$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer File: 05a654f5-4306-42f8-a547-0a21265d5db2.cer (raw, json) Hash identifier: R8GfbvWAshA2OMBiPPMug4wL3Tv4UBmAVy0pBNzJbtk= Subject key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858485F93563719C482A1B439B400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Dec 2024 01:45:32 +0000 Certificate not after: Sun 04 Apr 2027 00:45:32 +0000 Subordinate resources: AS: 1766 IP: 131.126.0.0/16 IP: 144.201.0.0/16 IP: 146.156.0.0/16 IP: 147.195.0.0/16 IP: 150.127.0.0/16 IP: 158.21.0.0 -- 158.22.255.255 IP: 158.25.0.0 -- 158.35.255.255 IP: 158.55.0.0/16 IP: 159.70.0.0/16 IP: 159.129.0.0/16 IP: 159.131.0.0/16 IP: 192.65.173.0/24 IP: 192.67.48.0/24 IP: 192.83.106.0/24 IP: 192.104.83.0/24 IP: 198.43.0.0/16 IP: 2620:140::/38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:93:56:37:19:c4:82:a1:b4:39:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 30 01:45:32 2024 GMT Not After : Apr 4 00:45:32 2027 GMT Subject: CN=05a654f5-4306-42f8-a547-0a21265d5db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:7b:e6:5f:59:f4:49:eb:64:69:b1:a3:d4: b5:4f:57:17:f1:e0:7c:ae:55:11:b9:a9:44:10:56: 09:3a:d2:9c:aa:02:49:ad:4c:aa:d0:36:d2:d0:6e: 2e:56:7a:18:c0:21:89:b3:f0:c7:dc:22:b0:ac:c4: 04:4f:d1:3b:0d:e0:a9:b8:ee:39:5d:b2:b3:e4:b6: 5f:fe:6c:ae:90:fa:d0:f8:4a:bc:92:5d:d0:aa:ed: 2d:43:d2:46:a8:e9:fd:5d:f4:a0:88:e4:de:ee:ce: 15:f8:4a:11:15:7d:47:a0:74:1f:41:1b:c9:5b:ec: ec:0b:15:5c:15:e0:07:b7:37:ff:a2:40:50:9c:3e: 79:bf:24:1c:af:ed:ae:06:cd:fc:4f:2c:03:a1:24: 6c:10:d6:d8:ab:28:91:73:f9:ea:37:33:02:4d:44: c9:4d:d9:a6:fa:1b:d3:33:e4:8a:f5:3e:51:82:5d: d4:47:5c:39:e3:62:94:a8:28:05:77:fc:e1:3c:67: 7e:01:50:74:22:e0:37:e5:15:a1:73:07:76:10:9f: 60:e8:bd:99:9f:c6:b5:ac:b5:c2:54:9b:c1:9d:41: 6e:5a:4f:08:a8:0b:bc:39:5e:76:15:0c:11:cc:7c: 1b:6c:5a:23:9e:6a:c9:19:07:2d:e7:d7:62:fe:87: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 131.126.0.0/16 144.201.0.0/16 146.156.0.0/16 147.195.0.0/16 150.127.0.0/16 158.21.0.0-158.22.255.255 158.25.0.0-158.35.255.255 158.55.0.0/16 159.70.0.0/16 159.129.0.0/16 159.131.0.0/16 192.65.173.0/24 192.67.48.0/24 192.83.106.0/24 192.104.83.0/24 198.43.0.0/16 IPv6: 2620:140::/38 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:36:a9:1c:bc:e7:06:58:b1:e0:1c:22:8f:d5:e3:83:04:7c: e4:06:a5:62:5f:f2:69:10:c0:6d:34:26:a3:21:5d:69:39:01: cc:0a:2d:40:e2:d2:00:91:f0:8a:91:64:5e:29:32:07:51:b8: 55:ea:f3:ec:a7:ad:33:a4:b5:9f:93:d7:78:62:81:51:05:5b: 85:95:f6:07:a2:aa:6d:e8:70:2d:6a:06:6c:a4:71:14:13:ca: 4c:07:47:99:c3:92:b2:e6:2c:8f:34:aa:67:23:05:75:66:26: 08:7c:80:fc:78:cf:33:f8:fe:fa:d2:9e:ee:c5:7d:03:6c:ce: 39:9d:c1:82:51:83:0e:74:64:65:cc:39:07:04:35:dc:63:9f: 7c:08:33:a0:8f:dd:4a:af:8d:b6:ed:7c:63:46:d7:51:a8:89: 31:a9:be:47:36:1e:a7:4a:45:68:1b:69:8e:08:1e:b3:44:03: e6:fd:53:a5:c8:a8:8a:8c:f6:c7:be:6c:bb:ce:a4:45:40:60: 39:ed:24:77:a6:25:87:e6:b3:10:f0:69:be:c1:e2:16:86:55: 88:1c:83:17:4d:75:85:d1:22:5e:1f:8c:b9:1d:a3:4d:88:42: 39:12:6c:7d:03:78:ca:74:44:d9:20:3a:49:78:b9:74:50:36: 98:9c:f2:c5 -----BEGIN CERTIFICATE----- MIIHdTCCBl2gAwIBAgIUAQ0Mn0MoWEhfk1Y3GcSCobQ5tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MTIzMDAxNDUzMloXDTI3MDQwNDAwNDUzMlowLzEtMCsGA1UEAxMk MDVhNjU0ZjUtNDMwNi00MmY4LWE1NDctMGEyMTI2NWQ1ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVt75l9Z9EnrZGmxo9S1T1cX8eB8rlURualE EFYJOtKcqgJJrUyq0DbS0G4uVnoYwCGJs/DH3CKwrMQET9E7DeCpuO45XbKz5LZf /myukPrQ+Eq8kl3Qqu0tQ9JGqOn9XfSgiOTe7s4V+EoRFX1HoHQfQRvJW+zsCxVc FeAHtzf/okBQnD55vyQcr+2uBs38TywDoSRsENbYqyiRc/nqNzMCTUTJTdmm+hvT M+SK9T5Rgl3UR1w542KUqCgFd/zhPGd+AVB0IuA35RWhcwd2EJ9g6L2Zn8a1rLXC VJvBnUFuWk8IqAu8OV52FQwRzHwbbFojnmrJGQct59di/ofHfQIDAQABo4IEhzCC BIMwHQYDVR0OBBYEFHKmdXN3dv5L5+A55YXdj8L6f91jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1ZDVkYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA1YTY1NGY1LTQzMDYtNDJmOC1h NTQ3LTBhMjEyNjVkNWRiMi8wNWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1 ZDVkYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwgYsGCCsGAQUF BwEHAQH/BHwwejBoBAIAATBiAwMAg34DAwCQyQMDAJKcAwMAk8MDAwCWfzAKAwMA nhUDAwCeFjAKAwMAnhkDAwKeIAMDAJ43AwMAn0YDAwCfgQMDAJ+DAwQAwEGtAwQA wEMwAwQAwFNqAwQAwGhTAwMAxiswDgQCAAIwCAMGAiYgAUAAMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAgbmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG42qRy85wZYseAcIo/V44MEfOQGpWJf 8mkQwG00JqMhXWk5AcwKLUDi0gCR8IqRZF4pMgdRuFXq8+ynrTOktZ+T13higVEF W4WV9geiqm3ocC1qBmykcRQTykwHR5nDkrLmLI80qmcjBXVmJgh8gPx4zzP4/vrS nu7FfQNszjmdwYJRgw50ZGXMOQcENdxjn3wIM6CP3UqvjbbtfGNG11GoiTGpvkc2 HqdKRWgbaY4IHrNEA+b9U6XIqIqM9se+bLvOpEVAYDntJHemJYfmsxDwab7B4haG VYgcgxdNdYXRIl4fjLkdo02IQjkSbH0DeMp0RNkgOkl4uXRQNpic8sU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:04:03 2025 by rpki-client