$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f.cer File: 77a14fd5-2a53-4594-81f4-ea694254c36f.cer (raw, json) Hash identifier: 1PGaXD9f47nh//SI3OXmf+Eq1uZwc0NqCUNrYithFZ0= Subject key identifier: 1E:A1:64:80:57:A3:9C:6A:BF:A1:D3:AE:CC:2C:22:50:5E:97:90:6A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584973D74ABF42AD7D6DD2741680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/77a14fd5-2a53-4594-81f4-ea694254c36f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Apr 2025 00:45:34 +0000 Certificate not after: Mon 12 Jul 2027 00:45:34 +0000 Subordinate resources: IP: 69.12.106.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:d7:4a:bf:42:ad:7d:6d:d2:74:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 8 00:45:34 2025 GMT Not After : Jul 12 00:45:34 2027 GMT Subject: CN=77a14fd5-2a53-4594-81f4-ea694254c36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ee:c3:d1:bc:10:36:9e:87:ae:0d:a5:57:03: 08:38:44:5c:f0:a8:6a:a6:ae:ec:8f:87:ee:30:bc: 5c:d5:15:e0:1e:6f:2b:fb:c6:6d:59:08:74:6e:50: 4a:9a:9b:89:d8:7e:ed:c1:34:40:ec:0d:cc:7e:9c: b7:98:eb:e9:94:45:4a:88:7c:47:e9:17:05:86:fa: d4:e3:c2:cd:9f:b3:1c:12:34:ed:9f:bc:f2:84:a0: cc:c0:de:53:93:84:88:f6:b6:b7:a1:da:06:af:98: 1e:45:4b:cf:b6:74:89:1b:7e:8c:33:3b:1c:ff:fb: a0:a4:98:5d:08:01:31:bd:fe:a9:18:f0:de:ec:96: dc:48:1f:8e:be:93:84:7f:fe:46:5e:66:97:e3:0d: 0a:5e:b9:4a:9c:60:53:fa:ba:c3:fa:a6:f4:b6:0e: 39:60:ff:dc:75:2b:20:4f:95:17:e8:ee:05:50:55: ec:63:f4:3f:87:f1:9b:e5:c4:7f:90:63:8b:6e:60: 8c:65:bd:a2:f1:c8:d1:98:b9:6f:23:e7:2a:30:ae: cd:fe:8e:c9:21:c3:de:9b:ec:ee:e1:b5:8b:cf:55: c4:43:e2:84:7b:f4:c8:90:d0:73:0e:1f:a2:14:bd: a6:50:ad:06:4e:f6:3a:59:43:95:05:15:f0:b9:09: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:64:80:57:A3:9C:6A:BF:A1:D3:AE:CC:2C:22:50:5E:97:90:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77a14fd5-2a53-4594-81f4-ea694254c36f/77a14fd5-2a53-4594-81f4-ea694254c36f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 69.12.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:99:c1:97:91:3e:28:ec:0c:22:0a:66:9d:18:72:12:8f:92: 1b:68:cb:1f:4a:6b:67:84:29:72:fc:1c:3a:4c:cf:2c:29:84: 47:26:67:f4:8d:59:f7:32:a3:7d:06:56:ce:64:98:f3:b7:5b: 01:a8:5c:6f:6f:d8:8e:58:22:a3:2e:f6:d9:66:38:d6:80:9e: d7:a0:be:d6:b2:e6:a6:ae:11:58:b6:88:97:5a:eb:c5:91:06: 3f:d7:65:41:a2:36:ea:77:d4:e9:28:57:f9:53:37:1e:98:94: 79:ff:cb:31:d6:60:e8:f6:20:c5:df:79:0b:d8:97:7a:07:22: e5:4b:d3:0b:33:86:5b:26:4a:6a:68:8d:9d:be:8e:b9:95:03: 0e:5a:75:63:b5:d5:ab:62:04:4b:79:74:32:b5:a0:37:9e:1e: 0d:5d:9b:65:c9:1d:c5:bc:80:07:93:bb:f2:cf:b2:bd:fd:2d: d9:23:c6:ab:d1:dd:b8:33:f2:11:75:ec:08:db:67:c9:6a:d1: 1d:65:91:0b:58:0f:5e:15:11:af:f3:0a:96:59:6c:7f:d5:4c: 2a:a7:68:af:b9:cf:94:bc:e0:67:a1:65:19:60:db:5c:47:ce: 0d:c3:ac:19:50:fe:29:98:5a:13:a1:ec:1b:92:63:79:d2:93: 61:72:1a:32 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElz10q/Qq19bdJ0FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwODAwNDUzNFoXDTI3MDcxMjAwNDUzNFowLzEtMCsGA1UEAxMk NzdhMTRmZDUtMmE1My00NTk0LTgxZjQtZWE2OTQyNTRjMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+7D0bwQNp6Hrg2lVwMIOERc8Khqpq7sj4fu MLxc1RXgHm8r+8ZtWQh0blBKmpuJ2H7twTRA7A3Mfpy3mOvplEVKiHxH6RcFhvrU 48LNn7McEjTtn7zyhKDMwN5Tk4SI9ra3odoGr5geRUvPtnSJG36MMzsc//ugpJhd CAExvf6pGPDe7JbcSB+OvpOEf/5GXmaX4w0KXrlKnGBT+rrD+qb0tg45YP/cdSsg T5UX6O4FUFXsY/Q/h/Gb5cR/kGOLbmCMZb2i8cjRmLlvI+cqMK7N/o7JIcPem+zu 4bWLz1XEQ+KEe/TIkNBzDh+iFL2mUK0GTvY6WUOVBRXwuQnpMwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFB6hZIBXo5xqv6HTrswsIlBel5BqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 N2ExNGZkNS0yYTUzLTQ1OTQtODFmNC1lYTY5NDI1NGMzNmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc3YTE0ZmQ1LTJhNTMtNDU5NC04 MWY0LWVhNjk0MjU0YzM2Zi83N2ExNGZkNS0yYTUzLTQ1OTQtODFmNC1lYTY5NDI1 NGMzNmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFFDGowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGZnBl5E+KOwMIgpmnRhy Eo+SG2jLH0prZ4QpcvwcOkzPLCmERyZn9I1Z9zKjfQZWzmSY87dbAahcb2/Yjlgi oy722WY41oCe16C+1rLmpq4RWLaIl1rrxZEGP9dlQaI26nfU6ShX+VM3HpiUef/L MdZg6PYgxd95C9iXegci5UvTCzOGWyZKamiNnb6OuZUDDlp1Y7XVq2IES3l0MrWg N54eDV2bZckdxbyAB5O78s+yvf0t2SPGq9HduDPyEXXsCNtnyWrRHWWRC1gPXhUR r/MKlllsf9VMKqdor7nPlLzgZ6FlGWDbXEfODcOsGVD+KZhaE6HsG5JjedKTYXIa Mg== -----END CERTIFICATE-----Generated at Tue Apr 29 09:40:34 2025 by rpki-client