$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer File: d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer (raw, json) Hash identifier: QlnX8JKbTYec2buIlUt7Q+OVVi6PczHylYeOb/woqq0= Subject key identifier: F7:AF:85:9C:C5:87:97:D0:48:7A:5E:98:0F:A5:AB:19:66:D3:C9:27 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848D904185AE53A3D6518961500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 13:45:33 +0000 Certificate not after: Mon 17 May 2027 12:45:33 +0000 Subordinate resources: AS: 19039 IP: 162.217.24.0/21 IP: 199.68.216.0/22 IP: 199.101.168.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:04:18:5a:e5:3a:3d:65:18:96:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 11 13:45:33 2025 GMT Not After : May 17 12:45:33 2027 GMT Subject: CN=d7058b26-d77c-4005-8cb8-f5876d4c0d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0a:bb:c3:8c:62:99:15:04:f3:cc:ef:9f:8f: a0:83:9f:31:8f:2a:5e:a4:d1:99:1a:25:6a:6d:93: 63:cc:8f:c2:11:7a:1c:0c:f8:b6:a2:42:1e:5f:ba: b5:15:e8:31:9f:a2:1c:5a:2c:ae:54:d7:30:73:69: a5:08:97:85:6d:7b:21:1c:27:63:d2:5b:84:69:46: 4e:69:27:a0:95:7c:7f:90:31:6d:f5:7e:94:da:67: 01:1d:7c:7c:16:50:26:cb:c6:37:8c:f0:22:9f:8c: 89:3d:58:09:9b:82:c3:5f:99:be:70:57:3d:c4:f0: be:8c:db:90:73:45:14:2a:fa:52:77:0a:e8:b1:04: 67:1a:7e:57:14:50:d8:bc:8c:bc:fc:f5:2f:29:d9: 3c:32:70:d6:7f:72:ca:4f:73:d0:2f:f7:04:52:a8: e4:7d:cb:6f:b9:d9:7d:8b:cb:5b:48:9e:52:87:97: 38:f4:9d:6b:1e:3e:f2:31:f9:ba:e4:4f:b4:a4:43: 31:5b:76:55:c2:29:25:30:4d:bb:6e:28:00:5e:01: 9c:b7:ee:ef:81:0f:4d:79:94:e8:71:b2:fa:cc:a9: 7c:9f:0c:05:db:19:33:58:75:bf:f8:4e:1f:d1:12: 94:ff:a2:b7:a3:03:66:aa:e5:e5:61:db:a7:ad:25: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AF:85:9C:C5:87:97:D0:48:7A:5E:98:0F:A5:AB:19:66:D3:C9:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 162.217.24.0/21 199.68.216.0/22 199.101.168.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19039 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:bc:08:aa:d9:43:2d:3e:e0:7d:37:cb:a4:aa:22:04:52:38: 15:8c:f2:6c:5c:19:69:13:33:9a:ac:b6:17:d1:9b:5c:67:77: 4e:d0:8d:ee:0b:6a:26:ea:36:31:97:12:2f:f3:93:7c:3a:4f: 7e:3a:22:dd:62:29:be:8d:e7:73:ba:53:5b:d9:40:83:c8:96: a5:53:e2:c9:4c:d9:e9:87:cf:74:3e:68:87:21:a5:77:79:04: 5e:e9:16:1f:3d:a7:8d:e6:20:82:70:f6:f7:1b:cb:45:db:65: af:c1:e6:7d:b4:d9:44:b0:91:f6:ad:b6:4e:91:de:46:55:a2: ab:7a:ce:d3:e7:f9:fe:e3:d2:ec:57:84:af:e5:5a:46:e2:8e: dd:be:6b:66:d6:91:d5:7c:0d:67:31:40:41:63:dc:d3:f3:a6: 49:ae:3b:94:13:5b:4a:9d:25:18:b3:aa:97:14:79:a5:8d:95: 77:48:d7:d0:54:aa:c2:c3:ab:f1:9f:93:af:e8:c9:7e:eb:56: 0f:d3:62:c5:4e:f0:03:33:78:22:83:8f:6b:a2:b8:2e:04:f9: e3:27:fc:ef:7d:21:ad:4d:ba:b7:b9:c0:36:02:e7:e9:a6:7d: 74:6a:fc:2f:46:28:44:e4:33:f2:22:41:fa:34:9a:64:07:c5: 64:b8:92:9a -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEjZBBha5To9ZRiWFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxMTEzNDUzM1oXDTI3MDUxNzEyNDUzM1owLzEtMCsGA1UEAxMk ZDcwNThiMjYtZDc3Yy00MDA1LThjYjgtZjU4NzZkNGMwZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwq7w4ximRUE88zvn4+gg58xjypepNGZGiVq bZNjzI/CEXocDPi2okIeX7q1Fegxn6IcWiyuVNcwc2mlCJeFbXshHCdj0luEaUZO aSeglXx/kDFt9X6U2mcBHXx8FlAmy8Y3jPAin4yJPVgJm4LDX5m+cFc9xPC+jNuQ c0UUKvpSdwrosQRnGn5XFFDYvIy8/PUvKdk8MnDWf3LKT3PQL/cEUqjkfctvudl9 i8tbSJ5Sh5c49J1rHj7yMfm65E+0pEMxW3ZVwiklME27bigAXgGct+7vgQ9NeZTo cbL6zKl8nwwF2xkzWHW/+E4f0RKU/6K3owNmquXlYdunrSV+KQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFPevhZzFh5fQSHpemA+lqxlm08knMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k NzA1OGIyNi1kNzdjLTQwMDUtOGNiOC1mNTg3NmQ0YzBkMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04 Y2I4LWY1ODc2ZDRjMGQxNS9kNzA1OGIyNi1kNzdjLTQwMDUtOGNiOC1mNTg3NmQ0 YzBkMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAOi2RgDBALHRNgDBALHZagwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICSl8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAebwIqtlDLT7gfTfLpKoiBFI4FYzybFwZ aRMzmqy2F9GbXGd3TtCN7gtqJuo2MZcSL/OTfDpPfjoi3WIpvo3nc7pTW9lAg8iW pVPiyUzZ6YfPdD5ohyGld3kEXukWHz2njeYggnD29xvLRdtlr8HmfbTZRLCR9q22 TpHeRlWiq3rO0+f5/uPS7FeEr+VaRuKO3b5rZtaR1XwNZzFAQWPc0/OmSa47lBNb Sp0lGLOqlxR5pY2Vd0jX0FSqwsOr8Z+Tr+jJfutWD9NixU7wAzN4IoOPa6K4LgT5 4yf8730hrU26t7nANgLn6aZ9dGr8L0YoROQz8iJB+jSaZAfFZLiSmg== -----END CERTIFICATE-----Generated at Thu Apr 3 02:40:11 2025 by rpki-client