$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer File: e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer (raw, json) Hash identifier: g130tv//9ZidOha3C+XS7SwkqdE5aAgBKnhHxmvnL5k= Subject key identifier: 2B:2E:80:20:42:1F:A9:57:48:62:1D:95:DA:F8:C1:FE:E2:38:21:33 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848EC8EE1C07FE6BAD03CCFA520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 13:45:32 +0000 Certificate not after: Mon 24 May 2027 12:45:32 +0000 Subordinate resources: AS: 394181 IP: 172.81.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:8e:e1:c0:7f:e6:ba:d0:3c:cf:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 18 13:45:32 2025 GMT Not After : May 24 12:45:32 2027 GMT Subject: CN=e149c4e5-ddb0-4d5b-a074-8d72fceaf83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:25:7c:02:a9:c4:83:a2:78:6d:8b:69:21: d0:17:e5:0f:31:e2:f5:46:1c:20:7b:6d:a3:91:97: 84:1e:31:e8:0b:c8:c7:4a:48:1e:25:7d:02:15:a2: 14:d3:34:fa:ce:a8:76:4d:0d:de:32:a2:26:a9:6e: 38:af:92:e5:c7:53:29:60:ec:4d:ef:83:6a:5b:9c: eb:f3:e0:c8:18:43:53:ce:98:97:97:22:5b:2d:13: ba:92:38:c3:cc:4c:2c:e5:74:0b:de:0c:98:da:ac: 8d:54:fc:c0:37:f0:ba:c9:bd:46:97:2b:c7:8d:c6: b8:cd:4f:9c:83:cc:ff:e2:21:be:8b:2d:a3:85:d8: ad:9d:7d:62:d7:74:5d:fa:96:e4:24:0e:36:c8:59: e4:34:5f:8b:a5:f0:69:cb:b2:b6:e3:a7:19:a6:e3: b7:ee:71:00:91:89:5b:ef:e6:12:ff:19:d0:16:d4: 9c:c0:fa:bf:07:d9:19:22:cd:05:1e:d7:69:4c:c0: 18:b1:a5:b9:60:32:8f:80:9e:95:29:a3:af:f7:4c: 27:12:05:7b:08:22:78:f3:9d:a9:07:dc:4e:61:77: c8:ab:6a:14:e1:5f:1f:ca:85:10:ec:35:43:d7:0f: 40:ff:5a:8d:54:ed:5e:3f:18:44:27:28:b5:8b:9b: 23:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2E:80:20:42:1F:A9:57:48:62:1D:95:DA:F8:C1:FE:E2:38:21:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 172.81.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394181 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c3:cf:e8:09:a3:0d:0b:f6:f4:30:7e:c2:46:d1:af:7e:cc: cf:14:60:1c:b0:e1:a2:be:b8:2b:e3:88:d6:23:83:48:1d:cd: e6:4b:a9:6b:8e:8c:96:86:c8:e1:7a:03:51:26:db:d6:b8:b1: fb:35:94:ac:2e:1b:32:5e:6d:10:05:3a:f6:24:51:14:d5:3f: 81:f5:ab:fc:db:7b:b2:b3:0f:ce:d1:2f:46:41:81:2a:05:e1: 57:86:6d:0e:ff:42:38:79:53:16:ea:fd:f6:9f:26:61:3d:d9: 67:0f:64:2e:83:2c:fc:00:3f:81:0c:1f:c7:23:b7:26:86:76: c1:02:95:6a:d8:51:95:53:42:82:f8:06:b2:f9:02:41:cf:29: 87:fb:62:b3:24:a7:1b:c6:71:a4:f4:2f:a0:49:93:99:93:c3: 9e:e7:c4:d5:e9:3d:81:f5:e0:0a:36:9a:0a:65:87:9a:d2:09: 41:24:dc:fe:ea:de:c0:9b:d9:d8:74:93:1f:03:cb:55:80:96: 0e:02:70:32:e4:07:79:f2:9a:43:fe:91:05:44:c9:8d:76:c8: 50:f0:9f:10:6b:61:3a:b8:39:2e:8f:b8:97:a8:57:a5:b4:5d: ba:51:7a:7b:91:19:8e:31:58:4c:50:28:f5:6a:47:d1:99:c0: 6b:92:d0:43 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEjsjuHAf+a60DzPpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxODEzNDUzMloXDTI3MDUyNDEyNDUzMlowLzEtMCsGA1UEAxMk ZTE0OWM0ZTUtZGRiMC00ZDViLWEwNzQtOGQ3MmZjZWFmODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7olfAKpxIOieG2LaSHQF+UPMeL1Rhwge22j kZeEHjHoC8jHSkgeJX0CFaIU0zT6zqh2TQ3eMqImqW44r5Llx1MpYOxN74NqW5zr 8+DIGENTzpiXlyJbLRO6kjjDzEws5XQL3gyY2qyNVPzAN/C6yb1GlyvHjca4zU+c g8z/4iG+iy2jhditnX1i13Rd+pbkJA42yFnkNF+LpfBpy7K246cZpuO37nEAkYlb 7+YS/xnQFtScwPq/B9kZIs0FHtdpTMAYsaW5YDKPgJ6VKaOv90wnEgV7CCJ4852p B9xOYXfIq2oU4V8fyoUQ7DVD1w9A/1qNVO1ePxhEJyi1i5sjdQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCsugCBCH6lXSGIdldr4wf7iOCEzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l MTQ5YzRlNS1kZGIwLTRkNWItYTA3NC04ZDcyZmNlYWY4M2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2UxNDljNGU1LWRkYjAtNGQ1Yi1h MDc0LThkNzJmY2VhZjgzYS9lMTQ5YzRlNS1kZGIwLTRkNWItYTA3NC04ZDcyZmNl YWY4M2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKsUVwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgPFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIXDz+gJow0L9vQwfsJG0a9+zM8UYByw4aK+uCvjiNYjg0gd zeZLqWuOjJaGyOF6A1Em29a4sfs1lKwuGzJebRAFOvYkURTVP4H1q/zbe7KzD87R L0ZBgSoF4VeGbQ7/Qjh5Uxbq/fafJmE92WcPZC6DLPwAP4EMH8cjtyaGdsEClWrY UZVTQoL4BrL5AkHPKYf7YrMkpxvGcaT0L6BJk5mTw57nxNXpPYH14Ao2mgplh5rS CUEk3P7q3sCb2dh0kx8Dy1WAlg4CcDLkB3nymkP+kQVEyY12yFDwnxBrYTq4OS6P uJeoV6W0XbpRenuRGY4xWExQKPVqR9GZwGuS0EM= -----END CERTIFICATE-----Generated at Thu Apr 3 02:41:12 2025 by rpki-client