$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer File: e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer (raw, json) Hash identifier: qsEu8DmepVnjzKULoHGMjST+BswBRPE+YOHclVsE6mk= Subject key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584922E1747E17552F91A67060C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Mar 2025 00:45:33 +0000 Certificate not after: Sun 13 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 10442 IP: 165.224.0.0/16 IP: 2610:e8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:22:e1:74:7e:17:55:2f:91:a6:70:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 10 00:45:33 2025 GMT Not After : Jun 13 00:45:33 2027 GMT Subject: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:59:e4:7b:cd:3b:b4:1d:35:cc:b4:93:88: f0:42:33:5b:3c:fa:02:11:0f:be:db:87:72:a5:12: c0:a7:2a:c0:fc:16:55:a5:20:c7:cc:7e:54:24:51: 98:84:de:0e:4a:f9:85:f3:84:65:4f:08:23:75:3f: 0c:fc:c6:08:c8:4e:b0:e4:ce:9f:42:2f:38:94:4c: db:af:0e:50:c5:ba:f4:3b:11:ad:0f:59:dd:10:73: 51:cb:27:ae:bc:25:10:21:00:94:a5:c5:71:38:f1: e7:8b:f3:d0:d9:2b:5a:db:49:8f:46:2a:1b:dc:3e: 25:f1:89:02:38:fb:b6:1e:f3:5a:f5:02:ff:4b:8c: 4f:65:63:08:be:96:6f:35:a6:60:e3:29:04:57:81: 91:d5:51:ff:48:de:2d:a9:33:41:cb:73:37:76:b0: 54:f2:66:aa:8c:3d:da:ba:b9:1e:3b:a6:74:c2:21: e8:01:28:bb:cf:ee:75:3f:10:d7:09:0d:89:68:58: d8:20:2a:69:d3:36:b2:25:6f:64:bf:bf:e9:82:12: d3:d2:b6:a0:f3:88:8f:a6:43:5d:0e:1e:28:78:55: 5c:b7:41:61:d5:3d:04:52:06:26:5f:85:41:44:09: d1:0a:f8:b6:a3:de:6b:66:a4:b9:5f:dd:e9:37:f0: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 165.224.0.0/16 IPv6: 2610:e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10442 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:14:a8:e6:80:aa:39:fb:b8:d0:25:70:88:77:88:4c:93:f8: f5:57:7a:a9:6f:78:71:bc:45:3e:a3:ac:1e:33:90:19:6a:f6: 53:ba:dc:b5:55:3b:a2:86:34:3f:98:dd:80:da:d4:71:b5:37: 6c:4b:8a:c2:0c:49:b9:ad:81:00:f0:6c:85:58:83:10:32:13: b1:8e:22:01:df:96:5d:8f:72:6d:66:27:c1:8a:3a:f5:7f:2b: 0b:6b:ee:41:1c:54:e8:82:5e:b4:0e:b7:64:31:f6:d3:6c:d6: 0e:49:70:ab:4d:17:b3:9a:a6:2e:16:15:47:ad:da:40:c6:a4: 05:79:97:ce:f1:16:25:b4:4c:c5:18:fe:d4:61:87:d8:63:25: 83:b1:da:fd:a1:5a:fe:9e:9a:cd:02:ab:5c:db:5a:23:6f:d1: 8b:23:55:9d:dd:e7:18:0f:82:4d:a6:50:a6:91:5e:ea:02:2a: 39:5f:e3:b0:7a:97:09:18:6c:6b:7a:14:f0:ba:c1:e8:82:1a: f9:a0:08:22:a5:ed:91:81:ee:81:41:08:c9:56:95:18:f5:44: 44:b4:38:df:1c:9a:92:2d:94:38:71:10:8b:c6:42:4d:98:37: 35:9f:36:4a:2f:71:a8:4c:ad:4d:c8:70:7b:37:22:c2:6f:61: 32:44:a0:36 -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWEki4XR+F1UvkaZwYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxMDAwNDUzM1oXDTI3MDYxMzAwNDUzM1owLzEtMCsGA1UEAxMk ZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0ZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+9Z5HvNO7QdNcy0k4jwQjNbPPoCEQ++24dy pRLApyrA/BZVpSDHzH5UJFGYhN4OSvmF84RlTwgjdT8M/MYIyE6w5M6fQi84lEzb rw5Qxbr0OxGtD1ndEHNRyyeuvCUQIQCUpcVxOPHni/PQ2Sta20mPRiob3D4l8YkC OPu2HvNa9QL/S4xPZWMIvpZvNaZg4ykEV4GR1VH/SN4tqTNBy3M3drBU8maqjD3a urkeO6Z0wiHoASi7z+51PxDXCQ2JaFjYICpp0zayJW9kv7/pghLT0rag84iPpkNd Dh4oeFVct0Fh1T0EUgYmX4VBRAnRCvi2o95rZqS5X93pN/AmzwIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFAYhh3tP75Hahk33F9Ef0RjSslOrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l Mzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2UzOTQyNWM1LTUyZTgtNGVhYy05 ZTFkLWIwNzA3OWM4NGQ3Yi9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzlj ODRkN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwCl4DANBAIAAjAHAwUAJhAA6DAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgIoyjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBFKjmgKo5+7jQJXCId4hMk/j1V3qp b3hxvEU+o6weM5AZavZTuty1VTuihjQ/mN2A2tRxtTdsS4rCDEm5rYEA8GyFWIMQ MhOxjiIB35Zdj3JtZifBijr1fysLa+5BHFTogl60DrdkMfbTbNYOSXCrTRezmqYu FhVHrdpAxqQFeZfO8RYltEzFGP7UYYfYYyWDsdr9oVr+nprNAqtc21ojb9GLI1Wd 3ecYD4JNplCmkV7qAio5X+OwepcJGGxrehTwusHoghr5oAgipe2Rge6BQQjJVpUY 9UREtDjfHJqSLZQ4cRCLxkJNmDc1nzZKL3GoTK1NyHB7NyLCb2EyRKA2 -----END CERTIFICATE-----Generated at Thu Apr 3 02:45:16 2025 by rpki-client