$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer File: a8903a14-ef5f-4310-b694-60f49b1c61a9.cer (raw, json) Hash identifier: 5qv8NOpurtQzsXdGQqBngCaSEeBSDEIBbpbwBxolD9w= Subject key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848AAF3CDAB4583722EA54A3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jan 2025 01:45:32 +0000 Certificate not after: Sat 01 May 2027 00:45:32 +0000 Subordinate resources: AS: 55178 IP: 192.230.176.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:f3:cd:ab:45:83:72:2e:a5:4a:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 26 01:45:32 2025 GMT Not After : May 1 00:45:32 2027 GMT Subject: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:a7:2c:21:45:81:d3:e5:a5:5f:c2:5f:eb: c8:51:c7:29:04:3f:d3:79:6a:7f:fe:56:ac:5f:e5: 73:9f:15:b1:4b:40:b8:b3:5b:84:67:f0:12:bd:01: 18:23:23:30:c1:93:c8:30:aa:b5:97:29:96:e2:18: 36:64:98:73:39:98:5d:d6:85:32:79:2d:9e:58:3a: ed:6e:17:b3:c9:aa:2f:60:54:33:70:ab:e4:53:21: 82:c7:8b:29:c6:cc:52:00:5e:97:32:f2:25:f5:61: 95:1b:56:8f:13:47:71:e8:f2:b2:78:cf:10:c7:02: 8b:ed:73:5d:63:2b:4e:08:6d:d5:ad:d9:84:47:9f: 28:48:fd:7e:be:4f:3b:f2:c6:16:3c:36:44:e9:84: 09:5b:94:e2:01:da:ae:b0:11:a8:ef:c2:5a:16:93: bd:dc:8a:ae:cc:fb:2a:5b:ca:6f:bf:66:bf:9b:14: c4:14:bb:35:da:1f:85:b0:22:b1:ff:7d:97:06:15: 11:3c:21:6f:9a:e7:80:47:fb:8d:87:8d:65:e4:2d: 2c:52:6e:f1:28:35:54:9c:98:d0:54:ac:80:98:28: 83:ae:18:5c:a7:7d:31:53:a5:80:c4:dc:a9:7b:44: 6d:a5:8f:a4:a3:a2:69:2e:e2:ce:3a:17:55:c1:9f: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.230.176.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55178 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e3:1c:28:02:28:ff:86:40:4f:80:d7:cd:f5:db:12:8c:6d: 38:f8:2a:4e:ef:4d:3a:5b:e0:16:c3:db:44:4b:2a:a4:89:eb: 78:ad:86:42:1f:8f:00:9f:85:b9:ad:29:da:eb:3f:87:0d:82: 71:c8:f6:2e:94:06:4a:01:cf:a4:ac:e9:ca:8a:5a:63:fe:81: bf:60:91:d0:79:31:ef:f4:a0:cf:0f:ae:ca:64:29:c8:cc:ad: 95:55:c3:09:42:dc:2c:41:7a:3b:6c:c4:4a:d6:bd:5e:45:59: 3a:06:09:e9:4c:67:bd:43:3e:49:60:4e:db:ef:ce:01:a3:f5: 75:2b:0c:a8:d5:a8:af:35:36:bb:f7:5f:14:eb:e6:7d:6f:d1: f7:e3:c2:b6:80:cd:a2:0e:aa:a4:0a:b7:e1:0e:06:34:de:17: bb:14:11:53:3a:1a:6c:48:7c:07:7b:ed:62:26:b8:93:05:68: c2:2f:9c:e8:9c:05:d1:9b:90:57:05:7a:81:53:76:77:1d:64: bd:11:4c:c3:e7:25:40:40:8e:16:4e:41:8a:3d:50:7a:89:d4: 40:7e:74:30:a4:71:ed:d3:b6:b0:6d:43:8d:96:99:df:45:4b: 95:cf:e2:28:cf:67:a7:c9:95:2d:d3:71:24:c6:49:3d:11:1f: 76:60:89:6a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEiq882rRYNyLqVKM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyNjAxNDUzMloXDTI3MDUwMTAwNDUzMlowLzEtMCsGA1UEAxMk YTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCWnLCFFgdPlpV/CX+vIUccpBD/TeWp//las X+VznxWxS0C4s1uEZ/ASvQEYIyMwwZPIMKq1lymW4hg2ZJhzOZhd1oUyeS2eWDrt bhezyaovYFQzcKvkUyGCx4spxsxSAF6XMvIl9WGVG1aPE0dx6PKyeM8QxwKL7XNd YytOCG3VrdmER58oSP1+vk878sYWPDZE6YQJW5TiAdqusBGo78JaFpO93IquzPsq W8pvv2a/mxTEFLs12h+FsCKx/32XBhURPCFvmueAR/uNh41l5C0sUm7xKDVUnJjQ VKyAmCiDrhhcp30xU6WAxNype0RtpY+ko6JpLuLOOhdVwZ/REQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHI74wwwqN3QrvxYVgukhGiIJKtoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h ODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2E4OTAzYTE0LWVmNWYtNDMxMC1i Njk0LTYwZjQ5YjFjNjFhOS9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIx YzYxYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATA5rAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANeKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIrjHCgCKP+GQE+A18312xKMbTj4Kk7vTTpb4BbD20RLKqSJ 63ithkIfjwCfhbmtKdrrP4cNgnHI9i6UBkoBz6Ss6cqKWmP+gb9gkdB5Me/0oM8P rspkKcjMrZVVwwlC3CxBejtsxErWvV5FWToGCelMZ71DPklgTtvvzgGj9XUrDKjV qK81Nrv3XxTr5n1v0ffjwraAzaIOqqQKt+EOBjTeF7sUEVM6GmxIfAd77WImuJMF aMIvnOicBdGbkFcFeoFTdncdZL0RTMPnJUBAjhZOQYo9UHqJ1EB+dDCkce3TtrBt Q42Wmd9FS5XP4ijPZ6fJlS3TcSTGST0RH3ZgiWo= -----END CERTIFICATE-----Generated at Thu Apr 3 02:48:13 2025 by rpki-client