$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39.cer File: edc5356b-bdd4-426e-b060-cd4202d71d39.cer (raw, json) Hash identifier: dpjA7/VtOQzlS1PYGuPL7/2YbBWom4xcnyO2JyMz6oI= Subject key identifier: 30:9C:39:E3:D4:2F:62:21:85:BB:C5:B1:C2:8F:61:94:6A:DE:17:0A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848A293C54BA4DF9CD39F892240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/edc5356b-bdd4-426e-b060-cd4202d71d39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Jan 2025 01:45:34 +0000 Certificate not after: Wed 28 Apr 2027 00:45:34 +0000 Subordinate resources: IP: 204.135.0.0/16 IP: 206.223.30.0/24 IP: 2620:119:4000::/36 IP: 2620:1bc::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:93:c5:4b:a4:df:9c:d3:9f:89:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 23 01:45:34 2025 GMT Not After : Apr 28 00:45:34 2027 GMT Subject: CN=edc5356b-bdd4-426e-b060-cd4202d71d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:5f:1d:3e:23:50:f7:ff:62:57:6b:fe:8c: 5c:45:2b:c9:01:8f:b1:eb:9e:10:d1:fb:f9:e0:1e: df:a2:31:69:16:fe:af:06:f2:c7:20:80:69:d7:34: 1c:af:a0:ad:51:d2:5e:5f:bd:17:90:e5:33:6d:e4: 3b:65:ed:15:fd:42:ed:45:0d:b5:7c:19:f4:1a:eb: fc:79:fb:95:d7:50:ed:df:87:4f:4f:00:62:dc:00: 30:f5:b9:e5:4b:71:e6:20:82:a3:e3:31:44:ef:fb: 1c:01:1d:17:d9:d3:17:bb:01:bc:d7:96:f2:63:e8: 28:a8:e8:b3:a5:4c:71:17:82:3c:24:3b:e3:22:fc: 96:02:55:b1:0b:3f:21:80:8d:cf:05:1c:1a:ad:b4: a9:8f:50:fe:b2:55:5a:70:08:2f:ec:9f:8f:58:7b: 1e:b7:61:b9:6d:88:b2:72:57:4c:b1:e1:c3:7c:bc: be:9f:64:23:87:2f:d3:65:6b:85:8d:a9:1b:47:33: ae:fe:95:a6:86:67:fd:e9:74:e3:91:e7:ff:51:5b: 7b:b6:aa:50:73:fb:a8:b7:c7:0b:f6:51:85:ba:2f: e4:d8:e4:aa:3e:52:fb:54:86:96:e0:00:c0:96:2b: f1:6d:a4:33:ae:f5:b0:79:68:99:6c:e5:2b:53:60: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9C:39:E3:D4:2F:62:21:85:BB:C5:B1:C2:8F:61:94:6A:DE:17:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/edc5356b-bdd4-426e-b060-cd4202d71d39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.135.0.0/16 206.223.30.0/24 IPv6: 2620:119:4000::/36 2620:1bc::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5f:40:0b:1a:b2:10:aa:fc:d9:0e:ce:14:68:de:7f:8b:66: 99:57:e9:96:7f:63:e2:d8:9b:c1:84:f3:4b:f1:e6:3c:1f:aa: ea:c1:d6:43:a7:f2:f5:6c:ba:ea:0f:c7:5e:9a:5c:65:99:b9: 68:09:70:2a:76:09:5f:3a:75:29:45:c8:85:20:64:c4:2a:34: 95:08:2a:81:32:c9:68:a3:a7:73:72:e2:ea:c7:ad:87:9d:f7: ff:ce:68:6b:a5:15:fc:1b:a2:e7:b7:0c:9d:ae:2a:26:39:5b: db:63:36:71:3f:68:87:d2:e6:d6:16:8c:b9:f7:be:00:aa:12: 29:99:26:b1:a6:ba:b9:dd:b8:e6:69:12:0e:db:57:59:db:f3: 71:8c:13:25:64:4b:07:40:69:82:ef:94:fd:7e:eb:05:af:9e: 4c:71:77:68:92:68:47:55:86:c1:36:cb:29:51:1a:90:0c:3f: 90:3c:b5:82:1a:05:d2:0e:5b:39:dc:99:a2:92:85:21:fe:a5: 2a:06:43:08:7c:26:2e:06:e2:ab:74:ea:36:37:ce:e2:11:08: e0:73:30:38:f1:0d:bc:e4:96:f9:1d:0d:f1:79:5d:41:d2:79: 01:36:04:ca:d3:01:56:c3:70:e8:82:48:0a:f2:9e:6c:dd:5a: 67:b2:18:38 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEiik8VLpN+c05+JIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyMzAxNDUzNFoXDTI3MDQyODAwNDUzNFowLzEtMCsGA1UEAxMk ZWRjNTM1NmItYmRkNC00MjZlLWIwNjAtY2Q0MjAyZDcxZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjVfHT4jUPf/Yldr/oxcRSvJAY+x654Q0fv5 4B7fojFpFv6vBvLHIIBp1zQcr6CtUdJeX70XkOUzbeQ7Ze0V/ULtRQ21fBn0Guv8 efuV11Dt34dPTwBi3AAw9bnlS3HmIIKj4zFE7/scAR0X2dMXuwG815byY+goqOiz pUxxF4I8JDvjIvyWAlWxCz8hgI3PBRwarbSpj1D+slVacAgv7J+PWHset2G5bYiy cldMseHDfLy+n2Qjhy/TZWuFjakbRzOu/pWmhmf96XTjkef/UVt7tqpQc/uot8cL 9lGFui/k2OSqPlL7VIaW4ADAlivxbaQzrvWweWiZbOUrU2AL0wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDCcOePUL2IhhbvFscKPYZRq3hcKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l ZGM1MzU2Yi1iZGQ0LTQyNmUtYjA2MC1jZDQyMDJkNzFkMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2VkYzUzNTZiLWJkZDQtNDI2ZS1i MDYwLWNkNDIwMmQ3MWQzOS9lZGM1MzU2Yi1iZGQ0LTQyNmUtYjA2MC1jZDQyMDJk NzFkMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBEEAgABMAsDAwDMhwMEAM7fHjAVBAIAAjAPAwYEJiABGUADBQAm IAG8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACFfQAsashCq/NkOzhRo3n+LZplX6ZZ/Y+LYm8GE80vx5jwf qurB1kOn8vVsuuoPx16aXGWZuWgJcCp2CV86dSlFyIUgZMQqNJUIKoEyyWijp3Ny 4urHrYed9//OaGulFfwboue3DJ2uKiY5W9tjNnE/aIfS5tYWjLn3vgCqEimZJrGm urnduOZpEg7bV1nb83GMEyVkSwdAaYLvlP1+6wWvnkxxd2iSaEdVhsE2yylRGpAM P5A8tYIaBdIOWzncmaKShSH+pSoGQwh8Ji4G4qt06jY3zuIRCOBzMDjxDbzklvkd DfF5XUHSeQE2BMrTAVbDcOiCSArynmzdWmeyGDg= -----END CERTIFICATE-----Generated at Mon Apr 28 01:23:01 2025 by rpki-client