$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4.cer File: ac0d9976-00da-49c9-826b-3d3a349b0fb4.cer (raw, json) Hash identifier: Uu1VA4iOebGvs+It6RQZAnUogP9ZMnddvja96jSWg6k= Subject key identifier: 13:B0:2D:8C:D0:F0:5A:9A:D9:F1:1D:5E:CD:15:FF:04:B0:22:84:FC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584952571406C97078C447982700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/ac0d9976-00da-49c9-826b-3d3a349b0fb4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Mar 2025 00:45:33 +0000 Certificate not after: Wed 30 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 394406 IP: 207.45.72.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:52:57:14:06:c9:70:78:c4:47:98:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 27 00:45:33 2025 GMT Not After : Jun 30 00:45:33 2027 GMT Subject: CN=ac0d9976-00da-49c9-826b-3d3a349b0fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:c0:f9:ac:b7:46:d7:21:38:53:73:b4:3d: 99:02:50:d4:5d:4e:09:41:af:2b:94:b2:a4:48:89: 0e:12:0a:86:55:66:a4:7b:e1:52:5a:1b:34:cd:ba: 14:7e:8c:57:8a:8c:9a:6e:da:4b:6a:22:aa:c3:62: 28:9b:d8:14:e5:a3:80:43:a5:3f:dd:ec:91:b4:97: 8a:2d:fb:c9:45:5c:72:62:6b:0b:dc:0d:cf:81:7c: df:00:75:e5:44:e7:7a:f3:54:13:ec:5c:48:01:5e: 0e:6d:de:12:d0:72:87:80:ad:0c:44:37:f7:43:39: cc:fa:24:2f:a3:d9:62:6f:ee:40:88:82:24:0e:ea: 81:99:bb:97:81:d7:04:4b:56:2c:af:24:63:86:10: 0b:58:87:48:b2:05:74:1b:84:98:81:ce:71:5c:2d: 55:a0:a0:fc:a5:27:83:ff:8c:70:7a:49:79:e9:10: a7:63:89:3d:46:3d:e6:68:bb:43:78:fc:45:ed:4b: 01:c3:da:ef:a8:81:97:c3:39:2b:ea:79:6c:21:d7: 82:61:87:e0:84:db:8f:ea:33:88:4c:c1:e4:00:55: e9:08:4f:43:b6:80:b7:6a:c9:0e:48:fc:ba:ee:e4: 8f:d8:4f:cb:bd:c2:e1:9e:e5:a0:7a:f7:7a:07:b1: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B0:2D:8C:D0:F0:5A:9A:D9:F1:1D:5E:CD:15:FF:04:B0:22:84:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/ac0d9976-00da-49c9-826b-3d3a349b0fb4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 207.45.72.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394406 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a9:31:cd:cd:6f:da:7f:ea:a7:f6:15:d7:37:1c:66:8c:71: 45:e6:76:6c:6a:13:3f:2d:29:f3:62:35:bd:6a:eb:90:27:af: dd:ab:2c:c4:87:92:06:82:b7:89:0b:a9:48:62:5b:36:18:09: db:1b:31:94:a6:e7:94:92:22:8a:d6:3b:5d:10:e3:9e:61:61: 3a:b1:3a:e0:0d:7c:aa:97:7d:15:ae:a5:35:06:e7:89:3c:20: 43:97:16:2c:97:89:50:7b:9a:02:a5:aa:59:e6:ad:7a:c4:fe: 6e:7f:53:89:b2:f8:8c:66:0a:e2:6b:97:f6:62:47:01:33:6d: 4d:27:80:d9:d1:27:a2:3c:df:00:66:05:ee:c6:64:0c:52:fe: bc:d4:53:11:3f:f0:2f:a7:d3:d2:f6:30:f1:c0:ec:39:dc:62: b9:15:b3:49:e2:40:70:39:46:1a:70:62:41:33:29:bb:18:6e: 90:ca:9e:a3:c2:83:93:b0:69:c4:24:35:ac:c7:aa:da:f2:19: c2:a7:0d:b5:43:af:6b:a0:dc:a3:83:65:5e:b1:c7:74:70:7b: 0a:dd:a3:39:e7:4b:8d:5a:df:e8:8f:95:a0:e7:51:53:63:36: ab:b4:bd:2b:4c:ae:de:0b:3e:9c:be:b1:d3:63:56:7a:9f:54: 9f:77:ea:40 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWElSVxQGyXB4xEeYJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMyNzAwNDUzM1oXDTI3MDYzMDAwNDUzM1owLzEtMCsGA1UEAxMk YWMwZDk5NzYtMDBkYS00OWM5LTgyNmItM2QzYTM0OWIwZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcbA+ay3RtchOFNztD2ZAlDUXU4JQa8rlLKk SIkOEgqGVWake+FSWhs0zboUfoxXioyabtpLaiKqw2Iom9gU5aOAQ6U/3eyRtJeK LfvJRVxyYmsL3A3PgXzfAHXlROd681QT7FxIAV4Obd4S0HKHgK0MRDf3QznM+iQv o9lib+5AiIIkDuqBmbuXgdcES1YsryRjhhALWIdIsgV0G4SYgc5xXC1VoKD8pSeD /4xwekl56RCnY4k9Rj3maLtDePxF7UsBw9rvqIGXwzkr6nlsIdeCYYfghNuP6jOI TMHkAFXpCE9DtoC3askOSPy67uSP2E/LvcLhnuWgevd6B7Fo2wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBOwLYzQ8Fqa2fEdXs0V/wSwIoT8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h YzBkOTk3Ni0wMGRhLTQ5YzktODI2Yi0zZDNhMzQ5YjBmYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2FjMGQ5OTc2LTAwZGEtNDljOS04 MjZiLTNkM2EzNDliMGZiNC9hYzBkOTk3Ni0wMGRhLTQ5YzktODI2Yi0zZDNhMzQ5 YjBmYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALPLUgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgSmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA+pMc3Nb9p/6qf2Fdc3HGaMcUXmdmxqEz8tKfNiNb1q65An r92rLMSHkgaCt4kLqUhiWzYYCdsbMZSm55SSIorWO10Q455hYTqxOuANfKqXfRWu pTUG54k8IEOXFiyXiVB7mgKlqlnmrXrE/m5/U4my+IxmCuJrl/ZiRwEzbU0ngNnR J6I83wBmBe7GZAxS/rzUUxE/8C+n09L2MPHA7DncYrkVs0niQHA5RhpwYkEzKbsY bpDKnqPCg5OwacQkNazHqtryGcKnDbVDr2ug3KODZV6xx3RwewrdoznnS41a3+iP laDnUVNjNqu0vStMrt4LPpy+sdNjVnqfVJ936kA= -----END CERTIFICATE-----Generated at Thu Apr 3 02:45:15 2025 by rpki-client