$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer File: 4884cca8-e13a-4d48-82af-7839862b6341.cer (raw, json) Hash identifier: gkzvIFC8Sx8zSPtD61pnff54sKWQ0YCM2rd+XZQFQxs= Subject key identifier: 5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584929DC29236ED02479C3F67500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Mar 2025 12:45:34 +0000 Certificate not after: Tue 15 Jun 2027 12:45:34 +0000 Subordinate resources: IP: 192.68.131.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:dc:29:23:6e:d0:24:79:c3:f6:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 12 12:45:34 2025 GMT Not After : Jun 15 12:45:34 2027 GMT Subject: CN=4884cca8-e13a-4d48-82af-7839862b6341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:e7:51:c5:e8:62:b0:aa:de:03:c1:63:59: e4:1b:dc:04:df:72:d4:3f:fc:10:be:b1:bc:e3:bf: c7:05:53:63:2b:4d:52:88:4a:a0:c8:7a:0d:cd:55: f0:45:66:f9:ef:92:0c:e7:15:a1:da:66:55:e8:a8: 67:55:2d:a1:bc:ce:b0:0a:4e:cf:ee:7e:a6:8e:10: 4d:c9:f2:18:4a:ea:de:5d:75:7d:29:72:05:8c:b4: 4d:61:36:82:59:68:c1:05:99:39:7c:df:8b:6a:2a: 97:95:f7:a3:36:eb:6e:13:c9:b6:7e:a8:e9:22:5c: 8c:21:bd:c0:2c:4c:ee:70:b7:d3:54:4f:a6:c2:9b: 4a:74:62:72:62:8a:2a:27:d1:60:bb:21:37:9b:e2: 64:3c:72:d2:e6:f6:78:b5:d6:04:09:b8:23:96:c6: 7e:66:42:4e:ad:51:fd:9b:95:6f:cd:db:06:f5:e5: 60:09:b5:9c:90:0a:ed:9d:b4:22:ef:be:21:2d:c5: a4:cd:ed:61:2c:54:b8:27:26:0e:cb:c0:55:f7:a2: a1:88:8a:37:cc:9b:54:c9:64:dc:c0:3b:6f:a5:0a: f7:44:f7:32:bf:b8:c1:42:96:4f:30:79:12:0f:84: 0d:0d:a7:19:3a:4e:07:50:30:9c:cd:76:35:12:f3: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.68.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:88:6f:57:26:ec:b6:c8:97:aa:40:29:34:72:f9:e3:5b:79: eb:b5:68:b0:b5:5b:fa:39:cf:41:d8:39:59:df:9b:45:47:bf: 81:59:28:4b:50:38:d8:e8:a2:30:b3:06:62:87:a9:6c:58:00: f0:0d:43:80:57:c5:2b:3c:c2:ff:0d:ce:40:aa:a4:75:a4:cc: a2:24:ad:64:e2:17:ba:ea:5d:0d:1c:f8:99:a1:7c:97:a4:f8: 1b:c6:3a:08:63:d7:2d:b0:8e:da:4c:e4:4b:30:02:dc:d1:ad: d8:7c:bf:13:6e:d4:81:ce:76:69:36:eb:f6:e3:8b:8e:fa:92: cd:ec:cf:fc:8e:b2:17:4b:70:a3:a3:21:57:a5:dd:1e:32:12: 40:e9:77:ba:e5:fe:07:36:79:43:cd:67:70:2a:d1:f1:b9:5d: 53:de:a2:8c:f9:a7:6b:e0:0a:a3:23:5f:ed:72:ed:d4:21:f3: 66:cb:dd:f3:da:e5:1a:1d:9c:89:b0:5b:37:2b:82:a7:70:fe: 16:92:c8:01:ff:cd:04:79:9c:af:27:42:3f:9d:85:e2:88:54: e5:76:e5:da:9c:f0:64:a9:68:05:fd:74:09:3e:c9:68:aa:aa: f3:68:03:5c:09:6f:22:1e:90:24:c2:04:8d:1f:31:0b:0e:31: 73:ae:12:7d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEkp3CkjbtAkecP2dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxMjEyNDUzNFoXDTI3MDYxNTEyNDUzNFowLzEtMCsGA1UEAxMk NDg4NGNjYTgtZTEzYS00ZDQ4LTgyYWYtNzgzOTg2MmI2MzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMLnUcXoYrCq3gPBY1nkG9wE33LUP/wQvrG8 47/HBVNjK01SiEqgyHoNzVXwRWb575IM5xWh2mZV6KhnVS2hvM6wCk7P7n6mjhBN yfIYSureXXV9KXIFjLRNYTaCWWjBBZk5fN+LaiqXlfejNutuE8m2fqjpIlyMIb3A LEzucLfTVE+mwptKdGJyYooqJ9FguyE3m+JkPHLS5vZ4tdYECbgjlsZ+ZkJOrVH9 m5VvzdsG9eVgCbWckArtnbQi774hLcWkze1hLFS4JyYOy8BV96KhiIo3zJtUyWTc wDtvpQr3RPcyv7jBQpZPMHkSD4QNDacZOk4HUDCczXY1EvM40QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFr0wBarodRTgunHtf7ySWc0+vS6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 ODg0Y2NhOC1lMTNhLTRkNDgtODJhZi03ODM5ODYyYjYzNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQ4ODRjY2E4LWUxM2EtNGQ0OC04 MmFmLTc4Mzk4NjJiNjM0MS80ODg0Y2NhOC1lMTNhLTRkNDgtODJhZi03ODM5ODYy YjYzNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADARIMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR4hvVybstsiXqkApNHL5 41t567VosLVb+jnPQdg5Wd+bRUe/gVkoS1A42OiiMLMGYoepbFgA8A1DgFfFKzzC /w3OQKqkdaTMoiStZOIXuupdDRz4maF8l6T4G8Y6CGPXLbCO2kzkSzAC3NGt2Hy/ E27Ugc52aTbr9uOLjvqSzezP/I6yF0two6MhV6XdHjISQOl3uuX+BzZ5Q81ncCrR 8bldU96ijPmna+AKoyNf7XLt1CHzZsvd89rlGh2cibBbNyuCp3D+FpLIAf/NBHmc rydCP52F4ohU5Xbl2pzwZKloBf10CT7JaKqq82gDXAlvIh6QJMIEjR8xCw4xc64S fQ== -----END CERTIFICATE-----Generated at Mon May 12 15:57:02 2025 by rpki-client