$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer File: 9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer (raw, json) Hash identifier: A8KamDwtXcAnjPpMz86uAftTcJR/RDY7LfK7tyny0ro= Subject key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858489A33B3F0F9BA4BBCBA89EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Jan 2025 01:45:32 +0000 Certificate not after: Sun 25 Apr 2027 00:45:32 +0000 Subordinate resources: AS: 11573 AS: 15043 IP: 66.181.96.0/20 IP: 69.4.32.0/20 IP: 2605:82c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:33:b3:f0:f9:ba:4b:bc:ba:89:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 20 01:45:32 2025 GMT Not After : Apr 25 00:45:32 2027 GMT Subject: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:c6:3b:b9:4e:3f:d6:96:ce:8e:3e:8f:73: bc:2e:2c:cc:0d:70:1c:de:02:36:2b:f0:a4:17:1c: a8:22:10:a9:0c:ce:9a:ac:f5:0e:67:ec:17:25:67: 02:39:e5:de:f2:fa:69:f6:58:c4:59:11:3d:37:c9: 49:50:3d:c4:7a:d2:12:57:0c:be:1b:ad:5c:1f:82: 93:5c:7a:c9:55:09:75:2c:c5:91:82:4b:4d:df:36: 8a:7a:4c:d9:e4:e6:69:9c:f3:23:c9:c3:2a:35:cf: 12:a3:e2:b3:d6:8b:3c:da:12:68:7e:a8:44:52:db: 2e:c0:c1:4f:37:ff:68:c5:1e:25:04:04:18:06:98: 0e:8b:35:9b:88:56:aa:d3:68:3f:70:c6:0f:10:63: 62:d7:35:a7:a7:5d:a5:f3:d3:08:83:6f:d1:e3:80: 71:9a:c5:db:1e:e6:d7:d5:37:4b:c2:a6:bc:f3:74: 83:4c:49:e1:d9:7a:08:ab:af:cb:a6:cf:5f:07:58: bf:74:15:99:c2:fa:88:f0:4e:5d:4d:c3:c1:1f:69: 49:1d:0e:1b:a7:1b:54:80:00:31:4f:5a:7e:61:3e: 75:eb:49:b4:a5:89:36:fc:fd:1d:dc:c7:91:06:37: 41:cc:df:96:6c:36:0b:80:54:7d:9e:5f:f2:63:26: 22:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 66.181.96.0/20 69.4.32.0/20 IPv6: 2605:82c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11573 15043 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ff:3a:b6:df:47:3e:ee:23:6a:1e:dc:77:c5:70:ba:a3:08: 94:bf:be:6b:6d:ef:e2:c1:f7:67:b0:00:50:11:78:51:c2:19: 8d:55:c2:2b:b5:54:53:00:37:88:86:ad:4f:03:af:af:b9:96: ff:9b:68:a7:20:3e:4f:99:92:ef:c9:24:63:fb:94:d6:73:0c: 3a:09:ae:df:4c:c0:50:31:cf:1e:7f:42:d8:0f:ee:30:82:a4: ca:09:5f:a0:61:92:89:9a:7b:bb:69:4b:d4:8a:b7:04:67:dc: 97:99:d5:b1:4b:b0:70:33:1f:c6:eb:d8:b7:99:dd:36:cd:32: b8:a4:0a:94:83:24:97:d5:4e:5e:7a:95:ac:ee:47:30:38:f3: a4:91:d9:da:83:da:30:ec:00:4b:25:29:47:dd:e0:28:25:b9: 31:86:e1:de:1b:5f:42:09:ab:5a:8d:38:04:da:0a:29:d6:f1: c8:f4:e3:a4:0f:82:b2:30:48:24:31:f8:db:33:e5:ab:e4:b8: e0:bf:51:24:61:35:0c:37:4f:80:0b:e7:96:b1:08:2f:61:4f: 1f:c4:42:43:27:a3:d3:60:2d:53:fb:4d:4b:fb:f0:77:b2:c6: 16:94:7c:37:0e:a5:9f:77:0e:b8:4b:fc:4f:4e:f4:19:be:5e: e4:2b:3f:52 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEiaM7Pw+bpLvLqJ6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyMDAxNDUzMloXDTI3MDQyNTAwNDUzMlowLzEtMCsGA1UEAxMk OWY5ZjUwMjEtZDc4MC00NzU5LWFjMGYtMTg2NWFiOGQ1YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr93GO7lOP9aWzo4+j3O8LizMDXAc3gI2K/Ck FxyoIhCpDM6arPUOZ+wXJWcCOeXe8vpp9ljEWRE9N8lJUD3EetISVwy+G61cH4KT XHrJVQl1LMWRgktN3zaKekzZ5OZpnPMjycMqNc8So+Kz1os82hJofqhEUtsuwMFP N/9oxR4lBAQYBpgOizWbiFaq02g/cMYPEGNi1zWnp12l89MIg2/R44BxmsXbHubX 1TdLwqa883SDTEnh2XoIq6/Lps9fB1i/dBWZwvqI8E5dTcPBH2lJHQ4bpxtUgAAx T1p+YT5160m0pYk2/P0d3MeRBjdBzN+WbDYLgFR9nl/yYyYi6wIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFKf1YMGA7CWKj/miqE3t0bvVxwdfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 ZjlmNTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1YWI4ZDVhNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzlmOWY1MDIxLWQ3ODAtNDc1OS1h YzBmLTE4NjVhYjhkNWE2MS85ZjlmNTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1YWI4 ZDVhNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARCtWADBARFBCAwDQQCAAIwBwMFACYFgsAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICLTUCAjrDMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJj/OrbfRz7uI2oe 3HfFcLqjCJS/vmtt7+LB92ewAFAReFHCGY1Vwiu1VFMAN4iGrU8Dr6+5lv+baKcg Pk+Zku/JJGP7lNZzDDoJrt9MwFAxzx5/QtgP7jCCpMoJX6Bhkomae7tpS9SKtwRn 3JeZ1bFLsHAzH8br2LeZ3TbNMrikCpSDJJfVTl56lazuRzA486SR2dqD2jDsAEsl KUfd4CgluTGG4d4bX0IJq1qNOATaCinW8cj046QPgrIwSCQx+Nsz5avkuOC/USRh NQw3T4AL55axCC9hTx/EQkMno9NgLVP7TUv78HeyxhaUfDcOpZ93DrhL/E9O9Bm+ XuQrP1I= -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:57 2025 by rpki-client