$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e.cer File: 4aae8282-1cad-4073-9d4a-e9484014919e.cer (raw, json) Hash identifier: av6bHPLubqXH960wQNfOvkoQ08PCKSPiyIkm3iE8hkM= Subject key identifier: C3:CB:4C:99:9F:32:B0:68:0C:FC:2B:6A:38:AB:6C:9F:81:06:A2:FB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848E6F9843AFD209B8A52482C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Feb 2025 13:45:33 +0000 Certificate not after: Sat 22 May 2027 12:45:33 +0000 Subordinate resources: IP: 205.233.155.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e6:f9:84:3a:fd:20:9b:8a:52:48:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 16 13:45:33 2025 GMT Not After : May 22 12:45:33 2027 GMT Subject: CN=4aae8282-1cad-4073-9d4a-e9484014919e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:22:c2:80:27:9e:3e:cc:43:7c:e6:ff:99: 23:af:b7:3d:a0:30:ae:b1:c4:f9:fa:f9:3a:55:48: 93:15:da:35:2c:4b:4b:5c:c0:d2:22:f7:80:27:c3: 64:50:bc:d2:7f:3b:a1:d5:8b:25:84:3d:1e:dc:28: 49:1a:63:4a:9e:64:4a:b9:fa:ff:54:18:fd:6f:0f: 3f:2c:ff:de:b2:27:2c:38:fa:de:df:09:d7:33:9c: e9:f1:5b:f1:cb:6c:4f:d0:b0:57:7e:7f:df:91:75: f1:4e:80:e8:d3:23:2e:ff:46:75:f8:df:8e:7a:60: 03:bf:3b:0f:e9:ed:f8:45:06:3f:6b:62:0c:05:25: 86:e9:d0:06:22:e3:8c:bb:4c:3c:1a:91:66:f9:bb: 8e:17:84:51:b6:5f:2e:5c:42:cc:58:f1:fd:3c:57: 0b:b3:93:2c:24:03:e5:18:35:d7:14:87:2e:2c:ed: 83:78:a3:a3:dc:93:2a:98:c6:25:92:4e:3a:ac:1f: 9e:46:1b:c6:68:40:37:49:65:1b:7b:71:8c:6f:2b: 20:f3:24:5a:0a:ec:47:36:6f:12:5a:02:92:e3:8c: c9:b5:e3:7e:bb:9d:1f:2c:2c:51:65:74:ee:3d:1b: cb:65:8b:8d:e9:29:20:a1:f9:0d:6b:6c:3d:81:08: ad:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CB:4C:99:9F:32:B0:68:0C:FC:2B:6A:38:AB:6C:9F:81:06:A2:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.233.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9d:4a:b4:0c:f8:5c:ef:11:4b:e8:fa:04:6c:bf:f8:2d:c3: 7a:3c:0e:f4:1f:90:05:17:e1:84:6d:bd:be:57:2b:6b:20:f3: b7:4f:4b:d7:72:b9:41:2b:77:36:e4:16:9f:84:cb:e9:9f:c2: db:55:82:9f:9b:3e:2d:d6:fc:8e:dc:f3:2a:ce:22:97:ed:e7: 1a:ca:dc:1a:e9:00:62:f3:39:3e:59:12:59:2b:88:51:f3:ca: 73:47:23:36:d4:99:51:d1:0e:d3:c0:73:f7:82:da:a0:e7:15: 8f:d1:54:c2:80:e4:5c:d3:1f:2e:02:37:0e:b1:27:18:7e:e2: 72:15:17:63:18:9f:bf:58:c2:25:86:c1:17:03:f3:27:eb:e5: 17:57:cf:ed:ff:c4:d4:07:ed:f0:d2:0c:4e:ce:b5:c9:9a:2a: 77:7e:f5:f6:c3:4f:73:a2:28:0b:d2:db:5b:0e:9b:2e:a4:9a: c9:78:b2:e3:c5:e7:ba:b7:a4:77:03:e3:6e:10:02:39:7f:30: 74:00:e6:1d:e4:38:23:0b:35:7e:92:32:6e:1f:b6:fc:d1:b9: c5:42:0c:bb:98:7c:ae:48:82:82:35:89:dd:f8:45:e3:07:4d: 4f:63:cd:e6:06:d8:4d:dc:c4:99:ea:55:1a:28:f2:8a:dc:d2: bb:53:dc:2c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjm+YQ6/SCbilJILIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxNjEzNDUzM1oXDTI3MDUyMjEyNDUzM1owLzEtMCsGA1UEAxMk NGFhZTgyODItMWNhZC00MDczLTlkNGEtZTk0ODQwMTQ5MTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMsiwoAnnj7MQ3zm/5kjr7c9oDCuscT5+vk6 VUiTFdo1LEtLXMDSIveAJ8NkULzSfzuh1YslhD0e3ChJGmNKnmRKufr/VBj9bw8/ LP/esicsOPre3wnXM5zp8Vvxy2xP0LBXfn/fkXXxToDo0yMu/0Z1+N+OemADvzsP 6e34RQY/a2IMBSWG6dAGIuOMu0w8GpFm+buOF4RRtl8uXELMWPH9PFcLs5MsJAPl GDXXFIcuLO2DeKOj3JMqmMYlkk46rB+eRhvGaEA3SWUbe3GMbysg8yRaCuxHNm8S WgKS44zJteN+u50fLCxRZXTuPRvLZYuN6SkgofkNa2w9gQitQQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMPLTJmfMrBoDPwrajirbJ+BBqL7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 YWFlODI4Mi0xY2FkLTQwNzMtOWQ0YS1lOTQ4NDAxNDkxOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzRhYWU4MjgyLTFjYWQtNDA3My05 ZDRhLWU5NDg0MDE0OTE5ZS80YWFlODI4Mi0xY2FkLTQwNzMtOWQ0YS1lOTQ4NDAx NDkxOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN6ZswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAip1KtAz4XO8RS+j6BGy/ +C3DejwO9B+QBRfhhG29vlcrayDzt09L13K5QSt3NuQWn4TL6Z/C21WCn5s+Ldb8 jtzzKs4il+3nGsrcGukAYvM5PlkSWSuIUfPKc0cjNtSZUdEO08Bz94LaoOcVj9FU woDkXNMfLgI3DrEnGH7ichUXYxifv1jCJYbBFwPzJ+vlF1fP7f/E1Aft8NIMTs61 yZoqd3719sNPc6IoC9LbWw6bLqSayXiy48XnurekdwPjbhACOX8wdADmHeQ4Iws1 fpIybh+2/NG5xUIMu5h8rkiCgjWJ3fhF4wdNT2PN5gbYTdzEmepVGijyitzSu1Pc LA== -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:26 2025 by rpki-client