$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer File: f8920ef3-7d53-43c3-8266-318adf8495b4.cer (raw, json) Hash identifier: n2vir/ocUctXlWaJHJcpWDEmV1dq+oCevJpoLSrZ+aM= Subject key identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584886A8EB03ABA73DA25C0A71A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jan 2025 01:45:33 +0000 Certificate not after: Sun 18 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 46869 IP: 199.7.208.0/22 IP: 2604:1400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:a8:eb:03:ab:a7:3d:a2:5c:0a:71:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 13 01:45:33 2025 GMT Not After : Apr 18 00:45:33 2027 GMT Subject: CN=f8920ef3-7d53-43c3-8266-318adf8495b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:39:8e:e3:73:fd:bb:8e:63:42:14:34:4f: 5d:70:8a:f7:b1:12:56:23:3c:45:ea:db:f0:03:a7: ed:18:e7:12:f1:18:b2:80:dd:cf:38:88:2d:95:da: 69:3a:b7:29:b7:f6:57:cb:16:1a:74:df:b0:b7:68: a0:81:03:fc:74:12:17:90:76:2e:44:88:d1:bf:6c: c2:b2:58:84:56:f4:cb:c9:7e:eb:c0:6a:70:b0:9f: d1:bd:2c:b4:36:66:6e:16:bb:42:97:fd:f8:db:88: 80:d3:8e:a1:01:71:49:20:30:c9:c6:13:fc:b2:5e: fc:d7:30:b4:eb:96:8c:70:5f:f8:3b:fd:b8:14:59: bd:d4:8b:79:eb:f0:69:39:81:e5:c2:38:25:d1:0d: 89:22:ed:04:5c:ef:2b:00:b2:fe:a6:6f:ad:c4:d3: 15:0d:2e:e4:be:52:a4:45:6e:67:90:a1:14:ec:b7: f6:9d:ca:44:df:2b:e5:bb:51:38:c8:ec:f7:37:63: cc:85:a7:85:65:2c:80:e4:5e:45:b8:f1:44:95:8d: b2:2d:b0:ca:c9:25:bb:11:13:e8:2a:af:74:3b:92: 31:d6:00:e4:cb:b4:0b:c2:6f:c9:d9:a0:90:7b:45: 77:d5:ea:6d:2b:38:a1:d5:62:ca:0e:a8:6a:0d:eb: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.7.208.0/22 IPv6: 2604:1400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46869 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:31:fa:3e:a5:54:5a:74:a8:b8:41:b8:b3:3d:d0:e7:c3:d5: d7:64:f5:3b:a4:60:45:82:13:12:68:1e:e1:4b:c8:48:70:cb: 56:a0:b2:72:e7:a8:7a:e2:fa:32:de:93:53:61:38:7a:38:d4: 4e:b6:9f:9f:33:13:d0:da:84:b3:8a:50:71:5c:17:2e:9b:04: dc:2b:d9:1a:2e:38:84:1f:00:3d:af:b0:94:bd:fe:f6:f0:bf: e7:19:b0:2d:a6:d9:ab:e2:0d:5f:4c:fd:3e:37:d5:cc:fd:dc: 9d:de:00:f0:ed:50:4c:91:06:11:dd:00:7b:b2:8d:e8:bb:a5: 0a:26:33:94:e6:2b:25:7d:41:6a:63:5f:ed:ac:c8:11:04:f8: 17:fe:fb:25:69:9a:8d:11:1d:3c:9f:69:de:d8:e0:5c:03:0a: 28:ad:67:de:ef:76:86:c5:ea:1f:f0:aa:31:7d:91:de:f2:a1: 06:73:ce:2f:9c:41:ce:0e:80:b1:cc:11:a7:5d:f8:f9:c4:18: 54:c4:48:6e:73:af:f3:2b:4a:87:93:a6:96:44:97:61:27:f9: e9:de:37:c7:54:5d:30:d8:a3:29:2e:2e:4a:46:b1:78:cd:5c: 1e:63:fc:c0:25:71:a7:52:28:0c:55:5b:51:4b:43:9d:61:25: 2c:16:d6:92 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEiGqOsDq6c9olwKcaQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExMzAxNDUzM1oXDTI3MDQxODAwNDUzM1owLzEtMCsGA1UEAxMk Zjg5MjBlZjMtN2Q1My00M2MzLTgyNjYtMzE4YWRmODQ5NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm405juNz/buOY0IUNE9dcIr3sRJWIzxF6tvw A6ftGOcS8RiygN3POIgtldppOrcpt/ZXyxYadN+wt2iggQP8dBIXkHYuRIjRv2zC sliEVvTLyX7rwGpwsJ/RvSy0NmZuFrtCl/3424iA046hAXFJIDDJxhP8sl781zC0 65aMcF/4O/24FFm91It56/BpOYHlwjgl0Q2JIu0EXO8rALL+pm+txNMVDS7kvlKk RW5nkKEU7Lf2ncpE3yvlu1E4yOz3N2PMhaeFZSyA5F5FuPFElY2yLbDKySW7ERPo Kq90O5Ix1gDky7QLwm/J2aCQe0V31eptKzih1WLKDqhqDeszIQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFOCUEsCL7UT43ayj3i/DiQJoINT7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m ODkyMGVmMy03ZDUzLTQzYzMtODI2Ni0zMThhZGY4NDk1YjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Y4OTIwZWYzLTdkNTMtNDNjMy04 MjY2LTMxOGFkZjg0OTViNC9mODkyMGVmMy03ZDUzLTQzYzMtODI2Ni0zMThhZGY4 NDk1YjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALHB9AwDQQCAAIwBwMFACYEFAAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALcVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABYx+j6lVFp0qLhBuLM90OfD1ddk 9TukYEWCExJoHuFLyEhwy1agsnLnqHri+jLek1NhOHo41E62n58zE9DahLOKUHFc Fy6bBNwr2RouOIQfAD2vsJS9/vbwv+cZsC2m2aviDV9M/T431cz93J3eAPDtUEyR BhHdAHuyjei7pQomM5TmKyV9QWpjX+2syBEE+Bf++yVpmo0RHTyfad7Y4FwDCiit Z97vdobF6h/wqjF9kd7yoQZzzi+cQc4OgLHMEadd+PnEGFTESG5zr/MrSoeTppZE l2En+eneN8dUXTDYoykuLkpGsXjNXB5j/MAlcadSKAxVW1FLQ51hJSwW1pI= -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:02 2025 by rpki-client