$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer File: f8c8c076-f01a-4032-b27d-2c8117227f2a.cer (raw, json) Hash identifier: qX4mlSazXtXQl9AHN3LbpvVFureF94N1izORu4qGnmY= Subject key identifier: E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848B4B934011A4885A4BD99D240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 13:45:33 +0000 Certificate not after: Tue 04 May 2027 12:45:33 +0000 Subordinate resources: IP: 216.120.131.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:b9:34:01:1a:48:85:a4:bd:99:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 29 13:45:33 2025 GMT Not After : May 4 12:45:33 2027 GMT Subject: CN=f8c8c076-f01a-4032-b27d-2c8117227f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:23:8e:75:20:c4:bb:7d:54:4b:cf:df:7b: b7:eb:af:1a:82:87:c3:94:cd:83:e6:f6:02:b4:a6: b2:aa:1e:79:c7:43:1a:2e:6e:5c:09:f9:7e:13:cc: e4:32:2a:45:51:a9:9c:99:d2:20:7d:eb:23:ac:b1: d9:49:39:6f:5b:bb:8e:e3:00:6f:c1:c1:ff:8a:a1: eb:ef:55:2f:9b:16:cb:34:32:a9:cb:b8:94:a9:9f: 74:8e:96:fd:a8:e6:d8:67:3d:0f:59:95:d0:21:1b: ac:01:39:c9:14:f9:b6:a5:52:15:f4:84:55:b4:bf: de:f3:b9:51:97:26:f8:c5:22:21:78:2b:fd:65:95: 1c:d3:55:b9:0f:64:1f:2b:9e:b7:f4:56:49:92:51: 1f:6f:4a:c5:13:e8:d4:7e:19:87:3a:08:4a:fa:74: d8:68:b0:3b:ab:82:8e:e4:55:5e:82:a7:ca:cd:b5: cd:53:4b:44:71:7d:b9:e2:87:69:68:0c:28:70:3e: 62:73:d4:4f:b4:f0:e2:56:01:ac:5f:e4:44:c2:41: 51:7a:b7:e9:9c:b7:99:ef:07:b1:94:fa:5a:5a:19: 24:6a:76:a3:d2:8d:68:80:ee:37:bb:ed:a4:df:10: 31:f2:86:f8:2f:7a:8d:f5:02:b9:b7:af:3a:73:86: aa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 216.120.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cd:39:77:96:d1:1c:57:66:52:27:13:bc:3e:ac:00:a4:79: 06:6d:7e:ff:32:38:0d:76:84:26:cd:87:f7:3e:a6:eb:6f:b9: 1c:91:f5:31:4e:fc:c8:29:f0:5b:6a:08:01:ba:a1:6a:a8:99: af:3d:7a:1e:d0:66:7d:1c:07:0d:c6:10:f9:74:a5:a2:35:4c: 62:cf:c2:97:26:bd:ae:c5:3c:20:df:bc:14:6f:c4:1c:c7:48: 5e:7b:11:7c:a0:2f:f9:80:a5:a7:e8:79:2b:41:31:e0:1f:4b: 98:08:45:bc:66:88:5c:a1:11:eb:38:1d:cd:8a:60:25:a4:b9: 19:73:57:05:85:a5:45:02:1c:ec:99:d8:d1:c1:ad:e9:32:7a: 3d:32:a3:da:fd:7c:fd:1c:db:ca:d5:ca:eb:93:4c:46:4d:d0: 70:5c:d0:5e:38:44:cc:cc:f8:d8:7c:bb:00:09:6d:09:e9:2b: 1e:83:e3:24:de:8c:f6:36:39:4b:ff:48:6c:db:2b:e9:fc:66: 87:e9:e0:7e:8c:78:6b:7b:58:02:eb:61:82:23:01:0e:c1:0e: 57:8b:b0:fe:ea:bd:c5:86:04:71:c0:61:06:67:fa:4c:49:85: 07:24:5b:c8:68:da:35:a6:17:6e:f6:6d:f6:09:40:be:7b:70: e7:38:c9:78 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEi0uTQBGkiFpL2Z0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyOTEzNDUzM1oXDTI3MDUwNDEyNDUzM1owLzEtMCsGA1UEAxMk ZjhjOGMwNzYtZjAxYS00MDMyLWIyN2QtMmM4MTE3MjI3ZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXojjnUgxLt9VEvP33u3668agofDlM2D5vYC tKayqh55x0MaLm5cCfl+E8zkMipFUamcmdIgfesjrLHZSTlvW7uO4wBvwcH/iqHr 71UvmxbLNDKpy7iUqZ90jpb9qObYZz0PWZXQIRusATnJFPm2pVIV9IRVtL/e87lR lyb4xSIheCv9ZZUc01W5D2QfK5639FZJklEfb0rFE+jUfhmHOghK+nTYaLA7q4KO 5FVegqfKzbXNU0tEcX254odpaAwocD5ic9RPtPDiVgGsX+REwkFRerfpnLeZ7wex lPpaWhkkanaj0o1ogO43u+2k3xAx8ob4L3qN9QK5t686c4aqmQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOL5qG/n8Pm3cawuVJ3Pf7g5gXfFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m OGM4YzA3Ni1mMDFhLTQwMzItYjI3ZC0yYzgxMTcyMjdmMmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Y4YzhjMDc2LWYwMWEtNDAzMi1i MjdkLTJjODExNzIyN2YyYS9mOGM4YzA3Ni1mMDFhLTQwMzItYjI3ZC0yYzgxMTcy MjdmMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADYeIMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQs05d5bRHFdmUicTvD6s AKR5Bm1+/zI4DXaEJs2H9z6m62+5HJH1MU78yCnwW2oIAbqhaqiZrz16HtBmfRwH DcYQ+XSlojVMYs/Clya9rsU8IN+8FG/EHMdIXnsRfKAv+YClp+h5K0Ex4B9LmAhF vGaIXKER6zgdzYpgJaS5GXNXBYWlRQIc7JnY0cGt6TJ6PTKj2v18/RzbytXK65NM Rk3QcFzQXjhEzMz42Hy7AAltCekrHoPjJN6M9jY5S/9IbNsr6fxmh+ngfox4a3tY AuthgiMBDsEOV4uw/uq9xYYEccBhBmf6TEmFByRbyGjaNaYXbvZt9glAvntw5zjJ eA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:41:53 2025 by rpki-client