$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer File: 52fbdac8-20c0-4da4-8654-27b4bf592930.cer (raw, json) Hash identifier: zChEata+SCqJQJRKcBlhy8+exG5GD/7sqiPznbj7vHc= Subject key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849604C8146A1C4CC3C1904EA04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 00:45:34 +0000 Certificate not after: Mon 05 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 394491 IP: 45.45.252.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:4c:81:46:a1:c4:cc:3c:19:04:ea:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 1 00:45:34 2025 GMT Not After : Jul 5 00:45:34 2027 GMT Subject: CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:5d:e6:02:e6:60:16:8d:6e:84:21:ee:38: 84:eb:cf:f5:ac:d7:48:ed:e9:43:94:a8:3c:b1:15: d9:f0:ec:f6:10:3a:81:39:00:be:9f:94:a4:7f:1e: d0:8c:29:a2:46:a7:1b:de:3b:c9:e7:33:f7:0f:e3: c4:06:93:3e:fe:3f:74:1f:f7:d6:ab:5e:f5:d0:a8: ab:66:39:c8:e0:46:f5:f2:b4:6b:ca:06:4a:bc:ee: 09:7c:fe:53:a9:89:6b:aa:84:76:1e:bb:84:e1:d3: d1:d5:29:38:07:81:cd:b0:ae:4e:7b:9f:b8:80:b3: 0a:8e:e8:0d:e8:d9:c4:a4:c2:1b:83:42:4d:bd:22: 30:7c:15:38:b8:6c:83:ee:2a:39:4a:54:cb:3c:29: e3:83:b6:6c:a6:1a:e2:60:4f:7f:c7:3e:e2:f8:0a: 33:8e:9e:19:d7:5d:fb:7f:31:37:61:e8:da:81:07: 34:82:37:51:20:1c:7b:40:cc:d3:e4:2b:48:df:b5: 30:65:41:1e:c8:19:9c:10:91:f1:9e:ab:96:97:b9: 2b:07:f5:dd:b7:94:de:1a:8c:a1:2c:5e:57:87:b9: 6c:93:1e:1c:0e:47:2b:fa:82:9a:9e:d2:83:15:be: 9d:ca:a1:ab:f9:2e:97:a5:10:0b:8e:41:4d:8d:4d: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 45.45.252.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394491 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:84:13:aa:5e:06:3d:44:e9:64:65:1a:9c:87:bb:6e:30:1f: 6a:8a:3a:91:69:23:c2:98:41:5e:4d:d2:a5:d5:a8:9e:13:78: 32:86:15:b6:78:d7:e7:a0:da:ec:76:d5:a1:8c:61:8b:0e:4d: 28:2e:b6:98:fe:73:03:a4:1e:eb:32:d4:62:c1:95:af:36:17: 28:94:9c:e7:9c:51:3a:e2:65:b7:24:d3:08:81:9e:6b:b4:a8: 25:a6:71:d5:0b:ec:ee:93:ca:08:33:d0:e8:99:67:50:62:a6: 82:48:80:4c:9f:a4:f4:8f:b2:56:a9:7b:82:10:27:07:f4:fc: 75:80:98:7c:2a:53:6d:8a:df:ea:05:55:db:6c:53:0d:e9:1d: 49:5f:67:ae:3c:0b:51:4a:a0:1e:2e:80:d2:b1:35:64:c7:31: 0a:dd:f3:57:eb:c3:e1:0a:10:e6:4e:50:93:7c:7f:53:f4:69: 65:60:92:e7:5f:51:35:76:bb:ef:c5:4c:a4:f7:51:46:28:5f: 59:06:c8:3e:3a:64:e8:79:48:d9:b5:76:d4:4d:e8:92:a3:e0: ac:9b:bd:8d:b9:28:c5:0b:7d:30:ff:eb:8a:25:38:9b:25:60: 6c:7a:38:aa:55:e1:93:9c:d7:6d:88:04:fb:44:f0:b1:ce:2f: 49:f4:1c:9b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWElgTIFGocTMPBkE6gQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwMTAwNDUzNFoXDTI3MDcwNTAwNDUzNFowLzEtMCsGA1UEAxMk NTJmYmRhYzgtMjBjMC00ZGE0LTg2NTQtMjdiNGJmNTkyOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroVd5gLmYBaNboQh7jiE68/1rNdI7elDlKg8 sRXZ8Oz2EDqBOQC+n5Skfx7QjCmiRqcb3jvJ5zP3D+PEBpM+/j90H/fWq1710Kir ZjnI4Eb18rRrygZKvO4JfP5TqYlrqoR2HruE4dPR1Sk4B4HNsK5Oe5+4gLMKjugN 6NnEpMIbg0JNvSIwfBU4uGyD7io5SlTLPCnjg7ZsphriYE9/xz7i+Aozjp4Z1137 fzE3YejagQc0gjdRIBx7QMzT5CtI37UwZUEeyBmcEJHxnquWl7krB/Xdt5TeGoyh LF5Xh7lskx4cDkcr+oKantKDFb6dyqGr+S6XpRALjkFNjU2GLQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIP1pln/HpaWyOW0ud/2PTcpMKR1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 MmZiZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0YmY1OTI5MzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzUyZmJkYWM4LTIwYzAtNGRhNC04 NjU0LTI3YjRiZjU5MjkzMC81MmZiZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0YmY1 OTI5MzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItLfwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgT7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIeEE6peBj1E6WRlGpyHu24wH2qKOpFpI8KYQV5N0qXVqJ4T eDKGFbZ41+eg2ux21aGMYYsOTSgutpj+cwOkHusy1GLBla82FyiUnOecUTriZbck 0wiBnmu0qCWmcdUL7O6Tyggz0OiZZ1BipoJIgEyfpPSPslape4IQJwf0/HWAmHwq U22K3+oFVdtsUw3pHUlfZ648C1FKoB4ugNKxNWTHMQrd81frw+EKEOZOUJN8f1P0 aWVgkudfUTV2u+/FTKT3UUYoX1kGyD46ZOh5SNm1dtRN6JKj4KybvY25KMULfTD/ 64olOJslYGx6OKpV4ZOc122IBPtE8LHOL0n0HJs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:10 2025 by rpki-client