$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5.cer File: 2263e0ff-dbcf-4412-972c-090f783da4c5.cer (raw, json) Hash identifier: fuPIZGkY2tweMaFeaVcHfNCLtz3SpDc5F2pNf5viGEY= Subject key identifier: A8:25:7C:46:DC:91:C7:FE:2E:E2:7A:BF:2D:56:54:E3:7D:98:A4:16 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584886A8EB64B6CA19FF304F9960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/2263e0ff-dbcf-4412-972c-090f783da4c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jan 2025 01:45:33 +0000 Certificate not after: Sun 18 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 205.236.42.0/24 IP: 2620:68:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:a8:eb:64:b6:ca:19:ff:30:4f:99:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 13 01:45:33 2025 GMT Not After : Apr 18 00:45:33 2027 GMT Subject: CN=2263e0ff-dbcf-4412-972c-090f783da4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bb:9c:a0:4a:2f:1f:57:93:57:15:ee:58:14: 14:cf:92:08:f8:89:93:49:2d:e5:1c:ac:d8:39:8b: 5c:8e:43:2a:03:5c:e8:43:51:3e:67:57:69:5c:a7: 25:65:41:9c:78:26:d4:a3:6e:ad:27:98:cf:3c:5c: 62:4b:d4:9a:bd:3d:d5:c1:0c:c3:99:b0:48:38:27: ef:c6:84:fc:45:1c:44:ef:1f:4c:c7:55:75:1d:91: a2:51:aa:10:b7:d4:3d:72:03:29:a6:43:13:8a:86: 57:55:1b:5e:e4:c0:9b:61:22:9f:c2:a0:d2:ad:f7: cb:e0:41:f0:f8:c0:41:69:ba:26:63:4b:c9:e9:f3: b4:75:9d:9b:77:9c:be:eb:f1:8d:e2:f0:98:77:64: df:0f:1f:e0:20:cf:f4:ac:25:95:a8:8c:69:e2:49: ed:54:5f:f8:72:50:45:9d:f7:2a:3a:d1:cd:8b:87: 18:25:c8:40:84:9d:14:ad:08:9a:fe:96:2a:ea:c6: bc:68:2f:01:80:00:4f:df:ba:bb:b6:fe:5e:34:e3: 8a:0e:df:2d:e6:b4:18:c7:b2:fe:29:d4:0b:da:e1: 81:03:a1:d2:92:06:f9:d3:b1:4d:f0:dd:80:a7:f5: 83:cb:d8:cf:a4:c3:ea:63:26:3b:a7:f1:17:d5:e1: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:25:7C:46:DC:91:C7:FE:2E:E2:7A:BF:2D:56:54:E3:7D:98:A4:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/2263e0ff-dbcf-4412-972c-090f783da4c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.236.42.0/24 IPv6: 2620:68:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:67:79:eb:d5:de:77:4d:7f:10:0c:a1:5b:b1:63:21:5c:e5: 04:59:d6:c2:a5:9a:9a:ab:76:3d:d9:c4:27:58:96:62:90:c6: d0:bc:e9:e0:18:98:ad:4a:1e:03:7c:c5:92:01:16:aa:23:55: d6:91:6b:b5:b2:63:62:fb:55:06:e4:b6:d0:88:a9:fd:8a:64: ca:3d:71:99:a4:86:2c:7b:17:ad:71:3d:f7:55:0d:43:2f:34: ab:85:ef:21:8c:40:0e:a1:4f:02:f1:c8:2a:09:81:29:d3:cb: 76:fa:ae:89:f9:c2:dd:f6:55:82:65:3f:a1:ed:b0:35:99:0f: 9b:86:50:c1:db:58:81:23:be:dd:bf:6a:24:84:b4:36:7b:17: ab:17:8d:01:ce:33:62:fe:6b:a9:e1:69:9a:1b:10:84:d2:e4: f1:f0:24:11:f1:cf:f2:40:a0:6e:67:54:14:cd:5f:61:a9:12: 04:f0:75:d4:7e:10:66:eb:ab:34:fa:a6:75:da:0c:ff:ad:99: e5:14:58:7c:52:bd:48:c6:99:38:06:04:68:a3:61:cf:ed:9d: bd:61:af:07:ae:e4:5d:81:ca:68:70:f6:67:d2:e3:bb:93:ff: ea:50:61:35:ad:ae:b5:06:d5:f6:c7:01:b5:c0:ac:d8:d0:24: fe:95:75:a2 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEiGqOtktsoZ/zBPmWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExMzAxNDUzM1oXDTI3MDQxODAwNDUzM1owLzEtMCsGA1UEAxMk MjI2M2UwZmYtZGJjZi00NDEyLTk3MmMtMDkwZjc4M2RhNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbucoEovH1eTVxXuWBQUz5II+ImTSS3lHKzY OYtcjkMqA1zoQ1E+Z1dpXKclZUGceCbUo26tJ5jPPFxiS9SavT3VwQzDmbBIOCfv xoT8RRxE7x9Mx1V1HZGiUaoQt9Q9cgMppkMTioZXVRte5MCbYSKfwqDSrffL4EHw +MBBabomY0vJ6fO0dZ2bd5y+6/GN4vCYd2TfDx/gIM/0rCWVqIxp4kntVF/4clBF nfcqOtHNi4cYJchAhJ0UrQia/pYq6sa8aC8BgABP37q7tv5eNOOKDt8t5rQYx7L+ KdQL2uGBA6HSkgb507FN8N2Ap/WDy9jPpMPqYyY7p/EX1eH2zQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFKglfEbckcf+LuJ6vy1WVON9mKQWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y MjYzZTBmZi1kYmNmLTQ0MTItOTcyYy0wOTBmNzgzZGE0YzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzIyNjNlMGZmLWRiY2YtNDQxMi05 NzJjLTA5MGY3ODNkYTRjNS8yMjYzZTBmZi1kYmNmLTQ0MTItOTcyYy0wOTBmNzgz ZGE0YzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADN7CowDwQCAAIwCQMHACYgAGiAADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCEZ3nr1d53TX8QDKFbsWMhXOUEWdbCpZqaq3Y92cQnWJZikMbQvOngGJitSh4D fMWSARaqI1XWkWu1smNi+1UG5LbQiKn9imTKPXGZpIYsexetcT33VQ1DLzSrhe8h jEAOoU8C8cgqCYEp08t2+q6J+cLd9lWCZT+h7bA1mQ+bhlDB21iBI77dv2okhLQ2 exerF40BzjNi/mup4WmaGxCE0uTx8CQR8c/yQKBuZ1QUzV9hqRIE8HXUfhBm66s0 +qZ12gz/rZnlFFh8Ur1Ixpk4BgRoo2HP7Z29Ya8HruRdgcpocPZn0uO7k//qUGE1 ra61BtX2xwG1wKzY0CT+lXWi -----END CERTIFICATE-----Generated at Mon Apr 28 15:09:08 2025 by rpki-client