$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer File: 8cb64613-5b0d-4968-b601-e2f2cf053f18.cer (raw, json) Hash identifier: qZqBRoubpDMBIPhoRd1kj3qdHPrlmgAPUxKLJaewTxs= Subject key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858490F746EFD350C0CF5DEEB9860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Mar 2025 01:45:33 +0000 Certificate not after: Sun 06 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 192.146.156.0/24 IP: 198.162.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:74:6e:fd:35:0c:0c:f5:de:eb:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 3 01:45:33 2025 GMT Not After : Jun 6 00:45:33 2027 GMT Subject: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:78:d3:8e:03:2e:38:ea:c0:72:80:28:1a:6e: 22:d5:8a:5e:87:91:03:e8:51:48:cc:41:c7:68:b5: 51:04:f5:ec:93:57:cd:5f:47:7e:6c:df:15:35:2b: 5e:90:0f:5f:5b:2f:25:94:b2:45:4e:cb:fd:88:89: 14:1c:7c:8e:74:c0:e1:e4:cb:f7:8f:6a:b9:e2:87: eb:11:56:b4:a8:96:ea:01:74:8c:63:9a:f1:7c:23: 1c:ea:87:9c:d9:c5:98:a8:26:55:79:e7:77:4c:e6: 49:ca:50:c5:3b:f0:a2:76:52:4f:ec:e2:95:f2:70: 8e:30:23:6c:63:04:79:05:c4:f1:01:3e:f2:67:12: 38:f4:a8:0d:51:bf:19:cf:c8:0e:12:6c:52:98:0d: f5:d5:70:96:3d:39:fa:2c:17:b4:2d:37:41:81:66: 11:f6:4b:59:a7:ca:00:b2:e0:68:b4:67:65:20:dc: c3:50:21:c4:4e:c6:8b:de:5b:be:aa:d2:5f:92:e7: 55:53:92:96:5a:ba:8b:c7:c0:91:31:df:05:7c:46: 8a:8e:1e:a8:22:77:b3:61:aa:33:ca:2a:fa:0e:b7: d3:a0:4c:10:f2:13:12:29:bf:c5:0f:43:d5:47:55: db:81:e8:ce:13:bc:10:c3:13:2a:05:2d:32:5b:73: 73:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.146.156.0/24 198.162.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:98:6a:14:75:49:64:c0:8e:32:c0:3f:41:f9:92:0f:4a:27: 12:2c:03:31:ae:4b:00:ce:cd:e9:71:9a:fe:a8:a3:f1:d8:18: fc:6d:5b:91:de:83:c1:16:07:8e:41:04:7b:57:e2:ac:1b:26: 5a:52:13:74:00:92:fe:9e:de:2b:06:4d:71:7b:5f:14:4e:58: a3:21:84:de:ba:56:8c:df:1a:35:7f:06:27:c8:ff:cb:79:ca: dc:3d:bb:1e:e9:01:e2:82:48:0f:c6:cf:25:9b:af:76:61:97: 4c:cc:c3:29:17:e7:f7:60:21:05:8d:82:70:87:05:b2:e8:00: 0e:66:01:1c:81:82:e5:5f:a6:ce:43:da:06:2c:46:92:e1:d9: c9:86:55:5c:b1:f5:9d:80:3e:16:aa:2b:55:2e:46:d2:ee:59: db:fb:39:b7:5b:9b:ad:84:b5:96:be:52:68:e6:a1:d9:6e:9b: 80:35:9a:c4:20:2a:2e:eb:7a:45:9b:e4:3a:59:ed:c5:91:45: 3b:af:0a:c0:6d:50:0f:21:b5:4b:7e:7e:58:7e:9e:60:44:59: 72:21:3e:7b:69:b3:c8:ca:99:bc:11:f4:95:16:70:b6:dc:46: c8:76:87:2b:59:b1:0f:23:be:8a:d7:17:8a:ce:8c:4a:10:df: 30:17:d5:1f -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEkPdG79NQwM9d7rmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwMzAxNDUzM1oXDTI3MDYwNjAwNDUzM1owLzEtMCsGA1UEAxMk OGNiNjQ2MTMtNWIwZC00OTY4LWI2MDEtZTJmMmNmMDUzZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3jTjgMuOOrAcoAoGm4i1Ypeh5ED6FFIzEHH aLVRBPXsk1fNX0d+bN8VNStekA9fWy8llLJFTsv9iIkUHHyOdMDh5Mv3j2q54ofr EVa0qJbqAXSMY5rxfCMc6oec2cWYqCZVeed3TOZJylDFO/CidlJP7OKV8nCOMCNs YwR5BcTxAT7yZxI49KgNUb8Zz8gOEmxSmA311XCWPTn6LBe0LTdBgWYR9ktZp8oA suBotGdlINzDUCHETsaL3lu+qtJfkudVU5KWWrqLx8CRMd8FfEaKjh6oInezYaoz yir6DrfToEwQ8hMSKb/FD0PVR1XbgejOE7wQwxMqBS0yW3Nz+wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFJhV3U2cyaCBXqkxDMe/ImsWfekIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 Y2I2NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYyY2YwNTNmMTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhjYjY0NjEzLTViMGQtNDk2OC1i NjAxLWUyZjJjZjA1M2YxOC84Y2I2NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYyY2Yw NTNmMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAkpwDBALGohQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMZhqFHVJZMCO MsA/QfmSD0onEiwDMa5LAM7N6XGa/qij8dgY/G1bkd6DwRYHjkEEe1firBsmWlIT dACS/p7eKwZNcXtfFE5YoyGE3rpWjN8aNX8GJ8j/y3nK3D27HukB4oJID8bPJZuv dmGXTMzDKRfn92AhBY2CcIcFsugADmYBHIGC5V+mzkPaBixGkuHZyYZVXLH1nYA+ FqorVS5G0u5Z2/s5t1ubrYS1lr5SaOah2W6bgDWaxCAqLut6RZvkOlntxZFFO68K wG1QDyG1S35+WH6eYERZciE+e2mzyMqZvBH0lRZwttxGyHaHK1mxDyO+itcXis6M ShDfMBfVHw== -----END CERTIFICATE-----Generated at Wed Apr 30 06:55:52 2025 by rpki-client