$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer File: 1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer (raw, json) Hash identifier: vikyxlYwf/nJMR2jNpflaXICYVXUCVBIgHpTHLSHv1A= Subject key identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848E5942C1786E147D8510B5B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Feb 2025 01:45:32 +0000 Certificate not after: Sat 22 May 2027 00:45:32 +0000 Subordinate resources: AS: 36466 IP: 199.180.216.0/22 IP: 208.71.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:94:2c:17:86:e1:47:d8:51:0b:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 16 01:45:32 2025 GMT Not After : May 22 00:45:32 2027 GMT Subject: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:21:12:6e:23:ab:f7:a5:ed:e2:87:85:80: 90:b8:a8:a3:71:66:bb:47:d0:12:ec:b3:f4:83:aa: a8:4e:a6:e4:a4:73:ac:bb:5a:bc:66:ee:05:e9:cc: 30:c8:e6:c4:29:ec:1a:8c:c9:a8:1f:53:a2:ca:28: 7b:eb:ee:02:b3:1c:f6:25:26:39:ec:e9:28:65:4d: 11:8d:32:9e:d4:98:7f:18:17:28:d7:b6:a7:09:50: 80:e2:f3:15:fb:85:69:23:95:e7:53:89:3e:7b:09: 57:3d:5e:f4:9f:5b:04:0b:3c:cd:f9:d9:1d:69:cd: 47:63:62:71:bf:cb:2d:13:9e:01:a3:6f:df:b2:f3: 86:bf:57:ba:19:a7:d5:b2:1d:91:a6:54:87:ab:ce: d1:e3:b9:6f:56:6b:a2:42:45:1f:28:50:cb:54:d7: a9:1c:47:f7:c7:6f:b4:88:a2:82:08:47:59:3f:98: ea:fa:7f:4a:80:b6:48:39:19:92:86:ec:91:25:4a: 61:64:5b:63:87:62:c5:6b:58:66:06:55:fe:9c:10: be:f9:a2:e8:71:28:80:dd:d5:10:52:05:47:9c:72: 05:c0:7e:25:ac:2b:1d:73:85:00:b1:90:7f:f2:ea: 28:e5:38:89:ea:f3:78:59:1b:b3:bc:61:52:2e:97: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.180.216.0/22 208.71.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36466 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:18:f2:c0:6b:61:37:89:7e:17:d6:44:bc:2e:9c:05:21:d5: 64:36:01:5e:8a:25:7e:15:d2:98:e2:3d:e2:62:5c:ee:df:96: 80:ef:2f:c5:5f:7f:d0:94:8d:ad:27:eb:e9:14:a4:52:8c:2c: 0b:51:2c:71:59:c9:fa:be:82:a4:a1:a5:6e:a8:07:6a:6e:21: 3b:c6:ba:77:98:68:56:3c:40:02:d8:cf:05:b3:7f:22:d2:c0: 71:b2:14:73:7e:7b:41:69:9e:94:14:9f:5c:a6:54:e9:37:87: 15:fa:17:cc:82:b8:89:86:ba:21:3a:4c:6e:6d:f0:3b:d4:c3: 81:7b:e5:15:3a:40:35:2f:83:f5:97:47:75:ca:29:5b:f8:40: 36:fe:09:c7:fc:a7:5b:c3:04:8d:28:a8:9c:e3:c3:69:99:ca: f3:44:61:22:14:dd:6d:85:15:86:89:53:9e:c9:3f:db:3b:2d: 03:62:60:20:fb:35:d8:77:0b:8e:46:9e:dc:a9:24:4b:2d:f2: 9f:e7:fd:7f:7d:9f:31:92:20:82:07:de:2e:d4:86:9f:1f:7e: f4:57:b4:2b:ba:6b:cc:05:b8:80:c4:3c:9d:4a:ec:8d:00:a0: 8e:a5:ec:8f:e5:cc:86:26:47:ef:38:9b:93:98:03:85:09:b6: 45:71:73:ef -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEjllCwXhuFH2FELW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxNjAxNDUzMloXDTI3MDUyMjAwNDUzMlowLzEtMCsGA1UEAxMk MWNmYWUzYmEtMGY1My00MjhhLTkzZDgtNjg4NWM2NGMxZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SshEm4jq/el7eKHhYCQuKijcWa7R9AS7LP0 g6qoTqbkpHOsu1q8Zu4F6cwwyObEKewajMmoH1Oiyih76+4Csxz2JSY57OkoZU0R jTKe1Jh/GBco17anCVCA4vMV+4VpI5XnU4k+ewlXPV70n1sECzzN+dkdac1HY2Jx v8stE54Bo2/fsvOGv1e6GafVsh2RplSHq87R47lvVmuiQkUfKFDLVNepHEf3x2+0 iKKCCEdZP5jq+n9KgLZIORmShuyRJUphZFtjh2LFa1hmBlX+nBC++aLocSiA3dUQ UgVHnHIFwH4lrCsdc4UAsZB/8uoo5TiJ6vN4WRuzvGFSLpf4+QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFEEeBGESltCtWtPz7J6RPOfzHSIZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x Y2ZhZTNiYS0wZjUzLTQyOGEtOTNkOC02ODg1YzY0YzFmZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFjZmFlM2JhLTBmNTMtNDI4YS05 M2Q4LTY4ODVjNjRjMWZkOC8xY2ZhZTNiYS0wZjUzLTQyOGEtOTNkOC02ODg1YzY0 YzFmZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHtNgDBALQR1wwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAI5yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGAY8sBrYTeJfhfWRLwunAUh1WQ2AV6KJX4V0pji PeJiXO7floDvL8Vff9CUja0n6+kUpFKMLAtRLHFZyfq+gqShpW6oB2puITvGuneY aFY8QALYzwWzfyLSwHGyFHN+e0FpnpQUn1ymVOk3hxX6F8yCuImGuiE6TG5t8DvU w4F75RU6QDUvg/WXR3XKKVv4QDb+Ccf8p1vDBI0oqJzjw2mZyvNEYSIU3W2FFYaJ U57JP9s7LQNiYCD7Ndh3C45GntypJEst8p/n/X99nzGSIIIH3i7Uhp8ffvRXtCu6 a8wFuIDEPJ1K7I0AoI6l7I/lzIYmR+84m5OYA4UJtkVxc+8= -----END CERTIFICATE-----Generated at Sun Apr 27 21:30:18 2025 by rpki-client