$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer File: bcc49d2f-33f0-42f7-bc61-b4187dd155a8.cer (raw, json) Hash identifier: VRDNG2Yr4U1hBjUImFV54vFWp4M00aL6AAqDtV8itf4= Subject key identifier: D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858488C3E47E3E7FC7DE488909580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Jan 2025 01:45:32 +0000 Certificate not after: Tue 20 Apr 2027 00:45:32 +0000 Subordinate resources: AS: 19189 IP: 74.214.192.0/21 IP: 198.148.26.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8c:3e:47:e3:e7:fc:7d:e4:88:90:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 15 01:45:32 2025 GMT Not After : Apr 20 00:45:32 2027 GMT Subject: CN=bcc49d2f-33f0-42f7-bc61-b4187dd155a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:86:b5:3d:97:4c:c6:7a:3f:e6:e9:c5:d7: 5a:d0:b6:09:5d:70:9e:5a:9e:12:4c:ad:f6:f9:22: 33:1f:27:e0:00:f3:db:bb:f9:0e:a5:b2:e5:b4:e0: e7:d1:87:60:a1:e3:98:59:54:8c:a9:82:46:40:22: 12:fb:de:7c:4f:a8:2e:50:d0:04:10:bb:56:6c:4b: f3:a3:a3:48:2a:d2:46:11:d5:f7:e9:7b:5b:e1:36: 17:93:48:8e:08:fd:1b:29:3b:9b:24:b7:7c:7b:ed: 94:25:44:5f:c6:0f:6d:27:95:2a:71:7e:b1:2a:50: a6:75:38:63:40:8d:bf:4e:bf:1f:8d:62:45:5c:54: 6a:57:08:02:73:36:dc:32:37:09:05:05:f7:cb:19: d7:51:1b:af:00:da:ca:6b:d8:6b:2e:50:37:a6:12: e0:69:76:c5:51:63:65:3a:ea:fd:d0:fe:5e:24:f5: 8f:a0:dd:2b:d3:8c:96:dd:19:ce:c9:10:a1:00:a6: ba:3a:7c:ce:e5:7f:34:33:df:3e:33:26:d5:75:33: 5f:f5:46:51:b5:ba:4f:76:bb:69:14:f9:0f:54:e7: 7b:50:83:51:10:32:67:69:d5:5a:a0:38:48:7a:48: 21:03:8d:74:c5:a6:f5:24:0d:b5:3c:55:0d:fd:6f: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1E:D6:32:70:2C:B2:F0:21:F1:A0:91:FC:88:0E:72:62:72:4E:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bcc49d2f-33f0-42f7-bc61-b4187dd155a8/bcc49d2f-33f0-42f7-bc61-b4187dd155a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 74.214.192.0/21 198.148.26.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19189 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d8:46:f2:85:cf:64:7d:5e:3a:56:40:53:29:2e:d1:4d:19: 2a:ba:98:fd:1f:f5:ba:72:29:d6:d4:f8:d8:ae:8a:43:80:53: 38:28:9a:52:58:60:5c:93:a5:b2:5c:5d:10:8f:55:46:6b:f6: f1:07:74:38:e1:a4:7e:f8:6c:db:62:7a:d9:7c:c8:ec:fe:7e: b4:5c:f1:65:ec:5c:ac:d6:05:2f:ca:68:87:cd:df:92:6b:81: d0:99:a2:76:9f:17:36:e2:a9:5a:0c:42:b2:3d:a5:66:2c:5f: 0d:e1:e8:3e:80:11:ed:1a:53:8f:b6:97:3b:3b:e5:e8:eb:ea: 89:81:25:1d:4f:90:24:9d:65:fc:1e:f1:01:82:d1:8d:5f:fc: 5b:4a:9d:58:80:57:ac:b8:2f:91:93:3b:3f:b0:2e:9e:34:80: f1:09:75:0f:af:74:d9:98:a1:6f:d7:20:8a:c0:ab:ca:c9:1d: 16:e5:1a:41:d6:d2:59:15:1e:69:9a:76:9c:b7:b4:2a:26:d1: 95:a2:00:cd:62:56:44:68:70:2b:e7:e5:b1:2d:15:04:19:28: 87:c3:58:63:76:96:99:bc:c3:73:e2:54:a7:5e:c7:80:d1:d6: 87:12:15:e0:72:63:dd:3b:c1:35:42:80:63:c1:60:71:34:a7: 2d:a1:48:f0 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEiMPkfj5/x95IiQlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExNTAxNDUzMloXDTI3MDQyMDAwNDUzMlowLzEtMCsGA1UEAxMk YmNjNDlkMmYtMzNmMC00MmY3LWJjNjEtYjQxODdkZDE1NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJWGtT2XTMZ6P+bpxdda0LYJXXCeWp4STK32 +SIzHyfgAPPbu/kOpbLltODn0YdgoeOYWVSMqYJGQCIS+958T6guUNAEELtWbEvz o6NIKtJGEdX36Xtb4TYXk0iOCP0bKTubJLd8e+2UJURfxg9tJ5UqcX6xKlCmdThj QI2/Tr8fjWJFXFRqVwgCczbcMjcJBQX3yxnXURuvANrKa9hrLlA3phLgaXbFUWNl Our90P5eJPWPoN0r04yW3RnOyRChAKa6OnzO5X80M98+MybVdTNf9UZRtbpPdrtp FPkPVOd7UINREDJnadVaoDhIekghA410xab1JA21PFUN/W/AowIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFNQe1jJwLLLwIfGgkfyIDnJick4WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i Y2M0OWQyZi0zM2YwLTQyZjctYmM2MS1iNDE4N2RkMTU1YTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2JjYzQ5ZDJmLTMzZjAtNDJmNy1i YzYxLWI0MTg3ZGQxNTVhOC9iY2M0OWQyZi0zM2YwLTQyZjctYmM2MS1iNDE4N2Rk MTU1YTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANK1sADBAHGlBowGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICSvUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAk9hG8oXPZH1eOlZAUyku0U0ZKrqY/R/1unIp1tT4 2K6KQ4BTOCiaUlhgXJOlslxdEI9VRmv28Qd0OOGkfvhs22J62XzI7P5+tFzxZexc rNYFL8poh83fkmuB0Jmidp8XNuKpWgxCsj2lZixfDeHoPoAR7RpTj7aXOzvl6Ovq iYElHU+QJJ1l/B7xAYLRjV/8W0qdWIBXrLgvkZM7P7AunjSA8Ql1D6902Zihb9cg isCryskdFuUaQdbSWRUeaZp2nLe0KibRlaIAzWJWRGhwK+flsS0VBBkoh8NYY3aW mbzDc+JUp17HgNHWhxIV4HJj3TvBNUKAY8FgcTSnLaFI8A== -----END CERTIFICATE-----Generated at Thu Apr 3 02:38:43 2025 by rpki-client