$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer File: 3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer (raw, json) Hash identifier: 8ELv2rS8hkHVbnEFzgwgOlkHpgjaOQs4ZGEyBt17zh4= Subject key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858489FC9141040F7F7336B095500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jan 2025 01:45:33 +0000 Certificate not after: Tue 27 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 14228 IP: 162.249.60.0/22 IP: 2620:d5:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:c9:14:10:40:f7:f7:33:6b:09:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 22 01:45:33 2025 GMT Not After : Apr 27 00:45:33 2027 GMT Subject: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:6a:65:62:35:d7:8e:80:65:e4:39:54:05: 54:07:9f:35:80:7d:1a:7f:73:72:97:43:40:5f:52: ab:5d:d6:66:8b:e1:90:da:e2:b6:ad:66:1f:51:25: 71:5a:b7:af:bc:f7:3f:88:8e:3f:a3:1f:cf:3a:6c: df:e0:4e:fe:88:7c:64:ea:96:1f:9b:5d:8b:2a:cd: 10:76:5f:1d:6e:03:6f:69:b0:f1:e3:bb:1a:fd:91: d1:ab:35:37:94:25:b9:06:a9:31:b8:6c:a5:b5:56: 79:ee:31:f5:10:c0:4b:82:47:2e:c3:e8:4a:7b:57: 13:c6:0c:52:c8:0e:12:04:dc:bc:ad:18:32:a2:e6: 85:84:bb:55:fb:55:b6:4a:85:9f:85:e7:a6:40:d1: ce:b6:bd:19:c2:d8:bd:94:ca:4b:01:19:e3:01:67: 3b:af:b9:a8:27:2b:d8:c0:3e:41:2b:28:79:df:f4: 6e:ed:89:42:86:6d:d6:ab:3b:72:0e:c2:c4:a6:8e: 61:76:60:97:b3:ff:91:c7:33:77:f3:75:10:b0:2a: 1a:a9:06:44:9d:0f:c0:0c:44:e5:f6:b4:75:e7:76: c7:1e:21:8f:29:8c:ab:af:be:4c:59:e2:07:6a:3e: b0:13:89:9c:8d:0c:7e:10:da:a9:82:37:52:61:f6: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 162.249.60.0/22 IPv6: 2620:d5:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9f:da:3d:ac:c7:69:78:7e:fb:58:a9:8a:18:07:16:6d:f0: 72:94:28:26:b8:91:1a:19:5c:b5:3b:5f:62:ca:f8:99:2c:db: bb:e0:87:31:e1:8a:b7:e9:23:58:1d:06:0e:d4:df:28:67:ea: 76:ad:93:50:01:af:a9:c2:ef:64:61:b7:ec:17:a7:21:8b:e2: bb:ab:85:49:14:55:62:42:0a:39:fe:cc:02:f8:5a:3a:98:2e: eb:8b:2e:23:a7:ea:f1:ac:54:b8:c2:6a:d8:66:d0:90:1a:83: 8e:e8:32:5e:56:12:e8:56:11:3c:63:60:cc:59:a9:dc:68:e9: c6:9a:8e:f0:57:ff:a0:70:1e:3a:25:7c:04:78:ee:a2:96:10: 83:b6:d3:2a:88:64:15:d7:e7:db:e7:2b:5e:3a:a8:3d:ed:f1: 9f:ea:d2:bf:c6:8b:ec:be:f4:e7:82:77:4b:83:88:9c:de:28: 5f:93:a0:44:91:c7:1e:24:a4:66:b6:87:6b:4d:a8:ec:b7:74: 80:25:3f:2a:25:19:17:ca:f7:bb:0a:59:d5:aa:df:be:c3:4a: 1b:3e:29:f2:1f:9b:72:74:e2:2b:a3:d3:27:04:62:d9:de:7c: 46:a5:7d:75:89:63:51:38:6b:64:8e:da:8b:b6:2e:5e:81:a1: 73:43:84:f1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEifyRQQQPf3M2sJVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyMjAxNDUzM1oXDTI3MDQyNzAwNDUzM1owLzEtMCsGA1UEAxMk M2U2NWM2MTAtZmE0OS00ZDdiLWEyZTctNjkxMjRmMWU1Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcRqZWI1146AZeQ5VAVUB581gH0af3Nyl0NA X1KrXdZmi+GQ2uK2rWYfUSVxWrevvPc/iI4/ox/POmzf4E7+iHxk6pYfm12LKs0Q dl8dbgNvabDx47sa/ZHRqzU3lCW5BqkxuGyltVZ57jH1EMBLgkcuw+hKe1cTxgxS yA4SBNy8rRgyouaFhLtV+1W2SoWfheemQNHOtr0Zwti9lMpLARnjAWc7r7moJyvY wD5BKyh53/Ru7YlChm3WqztyDsLEpo5hdmCXs/+RxzN383UQsCoaqQZEnQ/ADETl 9rR153bHHiGPKYyrr75MWeIHaj6wE4mcjQx+ENqpgjdSYfbjdQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPFA7TP6mfrmaMNCNwHCa0xqrjUoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z ZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYxZTVjODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzNlNjVjNjEwLWZhNDktNGQ3Yi1h MmU3LTY5MTI0ZjFlNWM4NS8zZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYx ZTVjODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAKi+TwwDwQCAAIwCQMHACYgANVAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgI3lDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9n9o9rMdpeH77WKmKGAcWbfBy lCgmuJEaGVy1O19iyviZLNu74Icx4Yq36SNYHQYO1N8oZ+p2rZNQAa+pwu9kYbfs F6chi+K7q4VJFFViQgo5/swC+Fo6mC7riy4jp+rxrFS4wmrYZtCQGoOO6DJeVhLo VhE8Y2DMWancaOnGmo7wV/+gcB46JXwEeO6ilhCDttMqiGQV1+fb5yteOqg97fGf 6tK/xovsvvTngndLg4ic3ihfk6BEkcceJKRmtodrTajst3SAJT8qJRkXyve7ClnV qt++w0obPinyH5tydOIro9MnBGLZ3nxGpX11iWNROGtkjtqLti5egaFzQ4Tx -----END CERTIFICATE-----Generated at Mon Apr 28 12:34:46 2025 by rpki-client