$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer File: f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer (raw, json) Hash identifier: T2S6EoAWEKQPtLPq0WGzyHMAHdnF7PHvSuQqTgcEbmc= Subject key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849123F1F8A0F13AE1013983A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 01:45:33 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 400544 IP: 104.156.128.0/22 IP: 2607:76c0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:3f:1f:8a:0f:13:ae:10:13:98:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 4 01:45:33 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:61:bf:58:86:8d:fe:8f:ed:c0:98:4b:20:b4: db:c0:6d:70:eb:5f:f3:04:c2:37:cf:2f:6f:db:ac: f8:88:b9:c9:f4:15:3e:4b:01:e3:41:60:72:2e:87: 82:31:c3:91:88:11:82:31:9e:f9:60:f1:ee:06:58: 29:10:1f:6a:22:cf:40:57:a6:b8:67:b6:bf:3e:27: 57:54:9c:2b:39:26:8f:8e:ce:5b:1e:44:d2:1c:49: 64:ff:83:4f:c6:af:81:d6:30:97:08:1d:a2:7f:f5: c0:36:8b:76:b4:b8:34:3f:99:87:bd:2f:b5:cd:8b: 74:3a:9e:5c:d6:61:fd:e5:59:ad:86:09:33:30:4f: b2:07:93:ea:9e:4c:94:13:c9:8d:79:62:0c:4a:cc: 57:6f:12:55:50:58:af:04:28:0e:c6:4e:92:f3:91: cb:6f:76:16:d4:f5:30:a5:33:5b:af:52:d5:f3:d9: 94:49:b5:40:21:4c:36:4a:fa:be:d2:d9:4b:c1:f1: f4:b2:62:32:a6:aa:1c:86:0a:a3:a8:c9:b5:ae:92: 4e:43:97:d1:f0:b5:97:cf:e8:ad:7f:f4:d5:a6:49: 7a:2a:5c:d0:df:a1:64:0b:bd:0c:60:e9:c6:b5:fc: 92:6d:1b:9c:49:c4:d8:03:c4:44:db:46:9c:d7:59: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.156.128.0/22 IPv6: 2607:76c0::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400544 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:69:e0:72:8d:00:22:29:e9:4d:6f:1e:04:0d:d4:a2:c8:28: 2e:c6:bf:07:38:78:41:9d:8b:fd:41:4d:5e:91:5d:01:6c:42: 43:eb:b6:a6:48:2e:2a:a2:ee:ea:96:02:f3:3f:7a:7f:89:48: 46:24:29:0e:6c:4e:db:ed:f6:89:82:bf:17:71:34:69:5d:c9: 51:ab:c1:b5:d5:23:99:9b:b0:9e:97:57:13:16:39:89:db:67: 3f:54:bd:b6:ce:63:ae:b7:57:3d:4d:c3:f9:c7:27:00:bb:61: c8:c2:0e:50:0e:c0:a2:86:0a:19:bb:2c:8b:ab:b3:01:ec:15: 9a:fe:22:96:72:dc:82:e1:0f:f7:4b:52:b1:1d:c8:a0:7c:ef: 91:08:97:db:25:d3:4b:94:13:3e:99:b8:e5:64:0c:63:3a:ef: 25:49:19:be:33:04:7d:03:ae:a5:05:e6:f5:9e:a1:47:8b:95: 21:be:ab:6c:30:47:17:20:82:78:74:0d:39:5a:fd:6d:34:58: e3:e7:1f:e9:63:35:02:02:43:bd:b5:ce:ab:25:47:a8:c9:b7: 2e:84:97:b8:72:fd:cd:33:10:e0:78:76:f3:3f:67:4a:50:c8: df:1a:6c:e0:61:89:55:71:e3:ed:b6:cb:37:3c:4a:5f:7f:81: 61:cd:fa:19 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEkSPx+KDxOuEBOYOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwNDAxNDUzM1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk ZjgxYmFjZDgtZjdkOS00N2Q3LWFhMjQtNTM5MTA0OWY5YzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mG/WIaN/o/twJhLILTbwG1w61/zBMI3zy9v 26z4iLnJ9BU+SwHjQWByLoeCMcORiBGCMZ75YPHuBlgpEB9qIs9AV6a4Z7a/PidX VJwrOSaPjs5bHkTSHElk/4NPxq+B1jCXCB2if/XANot2tLg0P5mHvS+1zYt0Op5c 1mH95VmthgkzME+yB5PqnkyUE8mNeWIMSsxXbxJVUFivBCgOxk6S85HLb3YW1PUw pTNbr1LV89mUSbVAIUw2Svq+0tlLwfH0smIypqochgqjqMm1rpJOQ5fR8LWXz+it f/TVpkl6KlzQ36FkC70MYOnGtfySbRucScTYA8RE20ac11neGQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOz9yOuyNvO7ltrEZOuS2amp9xM9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m ODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5ZjljODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Y4MWJhY2Q4LWY3ZDktNDdkNy1h YTI0LTUzOTEwNDlmOWM4Mi9mODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5 ZjljODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJonIAwDgQCAAIwCAMGBCYHdsAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYcoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEaeByjQAiKelNbx4EDdSiyCgu xr8HOHhBnYv9QU1ekV0BbEJD67amSC4qou7qlgLzP3p/iUhGJCkObE7b7faJgr8X cTRpXclRq8G11SOZm7Cel1cTFjmJ22c/VL22zmOut1c9TcP5xycAu2HIwg5QDsCi hgoZuyyLq7MB7BWa/iKWctyC4Q/3S1KxHcigfO+RCJfbJdNLlBM+mbjlZAxjOu8l SRm+MwR9A66lBeb1nqFHi5UhvqtsMEcXIIJ4dA05Wv1tNFjj5x/pYzUCAkO9tc6r JUeoybcuhJe4cv3NMxDgeHbzP2dKUMjfGmzgYYlVcePttss3PEpff4FhzfoZ -----END CERTIFICATE-----Generated at Mon Apr 28 09:26:44 2025 by rpki-client