$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer File: e0016267-dc0a-4a90-a925-951bf1a98788.cer (raw, json) Hash identifier: vtUFYiofIynz7TDTVaANiHGc7o8kz4yfuWss7Wyn1QY= Subject key identifier: 66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848ADBE7E13C8B4149E08850B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Jan 2025 01:45:32 +0000 Certificate not after: Sun 02 May 2027 00:45:32 +0000 Subordinate resources: AS: 18907 AS: 401165 IP: 104.219.144.0/22 IP: 162.249.36.0/22 IP: 2605:2880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:be:7e:13:c8:b4:14:9e:08:85:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 27 01:45:32 2025 GMT Not After : May 2 00:45:32 2027 GMT Subject: CN=e0016267-dc0a-4a90-a925-951bf1a98788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:62:8d:33:f1:db:cd:45:44:38:21:5f:f0: ff:5f:92:b9:a1:cf:ec:65:03:83:78:26:21:18:35: 27:43:33:43:56:e9:d3:29:19:54:cc:63:72:a5:50: 6c:c1:2e:84:39:3b:1a:8e:4d:f1:ca:9e:52:e2:1c: 57:48:de:e5:59:7e:b4:2f:4c:97:2b:5b:fa:37:22: b4:60:8f:c8:de:70:13:68:b8:43:a9:7a:6f:93:5e: 62:7e:58:c1:1f:b3:34:55:03:11:c9:20:6d:81:d0: 29:b0:ed:9b:a4:fb:e5:5e:ec:8c:df:d7:52:07:0a: c1:ea:66:b7:f4:0a:1a:b4:30:0e:40:b6:22:ea:bb: 5c:ef:74:21:bd:ff:38:66:ca:2b:41:c9:50:5c:cd: 23:95:a3:f0:94:30:c0:59:81:37:51:90:b8:70:0a: c3:d6:4d:30:78:82:36:a7:f1:74:a4:54:3e:31:33: a9:ca:0b:93:9c:7f:2b:2b:42:45:13:f0:ee:8c:11: c6:de:ac:a3:c5:29:5e:c6:c6:10:e1:9b:80:ae:11: f9:7d:93:46:6a:3a:3e:61:6d:ee:de:3b:e3:b4:0a: ed:40:e6:02:4e:a2:af:a6:8f:8a:58:61:7e:9f:b6: 41:57:7c:7d:e1:52:a0:2c:18:d2:bb:41:bd:e6:05: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.219.144.0/22 162.249.36.0/22 IPv6: 2605:2880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18907 401165 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:42:d2:3d:50:97:af:ed:6d:33:d9:6d:66:a8:eb:a4:0b:5b: cc:07:a2:b7:3b:d6:1c:56:fc:3f:ca:af:14:75:f9:2f:6c:e9: e3:77:d0:f3:d1:5d:a8:da:0b:c7:bd:57:38:c5:f3:14:c4:ac: d4:51:2f:35:bd:eb:68:31:f9:62:99:5a:a4:d1:4e:15:8a:a6: e3:83:a8:f4:f3:28:4c:7f:f0:56:79:8d:5a:3b:e0:9e:4e:b6: 80:09:e8:40:ef:3a:90:99:0d:7c:88:ed:c5:87:75:8d:a5:86: ea:b3:59:56:09:16:2e:1c:57:a2:99:27:a9:fc:c4:6a:21:61: 75:82:3a:2b:a9:f7:c5:e3:cb:50:e0:09:d5:ef:04:be:ca:69: ec:d4:58:da:70:3e:2b:12:7f:51:11:3e:35:4f:80:86:71:3c: ad:3d:c1:b8:b1:0e:7d:ee:5d:ff:9c:b5:ee:29:aa:0a:5c:02: 0c:9d:5b:47:8f:7f:10:f5:42:78:5b:27:d4:51:3d:88:c5:41: 01:b5:1a:ab:7d:f6:69:7e:6c:66:0e:b1:06:45:92:34:36:fe: a9:be:5d:0b:bf:ce:9f:3a:6c:40:fb:3c:a6:f3:7e:79:4e:76: af:7e:9a:e0:0c:87:b6:b3:33:a6:a9:fd:3a:0b:4a:a8:ad:49: fe:a2:d5:c8 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEitvn4TyLQUngiFC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyNzAxNDUzMloXDTI3MDUwMjAwNDUzMlowLzEtMCsGA1UEAxMk ZTAwMTYyNjctZGMwYS00YTkwLWE5MjUtOTUxYmYxYTk4Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqtijTPx281FRDghX/D/X5K5oc/sZQODeCYh GDUnQzNDVunTKRlUzGNypVBswS6EOTsajk3xyp5S4hxXSN7lWX60L0yXK1v6NyK0 YI/I3nATaLhDqXpvk15ifljBH7M0VQMRySBtgdApsO2bpPvlXuyM39dSBwrB6ma3 9AoatDAOQLYi6rtc73Qhvf84ZsorQclQXM0jlaPwlDDAWYE3UZC4cArD1k0weII2 p/F0pFQ+MTOpyguTnH8rK0JFE/DujBHG3qyjxSlexsYQ4ZuArhH5fZNGajo+YW3u 3jvjtArtQOYCTqKvpo+KWGF+n7ZBV3x94VKgLBjSu0G95gUhkQIDAQABo4IENDCC BDAwHQYDVR0OBBYEFGYjewIKLxJ6ucHNt/qk2K1Xh3YDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l MDAxNjI2Ny1kYzBhLTRhOTAtYTkyNS05NTFiZjFhOTg3ODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2UwMDE2MjY3LWRjMGEtNGE5MC1h OTI1LTk1MWJmMWE5ODc4OC9lMDAxNjI2Ny1kYzBhLTRhOTAtYTkyNS05NTFiZjFh OTg3ODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJo25ADBAKi+SQwDQQCAAIwBwMFACYFKIAwHgYI KwYBBQUHAQgBAf8EDzANoAswCQICSdsCAwYfDTBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWQtI9UJev7W0z 2W1mqOukC1vMB6K3O9YcVvw/yq8UdfkvbOnjd9Dz0V2o2gvHvVc4xfMUxKzUUS81 vetoMflimVqk0U4Viqbjg6j08yhMf/BWeY1aO+CeTraACehA7zqQmQ18iO3Fh3WN pYbqs1lWCRYuHFeimSep/MRqIWF1gjorqffF48tQ4AnV7wS+ymns1FjacD4rEn9R ET41T4CGcTytPcG4sQ597l3/nLXuKaoKXAIMnVtHj38Q9UJ4WyfUUT2IxUEBtRqr ffZpfmxmDrEGRZI0Nv6pvl0Lv86fOmxA+zym8355TnavfprgDIe2szOmqf06C0qo rUn+otXI -----END CERTIFICATE-----Generated at Thu Apr 3 02:57:36 2025 by rpki-client