$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer File: 2de5d746-3402-4263-b880-ea4d7ecfc168.cer (raw, json) Hash identifier: IJIpgqEWsnpePn8mmLc3SboHebC9epxz3kjPPUYZe2w= Subject key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584985F8346D958042A773CF5580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 12:36:26 +0000 Certificate not after: Sun 18 Jul 2027 00:45:35 +0000 Subordinate resources: AS: 22359 AS: 46265 AS: 53471 AS: 400196 IP: 69.161.210.0/23 IP: 98.97.224.0/20 IP: 207.22.32.0/21 IP: 208.52.176.0/23 IP: 2607:8240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:85:f8:34:6d:95:80:42:a7:73:cf:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 14 12:36:26 2025 GMT Not After : Jul 18 00:45:35 2027 GMT Subject: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:b1:96:72:ef:22:5a:4a:85:c2:b5:3c:29: 69:b7:6a:26:d4:3b:47:a7:56:7a:27:61:13:c7:9d: 24:60:e7:0e:73:17:27:11:d0:74:cd:ae:63:75:d8: e9:b7:80:54:48:a5:53:8c:13:28:1a:69:b0:52:16: 1d:46:1d:93:c8:31:ba:81:f8:43:52:d1:b9:e6:3b: 6d:75:eb:7a:63:7c:bb:73:ea:cd:bb:f0:11:95:12: a9:a3:40:2e:c3:9a:a5:10:aa:52:8e:6b:31:ee:62: 2f:49:97:b9:6f:d1:f8:13:b0:38:37:99:82:76:de: 16:9d:b6:59:62:16:af:1b:56:b1:6b:b1:3f:d8:3d: 26:0d:2c:dc:ee:1d:7c:eb:34:45:23:4a:cb:a7:a8: 70:0b:e8:68:1c:35:ab:ac:b8:0b:e4:2e:17:bf:ed: d4:a8:2b:e3:5e:b2:4c:d4:8a:12:84:4b:ef:ad:88: 67:43:f1:78:23:c8:c5:c9:e6:57:3f:78:51:a0:09: af:a4:f7:86:47:00:44:47:c1:1e:e7:73:1f:79:05: 5a:8b:4c:3c:44:2f:d3:8a:7f:d5:bf:ab:3b:f7:e5: 26:68:f5:10:a1:3f:1a:26:ca:9f:01:70:41:a6:b3: 63:db:20:11:a9:91:48:f3:71:62:4c:ef:5e:04:9d: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 69.161.210.0/23 98.97.224.0/20 207.22.32.0/21 208.52.176.0/23 IPv6: 2607:8240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22359 46265 53471 400196 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f5:de:1d:54:c0:32:d0:74:62:6d:cf:20:98:33:6c:ba:60: 16:ea:9e:73:10:9e:84:98:99:33:7a:19:15:a8:ac:fb:b7:05: 0b:d6:66:4f:57:a0:53:18:d1:0b:28:5a:0c:b7:d8:6c:57:bd: 09:d0:6d:67:1c:32:4b:8b:0a:32:49:99:05:f3:db:35:ba:8d: e1:bf:bc:c7:b7:91:2a:67:c6:44:bc:e9:8d:8b:74:56:38:cb: 86:f1:f7:c7:b4:59:02:29:4c:e6:67:ab:eb:f1:a6:7a:d4:f1: 8c:d1:db:76:c7:de:40:cb:91:62:09:f7:ef:05:90:31:02:4b: 9c:60:eb:cc:47:ce:ba:bd:d1:47:84:46:53:37:09:24:3a:a4: 82:c0:a1:2d:e7:1c:17:b7:96:57:76:d5:c5:03:47:7f:a6:aa: 38:4a:40:32:5a:51:9b:93:5e:72:a4:f8:db:de:a3:25:0f:09: 3e:8d:62:cc:d7:1c:ef:56:d9:c3:e6:9e:df:dd:a5:d3:e9:39: 12:d3:94:14:ba:c1:12:6c:c3:09:51:0a:19:ec:d4:aa:a4:78: 2a:9c:6c:1b:b9:fd:25:76:55:96:4b:6e:1e:b2:e9:f8:8a:b6: 72:48:71:4f:16:77:67:dc:c0:82:13:32:67:fa:f7:93:d0:aa: 5f:b1:12:71 -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWEmF+DRtlYBCp3PPVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQxNDEyMzYyNloXDTI3MDcxODAwNDUzNVowLzEtMCsGA1UEAxMk MmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2ZjMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVCxlnLvIlpKhcK1PClpt2om1DtHp1Z6J2ET x50kYOcOcxcnEdB0za5jddjpt4BUSKVTjBMoGmmwUhYdRh2TyDG6gfhDUtG55jtt det6Y3y7c+rNu/ARlRKpo0Auw5qlEKpSjmsx7mIvSZe5b9H4E7A4N5mCdt4WnbZZ YhavG1axa7E/2D0mDSzc7h186zRFI0rLp6hwC+hoHDWrrLgL5C4Xv+3UqCvjXrJM 1IoShEvvrYhnQ/F4I8jFyeZXP3hRoAmvpPeGRwBER8Ee53MfeQVai0w8RC/Tin/V v6s79+UmaPUQoT8aJsqfAXBBprNj2yARqZFI83FiTO9eBJ22hQIDAQABo4IESjCC BEYwHQYDVR0OBBYEFGu70AR5zdbEZsH7wGpYOioVbUh8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y ZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzJkZTVkNzQ2LTM0MDItNDI2My1i ODgwLWVhNGQ3ZWNmYzE2OC8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2Vj ZmMxNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAFFodIDBARiYeADBAPPFiADBAHQNLAwDQQCAAIw BwMFACYHgkAwKAYIKwYBBQUHAQgBAf8EGTAXoBUwEwICV1cCAwC0uQIDANDfAgMG G0QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKvXeHVTAMtB0Ym3PIJgzbLpgFuqecxCehJiZM3oZFais+7cF C9ZmT1egUxjRCyhaDLfYbFe9CdBtZxwyS4sKMkmZBfPbNbqN4b+8x7eRKmfGRLzp jYt0VjjLhvH3x7RZAilM5mer6/GmetTxjNHbdsfeQMuRYgn37wWQMQJLnGDrzEfO ur3RR4RGUzcJJDqkgsChLeccF7eWV3bVxQNHf6aqOEpAMlpRm5NecqT4296jJQ8J Po1izNcc71bZw+ae392l0+k5EtOUFLrBEmzDCVEKGezUqqR4KpxsG7n9JXZVlktu HrLp+Iq2ckhxTxZ3Z9zAghMyZ/r3k9CqX7EScQ== -----END CERTIFICATE-----Generated at Sat Apr 26 18:12:52 2025 by rpki-client