$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer File: f1fa0620-c80f-4a94-9e95-ead44fb79978.cer (raw, json) Hash identifier: /fCp0A6Fvb+DrXK96RdZ1NyE+28dYRsNnS0hyC3q78A= Subject key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858490E0F19E3A93807EA786116C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Mar 2025 13:45:34 +0000 Certificate not after: Sat 05 Jun 2027 12:45:34 +0000 Subordinate resources: AS: 399358 IP: 160.79.104.0/21 IP: 2607:6bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:0f:19:e3:a9:38:07:ea:78:61:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 2 13:45:34 2025 GMT Not After : Jun 5 12:45:34 2027 GMT Subject: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:36:e1:1c:56:98:a4:4a:39:4b:08:2d:2d: b9:b6:c2:5c:ba:22:9a:fd:08:9b:fb:08:e0:c7:17: 7e:d4:1a:8a:46:2e:dc:a2:0c:91:a6:90:4b:cc:07: b9:d9:3f:b5:70:c2:3e:d7:9e:d7:89:69:52:b2:86: cf:fc:c1:a7:bc:69:e4:44:36:0e:14:f6:9f:67:29: 40:0c:c4:24:6c:05:58:52:83:7a:f8:0c:8a:fd:9d: 79:a6:89:78:d7:38:6e:51:6f:a9:4c:8d:4b:92:36: 8e:e9:61:5b:cd:c6:24:00:9b:cf:d8:dd:a8:3a:34: d0:25:e3:4a:29:e7:e6:86:4a:8c:09:93:c0:e3:8a: 5d:72:5c:fd:38:c6:7d:a3:c2:d1:6d:01:95:6e:c6: f8:4e:c7:82:bd:8f:cd:9a:95:e6:ac:1a:03:a3:9a: 4b:54:7f:06:e4:99:6d:1e:ac:92:6f:6b:d6:f5:10: 29:1f:66:ae:2d:41:46:31:ec:27:8c:fc:b3:62:e3: 39:44:c0:a2:2c:c1:f4:dc:63:ae:e0:52:62:9b:ca: 4a:46:30:0d:c5:9a:74:71:e7:0e:22:e6:53:0f:7a: 5c:66:91:3a:c1:6e:23:e1:32:da:7e:ce:2a:d4:23: 38:0d:49:5e:08:40:c0:84:cd:fe:b5:f3:b5:01:bd: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 160.79.104.0/21 IPv6: 2607:6bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399358 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b7:5d:3c:94:6d:7a:42:a4:be:b6:bc:33:13:4a:9c:91:46: 72:9c:95:35:b9:96:2e:e9:c7:dc:8a:e0:ef:61:f8:1c:a5:11: ec:0e:61:54:2d:38:ae:2b:69:74:a7:d5:6b:b0:ae:0b:0f:5a: f9:82:f1:b2:65:3a:91:6a:47:bc:e5:a8:33:ea:34:44:93:0a: 93:14:95:bc:64:ee:ca:b1:4d:a2:b6:d0:6f:9e:db:29:43:d9: b6:7a:50:6a:fb:0d:e8:60:0d:7c:be:23:6d:a6:c6:fa:67:67: 8a:15:4e:54:9b:0b:68:bf:83:7f:9a:3a:f6:96:4c:99:79:50: 0f:0e:cd:23:eb:dc:cc:42:6c:ab:fb:91:b4:8e:f4:ec:7e:ef: f7:f3:9c:3f:8e:9e:70:f8:b2:33:77:19:c1:65:a0:b7:f8:a3: 92:b7:91:7a:3d:2a:41:c1:ba:cc:3f:52:5d:3e:52:87:5d:89: 13:eb:2c:fa:b6:4e:58:67:79:7e:c9:ca:c8:21:18:c5:d3:fe: 58:25:00:1b:09:55:cd:a7:71:f7:e6:59:4a:0a:5f:eb:cb:66: 79:a0:d1:fe:c9:44:c0:f7:4a:9d:93:4c:3b:0f:87:a5:68:66: 60:ee:df:67:4f:27:dc:b5:6a:51:00:c7:a3:5a:a6:af:e4:52: b5:ad:a6:68 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkODxnjqTgH6nhhFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwMjEzNDUzNFoXDTI3MDYwNTEyNDUzNFowLzEtMCsGA1UEAxMk ZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5OTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3U24RxWmKRKOUsILS25tsJcuiKa/Qib+wjg xxd+1BqKRi7cogyRppBLzAe52T+1cMI+157XiWlSsobP/MGnvGnkRDYOFPafZylA DMQkbAVYUoN6+AyK/Z15pol41zhuUW+pTI1LkjaO6WFbzcYkAJvP2N2oOjTQJeNK KefmhkqMCZPA44pdclz9OMZ9o8LRbQGVbsb4TseCvY/NmpXmrBoDo5pLVH8G5Jlt HqySb2vW9RApH2auLUFGMewnjPyzYuM5RMCiLMH03GOu4FJim8pKRjANxZp0cecO IuZTD3pcZpE6wW4j4TLafs4q1CM4DUleCEDAhM3+tfO1Ab2tLQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKYRv3EBh8QcOQGiqia504EM/it0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m MWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2YxZmEwNjIwLWM4MGYtNGE5NC05 ZTk1LWVhZDQ0ZmI3OTk3OC9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZi Nzk5NzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOgT2gwDQQCAAIwBwMFACYHa8AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhf+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAu3XTyUbXpCpL62vDMTSpyRRnKc lTW5li7px9yK4O9h+BylEewOYVQtOK4raXSn1WuwrgsPWvmC8bJlOpFqR7zlqDPq NESTCpMUlbxk7sqxTaK20G+e2ylD2bZ6UGr7DehgDXy+I22mxvpnZ4oVTlSbC2i/ g3+aOvaWTJl5UA8OzSPr3MxCbKv7kbSO9Ox+7/fznD+OnnD4sjN3GcFloLf4o5K3 kXo9KkHBusw/Ul0+UoddiRPrLPq2TlhneX7JysghGMXT/lglABsJVc2ncffmWUoK X+vLZnmg0f7JRMD3Sp2TTDsPh6VoZmDu32dPJ9y1alEAx6Napq/kUrWtpmg= -----END CERTIFICATE-----Generated at Thu Apr 3 02:51:12 2025 by rpki-client