$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b.cer File: 81265180-e7c6-4999-acdf-f522ab2a4a0b.cer (raw, json) Hash identifier: kIvcbRIHIRaKEZtplt34Cx72AmTN0gKA55UoJCb24l4= Subject key identifier: 09:32:D0:B5:C9:83:B7:0B:3E:C7:14:16:C2:46:07:98:70:D2:2E:BD Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848D4D410E8D14791FF05246480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/81265180-e7c6-4999-acdf-f522ab2a4a0b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Feb 2025 01:45:32 +0000 Certificate not after: Sun 16 May 2027 00:45:32 +0000 Subordinate resources: AS: 27632 IP: 146.88.150.0/23 IP: 198.140.189.0/24 IP: 199.181.220.0/24 IP: 2607:2bc0::/32 IP: 2620:126:5000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:d4:10:e8:d1:47:91:ff:05:24:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 10 01:45:32 2025 GMT Not After : May 16 00:45:32 2027 GMT Subject: CN=81265180-e7c6-4999-acdf-f522ab2a4a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:71:94:40:ea:91:73:5a:a9:b7:1a:25:93: 3f:1b:56:4d:3c:d5:ca:5e:be:b8:57:1a:ab:ab:bc: 11:d1:a4:8f:6e:83:62:a1:f2:5c:d8:98:dc:c1:1e: 7a:e9:06:4a:4c:a5:1f:4a:d7:92:b6:ef:22:8c:25: 2d:fc:db:42:ba:c6:00:1b:27:0d:40:df:04:31:c5: 9b:bc:b3:ea:f2:8f:c6:50:f8:1a:8b:e8:4e:3d:91: 62:eb:0c:13:e2:8c:fd:c2:f7:59:6c:e6:cd:1a:d6: 0a:aa:d8:67:eb:f7:a9:62:eb:6e:96:25:31:00:83: ee:1f:f9:ce:a0:e2:37:bf:f2:c3:45:d2:ea:84:db: 57:72:02:49:7f:af:4c:78:14:ec:db:f9:c9:45:43: 45:b6:b0:f0:49:55:de:d2:c5:41:c9:8d:e2:15:b9: 4f:13:2f:fa:07:09:d9:23:b0:7f:b1:74:fd:3f:8a: d3:49:da:5f:98:43:46:65:7d:0f:38:aa:99:b5:ca: 2d:07:7d:b1:59:13:5a:05:04:c7:43:7b:e6:5b:16: df:d2:67:e8:4a:ed:dc:8d:f6:2e:b1:85:79:5f:a9: a6:45:bc:de:44:11:b8:2b:c0:4e:a4:cb:f1:07:50: 3e:27:5e:c4:fc:59:c0:15:be:2b:58:aa:fe:09:aa: a0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:32:D0:B5:C9:83:B7:0B:3E:C7:14:16:C2:46:07:98:70:D2:2E:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81265180-e7c6-4999-acdf-f522ab2a4a0b/81265180-e7c6-4999-acdf-f522ab2a4a0b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 146.88.150.0/23 198.140.189.0/24 199.181.220.0/24 IPv6: 2607:2bc0::/32 2620:126:5000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27632 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3b:25:54:85:b7:e8:e5:1b:07:1c:8d:3e:16:b6:0d:bc:65: 6a:6a:1d:e8:15:cd:e7:66:bf:9c:24:8a:4f:e9:36:da:e7:35: 34:6e:a0:46:d5:e2:17:56:a0:9a:c8:73:29:74:51:ef:cb:07: 5f:13:36:d9:e1:11:28:e2:54:07:64:5f:8e:c7:f4:eb:4d:fe: c5:89:09:b7:53:a8:8b:63:3d:bb:fc:e1:cb:23:26:29:b7:cd: 3d:ef:f2:d5:23:93:c9:d7:30:16:83:fc:04:1e:3c:d2:d6:f2: 2d:83:68:72:40:6d:32:1e:72:0b:6e:0e:d0:0b:b4:ea:5a:6f: e4:4e:c9:7e:89:b9:f4:07:01:b2:53:75:3d:4c:f5:4e:62:78: 38:db:06:db:0d:b1:c3:38:8a:79:e9:88:92:dc:70:f3:33:34: 4c:15:d7:3f:c3:e4:c7:00:3a:fe:0e:cc:55:5a:26:d9:24:e4: 67:fb:c8:41:21:70:a9:13:7b:d4:22:8d:34:95:ee:85:eb:69: 32:fd:92:4e:22:87:0e:53:2d:12:21:aa:74:b1:df:d8:ce:cf: 59:c8:b0:e2:81:a4:05:be:a7:fe:9d:b5:de:61:5b:0b:30:b1: 40:cf:c8:40:f8:d5:0a:a6:2b:b5:cf:c5:72:b2:50:83:90:91: 68:b8:00:cc -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEjU1BDo0UeR/wUkZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxMDAxNDUzMloXDTI3MDUxNjAwNDUzMlowLzEtMCsGA1UEAxMk ODEyNjUxODAtZTdjNi00OTk5LWFjZGYtZjUyMmFiMmE0YTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OhxlEDqkXNaqbcaJZM/G1ZNPNXKXr64Vxqr q7wR0aSPboNiofJc2JjcwR566QZKTKUfSteStu8ijCUt/NtCusYAGycNQN8EMcWb vLPq8o/GUPgai+hOPZFi6wwT4oz9wvdZbObNGtYKqthn6/epYutuliUxAIPuH/nO oOI3v/LDRdLqhNtXcgJJf69MeBTs2/nJRUNFtrDwSVXe0sVByY3iFblPEy/6BwnZ I7B/sXT9P4rTSdpfmENGZX0POKqZtcotB32xWRNaBQTHQ3vmWxbf0mfoSu3cjfYu sYV5X6mmRbzeRBG4K8BOpMvxB1A+J17E/FnAFb4rWKr+CaqgxQIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFAky0LXJg7cLPscUFsJGB5hw0i69MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 MTI2NTE4MC1lN2M2LTQ5OTktYWNkZi1mNTIyYWIyYTRhMGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzgxMjY1MTgwLWU3YzYtNDk5OS1h Y2RmLWY1MjJhYjJhNGEwYi84MTI2NTE4MC1lN2M2LTQ5OTktYWNkZi1mNTIyYWIy YTRhMGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMBgEAgABMBIDBAGSWJYDBADGjL0DBADHtdwwFQQCAAIwDwMFACYH K8ADBgAmIAEmUDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJr8DBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCY OyVUhbfo5RsHHI0+FrYNvGVqah3oFc3nZr+cJIpP6Tba5zU0bqBG1eIXVqCayHMp dFHvywdfEzbZ4REo4lQHZF+Ox/TrTf7FiQm3U6iLYz27/OHLIyYpt8097/LVI5PJ 1zAWg/wEHjzS1vItg2hyQG0yHnILbg7QC7TqWm/kTsl+ibn0BwGyU3U9TPVOYng4 2wbbDbHDOIp56YiS3HDzMzRMFdc/w+THADr+DsxVWibZJORn+8hBIXCpE3vUIo00 le6F62ky/ZJOIocOUy0SIap0sd/Yzs9ZyLDigaQFvqf+nbXeYVsLMLFAz8hA+NUK piu1z8VyslCDkJFouADM -----END CERTIFICATE-----Generated at Mon Apr 28 02:56:36 2025 by rpki-client