$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.cer File: fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.cer (raw, json) Hash identifier: jaHVWrrjUNGhWzdne+HCMp/eWlKu2kInPlGUzPzwKPA= Subject key identifier: CD:24:FE:93:E1:21:99:12:AB:6F:D0:09:A9:45:59:E5:97:7D:1F:B7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858489A33B3C2E20DC689F45D51C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Jan 2025 01:45:32 +0000 Certificate not after: Sun 25 Apr 2027 00:45:32 +0000 Subordinate resources: IP: 192.245.136.0/24 IP: 198.91.32.0 -- 198.91.41.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:33:b3:c2:e2:0d:c6:89:f4:5d:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 20 01:45:32 2025 GMT Not After : Apr 25 00:45:32 2027 GMT Subject: CN=fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:09:b9:ba:b2:76:8b:6e:21:97:ec:28:5e: 50:f5:da:66:a4:f2:f0:87:10:20:31:1a:70:2e:be: e5:56:37:b7:13:93:1b:2f:26:b1:26:6b:02:64:b5: fe:bb:ec:38:f1:37:b9:fb:d1:4e:14:5d:2e:c8:d9: 70:15:a2:a6:a9:da:c8:e9:51:cc:74:03:26:79:ee: c9:8d:54:f1:24:22:a5:e2:1d:90:3e:ef:03:30:2a: 95:f3:74:e8:38:4f:31:51:cf:69:9c:f9:f2:5f:8b: 53:a7:bd:52:44:ba:cb:dd:95:c5:9b:8b:73:fd:77: 32:0a:4a:31:01:13:ec:12:84:40:96:62:6f:14:7f: ab:7b:f8:34:b3:a7:5e:db:fa:4f:ad:32:7d:bd:b4: 99:b9:cd:9c:d4:80:06:da:86:3b:de:64:d2:8c:bb: b2:a3:13:3a:c9:2a:8d:44:b5:61:83:8d:3b:03:57: 38:37:6b:08:64:07:12:81:91:a6:ba:05:85:1f:43: 50:e2:12:91:40:ae:8a:32:1d:b5:e7:e9:a2:b3:7c: 5b:10:ff:48:90:75:14:bd:1b:d7:b8:7f:7c:48:b0: 32:f7:cf:88:5d:e1:6c:54:55:7d:dc:7a:f6:3f:7a: d7:06:52:4e:f3:0d:33:23:57:90:e4:09:cc:9f:1b: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:FE:93:E1:21:99:12:AB:6F:D0:09:A9:45:59:E5:97:7D:1F:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf/fa93f1a1-9098-4c79-9ffc-9fafe6a3ddaf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.245.136.0/24 198.91.32.0-198.91.41.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:85:51:f8:c8:4a:b4:6a:02:28:be:89:a9:a4:17:3c:1b:e9: d2:1b:06:e7:3e:29:1d:b9:e1:61:cc:66:8a:a5:9e:d6:24:40: d8:97:35:f3:13:7e:da:3c:9f:f7:b8:2a:62:e0:31:b4:d8:23: e0:64:37:8c:8f:75:5f:b7:93:d3:c8:07:72:f7:18:a5:f3:5e: d8:88:86:81:24:6c:11:e5:ce:ba:21:b5:2f:77:88:1f:94:1c: 6a:e6:5d:de:3f:4b:09:0e:0a:db:d8:db:b0:09:37:5f:10:a5: 55:e9:13:9a:c8:2c:18:98:06:81:6f:a9:64:41:a9:b9:f8:73: f9:6a:65:9b:42:eb:b7:b3:cd:b5:1f:2d:10:73:12:b3:06:b0: 0e:7c:c6:42:ca:03:0f:9f:1a:07:cf:4a:50:38:06:48:b8:ad: 4b:84:b7:15:28:22:81:35:35:8d:ae:ae:38:48:5f:e4:3c:85: bc:bc:a1:35:b3:c4:6b:90:64:30:8a:53:f1:83:5f:23:71:b3: 14:20:6b:7c:98:51:20:a9:ee:9a:6d:cc:1f:74:44:27:19:1f: e2:d8:34:32:b5:e0:3e:29:19:4c:9a:d4:1b:0a:01:c4:e4:da: 21:de:0c:46:8d:ef:0d:eb:9e:8c:5c:5d:d5:31:b4:2c:24:32: 71:0f:3f:0d -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEiaM7PC4g3GifRdUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyMDAxNDUzMloXDTI3MDQyNTAwNDUzMlowLzEtMCsGA1UEAxMk ZmE5M2YxYTEtOTA5OC00Yzc5LTlmZmMtOWZhZmU2YTNkZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji4JubqydotuIZfsKF5Q9dpmpPLwhxAgMRpw Lr7lVje3E5MbLyaxJmsCZLX+u+w48Te5+9FOFF0uyNlwFaKmqdrI6VHMdAMmee7J jVTxJCKl4h2QPu8DMCqV83ToOE8xUc9pnPnyX4tTp71SRLrL3ZXFm4tz/XcyCkox ARPsEoRAlmJvFH+re/g0s6de2/pPrTJ9vbSZuc2c1IAG2oY73mTSjLuyoxM6ySqN RLVhg407A1c4N2sIZAcSgZGmugWFH0NQ4hKRQK6KMh215+mis3xbEP9IkHUUvRvX uH98SLAy98+IXeFsVFV93Hr2P3rXBlJO8w0zI1eQ5AnMnxuj2QIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFM0k/pPhIZkSq2/QCalFWeWXfR+3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m YTkzZjFhMS05MDk4LTRjNzktOWZmYy05ZmFmZTZhM2RkYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZhOTNmMWExLTkwOTgtNGM3OS05 ZmZjLTlmYWZlNmEzZGRhZi9mYTkzZjFhMS05MDk4LTRjNzktOWZmYy05ZmFmZTZh M2RkYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADA9YgwDAMEBcZbIAMEAcZbKDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9 hVH4yEq0agIovomppBc8G+nSGwbnPikdueFhzGaKpZ7WJEDYlzXzE37aPJ/3uCpi 4DG02CPgZDeMj3Vft5PTyAdy9xil817YiIaBJGwR5c66IbUvd4gflBxq5l3eP0sJ Dgrb2NuwCTdfEKVV6ROayCwYmAaBb6lkQam5+HP5amWbQuu3s821Hy0QcxKzBrAO fMZCygMPnxoHz0pQOAZIuK1LhLcVKCKBNTWNrq44SF/kPIW8vKE1s8RrkGQwilPx g18jcbMUIGt8mFEgqe6abcwfdEQnGR/i2DQyteA+KRlMmtQbCgHE5Noh3gxGje8N 656MXF3VMbQsJDJxDz8N -----END CERTIFICATE-----Generated at Sun Apr 27 23:58:54 2025 by rpki-client