$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8.cer File: 35a0be33-3824-4039-8e56-d16e5d2199a8.cer (raw, json) Hash identifier: QV2k7ijAkyYrsd2fkICtWJCuCspEC5FW8RwGoIlxG4M= Subject key identifier: 0C:D7:4F:0C:81:20:9B:1F:AF:02:E4:77:64:F3:77:C0:50:0F:2A:DB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858482A262FBF897A41FDB31F0A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Dec 2024 22:27:47 +0000 Certificate not after: Mon 15 Mar 2027 21:27:47 +0000 Subordinate resources: IP: 174.128.185.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2a:26:2f:bf:89:7a:41:fd:b3:1f:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 10 22:27:47 2024 GMT Not After : Mar 15 21:27:47 2027 GMT Subject: CN=35a0be33-3824-4039-8e56-d16e5d2199a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:f9:c2:c4:19:ed:ea:9d:51:66:53:2a:4a: ff:10:2f:df:2b:3c:bd:3a:bd:dc:e4:c6:a9:fc:ab: 65:7e:ba:ce:dc:1e:75:45:c8:69:31:23:fc:55:96: a7:8d:34:01:49:a6:05:e6:07:31:4e:70:90:f9:e3: b5:3d:78:16:c1:04:9b:37:4d:c9:95:3c:be:aa:92: aa:c4:be:c8:86:86:dd:45:f2:01:8c:c9:95:66:94: 34:ea:db:08:04:77:13:c6:ad:44:f8:f5:eb:e0:7b: 4d:97:93:bb:5b:63:fc:e5:a6:23:48:38:d9:17:45: 32:2d:3a:11:d3:88:da:28:46:1e:dc:71:64:ec:b4: 18:9d:c0:c5:39:a0:fa:2b:dd:0a:20:46:06:33:4b: 95:d3:db:a6:6f:96:99:44:68:a4:b3:d0:ce:43:e5: b1:2e:2d:d6:24:ae:e2:1b:99:7d:90:f6:b4:c3:f5: 00:3b:16:79:43:e3:2f:9e:d2:85:5c:2b:c9:24:db: 76:af:d9:09:07:3e:6e:96:03:7d:66:0d:75:a7:de: e4:fd:2d:cd:f7:64:4e:d9:61:b2:d2:0a:4b:cb:48: ce:75:e1:e3:60:68:f6:be:80:29:03:a3:e8:3b:53: d8:ca:04:6a:88:32:4a:2d:1e:97:68:11:ff:6d:f0: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D7:4F:0C:81:20:9B:1F:AF:02:E4:77:64:F3:77:C0:50:0F:2A:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 174.128.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d6:99:3a:a7:33:b5:43:ac:c6:1a:d4:b6:fd:5e:9a:22:e6: a0:b6:09:54:fe:47:e1:a7:15:7f:2b:26:1c:ab:7f:9f:f5:25: 7c:d7:f4:57:ce:b5:f6:bc:38:4c:a1:5b:4c:f8:8b:eb:4d:b5: 71:29:69:27:7b:07:55:a5:68:22:05:b8:4a:dd:34:3e:23:0c: 00:92:98:00:f5:04:d5:d4:1c:c3:0a:63:1b:24:b4:00:b2:8a: eb:74:eb:ee:9e:92:4a:20:bf:4f:9a:ec:b7:ea:2e:a5:49:17: 57:b4:26:fb:0b:8e:07:64:2d:ba:6e:da:72:5b:e5:20:ce:2f: e1:2c:a7:0b:26:5e:19:02:3f:d8:38:24:2e:3e:8f:c9:90:ed: d0:d4:60:68:91:a5:46:2d:61:03:26:9f:e9:d6:6b:65:ca:53: 53:00:22:10:37:d3:97:f5:f4:f8:3f:1b:2a:d2:e8:2e:c7:ad: df:85:8f:e1:c2:a4:be:10:a1:ef:4f:6b:23:93:d5:20:b7:0b: 6c:9e:14:24:15:c3:57:f6:86:7c:a3:e3:67:3a:f0:25:5c:07: 35:5a:65:c3:15:81:66:8e:c7:bc:c6:d2:65:11:b3:5e:bd:c3: fd:cd:7f:59:27:ad:85:47:12:5b:f1:69:c5:09:e7:57:ab:cd: 3a:1f:b2:41 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEgqJi+/iXpB/bMfCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MTIxMDIyMjc0N1oXDTI3MDMxNTIxMjc0N1owLzEtMCsGA1UEAxMk MzVhMGJlMzMtMzgyNC00MDM5LThlNTYtZDE2ZTVkMjE5OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07L5wsQZ7eqdUWZTKkr/EC/fKzy9Or3c5Map /KtlfrrO3B51RchpMSP8VZanjTQBSaYF5gcxTnCQ+eO1PXgWwQSbN03JlTy+qpKq xL7IhobdRfIBjMmVZpQ06tsIBHcTxq1E+PXr4HtNl5O7W2P85aYjSDjZF0UyLToR 04jaKEYe3HFk7LQYncDFOaD6K90KIEYGM0uV09umb5aZRGiks9DOQ+WxLi3WJK7i G5l9kPa0w/UAOxZ5Q+MvntKFXCvJJNt2r9kJBz5ulgN9Zg11p97k/S3N92RO2WGy 0gpLy0jOdeHjYGj2voApA6PoO1PYygRqiDJKLR6XaBH/bfD3kQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAzXTwyBIJsfrwLkd2Tzd8BQDyrbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z NWEwYmUzMy0zODI0LTQwMzktOGU1Ni1kMTZlNWQyMTk5YTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzM1YTBiZTMzLTM4MjQtNDAzOS04 ZTU2LWQxNmU1ZDIxOTlhOC8zNWEwYmUzMy0zODI0LTQwMzktOGU1Ni1kMTZlNWQy MTk5YTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACugLkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHNaZOqcztUOsxhrUtv1e miLmoLYJVP5H4acVfysmHKt/n/UlfNf0V8619rw4TKFbTPiL6021cSlpJ3sHVaVo IgW4St00PiMMAJKYAPUE1dQcwwpjGyS0ALKK63Tr7p6SSiC/T5rst+oupUkXV7Qm +wuOB2Qtum7aclvlIM4v4SynCyZeGQI/2DgkLj6PyZDt0NRgaJGlRi1hAyaf6dZr ZcpTUwAiEDfTl/X0+D8bKtLoLset34WP4cKkvhCh709rI5PVILcLbJ4UJBXDV/aG fKPjZzrwJVwHNVplwxWBZo7HvMbSZRGzXr3D/c1/WSethUcSW/FpxQnnV6vNOh+y QQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:02:45 2025 by rpki-client