$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer File: ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer (raw, json) Hash identifier: WehaaDSqkIH2n68EPlwkw+ZLPmjEBOx/ubIjpz1RAoM= Subject key identifier: D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858488C3E471332CAD3397A27CB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Jan 2025 01:45:32 +0000 Certificate not after: Tue 20 Apr 2027 00:45:32 +0000 Subordinate resources: AS: 14973 IP: 198.235.54.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8c:3e:47:13:32:ca:d3:39:7a:27:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 15 01:45:32 2025 GMT Not After : Apr 20 00:45:32 2027 GMT Subject: CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:3f:b1:13:85:7f:25:67:88:a0:ea:40:79: 40:ee:d5:e9:34:cb:4e:1c:64:27:83:3a:aa:13:76: 0f:5e:a1:4a:e5:65:d3:ef:d6:f9:c0:c4:ae:94:ab: 93:22:13:4c:ca:9d:9d:a9:37:20:6c:7e:4b:8c:7b: 76:90:ea:e8:56:1a:ca:e7:20:6a:1b:b6:0e:56:bd: e7:63:8d:fd:0e:17:b8:55:c0:78:4c:0f:c5:94:23: 97:fe:e4:5e:2f:73:fb:d3:54:ff:0d:35:54:79:49: c6:b1:6e:d1:39:97:0c:39:45:9a:c6:f9:82:51:4d: d8:d4:6f:33:3e:eb:4b:ea:06:21:4d:80:d5:8f:9a: b8:e4:ba:65:10:a1:f0:59:87:db:44:08:a1:ac:6d: 75:85:b6:be:10:d9:db:1a:90:9a:c0:34:b0:f1:7c: c6:6b:bc:a8:a0:1b:f7:62:9d:7f:98:72:1a:a8:a0: 1d:3e:d3:96:37:ca:9a:70:d4:da:e7:8b:42:87:e1: 00:a4:1c:e1:85:ec:c5:d4:89:a8:01:35:65:40:6c: 3c:3b:65:05:10:47:b6:60:8f:44:89:38:e4:63:8e: f8:a9:37:42:ed:f7:d4:12:77:bc:3c:84:34:74:ba: d9:9d:4e:2f:1d:21:91:47:6a:f6:f8:0e:97:54:75: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 198.235.54.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14973 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a4:99:ff:8d:0b:83:aa:ec:5f:cc:0b:c1:49:9b:53:ec:62: b4:3e:88:2e:0f:3d:93:9c:7e:68:63:7a:55:2b:82:96:b9:68: 56:3b:e3:00:50:6e:d2:21:cc:f2:7b:eb:9e:77:e0:af:98:9c: e3:4f:a7:4a:b6:c6:5d:f8:8b:f0:5f:73:f3:2a:5e:73:d6:bd: 6d:23:1a:3b:65:ba:a2:08:90:bd:b3:53:a0:10:32:3f:91:cd: 0a:af:dc:e0:27:8c:c9:c3:fa:15:5d:c1:42:51:78:e7:5c:ed: 46:bf:50:b0:f7:85:2b:ff:46:f8:d1:85:bf:9c:5b:31:5e:62: 4d:59:d5:28:ff:b5:2d:68:50:6a:8a:9f:77:2e:5d:2e:65:90: c3:74:e9:9a:1b:27:5e:b7:4d:67:88:a1:5c:ad:98:5e:53:d7: 97:21:2c:75:d0:ec:70:fc:ba:7d:c7:44:9a:94:da:32:0e:44: 5c:ad:0b:41:4e:56:16:98:59:38:77:e7:40:bf:00:b8:4a:ed: 25:df:1c:64:70:97:74:6e:1a:33:7c:1f:93:35:73:20:0b:cd: d3:05:aa:f1:93:67:56:6c:46:11:f9:e0:c0:00:36:79:e2:b1: b8:a2:15:e5:3e:54:fc:e5:ee:ea:b1:ca:30:34:28:62:ba:63: 9b:84:3f:42 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEiMPkcTMsrTOXonywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExNTAxNDUzMloXDTI3MDQyMDAwNDUzMlowLzEtMCsGA1UEAxMk ZWU1Y2U4YmMtYzNjZC00Zjk5LThlM2YtYjRkOGNkNmJjN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Uo/sROFfyVniKDqQHlA7tXpNMtOHGQngzqq E3YPXqFK5WXT79b5wMSulKuTIhNMyp2dqTcgbH5LjHt2kOroVhrK5yBqG7YOVr3n Y439Dhe4VcB4TA/FlCOX/uReL3P701T/DTVUeUnGsW7ROZcMOUWaxvmCUU3Y1G8z PutL6gYhTYDVj5q45LplEKHwWYfbRAihrG11hba+ENnbGpCawDSw8XzGa7yooBv3 Yp1/mHIaqKAdPtOWN8qacNTa54tCh+EApBzhhezF1ImoATVlQGw8O2UFEEe2YI9E iTjkY474qTdC7ffUEne8PIQ0dLrZnU4vHSGRR2r2+A6XVHUONQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFNTQGNhb537JOkDcR7T1nkthMD4UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l ZTVjZThiYy1jM2NkLTRmOTktOGUzZi1iNGQ4Y2Q2YmM3ZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2VlNWNlOGJjLWMzY2QtNGY5OS04 ZTNmLWI0ZDhjZDZiYzdlOC9lZTVjZThiYy1jM2NkLTRmOTktOGUzZi1iNGQ4Y2Q2 YmM3ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHG6zYwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC On0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAhaSZ/40Lg6rsX8wLwUmbU+xitD6ILg89k5x+aGN6VSuClrlo VjvjAFBu0iHM8nvrnnfgr5ic40+nSrbGXfiL8F9z8ypec9a9bSMaO2W6ogiQvbNT oBAyP5HNCq/c4CeMycP6FV3BQlF451ztRr9QsPeFK/9G+NGFv5xbMV5iTVnVKP+1 LWhQaoqfdy5dLmWQw3TpmhsnXrdNZ4ihXK2YXlPXlyEsddDscPy6fcdEmpTaMg5E XK0LQU5WFphZOHfnQL8AuErtJd8cZHCXdG4aM3wfkzVzIAvN0wWq8ZNnVmxGEfng wAA2eeKxuKIV5T5U/OXu6rHKMDQoYrpjm4Q/Qg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:03:42 2025 by rpki-client