$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer File: 081bd66e-b1d1-405a-8a32-c830ec790ce5.cer (raw, json) Hash identifier: zfgykBqAnAK/o8DwwJM6HXJ420UQWCuvFLmd2g9UeAU= Subject key identifier: 70:CF:5A:23:55:0C:F1:AE:CF:C3:33:A8:DF:37:04:B3:CF:0D:FE:38 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848D90418779BCAB9E8F1695A30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 13:45:33 +0000 Certificate not after: Mon 17 May 2027 12:45:33 +0000 Subordinate resources: AS: 23133 IP: 204.14.72.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:04:18:77:9b:ca:b9:e8:f1:69:5a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 11 13:45:33 2025 GMT Not After : May 17 12:45:33 2027 GMT Subject: CN=081bd66e-b1d1-405a-8a32-c830ec790ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:95:19:d9:0d:6c:07:6d:01:31:5b:74:61:61: 71:9f:89:a4:60:6a:32:d5:bd:ba:e6:f5:4d:17:0a: b7:a2:b5:ca:ef:56:30:74:19:06:06:b2:e9:ec:34: 3e:f6:7f:9d:27:f9:96:b4:a4:67:c4:dd:a6:b1:cc: b4:6a:44:bb:c1:95:be:89:1d:38:6a:64:9f:10:0e: 83:80:31:be:79:e9:20:f4:75:ba:aa:3f:db:9c:d6: 6b:e3:2a:0f:04:83:cf:bb:c1:95:4f:b1:fc:67:a2: 5e:7d:5f:d8:2b:4a:ac:a6:bc:ef:50:96:6d:0c:a7: a5:37:f9:d6:5d:d9:7c:12:7d:d0:2c:da:5e:96:05: 8b:4d:f3:17:73:b1:42:59:72:f3:a9:c8:3f:97:36: 89:ab:a2:e8:a9:2b:ab:34:bd:79:d2:9c:4b:ce:e1: 5b:d5:84:2d:86:4c:09:19:0e:fc:29:b5:51:9c:61: f5:f0:97:1c:71:94:f4:9e:9c:6d:0f:52:1a:28:11: 35:44:c3:15:e9:6c:dc:9c:fe:2b:72:ae:06:34:9c: 53:08:16:44:79:ab:43:93:0f:b3:34:fd:a3:ac:95: 0a:4a:ca:55:7f:60:b8:a7:1b:6e:b2:e3:72:48:f9: 69:39:52:32:ff:2d:16:68:89:d1:26:d7:69:1e:94: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:5A:23:55:0C:F1:AE:CF:C3:33:A8:DF:37:04:B3:CF:0D:FE:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.14.72.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23133 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a0:41:6c:bf:e6:a6:4a:46:b0:8a:41:a5:f2:e9:cf:e0:e0: c0:b9:ac:63:c2:f4:d3:8c:6d:54:c7:fc:f1:53:5c:d7:39:f6: 50:90:9b:fb:dc:84:11:63:35:34:cd:f9:aa:e5:3b:c7:23:75: 78:f4:64:77:33:f7:23:a1:97:a1:9f:69:c9:44:c2:1b:ac:06: 76:6e:b2:ce:e1:43:4b:3e:93:b6:c2:7c:93:db:a4:8c:06:47: 37:62:01:22:b9:13:b3:e8:70:10:5d:fa:7a:c3:1f:d5:38:87: 91:a2:02:6d:36:7e:87:f4:e9:91:b7:8f:13:a5:89:a5:ff:ff: 08:8d:60:88:a6:ed:ea:81:61:74:45:82:a2:56:51:be:02:bb: 60:d1:a4:c7:90:ec:4f:39:22:8a:f3:28:34:51:0b:ed:4a:6a: 5b:82:d4:48:19:cf:07:ae:84:14:05:d7:eb:00:4c:4b:89:a7: d2:77:81:c7:e1:de:bf:ec:ea:58:1a:34:57:78:fa:56:95:6d: 80:3b:a5:d6:3c:ad:20:f6:af:7c:de:7b:3b:fc:0d:41:20:81: e6:e3:16:37:c8:c4:59:73:60:3e:2f:7b:12:d8:aa:02:41:ef: 71:76:3c:14:4b:64:48:71:66:4a:42:c8:bb:47:14:79:32:bb: 5f:9d:53:9b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEjZBBh3m8q56PFpWjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxMTEzNDUzM1oXDTI3MDUxNzEyNDUzM1owLzEtMCsGA1UEAxMk MDgxYmQ2NmUtYjFkMS00MDVhLThhMzItYzgzMGVjNzkwY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pUZ2Q1sB20BMVt0YWFxn4mkYGoy1b265vVN Fwq3orXK71YwdBkGBrLp7DQ+9n+dJ/mWtKRnxN2mscy0akS7wZW+iR04amSfEA6D gDG+eekg9HW6qj/bnNZr4yoPBIPPu8GVT7H8Z6JefV/YK0qsprzvUJZtDKelN/nW Xdl8En3QLNpelgWLTfMXc7FCWXLzqcg/lzaJq6LoqSurNL150pxLzuFb1YQthkwJ GQ78KbVRnGH18JcccZT0npxtD1IaKBE1RMMV6WzcnP4rcq4GNJxTCBZEeatDkw+z NP2jrJUKSspVf2C4pxtusuNySPlpOVIy/y0WaInRJtdpHpSaIwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHDPWiNVDPGuz8MzqN83BLPPDf44MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w ODFiZDY2ZS1iMWQxLTQwNWEtOGEzMi1jODMwZWM3OTBjZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA4MWJkNjZlLWIxZDEtNDA1YS04 YTMyLWM4MzBlYzc5MGNlNS8wODFiZDY2ZS1iMWQxLTQwNWEtOGEzMi1jODMwZWM3 OTBjZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPMDkgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Wl0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAH6BBbL/mpkpGsIpBpfLpz+DgwLmsY8L004xtVMf88VNc1zn2 UJCb+9yEEWM1NM35quU7xyN1ePRkdzP3I6GXoZ9pyUTCG6wGdm6yzuFDSz6TtsJ8 k9ukjAZHN2IBIrkTs+hwEF36esMf1TiHkaICbTZ+h/TpkbePE6WJpf//CI1giKbt 6oFhdEWColZRvgK7YNGkx5DsTzkiivMoNFEL7UpqW4LUSBnPB66EFAXX6wBMS4mn 0neBx+Hev+zqWBo0V3j6VpVtgDul1jytIPavfN57O/wNQSCB5uMWN8jEWXNgPi97 EtiqAkHvcXY8FEtkSHFmSkLIu0cUeTK7X51Tmw== -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:44 2025 by rpki-client