$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99.cer File: d04c21a5-fe55-4921-afcb-74705ac57d99.cer (raw, json) Hash identifier: 7ryaZr+YY2OBYfugzFEbnHQTmXkYniF9t7nM2+txy/I= Subject key identifier: E1:58:58:2E:68:01:43:78:30:B4:56:09:0D:90:FD:07:66:F4:67:3C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848AAF3CE5011C7D4D918D6E700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/d04c21a5-fe55-4921-afcb-74705ac57d99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jan 2025 01:45:32 +0000 Certificate not after: Sat 01 May 2027 00:45:32 +0000 Subordinate resources: IP: 139.103.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:f3:ce:50:11:c7:d4:d9:18:d6:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 26 01:45:32 2025 GMT Not After : May 1 00:45:32 2027 GMT Subject: CN=d04c21a5-fe55-4921-afcb-74705ac57d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:57:2b:a5:ae:57:c4:6f:1e:86:63:54:cd: 4f:40:a0:5b:ff:0f:00:ba:c5:5b:58:e7:da:f4:56: 18:07:19:45:5d:81:80:ce:fa:b6:d8:3c:ce:0a:ff: 83:ea:8f:0b:67:ce:db:cc:8e:c1:82:f3:7f:6a:ab: b4:24:75:d2:5d:5f:ed:48:34:3d:b1:f1:cd:b5:f5: 76:cc:9c:3c:79:7d:12:d0:d5:2b:ad:1c:a7:9f:a8: 11:07:95:76:70:81:44:85:8c:81:43:27:f7:8a:96: f8:05:f0:d2:8a:90:5c:6a:ee:fd:15:48:cd:58:97: a9:f2:84:95:08:d8:e5:18:c0:b2:3f:e4:79:e1:ad: 79:79:cc:4e:62:c4:02:5b:38:1b:2a:85:98:07:57: 9d:a5:7e:03:60:33:7f:2f:56:4f:dc:b3:10:f4:49: 09:be:c1:26:de:e2:1f:21:45:c8:7a:02:56:84:3f: 8b:4d:6a:7e:e9:1f:95:26:2c:6a:ac:f0:d8:6b:4c: 0a:3f:dd:9a:92:11:e6:d9:64:db:a6:26:1a:32:62: 53:2a:c4:34:ba:d2:b7:a5:6f:3a:bb:aa:5c:98:65: 50:4b:d8:b4:24:1f:df:63:bf:46:05:65:e7:c0:37: 3d:c9:fe:7a:a6:ac:12:2a:bc:35:7c:b5:4b:cc:c7: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:58:2E:68:01:43:78:30:B4:56:09:0D:90:FD:07:66:F4:67:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d04c21a5-fe55-4921-afcb-74705ac57d99/d04c21a5-fe55-4921-afcb-74705ac57d99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 139.103.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b1:07:76:4e:68:1f:5c:b5:a9:cf:92:08:92:be:1b:80:8d: 07:86:c3:fb:34:f4:56:1c:59:51:b9:ba:55:40:8d:56:12:15: 44:23:63:7a:14:f0:ae:e8:46:93:71:68:eb:4c:eb:c6:9e:ac: a3:dc:a8:86:d9:f5:dd:6d:e8:b0:89:46:54:e3:b5:b3:d2:ae: d3:c2:6a:fd:2d:91:9b:19:d1:9b:a4:9e:4f:06:f1:60:7e:ad: 56:a9:2d:29:5c:df:a3:8e:fd:cd:6a:f1:cd:c4:74:9a:15:6f: 38:25:df:62:cf:90:e8:f5:10:e9:07:89:be:f2:c1:5d:c1:ac: a9:14:22:d9:8a:8a:ca:fb:f2:c0:04:d7:75:73:35:46:15:b3: 82:d9:46:0b:a8:cb:d8:da:0a:00:d2:21:38:66:5a:d9:f7:f6: c6:2c:02:b8:7f:1d:76:80:a8:e8:8b:59:e2:26:21:0c:49:df: 0f:b2:43:aa:11:1b:18:fa:95:00:ad:42:c4:a2:ce:f1:25:e3: 64:f1:58:57:93:e4:7f:db:82:29:75:4b:18:64:69:98:c6:b9: e5:47:8c:41:c9:0b:4d:02:ed:aa:8a:90:1c:7e:23:10:b0:ba: 31:1d:41:53:39:88:a6:01:b4:65:91:d2:db:b7:2b:af:0b:78: cc:7b:13:76 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEiq885QEcfU2RjW5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyNjAxNDUzMloXDTI3MDUwMTAwNDUzMlowLzEtMCsGA1UEAxMk ZDA0YzIxYTUtZmU1NS00OTIxLWFmY2ItNzQ3MDVhYzU3ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2JXK6WuV8RvHoZjVM1PQKBb/w8AusVbWOfa 9FYYBxlFXYGAzvq22DzOCv+D6o8LZ87bzI7BgvN/aqu0JHXSXV/tSDQ9sfHNtfV2 zJw8eX0S0NUrrRynn6gRB5V2cIFEhYyBQyf3ipb4BfDSipBcau79FUjNWJep8oSV CNjlGMCyP+R54a15ecxOYsQCWzgbKoWYB1edpX4DYDN/L1ZP3LMQ9EkJvsEm3uIf IUXIegJWhD+LTWp+6R+VJixqrPDYa0wKP92akhHm2WTbpiYaMmJTKsQ0utK3pW86 u6pcmGVQS9i0JB/fY79GBWXnwDc9yf56pqwSKrw1fLVLzMehZQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFOFYWC5oAUN4MLRWCQ2Q/Qdm9Gc8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MDRjMjFhNS1mZTU1LTQ5MjEtYWZjYi03NDcwNWFjNTdkOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QwNGMyMWE1LWZlNTUtNDkyMS1h ZmNiLTc0NzA1YWM1N2Q5OS9kMDRjMjFhNS1mZTU1LTQ5MjEtYWZjYi03NDcwNWFj NTdkOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCLZzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbsQd2TmgfXLWpz5IIkr4b gI0HhsP7NPRWHFlRubpVQI1WEhVEI2N6FPCu6EaTcWjrTOvGnqyj3KiG2fXdbeiw iUZU47Wz0q7Twmr9LZGbGdGbpJ5PBvFgfq1WqS0pXN+jjv3NavHNxHSaFW84Jd9i z5Do9RDpB4m+8sFdwaypFCLZiorK+/LABNd1czVGFbOC2UYLqMvY2goA0iE4ZlrZ 9/bGLAK4fx12gKjoi1niJiEMSd8PskOqERsY+pUArULEos7xJeNk8VhXk+R/24Ip dUsYZGmYxrnlR4xByQtNAu2qipAcfiMQsLoxHUFTOYimAbRlkdLbtyuvC3jMexN2 -----END CERTIFICATE-----Generated at Thu Apr 3 02:56:03 2025 by rpki-client