$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer File: c758b2d7-db90-4e16-a55c-1de629f2ca08.cer (raw, json) Hash identifier: xb++0vKyoU7P8haHHtvtUniLHnNRwWoWhVxIim2hyQo= Subject key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858494B5C5E56AD0A5158370F7B28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 12:45:33 +0000 Certificate not after: Sun 27 Jun 2027 12:45:33 +0000 Subordinate resources: IP: 141.195.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:5c:5e:56:ad:0a:51:58:37:0f:7b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 24 12:45:33 2025 GMT Not After : Jun 27 12:45:33 2027 GMT Subject: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:1d:9c:04:be:a7:da:df:e0:3d:a6:8a:67: 2d:39:51:13:66:dd:72:e1:03:67:aa:69:dd:d0:dd: 64:aa:00:fb:2b:38:d5:bb:52:48:06:8c:dd:59:6f: db:7b:79:97:b4:9b:eb:5e:b2:38:78:cd:b7:2c:af: b8:2c:9c:6e:9a:f3:f9:1d:65:74:23:b4:95:f6:35: eb:6d:d6:7f:b0:f6:fc:c8:84:be:f7:5b:85:b5:5a: a3:31:3b:30:b2:54:8d:36:5c:30:bd:69:d4:d5:c7: b7:4e:77:21:c0:28:8f:b1:16:25:4b:80:4c:7b:da: 61:15:a5:49:9b:c7:f8:75:6c:e4:ba:43:2d:ab:c0: 29:70:f4:e4:95:12:7f:97:18:b7:12:c8:ab:57:57: 90:d4:db:ae:08:56:13:c5:86:7c:3c:7a:cc:6d:14: 2e:ba:46:c9:d9:2b:ce:3b:3b:e7:20:05:dc:fb:c2: 86:c3:c4:a1:ee:36:8c:2e:a6:c4:e3:29:15:a6:6e: 35:f6:34:c4:1a:7a:c6:62:00:71:b5:f2:06:31:6d: ab:3b:24:9d:54:93:61:53:92:e0:ac:60:d0:c1:76: b3:90:f9:82:68:bc:35:eb:35:5e:00:18:47:af:27: f0:f1:19:2a:ad:1b:1d:c5:af:65:c9:3f:16:40:a9: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 141.195.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:31:13:d4:e6:cc:2d:2a:3b:85:5c:7f:cc:85:a4:ae:50:fa: dd:fe:9e:5d:53:07:d5:0a:ae:a6:fc:92:d1:c8:25:ad:47:c9: de:ac:63:4c:98:1e:a7:de:84:62:aa:86:27:5b:79:54:71:f1: be:1d:e1:c1:e6:c0:60:5d:1f:81:cd:1c:94:53:bc:12:14:f6: 04:0e:b7:84:a4:b5:91:a0:bb:11:0d:e2:7b:db:4c:02:31:63: 6f:64:f1:51:a5:40:2c:94:96:8c:be:e2:67:ed:b7:5f:16:cf: 86:2c:69:56:d6:9d:63:8c:51:37:65:af:2f:a5:97:a9:02:d3: 13:89:b6:32:96:6b:2a:23:5f:51:87:a8:aa:57:75:9b:61:3e: 93:03:8d:8e:7d:ad:af:88:4a:e2:f3:de:df:27:8b:7b:e7:c2: 7d:9d:eb:6f:f3:be:0c:cc:9e:b7:33:52:7f:35:15:a7:fa:10: 89:52:a7:cc:db:61:ff:fc:3c:f3:a7:bc:21:12:9b:9b:f6:f0: 98:89:76:19:63:da:82:b0:1d:d0:e8:e6:8c:c6:71:5d:87:8e: 55:16:60:3d:03:c5:fb:0d:57:2c:c3:5c:d0:ae:cb:77:8f:fd: 3f:d8:f6:51:8b:71:ab:f3:93:db:d2:60:b7:d7:1e:4f:a7:f1: d2:bc:9b:42 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElLXF5WrQpRWDcPeygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMyNDEyNDUzM1oXDTI3MDYyNzEyNDUzM1owLzEtMCsGA1UEAxMk Yzc1OGIyZDctZGI5MC00ZTE2LWE1NWMtMWRlNjI5ZjJjYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuAdnAS+p9rf4D2mimctOVETZt1y4QNnqmnd 0N1kqgD7KzjVu1JIBozdWW/be3mXtJvrXrI4eM23LK+4LJxumvP5HWV0I7SV9jXr bdZ/sPb8yIS+91uFtVqjMTswslSNNlwwvWnU1ce3TnchwCiPsRYlS4BMe9phFaVJ m8f4dWzkukMtq8ApcPTklRJ/lxi3EsirV1eQ1NuuCFYTxYZ8PHrMbRQuukbJ2SvO OzvnIAXc+8KGw8Sh7jaMLqbE4ykVpm419jTEGnrGYgBxtfIGMW2rOySdVJNhU5Lg rGDQwXazkPmCaLw16zVeABhHryfw8RkqrRsdxa9lyT8WQKlnzwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFA5gs0onw+Q1dijKEFYhkNolzWXQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j NzU4YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2MjlmMmNhMDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M3NThiMmQ3LWRiOTAtNGUxNi1h NTVjLTFkZTYyOWYyY2EwOC9jNzU4YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2Mjlm MmNhMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKNw3wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHjET1ObMLSo7hVx/zIWk rlD63f6eXVMH1QqupvyS0cglrUfJ3qxjTJgep96EYqqGJ1t5VHHxvh3hwebAYF0f gc0clFO8EhT2BA63hKS1kaC7EQ3ie9tMAjFjb2TxUaVALJSWjL7iZ+23XxbPhixp VtadY4xRN2WvL6WXqQLTE4m2MpZrKiNfUYeoqld1m2E+kwONjn2tr4hK4vPe3yeL e+fCfZ3rb/O+DMyetzNSfzUVp/oQiVKnzNth//w886e8IRKbm/bwmIl2GWPagrAd 0OjmjMZxXYeOVRZgPQPF+w1XLMNc0K7Ld4/9P9j2UYtxq/OT29Jgt9ceT6fx0ryb Qg== -----END CERTIFICATE-----Generated at Thu Apr 3 02:38:45 2025 by rpki-client