$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer File: e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer (raw, json) Hash identifier: MuFS0zDc0Kk3mTXVV7uDyNDVE5STv2kXl98+dFD3G2U= Subject key identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848A293C49D9B4942F7DEF68EF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Jan 2025 01:45:34 +0000 Certificate not after: Wed 28 Apr 2027 00:45:34 +0000 Subordinate resources: IP: 199.202.104.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:93:c4:9d:9b:49:42:f7:de:f6:8e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 23 01:45:34 2025 GMT Not After : Apr 28 00:45:34 2027 GMT Subject: CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:57:56:5a:3a:78:08:2e:3d:d1:35:26:d4: e1:3d:ec:a4:82:00:42:1f:2e:3b:6c:f7:69:67:21: b6:51:ad:13:ae:f0:ad:7d:78:ab:3d:fc:d2:e4:7e: 63:6f:7c:62:95:82:7f:94:46:78:08:54:7e:14:37: 2e:f6:f2:19:c5:a9:fe:70:93:9e:38:3f:64:d7:ba: 1b:94:cd:87:61:fd:34:83:ef:fd:cb:62:55:f6:e2: d8:8d:9e:d2:6c:9d:96:28:9b:cc:cb:af:a4:2a:52: d1:87:8c:07:37:78:dc:20:2e:e8:be:05:f2:ec:ff: 53:17:7d:f5:b4:ac:31:f4:9d:3a:32:db:eb:7c:ee: c5:7e:5f:73:c1:15:ed:52:df:2c:c6:55:b9:45:05: 66:80:ab:a6:70:ed:8c:dd:47:33:68:55:11:2a:67: 93:64:85:19:c0:ea:e1:a7:9c:4a:fa:8e:41:a6:80: b5:69:b6:6f:50:a3:f6:18:1b:65:e3:34:a4:8e:31: ff:0f:24:3c:07:39:71:b9:24:7e:4d:15:3a:91:19: 33:8c:75:8f:98:53:73:d9:43:3e:bc:d0:94:47:0f: 58:9a:25:bf:c2:ca:cb:2a:d8:f1:dd:22:35:8f:82: 3f:0d:74:f3:47:32:ff:ae:de:5f:b9:2d:96:e5:a1: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.202.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:15:d0:58:09:4c:82:2c:68:4f:f3:01:18:d6:8a:4b:dc:14: fc:21:93:5e:5f:19:ba:26:07:15:6a:0b:cb:16:16:46:9c:2c: ba:c2:fc:af:88:1a:f3:75:ae:ba:51:15:1a:a6:2b:73:f0:64: a6:2c:78:39:a8:a7:ba:94:d7:07:98:a9:27:4b:7e:be:ca:22: 17:17:ce:18:d0:51:45:b7:ee:a8:5e:42:23:77:4b:db:6b:bb: a0:91:b5:12:67:1b:e1:fa:74:4a:02:64:b6:a4:65:7b:08:9b: 28:41:6f:43:32:3d:3d:7c:2e:1d:1e:55:41:28:bb:8a:5d:0f: 61:01:32:cf:f3:2f:ad:21:ad:72:ec:df:28:22:c7:8c:8a:3e: 90:70:91:74:f3:cb:3b:79:74:4a:1c:58:a0:02:fb:97:a7:ec: d4:6d:99:96:54:51:70:28:87:48:c7:36:da:de:4f:8c:4c:9d: e5:f3:e5:6c:9c:64:54:91:2a:8b:43:b7:58:3e:37:20:88:e0: e9:a3:44:be:83:4a:e9:ea:21:56:d6:1d:ee:64:b6:55:a5:4d: 5c:53:3f:a6:de:89:f2:b1:cd:fa:34:9c:a9:97:0c:6f:2a:48: da:10:36:c2:25:dd:26:4b:1a:35:f4:30:b5:7d:2b:09:67:f2: 32:e1:18:15 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEiik8Sdm0lC9972jvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyMzAxNDUzNFoXDTI3MDQyODAwNDUzNFowLzEtMCsGA1UEAxMk ZTkwZjU0ZmQtMjAwYS00YjJmLTkxNGItMmJjODUzMGI1ZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxpXVlo6eAguPdE1JtThPeykggBCHy47bPdp ZyG2Ua0TrvCtfXirPfzS5H5jb3xilYJ/lEZ4CFR+FDcu9vIZxan+cJOeOD9k17ob lM2HYf00g+/9y2JV9uLYjZ7SbJ2WKJvMy6+kKlLRh4wHN3jcIC7ovgXy7P9TF331 tKwx9J06MtvrfO7Ffl9zwRXtUt8sxlW5RQVmgKumcO2M3UczaFURKmeTZIUZwOrh p5xK+o5BpoC1abZvUKP2GBtl4zSkjjH/DyQ8BzlxuSR+TRU6kRkzjHWPmFNz2UM+ vNCURw9YmiW/wsrLKtjx3SI1j4I/DXTzRzL/rt5fuS2W5aG4cwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIhsUkrc+njnKEEUQGfUPS27x/VWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l OTBmNTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4NTMwYjVkNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U5MGY1NGZkLTIwMGEtNGIyZi05 MTRiLTJiYzg1MzBiNWQ1MC9lOTBmNTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4NTMw YjVkNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHymgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgxXQWAlMgixoT/MBGNaK S9wU/CGTXl8ZuiYHFWoLyxYWRpwsusL8r4ga83WuulEVGqYrc/Bkpix4OainupTX B5ipJ0t+vsoiFxfOGNBRRbfuqF5CI3dL22u7oJG1Emcb4fp0SgJktqRlewibKEFv QzI9PXwuHR5VQSi7il0PYQEyz/MvrSGtcuzfKCLHjIo+kHCRdPPLO3l0ShxYoAL7 l6fs1G2ZllRRcCiHSMc22t5PjEyd5fPlbJxkVJEqi0O3WD43IIjg6aNEvoNK6eoh VtYd7mS2VaVNXFM/pt6J8rHN+jScqZcMbypI2hA2wiXdJksaNfQwtX0rCWfyMuEY FQ== -----END CERTIFICATE-----Generated at Thu Apr 3 02:38:42 2025 by rpki-client