$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089.cer File: 11b225f7-40bc-41c6-8ed3-2e2845094089.cer (raw, json) Hash identifier: /0pvb9llBl2QHkaM+gzi5JceOY8YDVSIL0Z/45EdtWI= Subject key identifier: E6:83:88:DD:0C:19:63:A6:36:CA:34:51:29:66:1C:2C:AE:0C:B5:33 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858489FC91420784CFB4466D49320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jan 2025 01:45:33 +0000 Certificate not after: Tue 27 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 46763 IP: 66.45.59.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:c9:14:20:78:4c:fb:44:66:d4:93:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 22 01:45:33 2025 GMT Not After : Apr 27 00:45:33 2027 GMT Subject: CN=11b225f7-40bc-41c6-8ed3-2e2845094089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:68:37:b8:90:6b:84:f1:65:c0:fa:d3:84:97: 33:9f:e9:20:6a:a7:47:fd:65:d8:f7:99:2a:d3:af: e0:b3:bb:4b:b1:5b:d8:41:98:64:93:53:bb:15:25: 0f:7b:cc:69:eb:f7:18:08:79:0d:88:30:94:42:13: ef:63:78:ba:e0:f1:05:e5:09:fb:09:ed:15:51:07: d9:d9:30:16:a7:b7:c5:14:52:47:b2:f4:16:e4:14: 95:5e:00:d3:0f:9f:ee:ef:37:29:3a:c6:08:b1:3b: e1:ff:2b:15:24:19:cb:92:79:94:70:da:c9:58:b3: df:37:6d:cb:19:58:61:bc:f3:2e:c4:fe:57:fc:89: 8d:a3:b0:bc:48:62:64:f6:04:30:53:a9:b7:11:8a: 4b:b7:52:10:8d:d7:04:52:0f:66:03:b5:0b:fc:06: 38:d9:37:7c:dc:4f:83:0d:d0:51:0d:89:69:9d:07: 08:5f:41:14:b5:a5:f2:5d:6e:10:f1:a0:81:36:d2: 6f:e7:6a:7a:e0:90:d9:b0:98:f9:cb:cb:ab:5a:cf: b0:42:3d:ab:d7:74:82:47:58:83:d6:d5:1c:3c:2d: e2:ba:bd:1f:7a:08:14:e3:bc:fd:7c:1a:48:28:b5: e4:4b:82:ad:a4:f2:a9:88:a5:00:51:fa:73:83:3b: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:83:88:DD:0C:19:63:A6:36:CA:34:51:29:66:1C:2C:AE:0C:B5:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11b225f7-40bc-41c6-8ed3-2e2845094089/11b225f7-40bc-41c6-8ed3-2e2845094089.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 66.45.59.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46763 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:89:c7:f0:66:31:43:b4:b1:bb:83:99:d1:bf:3b:c7:b7:a4: 50:b3:bc:86:cc:c6:6f:50:46:d6:00:7b:e7:57:4d:9d:f0:bf: 13:2a:d8:7a:ae:56:c4:59:b6:9f:d7:aa:81:eb:d0:21:67:83: cc:60:af:c9:39:20:f5:e1:b5:9a:62:23:98:b1:a2:d4:26:4f: 1e:3d:82:70:7e:27:8c:55:b3:46:06:72:d1:69:4a:50:bd:cc: a0:0b:30:f8:a2:bf:14:9b:7a:4b:1d:6e:58:ae:7d:d2:ee:9b: 78:66:21:71:a9:f7:5c:bc:3e:a5:d1:2d:fa:e4:cb:ea:8b:ab: 60:ad:de:59:14:dc:4f:0e:86:08:78:82:af:3c:60:b6:2c:52: 1c:5f:d7:e5:b5:b0:42:46:25:94:a6:15:d3:0f:7e:30:24:bd: 79:c0:a8:b0:52:de:81:99:51:b5:cc:7b:fe:ae:b9:71:6c:7b: 03:fe:11:c8:8d:71:82:5e:b1:2f:b6:3b:5a:87:ff:30:6d:96: 2b:aa:53:3f:20:e4:50:64:d1:39:12:31:8e:c1:c0:d4:4d:61: 5d:fe:a9:61:79:91:a4:8d:44:1c:8f:2a:00:e0:07:53:d4:3d: e4:3c:e1:7c:dc:34:4a:36:69:29:33:34:8b:5a:de:19:55:45: f3:aa:67:b4 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEifyRQgeEz7RGbUkyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyMjAxNDUzM1oXDTI3MDQyNzAwNDUzM1owLzEtMCsGA1UEAxMk MTFiMjI1ZjctNDBiYy00MWM2LThlZDMtMmUyODQ1MDk0MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wg3uJBrhPFlwPrThJczn+kgaqdH/WXY95kq 06/gs7tLsVvYQZhkk1O7FSUPe8xp6/cYCHkNiDCUQhPvY3i64PEF5Qn7Ce0VUQfZ 2TAWp7fFFFJHsvQW5BSVXgDTD5/u7zcpOsYIsTvh/ysVJBnLknmUcNrJWLPfN23L GVhhvPMuxP5X/ImNo7C8SGJk9gQwU6m3EYpLt1IQjdcEUg9mA7UL/AY42Td83E+D DdBRDYlpnQcIX0EUtaXyXW4Q8aCBNtJv52p64JDZsJj5y8urWs+wQj2r13SCR1iD 1tUcPC3iur0feggU47z9fBpIKLXkS4KtpPKpiKUAUfpzgzu7aQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFOaDiN0MGWOmNso0USlmHCyuDLUzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x MWIyMjVmNy00MGJjLTQxYzYtOGVkMy0yZTI4NDUwOTQwODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzExYjIyNWY3LTQwYmMtNDFjNi04 ZWQzLTJlMjg0NTA5NDA4OS8xMWIyMjVmNy00MGJjLTQxYzYtOGVkMy0yZTI4NDUw OTQwODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABCLTswGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALarMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFGJx/BmMUO0sbuDmdG/O8e3pFCzvIbMxm9QRtYAe+dXTZ3w vxMq2HquVsRZtp/XqoHr0CFng8xgr8k5IPXhtZpiI5ixotQmTx49gnB+J4xVs0YG ctFpSlC9zKALMPiivxSbeksdbliufdLum3hmIXGp91y8PqXRLfrky+qLq2Ct3lkU 3E8Ohgh4gq88YLYsUhxf1+W1sEJGJZSmFdMPfjAkvXnAqLBS3oGZUbXMe/6uuXFs ewP+EciNcYJesS+2O1qH/zBtliuqUz8g5FBk0TkSMY7BwNRNYV3+qWF5kaSNRByP KgDgB1PUPeQ84XzcNEo2aSkzNIta3hlVRfOqZ7Q= -----END CERTIFICATE-----Generated at Sat May 10 16:50:45 2025 by rpki-client