$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer File: ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer (raw, json) Hash identifier: vUSU7ooOznpnipDBgBmx6pvvdiqyZcRen+A/zm1hi7Q= Subject key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858494196F8C5A56632728BD9AC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 00:45:33 +0000 Certificate not after: Thu 24 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 399341 IP: 205.207.186.0/24 IP: 2602:fa4d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:96:f8:c5:a5:66:32:72:8b:d9:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 21 00:45:33 2025 GMT Not After : Jun 24 00:45:33 2027 GMT Subject: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:90:a0:46:09:c2:de:d7:8a:06:fd:b3:e9: f5:19:88:4a:f2:4f:66:0d:67:62:8d:82:d8:4c:23: 27:79:df:25:4b:cf:2e:75:20:6f:45:02:55:25:99: d2:ae:d7:37:06:51:1a:9c:08:8d:74:70:4c:07:8c: a3:ed:27:0c:fa:f5:20:cc:c7:d1:53:c5:49:f9:7d: 80:ea:34:9a:97:8e:10:de:21:50:ee:b1:d6:ae:8f: cc:63:4f:0a:24:98:56:65:f1:72:d1:df:9e:2e:f0: 13:6c:08:75:44:ea:e4:f1:f8:33:63:e2:b8:a8:96: 60:cb:80:4b:67:7c:4c:e9:6a:d2:36:c7:45:95:e1: 50:ed:c8:65:e2:b5:11:73:43:ff:a5:d5:d6:81:8a: 27:60:82:a1:cb:4c:08:15:9f:f4:48:3c:a6:fd:1e: aa:5e:87:59:b4:d1:39:fa:46:c5:7f:e3:2a:18:9b: a8:e1:7d:8c:45:b7:41:0b:8d:0d:4f:ec:a0:4f:08: 87:41:1c:e6:e3:3b:cc:b9:f0:d2:58:a0:33:6b:09: 66:47:12:f0:ea:75:fb:1b:ba:dc:60:1d:66:d2:b3: b0:dc:5a:62:ff:02:08:c1:a7:1e:0a:1c:26:78:3e: f5:fc:e2:25:6c:9a:7b:09:4f:1b:5a:2d:84:27:ac: 4c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.207.186.0/24 IPv6: 2602:fa4d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399341 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:0d:b0:c6:4c:30:79:10:b6:64:88:f9:f5:11:62:04:d8:d6: 8d:e4:c5:d6:c7:fd:4c:d1:8c:d1:4a:0d:e5:07:5c:76:7e:51: 0b:7a:70:3a:10:e1:9b:90:54:e3:9c:3e:14:da:94:ee:4a:7f: 07:b8:68:4f:48:b8:63:49:08:87:68:08:6c:1c:12:c3:01:4b: 87:ed:4f:72:f2:10:87:25:06:0a:bd:fc:8c:2e:5a:64:18:f2: bf:7c:d7:77:7b:24:82:bd:b2:cf:f9:8d:36:ab:f9:95:92:8e: 67:18:1c:e8:c1:e1:b6:2e:04:bf:c8:fa:2c:78:f7:e8:74:7a: 10:47:2b:20:ed:57:37:36:03:dc:43:bf:4b:75:8b:e6:ce:50: 7a:eb:0a:6d:f3:b3:bf:f7:94:ea:44:85:a0:1b:1f:10:6a:d4: 80:37:51:19:15:ab:e0:86:39:6e:23:34:66:66:8e:c0:5e:10: c5:a7:0a:62:e9:24:dc:8b:15:ad:2a:1c:b2:1c:4f:b2:34:d4: 55:f3:ca:c7:35:42:64:8c:90:00:0e:c6:80:54:8e:25:82:78: da:cb:cf:77:9f:c9:a2:6a:13:4d:aa:97:fc:b5:53:0c:20:dc: 45:de:77:0f:9a:8e:a1:3e:af:d4:7c:35:3f:8c:80:aa:e5:29: ef:a1:af:cf -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElBlvjFpWYycovZrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMyMTAwNDUzM1oXDTI3MDYyNDAwNDUzM1owLzEtMCsGA1UEAxMk Y2E5YmQ1NDgtMTExNy00Y2M2LWEwZDAtOTRkYzUyYTMwNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZqQoEYJwt7Xigb9s+n1GYhK8k9mDWdijYLY TCMned8lS88udSBvRQJVJZnSrtc3BlEanAiNdHBMB4yj7ScM+vUgzMfRU8VJ+X2A 6jSal44Q3iFQ7rHWro/MY08KJJhWZfFy0d+eLvATbAh1ROrk8fgzY+K4qJZgy4BL Z3xM6WrSNsdFleFQ7chl4rURc0P/pdXWgYonYIKhy0wIFZ/0SDym/R6qXodZtNE5 +kbFf+MqGJuo4X2MRbdBC40NT+ygTwiHQRzm4zvMufDSWKAzawlmRxLw6nX7G7rc YB1m0rOw3Fpi/wIIwaceChwmeD71/OIlbJp7CU8bWi2EJ6xMywIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOYfl0q54ShHWYf6v52sjDppNIp0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j YTliZDU0OC0xMTE3LTRjYzYtYTBkMC05NGRjNTJhMzA0NDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NhOWJkNTQ4LTExMTctNGNjNi1h MGQwLTk0ZGM1MmEzMDQ0MS9jYTliZDU0OC0xMTE3LTRjYzYtYTBkMC05NGRjNTJh MzA0NDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADNz7owDgQCAAIwCAMGACYC+k0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYX7TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjDbDGTDB5ELZkiPn1EWIE2NaN 5MXWx/1M0YzRSg3lB1x2flELenA6EOGbkFTjnD4U2pTuSn8HuGhPSLhjSQiHaAhs HBLDAUuH7U9y8hCHJQYKvfyMLlpkGPK/fNd3eySCvbLP+Y02q/mVko5nGBzoweG2 LgS/yPosePfodHoQRysg7Vc3NgPcQ79LdYvmzlB66wpt87O/95TqRIWgGx8QatSA N1EZFavghjluIzRmZo7AXhDFpwpi6STcixWtKhyyHE+yNNRV88rHNUJkjJAADsaA VI4lgnjay893n8miahNNqpf8tVMMINxF3ncPmo6hPq/UfDU/jICq5Snvoa/P -----END CERTIFICATE-----Generated at Thu Apr 3 02:50:26 2025 by rpki-client