$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer File: d0df77c4-4a94-461b-9582-441eb75796a4.cer (raw, json) Hash identifier: R9JOwohCdYguOy9Pw/2wKqOp0M0UWgf95k+IZ4B1p8I= Subject key identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584922E1741A55992E0E43982480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Mar 2025 00:45:33 +0000 Certificate not after: Sun 13 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 192.139.35.0/24 IP: 206.108.10.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:22:e1:74:1a:55:99:2e:0e:43:98:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 10 00:45:33 2025 GMT Not After : Jun 13 00:45:33 2027 GMT Subject: CN=d0df77c4-4a94-461b-9582-441eb75796a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:d4:1a:a1:19:40:46:f1:e3:8f:77:ee:7e: cc:f8:68:b2:7e:50:ef:85:e2:82:ca:8f:ab:72:e0: b9:2d:6f:e0:95:9e:3d:a7:42:a9:85:68:a0:cb:35: 4c:9e:d8:68:3d:8d:c1:70:5a:68:a0:56:0b:1d:c5: 6c:72:3c:d6:a1:3d:d2:09:8f:bd:71:c3:89:a7:19: eb:85:84:b2:0b:4a:b9:26:17:2d:fd:20:16:b1:63: 91:a8:b3:f5:c9:2b:c3:52:7b:b1:95:8f:dc:1a:73: e6:09:b3:bd:b1:09:76:e6:7e:d9:37:a8:97:ec:b7: cf:4e:cb:02:e3:a0:fc:f5:d5:22:8d:d5:f6:11:81: 0c:50:d7:25:1d:d7:b2:12:71:82:3d:c8:c7:bb:97: e1:b5:3b:a7:fa:d0:54:e1:dc:c2:70:f9:d6:99:ca: 36:8a:27:6f:91:78:aa:ce:19:09:ae:a3:5d:db:a3: 5b:ac:a4:89:a4:b2:0c:5a:ea:43:d6:db:e4:9e:01: d3:04:de:70:f5:38:1d:90:dc:0f:08:10:f5:33:6a: 5b:b3:5a:78:9e:06:91:e1:de:9e:d5:12:2e:ac:b6: cb:1b:3f:48:16:80:f9:cb:fd:d6:e2:6e:44:09:9c: 5c:1c:ae:6d:d3:5d:19:47:22:ad:76:28:06:0d:13: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.139.35.0/24 206.108.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c6:1e:9b:96:57:62:a7:cf:fe:26:67:b0:79:65:95:3c:ce: de:0c:0d:f6:f4:67:9d:67:f4:06:d6:f4:5d:39:7d:18:81:32: 9b:a3:cd:e9:2d:f1:d6:7d:75:97:9a:a0:11:a9:c5:ed:bb:ab: b6:93:45:86:d8:23:e1:d2:69:76:ad:ef:25:43:ab:5c:70:c9: 7d:12:c8:5f:55:55:7f:94:a7:5a:b6:42:27:8e:44:b0:73:96: 56:87:df:12:82:29:bc:55:92:50:a8:80:7c:66:a8:f2:51:3f: 59:44:8d:ff:75:d5:00:94:f6:1e:fc:d7:ec:ba:45:17:e2:a1: 22:da:8a:48:18:d7:dc:6d:73:17:9f:e6:c4:aa:45:ef:71:6d: 4e:c9:3e:97:ce:db:cf:db:ec:c6:0d:be:82:8d:cc:9f:c4:e6: c1:f4:db:e3:7f:b2:63:d4:74:30:b3:24:3d:8d:00:c0:95:3d: dc:f4:e1:b9:eb:e3:5b:11:b7:77:ec:a8:3c:fa:09:8a:7b:b6: d8:96:0a:81:e2:40:eb:fb:01:7d:f8:f9:43:af:48:d9:58:e6: d5:60:b9:5c:5b:92:3c:12:74:e0:9e:c3:66:fd:b6:00:0b:23: aa:7d:7e:9a:e1:e6:01:81:96:b4:94:78:aa:d6:d7:2d:9c:43: fd:30:62:6c -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEki4XQaVZkuDkOYJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxMDAwNDUzM1oXDTI3MDYxMzAwNDUzM1owLzEtMCsGA1UEAxMk ZDBkZjc3YzQtNGE5NC00NjFiLTk1ODItNDQxZWI3NTc5NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidXUGqEZQEbx44937n7M+GiyflDvheKCyo+r cuC5LW/glZ49p0KphWigyzVMnthoPY3BcFpooFYLHcVscjzWoT3SCY+9ccOJpxnr hYSyC0q5Jhct/SAWsWORqLP1ySvDUnuxlY/cGnPmCbO9sQl25n7ZN6iX7LfPTssC 46D89dUijdX2EYEMUNclHdeyEnGCPcjHu5fhtTun+tBU4dzCcPnWmco2iidvkXiq zhkJrqNd26NbrKSJpLIMWupD1tvkngHTBN5w9TgdkNwPCBD1M2pbs1p4ngaR4d6e 1RIurLbLGz9IFoD5y/3W4m5ECZxcHK5t010ZRyKtdigGDRMfbwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFNph5N82cTaKFWFQS5N4RgXwe8n8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MGRmNzdjNC00YTk0LTQ2MWItOTU4Mi00NDFlYjc1Nzk2YTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QwZGY3N2M0LTRhOTQtNDYxYi05 NTgyLTQ0MWViNzU3OTZhNC9kMGRmNzdjNC00YTk0LTQ2MWItOTU4Mi00NDFlYjc1 Nzk2YTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAiyMDBAHObAowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjcYem5ZXYqfP /iZnsHlllTzO3gwN9vRnnWf0Btb0XTl9GIEym6PN6S3x1n11l5qgEanF7burtpNF htgj4dJpdq3vJUOrXHDJfRLIX1VVf5SnWrZCJ45EsHOWVoffEoIpvFWSUKiAfGao 8lE/WUSN/3XVAJT2HvzX7LpFF+KhItqKSBjX3G1zF5/mxKpF73FtTsk+l87bz9vs xg2+go3Mn8TmwfTb43+yY9R0MLMkPY0AwJU93PThuevjWxG3d+yoPPoJinu22JYK geJA6/sBffj5Q69I2Vjm1WC5XFuSPBJ04J7DZv22AAsjqn1+muHmAYGWtJR4qtbX LZxD/TBibA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:51:12 2025 by rpki-client