$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa.cer File: e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa.cer (raw, json) Hash identifier: ZOKEVNIzwrONMNCBXHqsGsZmAcKNe6hmNk2xLwknbnk= Subject key identifier: 4D:AB:D8:38:36:75:44:BD:9F:6A:96:78:95:D7:58:CF:0F:E0:4A:16 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849203488DE8A2B45947BB26580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 09 Mar 2025 01:45:32 +0000 Certificate not after: Sat 12 Jun 2027 00:45:32 +0000 Subordinate resources: AS: 14810 IP: 198.137.154.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:34:88:de:8a:2b:45:94:7b:b2:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 9 01:45:32 2025 GMT Not After : Jun 12 00:45:32 2027 GMT Subject: CN=e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:b6:64:42:ad:41:0f:cf:16:c8:a5:df:aa: 77:33:bf:47:d6:f3:d1:4a:8f:00:f1:78:a0:0b:42: cf:9a:c4:1c:da:eb:d6:c6:c3:26:3b:2d:78:5f:f0: 28:6c:20:9b:22:59:d9:26:b5:9e:9f:1d:c3:9a:1b: 55:9e:14:57:75:4d:5f:5a:2d:73:bd:f4:54:9e:5f: 49:c4:5c:af:f2:17:a0:cd:65:a8:83:e2:30:4f:7e: 0e:29:d0:6a:ef:d1:db:df:21:c5:2f:2d:70:71:01: f7:bb:d4:31:cf:24:71:ca:f9:86:8e:3b:55:56:87: 6c:34:20:7b:a8:7c:7b:e3:57:4a:de:f7:25:28:de: 15:ca:ab:6c:67:b1:2a:12:01:5e:9c:77:75:98:f6: 17:b8:84:e0:b2:d8:21:ae:58:f1:e1:b6:4a:e3:d5: f0:5e:0f:ee:13:ad:d9:0c:1b:b8:74:2b:78:b2:77: 34:1d:9a:e8:2e:36:5b:a1:2d:59:e0:3e:d7:77:5b: 81:5a:d3:8d:ab:2c:f9:87:96:72:25:24:d4:dd:0b: bc:ed:4b:31:48:71:48:3a:c9:48:77:ca:93:7f:82: 84:1c:bf:63:65:03:83:c1:81:14:c3:e1:c4:a0:55: 3e:2b:a6:e7:82:1d:cd:e5:07:c7:10:04:24:98:02: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AB:D8:38:36:75:44:BD:9F:6A:96:78:95:D7:58:CF:0F:E0:4A:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 198.137.154.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14810 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:94:1d:ca:bc:fe:21:ab:97:6b:84:e6:3c:70:48:dc:bd:ba: 7b:cd:7d:07:04:9b:52:aa:2e:e0:5c:58:ec:1f:ce:59:d9:6e: 84:8a:5e:44:04:2c:37:58:dd:dc:57:a8:e8:a9:f0:47:c0:db: 9d:77:08:1e:ff:b8:3f:25:f7:df:68:ee:24:55:30:50:97:bd: 83:bd:d4:b2:c8:2d:7f:21:7d:65:5c:0d:38:fe:d7:93:0f:c4: 71:73:84:6b:28:7a:d1:8d:1d:b1:8a:2b:c4:0a:66:9f:87:c1: e9:1e:f7:13:af:54:cf:2e:0f:00:5f:dc:2b:da:de:03:51:53: 36:db:2e:a5:f4:72:6e:e5:c9:16:81:87:32:d3:e4:61:ca:6b: 71:d4:25:aa:1e:0c:4f:87:b8:78:34:c1:31:d1:91:52:2f:e9: 5e:c6:ff:02:11:07:45:1f:ff:84:1c:44:08:5b:18:6a:4b:a2: 2c:c9:20:47:f3:ee:58:49:3d:41:6f:6c:9e:a5:ff:15:9d:5d: 90:09:10:f8:81:2e:3c:6b:b2:d6:dc:54:7b:bd:35:d1:4c:31: 30:b0:74:3f:25:bd:c2:2b:7e:6e:74:30:77:61:36:90:58:7f: ef:32:22:7e:ee:61:f6:ea:d9:97:ef:02:d5:90:95:61:da:d9: 5e:dd:40:27 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEkgNIjeiitFlHuyZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwOTAxNDUzMloXDTI3MDYxMjAwNDUzMlowLzEtMCsGA1UEAxMk ZThjYzJlMjItNWVhMi00NGM5LWIyZjctNWQwYjZhNTNmZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydC2ZEKtQQ/PFsil36p3M79H1vPRSo8A8Xig C0LPmsQc2uvWxsMmOy14X/AobCCbIlnZJrWenx3DmhtVnhRXdU1fWi1zvfRUnl9J xFyv8hegzWWog+IwT34OKdBq79Hb3yHFLy1wcQH3u9QxzyRxyvmGjjtVVodsNCB7 qHx741dK3vclKN4VyqtsZ7EqEgFenHd1mPYXuITgstghrljx4bZK49XwXg/uE63Z DBu4dCt4snc0HZroLjZboS1Z4D7Xd1uBWtONqyz5h5ZyJSTU3Qu87UsxSHFIOslI d8qTf4KEHL9jZQODwYEUw+HEoFU+K6bngh3N5QfHEAQkmAJ6WwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFE2r2Dg2dUS9n2qWeJXXWM8P4EoWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l OGNjMmUyMi01ZWEyLTQ0YzktYjJmNy01ZDBiNmE1M2ZkYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U4Y2MyZTIyLTVlYTItNDRjOS1i MmY3LTVkMGI2YTUzZmRhYS9lOGNjMmUyMi01ZWEyLTQ0YzktYjJmNy01ZDBiNmE1 M2ZkYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGiZowGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OdowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAjpQdyrz+IauXa4TmPHBI3L26e819BwSbUqou4FxY7B/OWdlu hIpeRAQsN1jd3Feo6KnwR8DbnXcIHv+4PyX332juJFUwUJe9g73UssgtfyF9ZVwN OP7Xkw/EcXOEayh60Y0dsYorxApmn4fB6R73E69Uzy4PAF/cK9reA1FTNtsupfRy buXJFoGHMtPkYcprcdQlqh4MT4e4eDTBMdGRUi/pXsb/AhEHRR//hBxECFsYakui LMkgR/PuWEk9QW9snqX/FZ1dkAkQ+IEuPGuy1txUe7010UwxMLB0PyW9wit+bnQw d2E2kFh/7zIifu5h9urZl+8C1ZCVYdrZXt1AJw== -----END CERTIFICATE-----Generated at Thu Apr 3 02:38:41 2025 by rpki-client