$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81.cer File: f12fc670-c513-43aa-8e45-f34564e90e81.cer (raw, json) Hash identifier: h2BIJUhkod8OGrAnRIJbCUpUbY1K7ydTAP96mieZw/g= Subject key identifier: 75:3A:62:0A:EE:46:05:7C:39:EA:E6:F9:0B:58:89:86:B1:AF:3E:B1 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848E5942B508D9CF62446CE2C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Feb 2025 01:45:32 +0000 Certificate not after: Sat 22 May 2027 00:45:32 +0000 Subordinate resources: IP: 205.236.77.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:94:2b:50:8d:9c:f6:24:46:ce:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 16 01:45:32 2025 GMT Not After : May 22 00:45:32 2027 GMT Subject: CN=f12fc670-c513-43aa-8e45-f34564e90e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:7f:e0:ae:c5:af:3c:53:54:58:95:6a:c6: fb:1e:0a:34:84:88:60:f4:a5:cf:e4:51:e6:60:39: 71:14:f3:d7:74:52:d5:6c:5a:ed:3c:8e:61:17:65: 0e:58:b6:dd:37:80:87:f3:bc:71:37:7d:12:15:33: 59:99:07:ba:0c:b5:1c:5f:34:4f:a8:3b:09:0a:27: b9:88:66:37:ec:63:42:df:18:e7:ad:d4:4a:a3:dc: 97:c8:75:a0:a7:ef:44:58:59:18:b5:34:fe:a3:ec: f8:85:3e:a8:9e:f2:d1:77:ea:57:07:52:fb:8b:14: 3b:f9:bd:80:67:f8:08:67:04:4a:eb:dc:10:f2:cf: 81:17:b3:7f:88:ea:e9:ac:4e:fd:95:fb:6b:3b:b1: d9:df:da:ec:7a:be:c4:6a:e1:0d:a6:7d:e4:65:83: 2c:e2:70:fe:b3:f5:90:10:48:65:ba:a9:f5:01:12: 34:a7:c5:52:ae:e7:5e:9b:4e:a3:6f:2e:65:14:6c: 45:c4:8a:12:37:d5:9a:2b:09:f4:72:7d:c6:92:2d: a8:df:ed:4a:3f:21:8a:f1:8f:5f:0b:43:2f:f3:a7: b4:8a:14:e8:07:40:b4:05:49:95:eb:d0:f7:9f:2f: 4e:ed:ec:4b:04:98:b3:e5:0d:bf:4c:ad:f3:b1:d7: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3A:62:0A:EE:46:05:7C:39:EA:E6:F9:0B:58:89:86:B1:AF:3E:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.236.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bf:cd:a5:80:00:44:86:83:e0:94:db:6b:b9:d5:a5:2a:88: da:22:60:cd:31:e9:d1:b5:28:f1:ae:d1:56:30:ae:5f:42:a7: 49:33:a2:6c:ea:99:fa:b2:e0:32:fb:9a:35:7a:52:32:c4:b7: c9:31:e9:09:a3:29:64:f9:e0:c0:1e:b9:bc:85:75:5a:d9:c9: f1:aa:6b:4c:2c:de:6a:d6:c6:d7:ad:16:56:b5:85:5e:25:51: cf:1e:29:4e:84:93:a4:fc:d6:02:7f:1b:d3:59:49:b9:e2:db: 36:68:c8:f8:94:f8:95:91:a5:75:c4:39:16:c5:79:11:d3:52: 59:a4:ee:f2:34:e5:46:52:ce:73:93:ad:7d:16:40:d3:9a:04: 23:37:99:bd:f9:6b:bb:43:b1:95:e2:34:d2:aa:41:55:10:4d: b9:a6:51:d5:60:a7:e0:19:18:66:77:35:8b:55:bb:3c:f3:c3: 2c:eb:dd:46:d0:41:cc:68:d1:43:94:6b:b8:db:24:01:5d:7f: 17:38:35:4f:fb:b4:65:81:0f:da:7d:05:93:f3:fe:d1:8f:4a: d8:b2:4c:9c:eb:c7:8b:2b:3b:5a:33:9a:6f:45:12:a8:a0:18: c2:1f:fa:65:f2:72:ed:99:1d:09:ce:dd:80:9a:2b:b5:af:1d: 41:f1:bc:bb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjllCtQjZz2JEbOLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxNjAxNDUzMloXDTI3MDUyMjAwNDUzMlowLzEtMCsGA1UEAxMk ZjEyZmM2NzAtYzUxMy00M2FhLThlNDUtZjM0NTY0ZTkwZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnup/4K7FrzxTVFiVasb7Hgo0hIhg9KXP5FHm YDlxFPPXdFLVbFrtPI5hF2UOWLbdN4CH87xxN30SFTNZmQe6DLUcXzRPqDsJCie5 iGY37GNC3xjnrdRKo9yXyHWgp+9EWFkYtTT+o+z4hT6onvLRd+pXB1L7ixQ7+b2A Z/gIZwRK69wQ8s+BF7N/iOrprE79lftrO7HZ39rser7EauENpn3kZYMs4nD+s/WQ EEhluqn1ARI0p8VSrudem06jby5lFGxFxIoSN9WaKwn0cn3Gki2o3+1KPyGK8Y9f C0Mv86e0ihToB0C0BUmV69D3ny9O7exLBJiz5Q2/TK3zsdfxywIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHU6YgruRgV8Oerm+QtYiYaxrz6xMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m MTJmYzY3MC1jNTEzLTQzYWEtOGU0NS1mMzQ1NjRlOTBlODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2YxMmZjNjcwLWM1MTMtNDNhYS04 ZTQ1LWYzNDU2NGU5MGU4MS9mMTJmYzY3MC1jNTEzLTQzYWEtOGU0NS1mMzQ1NjRl OTBlODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN7E0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAab/NpYAARIaD4JTba7nV pSqI2iJgzTHp0bUo8a7RVjCuX0KnSTOibOqZ+rLgMvuaNXpSMsS3yTHpCaMpZPng wB65vIV1WtnJ8aprTCzeatbG160WVrWFXiVRzx4pToSTpPzWAn8b01lJueLbNmjI +JT4lZGldcQ5FsV5EdNSWaTu8jTlRlLOc5OtfRZA05oEIzeZvflru0OxleI00qpB VRBNuaZR1WCn4BkYZnc1i1W7PPPDLOvdRtBBzGjRQ5RruNskAV1/Fzg1T/u0ZYEP 2n0Fk/P+0Y9K2LJMnOvHiys7WjOab0USqKAYwh/6ZfJy7ZkdCc7dgJorta8dQfG8 uw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:00:48 2025 by rpki-client