$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156.cer File: 928d2060-10a9-4ea3-becb-9d0ffe02a156.cer (raw, json) Hash identifier: 7WD42ie2KnpH8/7I+Zg5UHQEG5NLeGlQVkbMGgPeRoQ= Subject key identifier: E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848D4D410CA71F4D995E0F47F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Feb 2025 01:45:32 +0000 Certificate not after: Sun 16 May 2027 00:45:32 +0000 Subordinate resources: AS: 22953 IP: 2620:60:8000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:d4:10:ca:71:f4:d9:95:e0:f4:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 10 01:45:32 2025 GMT Not After : May 16 00:45:32 2027 GMT Subject: CN=928d2060-10a9-4ea3-becb-9d0ffe02a156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:61:ec:21:18:85:5a:17:e9:0b:bf:75:be: f0:29:ee:53:67:19:0d:5a:0b:ff:81:0a:55:6f:a4: 4b:cc:11:f2:41:c9:0c:3a:b1:6e:16:a0:af:97:8f: 01:a7:f3:1d:e1:95:4b:80:7d:ad:42:b2:f4:54:ef: b9:e8:eb:79:c0:77:ef:07:a8:2a:4a:f5:1b:c3:88: c8:f6:b6:9d:73:31:2b:7b:df:bd:f0:6c:f3:10:07: 87:cd:97:47:bf:b0:79:3f:65:27:f2:8a:33:6e:64: f6:82:6b:00:c8:9f:c1:24:73:0e:01:d4:bb:86:66: f9:75:bf:49:68:5d:39:0d:9d:f8:6d:a4:22:d7:95: 9e:13:8e:59:c6:df:02:fd:25:76:91:3a:eb:69:28: eb:ad:4b:7e:aa:69:4f:7d:4e:a8:44:38:7d:0b:e6: 5f:d4:69:e5:2b:bd:ec:7b:90:8b:62:d2:d6:4a:ca: 20:ff:47:85:24:53:e5:50:46:f6:00:a7:98:d5:0f: 06:f8:34:52:83:65:d9:1c:da:81:d5:eb:cb:59:87: 8e:96:a1:dd:db:45:4a:f0:d8:70:5b:4f:b2:0d:8c: 3f:4e:ec:cb:80:17:23:0f:ad:4c:77:f6:9b:0f:70: 06:a1:e3:7d:30:3b:c1:41:59:b3:2a:c4:5a:6f:f9: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A2:53:7A:2E:7F:88:7F:5B:ED:46:A5:8B:5D:83:4C:C4:1F:84:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/928d2060-10a9-4ea3-becb-9d0ffe02a156/928d2060-10a9-4ea3-becb-9d0ffe02a156.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2620:60:8000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22953 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4b:98:bf:3d:46:04:05:8d:87:5f:94:a4:d6:8b:57:80:7b: 7a:a5:69:13:8c:18:76:81:be:da:6e:dd:41:2e:b8:3f:fa:57: 7c:4a:8c:21:37:7a:8c:9e:43:a3:72:68:36:ee:fc:09:ab:a8: ab:eb:3d:82:75:63:df:b6:8e:4f:13:1b:50:5d:9f:49:dc:08: a0:85:83:3c:b9:c4:6f:f6:17:4c:a8:ba:d3:2b:f7:7b:ee:52: 3e:92:10:c3:5b:da:79:ab:47:0d:70:9d:ee:46:9e:0d:2a:17: 3f:01:2b:da:76:2e:e9:2d:e0:c9:84:33:92:76:9b:b2:47:6a: 2c:bb:a6:21:79:33:44:b4:ed:45:c6:94:a6:33:28:3d:3c:a8: 30:7d:6c:5a:11:ff:0b:19:0d:01:10:12:11:b2:a2:98:48:4f: 80:62:76:14:02:9d:b5:dd:6a:69:82:10:be:5d:c2:2d:93:de: a5:dc:cf:f3:5a:bc:f4:04:7c:ca:35:0a:91:a5:45:50:1b:30: 2d:5d:0b:69:44:09:14:80:45:7d:2d:94:85:7e:f1:64:fd:5d: b6:93:78:cf:4c:df:21:5c:ba:15:03:6a:74:c9:a0:d1:56:72: 7e:f5:33:e4:cc:cd:a8:18:d4:d4:42:4c:ea:f4:a4:c3:36:87: 35:7d:09:6d -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEjU1BDKcfTZleD0fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxMDAxNDUzMloXDTI3MDUxNjAwNDUzMlowLzEtMCsGA1UEAxMk OTI4ZDIwNjAtMTBhOS00ZWEzLWJlY2ItOWQwZmZlMDJhMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi1h7CEYhVoX6Qu/db7wKe5TZxkNWgv/gQpV b6RLzBHyQckMOrFuFqCvl48Bp/Md4ZVLgH2tQrL0VO+56Ot5wHfvB6gqSvUbw4jI 9radczEre9+98GzzEAeHzZdHv7B5P2Un8oozbmT2gmsAyJ/BJHMOAdS7hmb5db9J aF05DZ34baQi15WeE45Zxt8C/SV2kTrraSjrrUt+qmlPfU6oRDh9C+Zf1GnlK73s e5CLYtLWSsog/0eFJFPlUEb2AKeY1Q8G+DRSg2XZHNqB1evLWYeOlqHd20VK8Nhw W0+yDYw/TuzLgBcjD61Md/abD3AGoeN9MDvBQVmzKsRab/lVuQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFOmiU3ouf4h/W+1GpYtdg0zEH4SkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 MjhkMjA2MC0xMGE5LTRlYTMtYmVjYi05ZDBmZmUwMmExNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzkyOGQyMDYwLTEwYTktNGVhMy1i ZWNiLTlkMGZmZTAyYTE1Ni85MjhkMjA2MC0xMGE5LTRlYTMtYmVjYi05ZDBmZmUw MmExNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIABggAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICWakwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAaEuYvz1GBAWNh1+UpNaLV4B7eqVpE4wYdoG+2m7dQS64 P/pXfEqMITd6jJ5Do3JoNu78Cauoq+s9gnVj37aOTxMbUF2fSdwIoIWDPLnEb/YX TKi60yv3e+5SPpIQw1vaeatHDXCd7kaeDSoXPwEr2nYu6S3gyYQzknabskdqLLum IXkzRLTtRcaUpjMoPTyoMH1sWhH/CxkNARASEbKimEhPgGJ2FAKdtd1qaYIQvl3C LZPepdzP81q89AR8yjUKkaVFUBswLV0LaUQJFIBFfS2UhX7xZP1dtpN4z0zfIVy6 FQNqdMmg0VZyfvUz5MzNqBjU1EJM6vSkwzaHNX0JbQ== -----END CERTIFICATE-----Generated at Mon Apr 28 01:25:15 2025 by rpki-client