$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194.cer File: 060abe91-ae00-46c9-a9b7-b46f0b295194.cer (raw, json) Hash identifier: FAzwI45N2AG1OOV7/VJ+PR+UmSPgFSMOheXxaYaHBUY= Subject key identifier: D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858490F746EF2EFE11C52C89D9380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Mar 2025 01:45:33 +0000 Certificate not after: Sun 06 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 192.197.62.0/24 IP: 205.189.2.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:74:6e:f2:ef:e1:1c:52:c8:9d:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 3 01:45:33 2025 GMT Not After : Jun 6 00:45:33 2027 GMT Subject: CN=060abe91-ae00-46c9-a9b7-b46f0b295194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:9d:88:57:24:0f:dc:86:84:29:1c:5a:86: df:e8:a0:f9:ce:3d:59:07:9e:fc:96:79:e8:70:d7: d9:02:bf:4a:59:8e:7c:21:01:36:48:63:71:47:b3: dc:74:6f:93:1f:f0:e3:ad:67:ee:d7:91:e5:35:bd: af:f8:38:d5:8b:8d:86:4e:5e:d9:59:86:78:ff:35: 24:d8:4e:f7:e8:ee:c1:e9:f3:7f:6d:97:22:94:44: 12:82:3d:92:c7:a6:d3:38:8a:7c:9b:4a:7b:cd:d7: 7d:4f:35:3d:aa:74:5a:48:84:a7:2b:60:26:37:86: c4:ee:6c:45:7d:40:7f:e0:0c:16:7f:81:d2:51:c5: 5d:c9:7e:6a:4c:50:1c:dd:b7:61:ff:e2:85:ff:d8: 02:ff:6d:73:b0:f6:04:55:d3:19:a7:e1:d5:b5:7b: bd:70:bd:94:23:33:d7:f1:e6:91:3d:58:94:54:48: 87:37:05:58:93:5e:62:2f:f8:19:91:69:c9:7d:ba: fd:43:3c:32:d0:0e:52:08:41:97:3c:e5:30:33:f4: 55:83:9f:d8:30:b6:0f:82:10:4c:28:f5:11:f6:39: 67:74:30:4c:47:0b:f5:6c:fd:24:9a:29:0c:21:f8: db:54:9f:88:5d:27:d7:13:3b:1e:4a:b7:48:d8:cd: 5b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.197.62.0/24 205.189.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3c:ee:b6:43:a7:a1:b9:0a:82:de:5b:55:81:bf:5d:4e:d8: 73:38:e9:32:70:27:d3:cc:11:98:77:8a:0d:ee:17:af:14:68: 2f:f5:68:3f:e8:ca:9e:97:68:e1:62:89:e9:1a:d1:e6:77:5c: e4:f5:f6:95:22:cb:bc:ee:90:20:3c:f9:92:c5:fa:4a:d3:a2: 0c:72:f6:61:ed:de:bb:56:4d:35:bd:c9:b4:ab:5b:64:91:a5: e9:5b:7c:8d:7e:01:3c:47:2c:66:fe:c8:8f:a6:1e:32:94:10: 9e:6f:0f:fb:a3:05:a5:1c:dc:49:a5:3a:69:ba:6e:4d:b0:5e: 9e:5f:c7:74:f1:e7:f3:15:a1:6c:8a:86:c9:0a:0f:dc:04:95: 62:38:18:9e:f4:9a:5d:f2:62:3f:c4:ec:77:c7:b7:2e:16:1e: 5e:55:ee:1d:10:e6:b3:fe:cb:93:b1:21:63:1e:e8:0f:9e:99: ff:75:8b:9e:f0:22:9a:61:5d:75:ed:ea:fe:06:90:f0:e2:13: 9d:74:28:36:6e:30:e4:5d:9a:32:1e:46:f1:41:cf:d3:c4:52: 88:7e:f3:93:ac:35:90:74:16:37:a8:ed:1e:2b:69:60:c1:a9: 5e:b2:32:51:1b:84:1b:07:ad:c0:19:78:d2:de:7d:43:a8:7d: fa:b4:ba:fc -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEkPdG7y7+EcUsidk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwMzAxNDUzM1oXDTI3MDYwNjAwNDUzM1owLzEtMCsGA1UEAxMk MDYwYWJlOTEtYWUwMC00NmM5LWE5YjctYjQ2ZjBiMjk1MTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1idiFckD9yGhCkcWobf6KD5zj1ZB578lnno cNfZAr9KWY58IQE2SGNxR7PcdG+TH/DjrWfu15HlNb2v+DjVi42GTl7ZWYZ4/zUk 2E736O7B6fN/bZcilEQSgj2Sx6bTOIp8m0p7zdd9TzU9qnRaSISnK2AmN4bE7mxF fUB/4AwWf4HSUcVdyX5qTFAc3bdh/+KF/9gC/21zsPYEVdMZp+HVtXu9cL2UIzPX 8eaRPViUVEiHNwVYk15iL/gZkWnJfbr9Qzwy0A5SCEGXPOUwM/RVg5/YMLYPghBM KPUR9jlndDBMRwv1bP0kmikMIfjbVJ+IXSfXEzseSrdI2M1bYwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFNWD9BjuwuAbWQrYKZsktIAOgt5yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NjBhYmU5MS1hZTAwLTQ2YzktYTliNy1iNDZmMGIyOTUxOTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA2MGFiZTkxLWFlMDAtNDZjOS1h OWI3LWI0NmYwYjI5NTE5NC8wNjBhYmU5MS1hZTAwLTQ2YzktYTliNy1iNDZmMGIy OTUxOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAxT4DBAHNvQIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAczzutkOnobkK gt5bVYG/XU7YczjpMnAn08wRmHeKDe4XrxRoL/VoP+jKnpdo4WKJ6RrR5ndc5PX2 lSLLvO6QIDz5ksX6StOiDHL2Ye3eu1ZNNb3JtKtbZJGl6Vt8jX4BPEcsZv7Ij6Ye MpQQnm8P+6MFpRzcSaU6abpuTbBenl/HdPHn8xWhbIqGyQoP3ASVYjgYnvSaXfJi P8Tsd8e3LhYeXlXuHRDms/7Lk7EhYx7oD56Z/3WLnvAimmFdde3q/gaQ8OITnXQo Nm4w5F2aMh5G8UHP08RSiH7zk6w1kHQWN6jtHitpYMGpXrIyURuEGwetwBl40t59 Q6h9+rS6/A== -----END CERTIFICATE-----Generated at Mon Apr 28 18:08:04 2025 by rpki-client