$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer File: 6e6db562-79f7-40ba-9870-3eaf80e519fd.cer (raw, json) Hash identifier: yclwCzRvYEoL9YBaNULN4xGvd62vdGzCReG2wGJTaTE= Subject key identifier: 8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858487053732253DFA199A1964E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Jan 2025 01:45:33 +0000 Certificate not after: Sat 10 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 40403 IP: 199.89.230.0/24 IP: 2602:fab9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:53:73:22:53:df:a1:99:a1:96:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 5 01:45:33 2025 GMT Not After : Apr 10 00:45:33 2027 GMT Subject: CN=6e6db562-79f7-40ba-9870-3eaf80e519fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:40:56:f7:51:2c:c4:fb:d8:0f:be:15:d0:74: bb:1f:e9:ce:12:9a:79:85:71:5d:60:91:6e:9a:cb: 41:e1:d4:30:cf:ca:84:23:e5:9d:9d:63:cb:24:c5: df:c2:aa:93:26:09:99:28:f7:a1:52:db:96:60:fa: 8d:c7:d5:f2:17:c2:14:56:dc:4a:38:07:00:5c:4e: e0:bf:8f:97:38:77:01:85:53:de:5d:1d:e3:a6:4f: 68:19:b7:fd:7f:67:74:d1:de:c2:03:45:a7:dd:49: dc:3e:f8:5b:44:a9:8e:d0:18:ee:4a:85:7d:b7:b2: e8:ba:f6:ea:62:2e:42:54:79:6f:fe:29:a5:7f:da: 4b:4f:86:1f:f4:c9:34:12:21:74:cb:46:3e:2f:e6: 2a:78:c0:09:6a:44:05:af:dc:f1:81:6c:a0:c1:01: a3:2d:ab:7c:5a:be:80:f1:25:b3:e7:6f:56:78:57: d3:39:09:10:3c:96:3c:91:5e:12:c7:61:fb:d3:9d: 97:59:e7:ec:79:16:b0:b9:3f:09:e6:b2:ef:75:16: 76:e2:6b:c2:68:47:04:fe:75:92:da:ee:c5:57:35: 00:b6:a0:76:b1:1d:f5:f7:b7:6e:3d:85:ed:85:92: 9e:05:d4:cc:08:51:c0:1f:a1:2d:36:a2:19:0f:33: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.89.230.0/24 IPv6: 2602:fab9::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40403 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:10:30:7c:f3:5e:25:42:2c:13:b9:0f:d8:fa:19:83:41:8b: 64:d8:54:d5:9e:e8:6e:21:0f:01:9a:1c:6a:f4:c1:11:e1:df: 04:93:f6:0e:e0:21:20:9e:27:8a:c2:f5:91:70:eb:23:c0:72: 1b:81:e5:d3:33:9b:a7:eb:3d:e6:6c:c1:42:51:77:e5:99:22: 8f:53:78:1b:d8:52:0d:82:ad:d6:7c:c9:60:9b:15:a3:5b:f0: 52:82:f4:a5:18:2d:20:01:43:d2:cb:aa:c9:9e:6b:0b:d5:fb: 17:6c:ad:cc:9a:c0:f1:e2:e4:fd:d8:b6:73:b6:5b:9a:a2:3a: eb:cb:23:95:1a:0f:cd:27:d1:0d:80:30:9e:57:6b:61:6d:78: 2b:b6:c3:9b:d8:59:1d:d3:1f:71:87:d7:96:f8:96:9a:e0:68: 60:65:e3:52:6e:7f:08:d0:34:c6:2d:4a:ab:f6:14:3e:0b:0d: 14:85:09:18:e5:a6:d0:54:f7:2b:8b:69:25:a1:0b:cd:d6:e1: 2e:5a:9f:2b:6b:81:97:e8:7f:ec:84:b0:c0:c2:9f:3f:3a:9c: 73:d4:55:76:ea:b0:6b:41:0e:b8:4d:40:ee:fb:62:c0:66:a3: fa:5c:32:55:f9:a1:22:88:96:9e:91:73:9b:b4:89:38:c0:98: 1d:32:fc:bb -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEhwU3MiU9+hmaGWTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEwNTAxNDUzM1oXDTI3MDQxMDAwNDUzM1owLzEtMCsGA1UEAxMk NmU2ZGI1NjItNzlmNy00MGJhLTk4NzAtM2VhZjgwZTUxOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkBW91EsxPvYD74V0HS7H+nOEpp5hXFdYJFu mstB4dQwz8qEI+WdnWPLJMXfwqqTJgmZKPehUtuWYPqNx9XyF8IUVtxKOAcAXE7g v4+XOHcBhVPeXR3jpk9oGbf9f2d00d7CA0Wn3UncPvhbRKmO0BjuSoV9t7Louvbq Yi5CVHlv/imlf9pLT4Yf9Mk0EiF0y0Y+L+YqeMAJakQFr9zxgWygwQGjLat8Wr6A 8SWz529WeFfTOQkQPJY8kV4Sx2H7052XWefseRawuT8J5rLvdRZ24mvCaEcE/nWS 2u7FVzUAtqB2sR3197duPYXthZKeBdTMCFHAH6EtNqIZDzNNNQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFI04qOR/94QR502m6vib7xvEJ9mlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 ZTZkYjU2Mi03OWY3LTQwYmEtOTg3MC0zZWFmODBlNTE5ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZlNmRiNTYyLTc5ZjctNDBiYS05 ODcwLTNlYWY4MGU1MTlmZC82ZTZkYjU2Mi03OWY3LTQwYmEtOTg3MC0zZWFmODBl NTE5ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADHWeYwDgQCAAIwCAMGACYC+rkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCd0zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDEDB8814lQiwTuQ/Y+hmDQYtk 2FTVnuhuIQ8Bmhxq9MER4d8Ek/YO4CEgnieKwvWRcOsjwHIbgeXTM5un6z3mbMFC UXflmSKPU3gb2FINgq3WfMlgmxWjW/BSgvSlGC0gAUPSy6rJnmsL1fsXbK3MmsDx 4uT92LZztluaojrryyOVGg/NJ9ENgDCeV2thbXgrtsOb2Fkd0x9xh9eW+Jaa4Ghg ZeNSbn8I0DTGLUqr9hQ+Cw0UhQkY5abQVPcri2kloQvN1uEuWp8ra4GX6H/shLDA wp8/Opxz1FV26rBrQQ64TUDu+2LAZqP6XDJV+aEiiJaekXObtIk4wJgdMvy7 -----END CERTIFICATE-----Generated at Sun Apr 27 22:17:09 2025 by rpki-client