$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer File: c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer (raw, json) Hash identifier: J4PedZ9hKVQKyLHP/P4B1jQKRowJY3lApRsTJeyfQxE= Subject key identifier: 15:C0:CD:D3:0A:7D:6D:A6:7E:2D:CD:91:EA:B4:B6:F9:62:B2:09:F2 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848EB298CA3B52C80267B9FDDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 01:45:34 +0000 Certificate not after: Mon 24 May 2027 00:45:34 +0000 Subordinate resources: AS: 54669 IP: 192.92.17.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:29:8c:a3:b5:2c:80:26:7b:9f:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 18 01:45:34 2025 GMT Not After : May 24 00:45:34 2027 GMT Subject: CN=c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7e:d0:40:85:9c:a4:2e:a7:a8:31:26:bc:65: bf:b9:f2:26:e8:13:3e:12:e9:39:e4:ad:43:eb:ea: 05:d0:6a:4b:74:44:db:9b:d2:ca:cc:7f:7a:7e:ef: f8:21:aa:b5:26:a7:7e:db:0a:1b:bb:5e:1a:af:7f: fc:fb:cd:c2:22:fc:7f:24:9f:55:99:8e:df:a8:eb: 02:26:74:a2:26:d2:4f:d4:30:f1:02:e1:ce:3b:ed: e5:3c:29:b1:77:19:51:39:a5:70:6d:17:be:5c:d9: 8a:76:23:ce:60:13:40:68:ea:7d:aa:3c:a7:48:02: 1e:49:1a:2e:62:db:6a:25:6e:e1:11:9b:4b:61:03: 89:12:72:13:28:1b:47:f5:4d:4f:e6:9f:31:66:5d: b6:3c:ce:ef:d1:5b:96:a0:0d:01:86:0e:e8:6e:94: d1:f8:1d:f9:94:d8:31:cf:7f:cf:28:44:7b:50:f3: 22:03:c5:51:75:09:17:e7:4d:e5:38:eb:6c:8f:3e: 3f:28:c8:32:90:97:f9:a3:0b:ae:d2:d7:91:51:66: 2e:89:bd:d9:13:f6:13:92:a7:bf:13:44:f5:07:36: f0:e8:1c:36:f3:7b:8e:4e:35:8e:55:d9:74:bb:b6: c7:b7:c7:95:bf:df:6e:fe:60:ef:99:6d:f8:bb:f4: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:CD:D3:0A:7D:6D:A6:7E:2D:CD:91:EA:B4:B6:F9:62:B2:09:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.92.17.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54669 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fc:3b:42:f0:f2:f2:61:b9:6a:ab:f0:b9:f0:61:4b:8a:98: 16:92:18:7c:09:95:eb:5f:f0:3c:58:a0:bc:50:2a:86:3b:7e: 32:d7:6c:8e:3c:e8:84:22:77:26:44:ed:50:3e:83:07:1e:6e: 82:18:8e:cb:16:db:ff:11:58:d0:9e:b1:fc:fc:b2:c2:e8:96: 9e:95:c9:25:0c:30:82:fa:bd:b6:01:5b:de:ef:a2:66:07:8f: 81:42:6d:1f:02:4f:27:27:37:9d:9b:f7:9c:01:07:57:a9:73: 7f:8a:c4:0f:b2:29:6e:38:8b:83:ba:84:33:db:59:10:59:e8: 3a:f5:de:d8:c7:52:95:bb:36:e5:8c:2e:4c:86:54:fb:f4:37: 89:d9:78:c4:a2:eb:45:9b:8d:7b:54:ec:c5:ed:a5:94:a2:bf: 30:37:3e:77:97:d2:5d:8f:5a:85:27:5e:f4:0a:73:89:27:0e: 9a:ae:1c:0d:f3:2a:1c:1e:44:6e:81:9c:79:52:4d:80:49:ba: 5f:1d:08:60:19:77:48:de:69:eb:e7:91:97:03:4b:31:33:8f: 76:58:69:60:fe:aa:9c:3e:dc:5f:7a:fd:a5:66:3f:98:0a:a9: 9f:08:50:17:9a:fc:3c:5f:49:b7:cb:44:0d:0d:80:8d:ee:65: e9:87:b9:1b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEjrKYyjtSyAJnuf3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxODAxNDUzNFoXDTI3MDUyNDAwNDUzNFowLzEtMCsGA1UEAxMk YzAwZTlkMWYtMjAxZS00MWVkLThjMmEtNDJhNWNlNDFjNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH7QQIWcpC6nqDEmvGW/ufIm6BM+Euk55K1D 6+oF0GpLdETbm9LKzH96fu/4Iaq1Jqd+2wobu14ar3/8+83CIvx/JJ9VmY7fqOsC JnSiJtJP1DDxAuHOO+3lPCmxdxlROaVwbRe+XNmKdiPOYBNAaOp9qjynSAIeSRou YttqJW7hEZtLYQOJEnITKBtH9U1P5p8xZl22PM7v0VuWoA0Bhg7obpTR+B35lNgx z3/PKER7UPMiA8VRdQkX503lOOtsjz4/KMgykJf5owuu0teRUWYuib3ZE/YTkqe/ E0T1Bzbw6Bw283uOTjWOVdl0u7bHt8eVv99u/mDvmW34u/Qe0QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBXAzdMKfW2mfi3Nkeq0tvlisgnyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j MDBlOWQxZi0yMDFlLTQxZWQtOGMyYS00MmE1Y2U0MWM0ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2MwMGU5ZDFmLTIwMWUtNDFlZC04 YzJhLTQyYTVjZTQxYzRlZS9jMDBlOWQxZi0yMDFlLTQxZWQtOGMyYS00MmE1Y2U0 MWM0ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAXBEwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANWNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHL8O0Lw8vJhuWqr8LnwYUuKmBaSGHwJletf8DxYoLxQKoY7 fjLXbI486IQidyZE7VA+gwceboIYjssW2/8RWNCesfz8ssLolp6VySUMMIL6vbYB W97vomYHj4FCbR8CTycnN52b95wBB1epc3+KxA+yKW44i4O6hDPbWRBZ6Dr13tjH UpW7NuWMLkyGVPv0N4nZeMSi60WbjXtU7MXtpZSivzA3PneX0l2PWoUnXvQKc4kn DpquHA3zKhweRG6BnHlSTYBJul8dCGAZd0jeaevnkZcDSzEzj3ZYaWD+qpw+3F96 /aVmP5gKqZ8IUBea/DxfSbfLRA0NgI3uZemHuRs= -----END CERTIFICATE-----Generated at Thu Apr 3 02:39:25 2025 by rpki-client