$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer File: 3905609c-39ed-4063-a3a8-68871c079747.cer (raw, json) Hash identifier: Xe148Pz5Kiz7rQcl/Pp/0gKCGVmottIKwVJjm4jH+To= Subject key identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849123F1F146B0753039A524340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 01:45:33 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 216.245.146.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:3f:1f:14:6b:07:53:03:9a:52:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 4 01:45:33 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=3905609c-39ed-4063-a3a8-68871c079747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:3e:52:dd:89:c4:bb:e3:bb:6b:96:06:04: 73:b3:7c:1b:1c:83:8a:57:95:52:78:9a:25:a0:67: 84:4f:06:cd:65:a3:f8:2e:2f:18:5e:3b:56:64:e3: f3:54:5c:93:b1:e5:f1:8c:f7:3d:73:74:ea:98:0c: 3b:5a:4e:9d:ec:83:d9:b5:ae:7b:60:ea:be:d1:22: c1:9c:12:99:69:01:00:fb:13:a7:07:20:2f:c0:a1: f8:05:79:72:07:c3:33:00:99:17:94:c7:92:fc:9a: 25:2d:61:f6:91:3c:f1:5f:b4:fc:dc:3f:74:fc:6a: 08:f7:bc:12:41:c7:a9:db:0a:37:18:0e:df:40:81: c5:06:b2:8c:59:a8:00:c3:89:55:6c:37:42:9e:c1: 47:79:40:7a:8c:f6:a4:e0:2c:9b:db:64:22:e0:de: ab:b8:17:cd:a4:d6:37:19:9f:69:45:53:fd:fe:67: db:7b:14:91:96:55:39:b6:48:f7:8d:9a:e7:cc:a1: 7e:82:45:dd:46:48:73:77:75:e7:76:a7:99:03:16: 1b:d8:14:f6:dc:76:4c:c5:cd:9b:de:c8:c4:c3:c5: 06:e0:26:5c:b2:ff:28:74:76:2e:5a:3a:61:99:fd: 57:2b:04:73:82:c3:b1:cb:23:c6:5c:96:35:54:a7: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 216.245.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e4:56:c6:6a:3a:4e:66:ad:c3:61:60:67:90:e8:5e:74:55: d0:cf:53:12:32:fe:9a:b8:d1:1b:74:00:f5:f9:4c:7e:21:a5: a8:70:00:cb:26:e7:f3:70:44:c9:91:42:9f:e0:88:06:c7:89: fc:3a:a7:91:15:ba:92:5d:62:d2:21:aa:c2:2b:b6:42:43:f3: c3:c5:5b:b8:ba:d7:1d:84:de:13:2a:81:90:48:17:86:7c:e4: 36:ae:27:4e:f3:76:d7:33:dc:a2:58:ff:33:9f:57:8e:01:ea: 98:e7:1f:26:3a:dc:49:79:51:ad:09:36:8b:fd:63:37:26:d2: 6e:d1:5b:90:f3:81:fa:b0:f8:d2:e3:19:86:20:bb:b1:9c:99: bd:6c:9f:b6:82:61:11:e2:1e:c2:f4:bc:4f:5b:0c:02:67:04: c2:26:23:cc:e0:e3:20:bd:5c:7e:9f:6d:6e:66:82:b4:08:79: 64:18:f8:a7:68:55:36:77:0f:b6:8c:43:c0:ee:47:69:d3:6f: 59:48:f1:cd:00:5e:c6:d3:6a:12:82:14:1c:2b:1b:31:73:5e: e9:13:32:23:ce:2b:4a:1c:d0:89:02:b4:09:0e:50:44:63:25: 6e:f9:a1:f7:04:0d:b6:72:99:35:6a:aa:b2:82:1f:14:eb:8f: 97:af:3c:3e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEkSPx8UawdTA5pSQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwNDAxNDUzM1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk MzkwNTYwOWMtMzllZC00MDYzLWEzYTgtNjg4NzFjMDc5NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOA+Ut2JxLvju2uWBgRzs3wbHIOKV5VSeJol oGeETwbNZaP4Li8YXjtWZOPzVFyTseXxjPc9c3TqmAw7Wk6d7IPZta57YOq+0SLB nBKZaQEA+xOnByAvwKH4BXlyB8MzAJkXlMeS/JolLWH2kTzxX7T83D90/GoI97wS Qcep2wo3GA7fQIHFBrKMWagAw4lVbDdCnsFHeUB6jPak4Cyb22Qi4N6ruBfNpNY3 GZ9pRVP9/mfbexSRllU5tkj3jZrnzKF+gkXdRkhzd3XndqeZAxYb2BT23HZMxc2b 3sjEw8UG4CZcsv8odHYuWjphmf1XKwRzgsOxyyPGXJY1VKdYoQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLq88QpPpaoIh+H+HeH0JPM+hjXcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z OTA1NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3MWMwNzk3NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzM5MDU2MDljLTM5ZWQtNDA2My1h M2E4LTY4ODcxYzA3OTc0Ny8zOTA1NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3MWMw Nzk3NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHY9ZIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI+RWxmo6Tmatw2FgZ5Do XnRV0M9TEjL+mrjRG3QA9flMfiGlqHAAyybn83BEyZFCn+CIBseJ/DqnkRW6kl1i 0iGqwiu2QkPzw8VbuLrXHYTeEyqBkEgXhnzkNq4nTvN21zPcolj/M59XjgHqmOcf JjrcSXlRrQk2i/1jNybSbtFbkPOB+rD40uMZhiC7sZyZvWyftoJhEeIewvS8T1sM AmcEwiYjzODjIL1cfp9tbmaCtAh5ZBj4p2hVNncPtoxDwO5HadNvWUjxzQBextNq EoIUHCsbMXNe6RMyI84rShzQiQK0CQ5QRGMlbvmh9wQNtnKZNWqqsoIfFOuPl688 Pg== -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:12 2025 by rpki-client