$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2.cer File: ad467892-ee45-4d8d-a2c3-40f7fb414bf2.cer (raw, json) Hash identifier: HAtI2iOBgdSB4BHfMuZkhdoiR/pXVsFPfIa8cxOuY80= Subject key identifier: 09:9A:4B:FC:C5:C5:F5:D2:EB:7D:36:18:AB:B3:1B:9D:90:43:51:02 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858490F746F148DDD873954E74180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ad467892-ee45-4d8d-a2c3-40f7fb414bf2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Mar 2025 01:45:33 +0000 Certificate not after: Sun 06 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 206.123.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:74:6f:14:8d:dd:87:39:54:e7:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 3 01:45:33 2025 GMT Not After : Jun 6 00:45:33 2027 GMT Subject: CN=ad467892-ee45-4d8d-a2c3-40f7fb414bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:52:1e:f2:c2:1b:a1:70:cf:3c:14:c6:89: 8e:dd:9f:4d:01:e2:e8:33:e4:af:00:fc:c1:3b:a7: 52:d4:6c:49:6c:b1:9e:ad:d4:05:4e:74:0e:00:df: 11:36:bc:dc:91:ba:fd:db:b7:ab:0d:13:6e:c1:26: 8e:67:cf:15:5c:9c:3d:aa:ad:cf:7e:fd:8d:a2:15: b2:03:d8:1f:a8:84:1d:72:58:21:7e:4d:fd:33:f1: d1:64:08:2b:c8:65:d0:4b:6f:0f:92:8f:46:32:7b: 6d:c2:8d:71:7c:33:4b:02:37:54:a0:3a:64:c9:6a: 4e:43:79:ea:59:10:53:31:2a:4f:e1:c7:38:85:9f: 61:7b:ad:de:88:30:11:20:34:a4:ad:7c:d5:78:41: 96:6a:c9:47:14:2e:07:8b:8a:2a:e8:4b:d0:9f:9f: 03:ae:84:b3:e3:88:d0:49:fd:32:82:1f:e5:d9:27: a3:0b:60:d2:d6:0b:64:5e:dd:83:c4:ed:0e:72:22: ff:f8:0f:57:0d:6d:9a:bc:40:2e:c9:73:70:2e:e4: 54:00:8f:a5:4e:87:01:7a:8f:32:40:57:4e:e6:18: 33:b2:12:5e:46:50:22:f0:3b:b1:31:b3:10:b3:99: 58:24:64:90:0d:9a:4d:0c:a1:47:f2:10:1a:b6:f4: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9A:4B:FC:C5:C5:F5:D2:EB:7D:36:18:AB:B3:1B:9D:90:43:51:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad467892-ee45-4d8d-a2c3-40f7fb414bf2/ad467892-ee45-4d8d-a2c3-40f7fb414bf2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 206.123.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:dd:6e:e0:43:41:3a:06:3b:f7:2d:30:40:04:b8:a2:53:f1: 30:f4:0d:60:2b:ab:9a:03:5f:29:6a:8c:1f:75:ea:61:bb:6a: d7:57:17:cc:14:5a:23:a2:93:13:ed:57:63:a2:6e:d3:f0:c6: ef:aa:f8:82:4e:6a:86:4f:8a:d7:5d:7b:09:21:c0:f9:73:44: 74:b1:ad:27:c4:8f:4e:62:b2:f6:82:77:83:5d:32:ce:75:db: 28:84:08:ed:f4:bb:2d:85:c5:3e:5f:92:83:ba:18:af:3c:8a: 62:7f:9c:11:51:4f:14:90:df:2b:b9:ae:ee:83:f5:f8:ef:f9: a8:72:a9:98:0f:89:97:6a:28:8d:af:b8:37:b8:95:37:44:83: 4f:58:c0:84:18:4e:3d:ed:e5:aa:4b:84:31:0b:39:88:47:d8: 72:99:6e:b6:d6:2e:8c:bb:fa:c6:22:9f:c9:82:ba:33:e7:7a: e0:55:79:ef:8b:b5:58:82:9d:ed:08:bd:41:79:3b:86:4f:f0: 4f:8e:82:13:a1:ed:a7:50:b3:0e:89:2b:a8:63:a3:8b:ff:c6: e1:8d:cc:35:e0:e0:12:0c:fe:df:50:c5:1b:c8:53:98:1a:36: 27:20:e8:14:1f:1d:ed:32:67:ad:1b:fa:4f:87:27:1c:05:e3: 1e:e8:76:61 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEkPdG8Ujd2HOVTnQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwMzAxNDUzM1oXDTI3MDYwNjAwNDUzM1owLzEtMCsGA1UEAxMk YWQ0Njc4OTItZWU0NS00ZDhkLWEyYzMtNDBmN2ZiNDE0YmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmlSHvLCG6FwzzwUxomO3Z9NAeLoM+SvAPzB O6dS1GxJbLGerdQFTnQOAN8RNrzckbr927erDRNuwSaOZ88VXJw9qq3Pfv2NohWy A9gfqIQdclghfk39M/HRZAgryGXQS28Pko9GMnttwo1xfDNLAjdUoDpkyWpOQ3nq WRBTMSpP4cc4hZ9he63eiDARIDSkrXzVeEGWaslHFC4Hi4oq6EvQn58DroSz44jQ Sf0ygh/l2SejC2DS1gtkXt2DxO0OciL/+A9XDW2avEAuyXNwLuRUAI+lTocBeo8y QFdO5hgzshJeRlAi8DuxMbMQs5lYJGSQDZpNDKFH8hAatvSEAwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAmaS/zFxfXS6302GKuzG52QQ1ECMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h ZDQ2Nzg5Mi1lZTQ1LTRkOGQtYTJjMy00MGY3ZmI0MTRiZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2FkNDY3ODkyLWVlNDUtNGQ4ZC1h MmMzLTQwZjdmYjQxNGJmMi9hZDQ2Nzg5Mi1lZTQ1LTRkOGQtYTJjMy00MGY3ZmI0 MTRiZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXOe6AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdN1u4ENBOgY79y0wQAS4 olPxMPQNYCurmgNfKWqMH3XqYbtq11cXzBRaI6KTE+1XY6Ju0/DG76r4gk5qhk+K 1117CSHA+XNEdLGtJ8SPTmKy9oJ3g10yznXbKIQI7fS7LYXFPl+Sg7oYrzyKYn+c EVFPFJDfK7mu7oP1+O/5qHKpmA+Jl2ooja+4N7iVN0SDT1jAhBhOPe3lqkuEMQs5 iEfYcpluttYujLv6xiKfyYK6M+d64FV574u1WIKd7Qi9QXk7hk/wT46CE6Htp1Cz DokrqGOji//G4Y3MNeDgEgz+31DFG8hTmBo2JyDoFB8d7TJnrRv6T4cnHAXjHuh2 YQ== -----END CERTIFICATE-----Generated at Thu Apr 3 02:45:12 2025 by rpki-client