$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer File: e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer (raw, json) Hash identifier: Q8vdZ77AhEZxGMySZrI34qhN+WIx6nkSQ1aIUNRQZZg= Subject key identifier: F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849017F033D22653750F6A3D800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 01:45:33 +0000 Certificate not after: Tue 01 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 192.197.128.0/24 IP: 199.185.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:7f:03:3d:22:65:37:50:f6:a3:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 26 01:45:33 2025 GMT Not After : Jun 1 00:45:33 2027 GMT Subject: CN=e4e79c76-1a66-4449-a2b2-acc3c7eee9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:25:45:48:7f:f8:4d:d5:2b:35:9f:69:9b: 94:a7:f8:05:ec:f2:08:3d:18:39:91:ce:b7:76:7d: d5:5d:a0:89:e8:6e:b2:e0:ed:59:ca:96:b3:d6:f4: ef:09:c0:99:be:bd:b3:25:60:e3:30:b4:64:92:56: 7d:15:f9:11:87:75:02:d5:23:17:29:88:cd:7d:01: 05:bc:1e:a4:b1:a3:a2:8b:e1:b6:30:ec:f3:8e:00: 45:36:3c:57:97:8a:06:44:62:68:80:97:ee:1c:6e: 7b:64:92:e7:fb:64:9c:d9:84:90:8c:07:67:25:27: 72:ce:84:a8:26:b3:77:09:25:69:e2:f5:8b:b8:8f: 08:1a:6e:91:01:9b:da:9f:64:c8:6a:d5:8d:35:f2: de:89:c2:0f:69:a4:5a:c8:93:c9:17:21:e1:fa:51: d4:1c:51:24:5b:ba:f6:a4:4e:ba:d2:97:ef:45:3f: 27:47:e4:3e:d6:58:4a:af:e2:70:61:22:44:e1:a9: 18:28:8b:46:db:15:89:1c:09:2c:43:b0:6f:0c:5a: ed:af:48:0d:b1:f3:d4:37:0a:41:68:01:eb:45:eb: cd:3a:d3:e0:4b:ea:98:ee:d6:89:c0:a8:ab:ae:d9: 45:36:ca:cd:ee:58:ce:fd:79:22:c3:eb:cc:67:2e: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.197.128.0/24 199.185.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e5:6c:af:2d:f9:b3:3a:a5:af:bc:00:0e:23:e2:7e:28:5f: 69:5f:9d:84:d1:9b:4d:d9:49:0f:4e:1d:c2:94:4e:27:df:ad: 76:a4:7c:1f:78:54:21:62:11:79:ab:4c:34:ba:5b:f2:ce:8a: 8f:3e:8b:4d:10:06:18:91:d0:08:f5:c0:19:e5:f2:19:14:be: ea:a3:ce:ad:fa:97:72:3e:46:31:53:7a:b9:ad:f4:90:2c:cd: c0:4f:f6:1b:44:c4:6e:68:71:f5:e8:df:a6:38:1a:e5:77:fd: 69:de:be:b1:1f:05:66:d2:be:38:5a:da:eb:72:05:b9:28:56: f5:be:b3:b7:37:3b:8d:b8:a4:31:73:32:93:17:71:82:43:50: f0:c2:c9:9e:a2:ff:3e:b5:6e:7b:6d:ef:65:8e:2d:e9:a9:d5: eb:73:19:47:4f:76:f6:71:ca:f4:aa:66:65:73:b2:2e:ef:10: 13:23:80:85:ad:74:7d:17:b4:43:29:81:3b:95:d7:9d:04:5c: 64:ab:ba:cb:05:dc:6f:f5:fd:80:52:a7:ef:b3:a7:7d:45:a9: 94:c9:1c:f5:5e:0d:0a:c4:ca:29:77:bd:a4:8f:5c:5d:73:c6: 77:22:07:40:9c:e1:2c:90:87:11:69:e6:70:92:fe:4e:3a:63: 07:82:71:64 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEkBfwM9ImU3UPaj2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIyNjAxNDUzM1oXDTI3MDYwMTAwNDUzM1owLzEtMCsGA1UEAxMk ZTRlNzljNzYtMWE2Ni00NDQ5LWEyYjItYWNjM2M3ZWVlOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+QlRUh/+E3VKzWfaZuUp/gF7PIIPRg5kc63 dn3VXaCJ6G6y4O1Zypaz1vTvCcCZvr2zJWDjMLRkklZ9FfkRh3UC1SMXKYjNfQEF vB6ksaOii+G2MOzzjgBFNjxXl4oGRGJogJfuHG57ZJLn+2Sc2YSQjAdnJSdyzoSo JrN3CSVp4vWLuI8IGm6RAZvan2TIatWNNfLeicIPaaRayJPJFyHh+lHUHFEkW7r2 pE660pfvRT8nR+Q+1lhKr+JwYSJE4akYKItG2xWJHAksQ7BvDFrtr0gNsfPUNwpB aAHrRevNOtPgS+qY7taJwKirrtlFNsrN7ljO/Xkiw+vMZy6kvQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFPN07MBG7CMaKuEO7EzH0rPWPWx4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l NGU3OWM3Ni0xYTY2LTQ0NDktYTJiMi1hY2MzYzdlZWU5YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U0ZTc5Yzc2LTFhNjYtNDQ0OS1h MmIyLWFjYzNjN2VlZTlhYi9lNGU3OWM3Ni0xYTY2LTQ0NDktYTJiMi1hY2MzYzdl ZWU5YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAxYADBAXHuSAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYOVsry35szql r7wADiPifihfaV+dhNGbTdlJD04dwpROJ9+tdqR8H3hUIWIReatMNLpb8s6Kjz6L TRAGGJHQCPXAGeXyGRS+6qPOrfqXcj5GMVN6ua30kCzNwE/2G0TEbmhx9ejfpjga 5Xf9ad6+sR8FZtK+OFra63IFuShW9b6ztzc7jbikMXMykxdxgkNQ8MLJnqL/PrVu e23vZY4t6anV63MZR0929nHK9KpmZXOyLu8QEyOAha10fRe0QymBO5XXnQRcZKu6 ywXcb/X9gFKn77OnfUWplMkc9V4NCsTKKXe9pI9cXXPGdyIHQJzhLJCHEWnmcJL+ TjpjB4JxZA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:38:43 2025 by rpki-client