$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer File: bad79acc-a971-4c08-8e88-3594dae2715a.cer (raw, json) Hash identifier: H5J21s/ulPpbOg9k5NlIcdfUSmb+zcv03R4l+iSYYe4= Subject key identifier: 3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848625E06825BFEEE789CF57900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Dec 2024 01:45:33 +0000 Certificate not after: Mon 05 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 46665 IP: 141.193.248.0/24 IP: 198.17.160.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:62:5e:06:82:5b:fe:ee:78:9c:f5:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 31 01:45:33 2024 GMT Not After : Apr 5 00:45:33 2027 GMT Subject: CN=bad79acc-a971-4c08-8e88-3594dae2715a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:41:d5:7e:20:8f:91:65:7f:bc:67:8a:20: 3f:3d:ad:19:7f:14:91:5b:7a:db:50:aa:43:9b:c9: 29:7d:58:69:5c:40:1c:04:07:fb:7e:39:64:a3:6a: a1:f6:8f:bb:eb:b7:6a:c0:46:09:89:c3:cf:ca:17: 30:b9:07:58:37:19:98:ab:7c:06:1d:03:c5:b1:cc: 0d:cb:1b:9b:12:0b:d4:79:35:a2:1f:d3:41:46:f8: 70:37:1b:cd:d4:40:bd:24:5e:50:9f:d5:80:6f:63: f9:5f:3c:12:9b:e9:20:d5:b0:eb:c2:ca:13:c2:eb: ee:76:67:c2:78:f2:50:a7:19:47:95:c0:12:2b:1f: c7:79:6c:e3:a5:6f:b0:e7:8e:92:e2:bd:1c:b6:c5: 30:d6:d6:bd:e8:88:fe:ff:bc:a0:61:56:78:56:4b: 12:16:ec:64:df:76:07:bd:96:51:20:d9:87:92:9f: aa:48:5a:81:6d:71:37:0d:4b:32:4c:e3:6c:b6:1a: 3c:e9:a1:57:f2:f3:93:ff:5e:f5:fa:1c:24:91:95: 3a:64:e3:01:a0:6e:02:38:21:44:bc:9d:36:04:19: a4:b8:77:fa:d2:78:77:9e:35:d9:a5:a8:9b:02:a6: fa:df:bf:71:61:ca:56:98:3e:30:d9:1e:f5:6f:f1: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 141.193.248.0/24 198.17.160.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46665 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:05:e4:05:7f:82:2b:97:bb:f7:65:a6:cd:b1:61:11:e5:66: cf:b0:08:7b:1b:ac:e7:bb:39:a1:e4:7c:f6:d6:b7:54:6e:87: b3:8d:e0:f3:2a:76:00:ad:84:43:60:a1:15:0b:a8:75:9c:16: 00:f8:d5:62:a7:f9:8f:0e:05:79:6d:4b:6b:75:ef:0e:c0:f5: b0:d5:44:b1:09:c5:03:37:4d:62:d5:54:e9:85:ac:ff:c8:11: 18:44:7e:e5:e7:cb:28:dc:21:ba:9a:dd:a3:b6:fb:f6:fc:42: 74:43:b0:10:a7:c6:51:c4:3d:ac:8b:13:6d:4d:a7:12:88:7d: 5d:12:d1:ed:20:3e:19:ba:96:a4:3a:ba:36:ef:d4:0c:70:0e: cd:44:5d:5b:b7:0f:72:0e:9f:1d:f8:cf:77:41:c6:4e:14:54: 0c:4f:e4:ef:3d:6e:18:10:e6:26:95:9a:c1:da:ad:b4:f4:e9: 30:2c:2a:f1:45:2d:48:e8:4f:d1:de:88:2c:20:77:4a:b7:a3: 95:da:de:ed:95:12:f4:45:58:11:b0:4d:73:3d:07:85:6c:0c: b5:5f:e1:49:72:4c:e5:81:72:95:5e:72:43:5c:0c:7d:e7:18: 82:dd:21:f6:35:19:9f:67:3e:d6:5d:a5:a7:00:58:5f:0c:32: 05:68:ff:b3 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEhiXgaCW/7ueJz1eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MTIzMTAxNDUzM1oXDTI3MDQwNTAwNDUzM1owLzEtMCsGA1UEAxMk YmFkNzlhY2MtYTk3MS00YzA4LThlODgtMzU5NGRhZTI3MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx9B1X4gj5Flf7xniiA/Pa0ZfxSRW3rbUKpD m8kpfVhpXEAcBAf7fjlko2qh9o+767dqwEYJicPPyhcwuQdYNxmYq3wGHQPFscwN yxubEgvUeTWiH9NBRvhwNxvN1EC9JF5Qn9WAb2P5XzwSm+kg1bDrwsoTwuvudmfC ePJQpxlHlcASKx/HeWzjpW+w546S4r0ctsUw1ta96Ij+/7ygYVZ4VksSFuxk33YH vZZRINmHkp+qSFqBbXE3DUsyTONstho86aFX8vOT/171+hwkkZU6ZOMBoG4COCFE vJ02BBmkuHf60nh3njXZpaibAqb6379xYcpWmD4w2R71b/FL4QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFD1YCdYM63I9pGDGpzv75vaBCNXXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i YWQ3OWFjYy1hOTcxLTRjMDgtOGU4OC0zNTk0ZGFlMjcxNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2JhZDc5YWNjLWE5NzEtNGMwOC04 ZTg4LTM1OTRkYWUyNzE1YS9iYWQ3OWFjYy1hOTcxLTRjMDgtOGU4OC0zNTk0ZGFl MjcxNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACNwfgDBADGEaAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALZJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA4F5AV/giuXu/dlps2xYRHlZs+wCHsbrOe7OaHk fPbWt1Ruh7ON4PMqdgCthENgoRULqHWcFgD41WKn+Y8OBXltS2t17w7A9bDVRLEJ xQM3TWLVVOmFrP/IERhEfuXnyyjcIbqa3aO2+/b8QnRDsBCnxlHEPayLE21NpxKI fV0S0e0gPhm6lqQ6ujbv1AxwDs1EXVu3D3IOnx34z3dBxk4UVAxP5O89bhgQ5iaV msHarbT06TAsKvFFLUjoT9HeiCwgd0q3o5Xa3u2VEvRFWBGwTXM9B4VsDLVf4Uly TOWBcpVeckNcDH3nGILdIfY1GZ9nPtZdpacAWF8MMgVo/7M= -----END CERTIFICATE-----Generated at Thu Apr 3 02:56:03 2025 by rpki-client