$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f.cer File: 42228b03-73da-4c1a-9825-832cf144e90f.cer (raw, json) Hash identifier: qt0rDh3n7uLKoRr02XWQdk+L0wDieEgK5FWx6zIiu54= Subject key identifier: 41:AB:20:75:D8:31:52:AF:3C:69:51:E5:0F:88:26:A0:6A:15:DD:9B Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584973D74A6A200C96E155891300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/42228b03-73da-4c1a-9825-832cf144e90f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Apr 2025 00:45:34 +0000 Certificate not after: Mon 12 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 399622 IP: 2606:4940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:d7:4a:6a:20:0c:96:e1:55:89:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 8 00:45:34 2025 GMT Not After : Jul 12 00:45:34 2027 GMT Subject: CN=42228b03-73da-4c1a-9825-832cf144e90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:c0:62:ce:25:c9:3a:60:63:da:6b:d7:14: 04:35:43:8f:61:80:e0:2a:04:7b:59:35:e3:a8:4e: 9d:27:f9:8a:47:24:b9:ee:fa:26:4a:0d:5f:2b:fc: df:5c:3f:53:ec:7f:9a:e5:9b:4c:5a:61:e1:7b:f9: 4a:6a:fb:e2:09:79:f5:bf:98:88:20:57:4c:55:5e: d2:e9:8a:d4:6b:cd:30:76:e2:15:d0:e1:54:ae:89: 62:0a:0b:32:70:f7:a7:a2:7b:01:b2:b0:36:90:a0: 3f:84:d4:ae:1f:29:5b:b6:7e:6c:72:a1:0b:ae:05: 62:ec:e0:75:0c:f5:e2:50:32:a4:c9:e8:00:e6:2d: ae:85:1d:7a:5b:85:1e:3d:c4:e1:f7:c6:fd:c6:db: b1:fb:4e:b7:cc:95:29:2f:a9:90:93:d1:ad:12:89: c1:4c:cd:00:8d:c9:0d:f3:8e:78:84:d3:f5:b1:0c: 51:d1:54:85:fa:c4:13:49:07:04:5a:a3:d1:5a:69: c0:7e:50:44:b7:d4:2f:5e:4e:9d:29:4f:61:5a:d3: ba:2f:34:11:98:3c:0f:d7:9d:1d:ac:7d:d1:c4:91: 55:58:39:ed:1c:b4:60:8d:08:d7:52:f5:a2:40:4f: 9b:0b:cf:2b:89:5f:3f:0e:e4:d9:8c:22:07:56:be: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AB:20:75:D8:31:52:AF:3C:69:51:E5:0F:88:26:A0:6A:15:DD:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/42228b03-73da-4c1a-9825-832cf144e90f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:4940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399622 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d3:5d:73:94:15:2e:04:35:40:4d:2c:4c:99:a9:1b:ae:44: b2:08:66:79:c2:26:cd:a0:14:95:63:20:5a:f2:88:97:20:15: 81:cb:e8:c1:aa:1f:a8:08:61:ff:cf:21:43:79:24:a1:51:bc: 3e:c8:78:e9:9a:6e:03:c5:20:34:a6:bb:be:9b:c7:39:a6:46: 28:a4:ab:56:ad:c6:7a:c6:cb:38:8d:42:59:83:59:af:a4:02: b0:2d:61:b6:42:cf:89:4b:a5:b0:e7:83:71:93:f0:f9:3a:2d: 2a:1c:13:31:0e:ac:6d:6e:56:e3:68:a3:e7:0e:7b:9f:f5:3c: da:af:eb:7f:13:b3:69:1f:00:c3:ee:6a:ab:ed:14:a3:d9:35: 22:df:c4:fd:bb:64:28:4e:e5:05:54:47:db:90:6b:26:94:28: 77:07:9e:4f:28:12:af:56:80:00:af:bb:05:fd:57:27:7f:40: 24:1b:85:84:92:61:8e:e3:e0:e8:b7:18:0b:b7:3b:97:22:09: 83:da:4a:d0:24:73:f4:89:15:55:fe:fc:61:e0:c9:ad:11:e3: 2e:b2:c9:ce:8f:a2:2f:7c:45:48:3c:db:90:bb:3c:ac:21:81: 15:a1:c4:2a:9b:fd:f3:a5:6e:45:3f:6f:fe:c0:6e:28:0a:50: 0c:7c:9b:3c -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWElz10pqIAyW4VWJEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwODAwNDUzNFoXDTI3MDcxMjAwNDUzNFowLzEtMCsGA1UEAxMk NDIyMjhiMDMtNzNkYS00YzFhLTk4MjUtODMyY2YxNDRlOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLzAYs4lyTpgY9pr1xQENUOPYYDgKgR7WTXj qE6dJ/mKRyS57vomSg1fK/zfXD9T7H+a5ZtMWmHhe/lKavviCXn1v5iIIFdMVV7S 6YrUa80wduIV0OFUroliCgsycPenonsBsrA2kKA/hNSuHylbtn5scqELrgVi7OB1 DPXiUDKkyegA5i2uhR16W4UePcTh98b9xtux+063zJUpL6mQk9GtEonBTM0AjckN 8454hNP1sQxR0VSF+sQTSQcEWqPRWmnAflBEt9QvXk6dKU9hWtO6LzQRmDwP150d rH3RxJFVWDntHLRgjQjXUvWiQE+bC88riV8/DuTZjCIHVr4dywIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFEGrIHXYMVKvPGlR5Q+IJqBqFd2bMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 MjIyOGIwMy03M2RhLTRjMWEtOTgyNS04MzJjZjE0NGU5MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQyMjI4YjAzLTczZGEtNGMxYS05 ODI1LTgzMmNmMTQ0ZTkwZi80MjIyOGIwMy03M2RhLTRjMWEtOTgyNS04MzJjZjE0 NGU5MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBklAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYZBjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAB011zlBUuBDVATSxMmakbrkSyCGZ5wibNoBSVYyBa8oiX IBWBy+jBqh+oCGH/zyFDeSShUbw+yHjpmm4DxSA0pru+m8c5pkYopKtWrcZ6xss4 jUJZg1mvpAKwLWG2Qs+JS6Ww54Nxk/D5Oi0qHBMxDqxtblbjaKPnDnuf9Tzar+t/ E7NpHwDD7mqr7RSj2TUi38T9u2QoTuUFVEfbkGsmlCh3B55PKBKvVoAAr7sF/Vcn f0AkG4WEkmGO4+DotxgLtzuXIgmD2krQJHP0iRVV/vxh4MmtEeMussnOj6IvfEVI PNuQuzysIYEVocQqm/3zpW5FP2/+wG4oClAMfJs8 -----END CERTIFICATE-----Generated at Sun May 11 01:08:26 2025 by rpki-client