$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer File: d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer (raw, json) Hash identifier: dTtyxysi8Cb+JuYL1gTJuB3N2WyoBrwUiVPHhQm8p6M= Subject key identifier: 7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858488C3E47CF4A0C7CAF36852A60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Jan 2025 01:45:32 +0000 Certificate not after: Tue 20 Apr 2027 00:45:32 +0000 Subordinate resources: IP: 142.17.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8c:3e:47:cf:4a:0c:7c:af:36:85:2a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 15 01:45:32 2025 GMT Not After : Apr 20 00:45:32 2027 GMT Subject: CN=d770c5cf-d883-43bc-a72e-4ae7f90d4900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:a5:7f:95:28:15:d9:80:07:97:73:f1:9a: d1:5d:91:73:e4:fb:9f:75:18:90:65:e1:f5:82:fb: 8e:d0:0c:77:ce:d4:88:3a:08:3f:f2:0c:26:e4:17: 40:f0:7f:eb:d7:36:3f:3b:bb:d3:08:90:6c:60:46: 05:4c:53:8f:c3:3a:61:69:20:ab:78:fa:2a:b6:34: fc:74:04:e6:48:9c:ff:07:f1:e9:5e:87:a8:27:4d: d1:1c:a2:c9:88:e3:bd:97:d6:6e:c4:bb:e5:32:7d: ab:c1:00:df:eb:be:64:c7:d6:6a:69:a8:72:a3:c7: 0a:1d:06:5d:39:05:9f:30:c0:39:e6:c0:c6:2d:17: 1b:c9:89:75:0f:98:ed:4d:dc:9e:54:ac:98:52:7d: da:7a:d3:3d:a8:c3:72:ab:08:9c:be:26:68:54:94: 40:b7:40:2d:b5:f9:27:e7:ab:ed:05:4d:a9:5b:58: ad:c3:61:0b:db:46:5b:ea:33:5a:1a:c9:78:35:7b: e3:9a:c9:ca:57:4e:a7:13:21:c3:71:8f:7b:10:be: ae:39:dd:c6:90:f2:e6:88:a4:e9:91:28:43:11:f5: 95:65:c8:b4:85:26:08:28:f0:ac:d9:0c:24:3c:f0: 1d:04:89:9a:7c:20:7c:1d:fc:89:32:d6:45:bc:4e: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 142.17.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3f:b8:54:d0:09:22:2f:16:81:00:b9:ad:97:8b:71:e1:25: 4c:63:da:4b:1f:ab:fd:bc:c8:f1:3c:e9:66:ae:9d:8d:bd:af: 41:4c:e1:9c:7e:13:21:5c:03:df:1b:68:e9:33:02:68:1c:4d: 9a:84:45:6b:08:0e:50:1a:56:fe:68:0e:50:69:6f:a9:d1:ec: a5:da:b1:d0:73:a9:df:7a:5c:6c:eb:4e:3a:d3:ae:49:db:7f: c9:e9:49:7e:4b:62:c7:7f:2b:5f:ed:af:67:1b:66:bb:ed:5d: b4:cd:39:1a:cc:51:e5:1d:46:4d:2b:4e:96:10:bc:f4:90:4e: de:ec:e6:03:15:c2:13:9d:43:d9:a1:ed:30:06:5f:75:c5:e2: 84:77:92:2f:f5:2b:19:02:35:bb:ea:14:2e:39:ed:d5:06:24: 46:e0:61:9a:67:65:bb:d5:12:bb:a1:18:c7:f1:8b:36:5e:dc: 3c:1e:34:c4:e0:f2:ff:2c:db:56:23:d5:41:40:a0:f9:78:17: d2:26:b8:50:52:5c:03:53:7a:76:f8:91:ff:7e:fe:c4:fb:8c: 30:61:00:90:70:3f:94:ad:f0:c1:8a:36:85:13:e7:38:4a:9c: 95:0d:5c:ce:0a:e8:50:7a:7c:55:f7:ed:35:b9:0d:88:b1:c1: b1:2b:f0:5a -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEiMPkfPSgx8rzaFKmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExNTAxNDUzMloXDTI3MDQyMDAwNDUzMlowLzEtMCsGA1UEAxMk ZDc3MGM1Y2YtZDg4My00M2JjLWE3MmUtNGFlN2Y5MGQ0OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoalf5UoFdmAB5dz8ZrRXZFz5PufdRiQZeH1 gvuO0Ax3ztSIOgg/8gwm5BdA8H/r1zY/O7vTCJBsYEYFTFOPwzphaSCrePoqtjT8 dATmSJz/B/HpXoeoJ03RHKLJiOO9l9ZuxLvlMn2rwQDf675kx9Zqaahyo8cKHQZd OQWfMMA55sDGLRcbyYl1D5jtTdyeVKyYUn3aetM9qMNyqwicviZoVJRAt0Attfkn 56vtBU2pW1itw2EL20Zb6jNaGsl4NXvjmsnKV06nEyHDcY97EL6uOd3GkPLmiKTp kShDEfWVZci0hSYIKPCs2QwkPPAdBImafCB8HfyJMtZFvE6gfQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFHweYndFSSEhEXeCYm+M1VKxuqguMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k NzcwYzVjZi1kODgzLTQzYmMtYTcyZS00YWU3ZjkwZDQ5MDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Q3NzBjNWNmLWQ4ODMtNDNiYy1h NzJlLTRhZTdmOTBkNDkwMC9kNzcwYzVjZi1kODgzLTQzYmMtYTcyZS00YWU3Zjkw ZDQ5MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCOETBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMP7hU0AkiLxaBALmtl4tx 4SVMY9pLH6v9vMjxPOlmrp2Nva9BTOGcfhMhXAPfG2jpMwJoHE2ahEVrCA5QGlb+ aA5QaW+p0eyl2rHQc6nfelxs6046065J23/J6Ul+S2LHfytf7a9nG2a77V20zTka zFHlHUZNK06WELz0kE7e7OYDFcITnUPZoe0wBl91xeKEd5Iv9SsZAjW76hQuOe3V BiRG4GGaZ2W71RK7oRjH8Ys2Xtw8HjTE4PL/LNtWI9VBQKD5eBfSJrhQUlwDU3p2 +JH/fv7E+4wwYQCQcD+UrfDBijaFE+c4SpyVDVzOCuhQenxV9+01uQ2IscGxK/Ba -----END CERTIFICATE-----Generated at Mon Apr 28 08:27:52 2025 by rpki-client