$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.cer File: 23dc136d-a5d2-43dd-b20e-5edff7bd04c3.cer (raw, json) Hash identifier: 3xrf2idmJNLrSw5eTUXKobCnuaE2ySEPnVgAvEQDb18= Subject key identifier: 64:ED:3F:36:A0:5B:36:A5:31:11:B4:A4:69:C7:23:C8:94:BB:5B:CF Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584976A1FACD421F5FD0DEF177C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 00:45:34 +0000 Certificate not after: Tue 13 Jul 2027 00:45:34 +0000 Subordinate resources: IP: 199.127.171.0/24 IP: 204.52.242.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a1:fa:cd:42:1f:5f:d0:de:f1:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 9 00:45:34 2025 GMT Not After : Jul 13 00:45:34 2027 GMT Subject: CN=23dc136d-a5d2-43dd-b20e-5edff7bd04c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a9:b3:e8:5f:58:17:93:82:2b:8c:e2:08:bd: a5:bd:3c:d5:c8:fb:7c:f6:4d:9d:bd:90:31:ec:9b: f0:cb:6b:a3:5b:eb:5d:89:1a:ca:27:93:d4:ad:56: b5:7f:40:9a:9c:94:98:e2:25:73:38:e6:0c:80:05: 54:11:f7:c4:0d:0c:c4:bb:fe:a2:d4:7b:47:88:ea: 77:86:a2:b5:67:da:26:33:06:8b:f7:f3:52:15:5f: 0b:66:59:72:ae:32:86:e1:56:e5:77:bd:5c:6d:27: b1:60:41:9f:d6:38:5a:a2:2f:ad:47:58:9c:a5:cd: ec:9a:0c:b8:a9:ff:2a:3d:8f:17:b6:01:4a:a1:44: cd:c4:c2:0c:6d:e7:8f:e2:23:b9:e1:7d:dd:ab:d1: e1:b4:14:72:3c:62:4a:69:60:3b:7e:44:5b:91:2c: 7b:00:e1:96:c3:f4:fc:8d:af:61:58:f8:c1:3f:29: 03:ed:25:96:4f:f2:a6:fc:60:0b:f3:b8:60:4f:57: e0:9b:a8:5c:ad:1a:4c:9e:33:8d:c6:48:f8:8a:d6: d7:40:3e:c1:b4:c2:1f:79:d3:ed:31:ef:d3:9f:8e: 0b:29:29:09:bd:5c:d7:6e:5d:09:df:d1:bc:e9:d4: 03:16:3a:cc:ab:05:94:d8:31:56:b0:2d:81:61:74: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:ED:3F:36:A0:5B:36:A5:31:11:B4:A4:69:C7:23:C8:94:BB:5B:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23dc136d-a5d2-43dd-b20e-5edff7bd04c3/23dc136d-a5d2-43dd-b20e-5edff7bd04c3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.127.171.0/24 204.52.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f3:f7:6b:df:0b:8f:95:95:bd:a8:09:27:3f:2c:82:77:1f: ac:6e:49:ae:d1:a7:f6:ef:c1:b8:25:d0:42:59:7e:28:3d:47: 6d:09:ac:1e:85:f1:1c:bc:a9:93:1c:68:41:14:e8:74:78:37: 5e:9d:bb:1a:60:94:77:44:c5:bd:a1:4d:34:db:17:72:65:04: f8:71:84:db:b7:73:1d:f4:d6:15:a1:08:a7:c3:9a:45:cd:79: 05:65:c6:97:5e:b5:8a:8f:6f:cd:f2:da:91:c5:13:55:7f:80: a4:b4:09:35:fc:c1:27:40:3d:9f:6c:2b:9e:61:9d:c0:94:7c: 4c:dc:87:2a:29:71:77:db:71:ca:75:d6:32:11:2d:68:74:90: e3:42:b8:35:a4:46:fd:c9:71:89:09:2e:86:0b:0f:6e:3e:5b: 43:71:99:4a:53:d3:3d:df:0b:cf:db:b0:c7:b2:24:d1:f8:01: ac:06:4e:1d:95:98:f3:f3:42:af:cf:8b:59:38:f5:d4:c8:f1: 44:da:e6:02:25:61:f7:bb:fd:1e:2d:df:5f:a3:42:23:8b:2c: de:49:ce:32:07:14:09:22:de:36:ba:85:70:28:fa:9d:e2:8b: 86:cc:b0:0f:c3:98:f8:48:ae:3f:fd:88:6a:0a:fa:09:79:51: 1e:cb:9b:85 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEl2ofrNQh9f0N7xd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwOTAwNDUzNFoXDTI3MDcxMzAwNDUzNFowLzEtMCsGA1UEAxMk MjNkYzEzNmQtYTVkMi00M2RkLWIyMGUtNWVkZmY3YmQwNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqmz6F9YF5OCK4ziCL2lvTzVyPt89k2dvZAx 7Jvwy2ujW+tdiRrKJ5PUrVa1f0CanJSY4iVzOOYMgAVUEffEDQzEu/6i1HtHiOp3 hqK1Z9omMwaL9/NSFV8LZllyrjKG4Vbld71cbSexYEGf1jhaoi+tR1icpc3smgy4 qf8qPY8XtgFKoUTNxMIMbeeP4iO54X3dq9HhtBRyPGJKaWA7fkRbkSx7AOGWw/T8 ja9hWPjBPykD7SWWT/Km/GAL87hgT1fgm6hcrRpMnjONxkj4itbXQD7BtMIfedPt Me/Tn44LKSkJvVzXbl0J39G86dQDFjrMqwWU2DFWsC2BYXSpNwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFGTtPzagWzalMRG0pGnHI8iUu1vPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y M2RjMTM2ZC1hNWQyLTQzZGQtYjIwZS01ZWRmZjdiZDA0YzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzIzZGMxMzZkLWE1ZDItNDNkZC1i MjBlLTVlZGZmN2JkMDRjMy8yM2RjMTM2ZC1hNWQyLTQzZGQtYjIwZS01ZWRmZjdi ZDA0YzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADHf6sDBADMNPIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARfP3a98Lj5WV vagJJz8sgncfrG5JrtGn9u/BuCXQQll+KD1HbQmsHoXxHLypkxxoQRTodHg3Xp27 GmCUd0TFvaFNNNsXcmUE+HGE27dzHfTWFaEIp8OaRc15BWXGl161io9vzfLakcUT VX+ApLQJNfzBJ0A9n2wrnmGdwJR8TNyHKilxd9txynXWMhEtaHSQ40K4NaRG/clx iQkuhgsPbj5bQ3GZSlPTPd8Lz9uwx7Ik0fgBrAZOHZWY8/NCr8+LWTj11MjxRNrm AiVh97v9Hi3fX6NCI4ss3knOMgcUCSLeNrqFcCj6neKLhsywD8OY+EiuP/2Iagr6 CXlRHsubhQ== -----END CERTIFICATE-----Generated at Mon Apr 28 14:24:22 2025 by rpki-client