$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651.cer File: edc22fcb-2cab-42b3-9bab-80acf203c651.cer (raw, json) Hash identifier: uhtNU2bZnLrVIbmTZKHhqVigISTMtQp8nFYNwWrHpSk= Subject key identifier: 1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858494B5C5E45E4ACA37F227831C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 12:45:33 +0000 Certificate not after: Sun 27 Jun 2027 12:45:33 +0000 Subordinate resources: IP: 66.6.56.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:5c:5e:45:e4:ac:a3:7f:22:78:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 24 12:45:33 2025 GMT Not After : Jun 27 12:45:33 2027 GMT Subject: CN=edc22fcb-2cab-42b3-9bab-80acf203c651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2e:bd:c8:9e:44:01:33:47:90:84:6c:61:45: 0a:3c:66:b3:cc:7a:53:95:f7:51:97:81:69:00:28: 17:88:ba:e8:d9:67:ba:0d:cd:15:62:87:75:9d:90: bd:c5:81:2f:1b:59:4a:aa:f9:9d:93:95:06:48:2f: 84:a8:6b:d4:7e:ca:a2:b3:f4:5f:34:00:82:b3:87: 2c:7c:06:9a:b6:1b:64:92:04:7a:05:fb:42:2f:d2: 48:2b:a5:44:ca:36:dd:f6:31:20:ed:d0:55:d8:4f: ca:e3:57:52:a8:ba:d0:4d:fb:58:25:44:c3:21:12: 8e:f4:e9:2b:8c:a1:c4:e8:44:42:f6:12:b8:cb:0a: 80:c0:b1:14:45:8a:92:22:03:9a:a8:45:0c:b1:75: af:dd:ce:6b:ef:a4:db:69:19:9c:98:cd:05:79:1a: e1:f2:7f:44:bb:ac:31:59:17:77:0d:22:35:5d:79: f2:02:e0:bc:17:7b:2c:21:3b:3d:1b:3a:42:01:f7: 04:b0:90:4c:29:a6:13:8e:7b:41:27:68:86:b9:de: 6d:80:c9:c2:cb:22:28:e5:ee:d5:c2:e5:b0:22:cd: 9a:c2:ef:94:df:6f:6b:23:16:03:89:1e:42:12:a5: 1b:7e:3d:b2:82:00:f2:c8:3d:da:f9:df:45:0c:38: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 66.6.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:92:00:dc:f5:b5:38:54:d1:16:d4:5d:c0:2b:77:c7:35:e1: 81:31:1d:45:58:ca:7c:0a:14:a6:5f:84:46:d8:95:60:6c:c4: a2:e0:e7:1c:47:a6:2e:b5:03:df:ac:ff:0d:e4:eb:0a:19:2a: 38:9f:94:16:ca:f5:aa:8c:48:41:3e:6a:92:aa:a4:5f:42:55: e8:f1:51:42:20:e6:aa:0d:0d:84:7a:48:fb:0b:c0:ba:e9:a4: 93:26:8c:3f:7e:41:7f:69:28:45:50:06:34:ea:25:9b:e0:6e: 0e:dc:ca:ab:2f:ec:ca:e7:1c:2b:4d:d1:d4:a7:42:90:d1:64: 2f:92:c7:c8:db:10:4f:5a:57:d9:b2:46:c2:9e:44:55:54:db: a2:ff:84:f8:04:f2:6e:82:55:41:78:a6:42:ca:2e:be:e8:00: 97:c2:cc:48:90:7f:36:fb:2a:55:9f:5b:fc:5a:43:b9:7b:f5: 51:a1:c0:3c:7b:40:08:2e:49:95:e5:33:3b:42:fe:41:9a:fc: aa:db:a7:25:cb:dc:fe:b6:2a:49:a1:67:c9:97:c9:c9:5f:b2: 49:28:7b:64:03:ab:d6:09:38:62:06:ae:6a:24:85:e6:13:96: ba:df:d4:96:6b:6f:f5:d2:b3:68:a1:2a:f3:b2:52:36:ad:a2: 82:67:9b:96 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElLXF5F5KyjfyJ4McAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMyNDEyNDUzM1oXDTI3MDYyNzEyNDUzM1owLzEtMCsGA1UEAxMk ZWRjMjJmY2ItMmNhYi00MmIzLTliYWItODBhY2YyMDNjNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS69yJ5EATNHkIRsYUUKPGazzHpTlfdRl4Fp ACgXiLro2We6Dc0VYod1nZC9xYEvG1lKqvmdk5UGSC+EqGvUfsqis/RfNACCs4cs fAaathtkkgR6BftCL9JIK6VEyjbd9jEg7dBV2E/K41dSqLrQTftYJUTDIRKO9Okr jKHE6ERC9hK4ywqAwLEURYqSIgOaqEUMsXWv3c5r76TbaRmcmM0FeRrh8n9Eu6wx WRd3DSI1XXnyAuC8F3ssITs9GzpCAfcEsJBMKaYTjntBJ2iGud5tgMnCyyIo5e7V wuWwIs2awu+U329rIxYDiR5CEqUbfj2yggDyyD3a+d9FDDiedwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBvo15XqCWIaZqa82w9X+kU8l7WAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l ZGMyMmZjYi0yY2FiLTQyYjMtOWJhYi04MGFjZjIwM2M2NTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2VkYzIyZmNiLTJjYWItNDJiMy05 YmFiLTgwYWNmMjAzYzY1MS9lZGMyMmZjYi0yY2FiLTQyYjMtOWJhYi04MGFjZjIw M2M2NTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJCBjgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG5IA3PW1OFTRFtRdwCt3 xzXhgTEdRVjKfAoUpl+ERtiVYGzEouDnHEemLrUD36z/DeTrChkqOJ+UFsr1qoxI QT5qkqqkX0JV6PFRQiDmqg0NhHpI+wvAuumkkyaMP35Bf2koRVAGNOolm+BuDtzK qy/syuccK03R1KdCkNFkL5LHyNsQT1pX2bJGwp5EVVTbov+E+ATyboJVQXimQsou vugAl8LMSJB/NvsqVZ9b/FpDuXv1UaHAPHtACC5JleUzO0L+QZr8qtunJcvc/rYq SaFnyZfJyV+ySSh7ZAOr1gk4YgauaiSF5hOWut/Ulmtv9dKzaKEq87JSNq2igmeb lg== -----END CERTIFICATE-----Generated at Sun Apr 27 04:11:36 2025 by rpki-client