b3:82:f0:e6:1c:84:61:d2:0e:39:a1:8d:91:39:3f:92: 92:ea:eb:b3:ab:9a:1c:2c:ed:9c:98:b7:24:3e:36:7b:84:cb: c6:c7:dc:ba:02:14:ee:d3:d9:6a:1a:00:22:21:8c:4c:87:15: 19:2f:da:0f:47:82:0f:e2:04:a5:b6:ea:fd:19:be:70:2b:10: d9:70:4f:73:12:b0:ef:83:b2:8c:29:b2:59:2c:2b:3d:cb:49: c2:52:29:8f:39:43:46:16:a1:6c:92:50:d2:e3:4e:a0:16:4f: 3c:9a:42:e4:46:9d:17:e1:02:0f:63:8e:b2:b3:0f:21:23:b4: 01:c8:bc:45:18:1d:12:c7:52:96:88:ba:bf:08:74:81:81:93: 5a:eb:fb:d4:65:40:de:bc:2d:ec:58:92:de:c4:bc:32:10:9c: ef:d2:c5:c7:6a:5b:0b:4d:40:f0:2b:fa:fc:6d:35:3b:51:ba: a8:60:21:1b:25:b6:c9:1d:ea:6b:e9:b9:23:b8:3b:0d:dd:c5: 7f:4a:48:fb:55:f5:fb:36:38:2b:6e:3f:58:68:e4:c2:19:e8: fa:04:0b:5e -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEjwvurBDtbqgWX1zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIyMDAxNDUzNFoXDTI3MDUyNjAwNDUzNFowLzEtMCsGA1UEAxMk YTMxNTE1YzAtYzA0Zi00MWU2LTk1OGQtMTcyYmNkMGUyMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1czNMjl4B3JQKLa8bE7cxm2uv5M5gqFpX4 jmSMEX7CTcPv8f223uKqIP46kuOhCjn09MUx/Eqvv1YBEYyAMZ11aUWzYfjhykVG 0t7NOHhIHOsI2yWAboM8xcof8VsQG2wqKiGbBe8DlbcLacinkYZr2wY1u7xFgAHH 18m+BCY9birumdDuw1VGsJ6VhqQZZKXVkWC9o5XVuN+npfIX6e2bgF6fSxRz5wxe KAB1I7qULzBNwP9NC5ZWxlzs317FcaiH1GMd2o6IIcuNPKTZmBBdt3UOk2K/ZbhO 9GiZCWcd2GTQomdqJoxagi+mf/V6zD8kbktu7d8ja0jsjEeZswIDAQABo4ID/jCC A/owHQYDVR0OBBYEFDQQBdtRQqpLt+lUVo3SgoIVXPCVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h MzE1MTVjMC1jMDRmLTQxZTYtOTU4ZC0xNzJiY2QwZTIxZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2EzMTUxNWMwLWMwNGYtNDFlNi05 NThkLTE3MmJjZDBlMjFkZS9hMzE1MTVjMC1jMDRmLTQxZTYtOTU4ZC0xNzJiY2Qw ZTIxZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCDaDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8UIrrKIj5C3VYaIz08Foj YdUDgAr+3CxkiybrXAGsUaMVnqZ5RLOC8OYchGHSDjmhjZE5P5KS6uuzq5ocLO2c mLckPjZ7hMvGx9y6AhTu09lqGgAiIYxMhxUZL9oPR4IP4gSltur9Gb5wKxDZcE9z ErDvg7KMKbJZLCs9y0nCUimPOUNGFqFsklDS406gFk88mkLkRp0X4QIPY46ysw8h I7QByLxFGB0Sx1KWiLq/CHSBgZNa6/vUZUDevC3sWJLexLwyEJzv0sXHalsLTUDw K/r8bTU7UbqoYCEbJbbJHepr6bkjuDsN3cV/Skj7VfX7Njgrbj9YaOTCGej6BAte -----END CERTIFICATE-----Generated at Thu Apr 3 02:42:42 2025 by rpki-client