$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer File: 1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer (raw, json) Hash identifier: Y2OFulVxYZ2dUJNY9goTGRVpaCSp6HgCcorTHC3bBsM= Subject key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848B0892ED0EA220C528D9C6F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jan 2025 01:45:33 +0000 Certificate not after: Mon 03 May 2027 00:45:33 +0000 Subordinate resources: AS: 400238 IP: 109.73.224.0/20 IP: 147.185.189.0/24 IP: 147.185.208.0/24 IP: 147.185.210.0/24 IP: 147.185.216.0/24 IP: 147.185.219.0/24 IP: 147.185.225.0/24 IP: 204.8.76.0/22 IP: 204.8.116.0/22 IP: 206.225.29.0/24 IP: 207.244.221.0 -- 207.244.222.255 IP: 209.127.100.0/22 IP: 209.145.41.0/24 IP: 216.87.35.0 -- 216.87.36.255 IP: 216.87.51.0 -- 216.87.52.255 IP: 216.87.57.0/24 IP: 216.87.59.0/24 IP: 216.87.61.0/24 IP: 216.114.68.0/24 IP: 2602:fc02::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:89:2e:d0:ea:22:0c:52:8d:9c:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 28 01:45:33 2025 GMT Not After : May 3 00:45:33 2027 GMT Subject: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:e6:2b:72:a7:30:db:44:7b:fa:3e:9b:b8: bd:c1:97:1e:f3:15:90:d6:6d:76:77:0d:d5:b2:41: 57:b9:df:3d:d0:92:44:84:2d:28:22:34:0a:a8:3f: bb:51:cc:96:a8:31:31:02:8f:b7:18:ed:06:48:3c: ff:01:3e:b7:47:f9:14:d1:ad:b2:fb:57:6d:c3:26: 99:f3:cc:3c:a7:95:a9:53:6f:3d:45:ff:36:35:2f: ae:92:25:0c:18:79:aa:bd:9a:55:d4:00:64:f5:cb: 4a:55:b1:b5:72:bc:b3:d1:99:78:bc:3a:63:7b:c7: 3e:67:2e:4b:a1:83:c6:24:6c:ce:75:9a:4a:db:25: ad:21:f3:41:cc:26:3f:fd:89:8c:3a:d4:c3:49:d9: 46:64:9d:f1:71:8b:7f:82:55:7d:91:cc:58:02:a6: c5:fb:45:79:91:97:eb:16:86:0f:1d:d6:df:3d:a1: 90:08:2a:c7:7e:1c:2c:38:d7:c1:12:6a:c0:9f:58: 6d:fd:7e:86:99:00:a1:f7:74:71:54:21:e4:f6:4a: 59:cb:8e:ac:57:57:c4:18:b2:9d:70:d5:e1:98:51: fa:7b:35:3b:5c:04:a3:6f:ec:9c:bf:f9:b7:56:48: 1b:34:d9:18:34:03:e1:0c:01:d5:b4:9f:7e:f3:ce: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 109.73.224.0/20 147.185.189.0/24 147.185.208.0/24 147.185.210.0/24 147.185.216.0/24 147.185.219.0/24 147.185.225.0/24 204.8.76.0/22 204.8.116.0/22 206.225.29.0/24 207.244.221.0-207.244.222.255 209.127.100.0/22 209.145.41.0/24 216.87.35.0-216.87.36.255 216.87.51.0-216.87.52.255 216.87.57.0/24 216.87.59.0/24 216.87.61.0/24 216.114.68.0/24 IPv6: 2602:fc02::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:10:01:63:1a:35:66:e8:8b:08:39:ba:80:cb:18:74:a9:8c: ae:62:09:8b:30:aa:8e:8d:3a:09:8d:52:54:dd:51:d1:33:d5: ae:4b:26:82:5e:5d:f6:28:29:25:08:05:ca:b8:6c:2d:4c:6b: ec:af:db:fe:4f:f9:0c:80:cd:cf:b6:20:29:d3:38:f2:d8:5a: 07:a3:cd:b5:96:40:3e:57:37:2c:18:1c:0d:fc:d9:bf:a7:fa: 58:3e:75:92:83:ce:b2:f7:e4:8e:70:ab:5c:90:8a:90:32:29: 2d:bf:c8:4a:8b:30:fe:38:51:fb:48:19:72:29:2c:4c:38:69: dd:c6:c6:e0:ef:a5:dc:d1:c1:24:0f:b3:82:4b:5c:17:2e:d1: 9d:a2:b3:a3:73:6b:b0:49:45:24:3d:35:d4:89:03:26:7e:a9: de:12:96:fb:9c:fb:0c:87:07:c8:47:9d:10:b6:e4:95:d6:4b: 56:47:5b:71:6c:c6:67:38:ec:75:25:7e:d4:b7:b8:82:9d:ea: ac:18:93:06:38:b0:bc:98:62:19:db:04:9a:b4:41:d8:a1:c6: 37:02:60:85:ed:f1:5c:60:55:75:8a:ef:a2:d1:83:ee:6b:9a: 35:5f:49:76:e9:e5:05:be:07:d7:93:02:4a:54:c0:b6:2f:09: 62:67:aa:c7 -----BEGIN CERTIFICATE----- MIIHojCCBoqgAwIBAgIUAQ0Mn0MoWEiwiS7Q6iIMUo2cb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyODAxNDUzM1oXDTI3MDUwMzAwNDUzM1owLzEtMCsGA1UEAxMk MWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2YyYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaPmK3KnMNtEe/o+m7i9wZce8xWQ1m12dw3V skFXud890JJEhC0oIjQKqD+7UcyWqDExAo+3GO0GSDz/AT63R/kU0a2y+1dtwyaZ 88w8p5WpU289Rf82NS+ukiUMGHmqvZpV1ABk9ctKVbG1cryz0Zl4vDpje8c+Zy5L oYPGJGzOdZpK2yWtIfNBzCY//YmMOtTDSdlGZJ3xcYt/glV9kcxYAqbF+0V5kZfr FoYPHdbfPaGQCCrHfhwsONfBEmrAn1ht/X6GmQCh93RxVCHk9kpZy46sV1fEGLKd cNXhmFH6ezU7XASjb+ycv/m3VkgbNNkYNAPhDAHVtJ9+885uqQIDAQABo4IEtDCC BLAwHQYDVR0OBBYEFOHCol3RpHAU14n+KZDluSu2u3cXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x ZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFmNmE2YzhlLWFhNzMtNGQ4Mi1h MmIxLWU2MTllYjNmMmFlYy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIz ZjJhZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwgbcGCCsGAQUF BwEHAQH/BIGnMIGkMIGRBAIAATCBigMEBG1J4AMEAJO5vQMEAJO50AMEAJO50gME AJO52AMEAJO52wMEAJO54QMEAswITAMEAswIdAMEAM7hHTAMAwQAz/TdAwQAz/Te AwQC0X9kAwQA0ZEpMAwDBADYVyMDBADYVyQwDAMEANhXMwMEANhXNAMEANhXOQME ANhXOwMEANhXPQMEANhyRDAOBAIAAjAIAwYEJgL8AgAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDBhtuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAD8QAWMaNWboiwg5uoDLGHSpjK5iCYswqo6N OgmNUlTdUdEz1a5LJoJeXfYoKSUIBcq4bC1Ma+yv2/5P+QyAzc+2ICnTOPLYWgej zbWWQD5XNywYHA382b+n+lg+dZKDzrL35I5wq1yQipAyKS2/yEqLMP44UftIGXIp LEw4ad3GxuDvpdzRwSQPs4JLXBcu0Z2is6Nza7BJRSQ9NdSJAyZ+qd4Slvuc+wyH B8hHnRC25JXWS1ZHW3Fsxmc47HUlftS3uIKd6qwYkwY4sLyYYhnbBJq0QdihxjcC YIXt8VxgVXWK76LRg+5rmjVfSXbp5QW+B9eTAkpUwLYvCWJnqsc= -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:20 2025 by rpki-client