$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer File: 8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer (raw, json) Hash identifier: PLevHYNmmRIrqQ7VROskaD2Xaz+69zmkLW4QIm2MznY= Subject key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584875E8D051205EEE330B2BEAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 01:45:33 +0000 Certificate not after: Mon 12 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 5744 IP: 151.207.0.0/16 IP: 2602:810:d000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:e8:d0:51:20:5e:ee:33:0b:2b:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 7 01:45:33 2025 GMT Not After : Apr 12 00:45:33 2027 GMT Subject: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2c:be:99:24:5d:de:10:08:a2:b6:a2:4c:96: 61:5c:f5:d2:c1:e6:47:51:0d:44:1c:90:a7:73:d4: ab:73:bd:a3:80:dc:3d:ef:80:83:b6:cb:15:57:2b: a6:51:77:68:ce:51:6c:85:9c:ea:b8:a3:7a:13:8e: 1e:6e:c2:83:69:71:fa:62:5d:89:dd:c2:03:2f:be: 34:30:68:b9:36:bc:b9:ea:19:80:fa:a5:2d:d0:07: 2a:f4:b3:23:63:8f:a8:fd:e0:e9:a8:8b:28:e6:88: 1e:b0:b5:1d:b9:e5:b7:2b:21:46:2f:2b:87:e6:fb: f0:73:11:d8:c1:62:25:03:97:99:1e:57:20:5f:a3: a9:fc:67:5e:5a:31:7d:d1:9a:0d:e8:9f:8b:a2:c4: 04:ad:f8:eb:a1:75:a0:8a:59:4c:6e:f8:c9:de:6d: 34:51:9b:20:92:5d:e7:91:c3:b8:05:2d:eb:f2:0d: 8e:77:0f:1a:41:22:47:18:78:cd:c9:be:46:1a:e0: 22:cd:54:de:85:69:14:7b:51:b5:f4:48:16:ed:cf: f7:87:fc:1b:9f:bd:97:f8:15:b1:33:20:ad:9d:d2: 8f:4f:a1:b5:eb:a6:ae:02:cf:7b:3f:88:a4:1b:d3: f5:c6:3a:5b:0c:7e:93:5c:e8:d7:dc:cb:11:d9:a3: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 151.207.0.0/16 IPv6: 2602:810:d000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5744 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:94:93:41:da:c7:91:9a:cc:3e:71:c4:77:d7:91:1d:d1:c7: 49:98:78:95:80:b8:12:49:73:bd:c6:2d:65:63:e8:75:e9:be: fc:b7:2a:4b:cc:02:5f:c9:e9:3b:7b:1d:37:91:f1:0f:73:52: 29:00:15:3c:e7:2e:29:97:aa:46:d9:7d:72:0e:24:70:01:e7: f0:9d:49:c9:96:31:8c:37:dc:94:37:28:54:11:51:8d:dc:a9: bd:f7:c1:98:67:8c:ee:42:c4:d2:ae:b4:01:20:86:b2:dc:47: 72:26:04:a4:cd:28:03:1b:95:b6:89:b4:54:4d:f8:78:3a:47: bb:1c:7f:11:56:51:09:ee:e6:8d:dd:94:25:65:df:3a:52:53: f8:a0:ab:c1:e6:c6:7d:46:fc:1e:2f:87:80:36:fb:f1:87:86: 27:c3:17:44:a8:a7:6a:4a:ae:88:93:27:b0:b4:b1:5a:59:b7: 5e:c3:ce:65:83:58:bb:56:8d:c9:ad:ef:2b:46:93:12:7c:c2: 26:d7:81:1c:62:2d:ad:92:df:ac:3f:5d:1c:82:ac:ae:b7:44: 0a:54:c7:02:37:c1:ab:79:04:7b:42:da:32:85:dd:9f:85:c5: b9:be:59:cb:1e:ae:22:73:7b:42:09:86:01:43:7f:86:b9:36: 03:ed:2a:ca -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEh16NBRIF7uMwsr6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEwNzAxNDUzM1oXDTI3MDQxMjAwNDUzM1owLzEtMCsGA1UEAxMk OGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Sy+mSRd3hAIoraiTJZhXPXSweZHUQ1EHJCn c9Src72jgNw974CDtssVVyumUXdozlFshZzquKN6E44ebsKDaXH6Yl2J3cIDL740 MGi5Nry56hmA+qUt0Acq9LMjY4+o/eDpqIso5ogesLUdueW3KyFGLyuH5vvwcxHY wWIlA5eZHlcgX6Op/GdeWjF90ZoN6J+LosQErfjroXWgillMbvjJ3m00UZsgkl3n kcO4BS3r8g2Odw8aQSJHGHjNyb5GGuAizVTehWkUe1G19EgW7c/3h/wbn72X+BWx MyCtndKPT6G166auAs97P4ikG9P1xjpbDH6TXOjX3MsR2aMTMQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFDZhBLO6fQYOaWSVBsqXRji+Nv+gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhkM2U0ZWYxLTJhM2ItNDA1MC05 Njg3LWE5MmVjODNiOWNiNS84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgz YjljYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAsEAgABMAUDAwCXzzAOBAIAAjAIAwYAJgIIENAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICFnAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACpSTQdrHkZrMPnHEd9eRHdHHSZh4 lYC4EklzvcYtZWPodem+/LcqS8wCX8npO3sdN5HxD3NSKQAVPOcuKZeqRtl9cg4k cAHn8J1JyZYxjDfclDcoVBFRjdypvffBmGeM7kLE0q60ASCGstxHciYEpM0oAxuV tom0VE34eDpHuxx/EVZRCe7mjd2UJWXfOlJT+KCrwebGfUb8Hi+HgDb78YeGJ8MX RKinakquiJMnsLSxWlm3XsPOZYNYu1aNya3vK0aTEnzCJteBHGItrZLfrD9dHIKs rrdEClTHAjfBq3kEe0LaMoXdn4XFub5Zyx6uInN7QgmGAUN/hrk2A+0qyg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:48:25 2025 by rpki-client