$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer File: dc3a2d18-b171-46fa-8693-0080d77f0579.cer (raw, json) Hash identifier: VQ+LkCCTB7wJ7eu9dC2ltAdXvV0CqZiapZPzbkikdJM= Subject key identifier: D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584875E8CFD36317886A4E6E1000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 01:45:33 +0000 Certificate not after: Mon 12 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 142.132.0.0/17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:e8:cf:d3:63:17:88:6a:4e:6e:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 7 01:45:33 2025 GMT Not After : Apr 12 00:45:33 2027 GMT Subject: CN=dc3a2d18-b171-46fa-8693-0080d77f0579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:d6:35:ae:ed:5d:d7:f7:a9:45:cd:b1:ac: a5:ec:22:e3:34:6c:c4:ac:1e:fe:1d:f0:d5:2f:f4: ec:d7:65:ef:6c:d3:4d:33:51:bf:96:16:2e:f6:07: 77:d0:46:ed:8e:38:66:ec:63:85:82:1e:d6:69:21: d6:62:56:e5:b6:20:37:9b:dc:04:56:5b:87:67:01: 98:7f:92:23:57:04:88:3d:4a:ec:51:ca:17:85:51: a4:db:90:26:fa:b3:98:e2:bb:0d:7a:d8:e9:30:c5: 9c:59:8e:24:c4:1c:6c:c2:7c:b4:74:a8:ba:1a:dc: 08:7a:49:6c:72:15:d0:32:83:73:1b:d6:06:90:58: d8:43:32:95:2c:de:9b:6d:60:81:5a:f2:69:c1:7f: dc:91:a8:41:d8:58:c6:44:83:d2:20:03:31:95:69: 08:ed:9b:e1:bc:7b:dd:79:4f:98:d1:a2:0b:6c:d9: d6:02:2e:d0:0d:fa:f2:0b:a6:71:3d:2e:35:04:51: 83:c3:22:40:6b:84:8b:af:d6:9f:ce:e5:8c:35:b1: 94:8a:56:2a:90:03:46:cb:b1:6a:e3:b4:66:16:d3: 35:87:a3:a5:cf:16:75:af:eb:11:45:5d:8b:cb:9d: 4e:e3:44:b1:02:5f:56:94:f5:91:fb:af:44:56:a8: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 142.132.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e9:cc:da:8b:f0:13:83:55:83:43:76:11:44:49:ba:2b:32: 69:c9:9e:67:24:51:ba:40:d3:71:b9:3a:e5:18:98:ff:11:db: 6b:25:11:5f:4a:00:0c:ad:8b:dc:a6:cd:f3:4b:ea:11:94:6f: 60:74:19:73:31:2a:a9:e9:21:f8:2f:4e:f7:fc:bf:99:ff:d7: 14:56:f4:fc:3e:fe:4a:78:95:06:07:e2:2e:57:bc:2c:c6:07: e2:70:0f:9c:40:e3:64:3a:25:5d:43:a6:f6:5a:9d:59:fd:af: d6:66:cf:87:c8:b5:f1:8f:bb:4b:fe:ed:2f:36:a1:19:d6:5b: 44:7c:09:9c:32:52:84:e6:32:c2:5e:6b:32:d8:49:3d:87:65: a8:dc:25:52:23:83:54:f8:8d:ec:cf:05:31:f3:0f:69:29:ac: 1a:0e:2a:15:75:74:76:be:3e:23:d1:65:85:2c:59:f1:83:33: 26:93:45:4d:0b:56:aa:15:3f:17:93:62:79:9a:69:c1:07:c0: 27:aa:9f:9f:58:a0:cf:19:26:2e:62:6e:c3:4c:26:4f:81:ea: 36:f3:05:34:66:ad:6a:67:dd:fe:f0:a5:67:6b:68:ff:00:0f: ef:09:f9:30:4f:2e:5c:f9:a0:1a:9e:a2:4c:95:d0:1a:78:e4: 4a:75:a2:81 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEh16M/TYxeIak5uEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEwNzAxNDUzM1oXDTI3MDQxMjAwNDUzM1owLzEtMCsGA1UEAxMk ZGMzYTJkMTgtYjE3MS00NmZhLTg2OTMtMDA4MGQ3N2YwNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+rWNa7tXdf3qUXNsayl7CLjNGzErB7+HfDV L/Ts12XvbNNNM1G/lhYu9gd30Ebtjjhm7GOFgh7WaSHWYlbltiA3m9wEVluHZwGY f5IjVwSIPUrsUcoXhVGk25Am+rOY4rsNetjpMMWcWY4kxBxswny0dKi6GtwIekls chXQMoNzG9YGkFjYQzKVLN6bbWCBWvJpwX/ckahB2FjGRIPSIAMxlWkI7ZvhvHvd eU+Y0aILbNnWAi7QDfryC6ZxPS41BFGDwyJAa4SLr9afzuWMNbGUilYqkANGy7Fq 47RmFtM1h6OlzxZ1r+sRRV2Ly51O40SxAl9WlPWR+69EVqitdwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNSFxv20WnvWbuUwS0KSwImhbLM3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k YzNhMmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgwZDc3ZjA1NzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2RjM2EyZDE4LWIxNzEtNDZmYS04 NjkzLTAwODBkNzdmMDU3OS9kYzNhMmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgwZDc3 ZjA1NzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAeOhAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVOnM2ovwE4NVg0N2EURJ uisyacmeZyRRukDTcbk65RiY/xHbayURX0oADK2L3KbN80vqEZRvYHQZczEqqekh +C9O9/y/mf/XFFb0/D7+SniVBgfiLle8LMYH4nAPnEDjZDolXUOm9lqdWf2v1mbP h8i18Y+7S/7tLzahGdZbRHwJnDJShOYywl5rMthJPYdlqNwlUiODVPiN7M8FMfMP aSmsGg4qFXV0dr4+I9FlhSxZ8YMzJpNFTQtWqhU/F5NieZppwQfAJ6qfn1igzxkm LmJuw0wmT4HqNvMFNGatamfd/vClZ2to/wAP7wn5ME8uXPmgGp6iTJXQGnjkSnWi gQ== -----END CERTIFICATE-----Generated at Thu Apr 3 02:52:01 2025 by rpki-client