$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer File: 5e2da88f-6029-42b9-b598-2623343a3150.cer (raw, json) Hash identifier: cckhU4t6xIgxfp9hNgjgt+7lSdvKXkooH5591LDWY+E= Subject key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584981CCB5FB9F45C62AB10E6F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 13 Apr 2025 00:45:34 +0000 Certificate not after: Sat 17 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 68 AS: 79 AS: 550 AS: 1829 AS: 1839 IP: 128.165.0.0/16 IP: 130.55.0.0/16 IP: 138.98.0.0/16 IP: 141.111.0.0/16 IP: 192.12.184.0/24 IP: 192.12.208.0/24 IP: 192.43.188.0/24 IP: 192.52.70.0/24 IP: 192.65.95.0/24 IP: 204.121.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:cc:b5:fb:9f:45:c6:2a:b1:0e:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 13 00:45:34 2025 GMT Not After : Jul 17 00:45:34 2027 GMT Subject: CN=5e2da88f-6029-42b9-b598-2623343a3150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:ed:84:c3:2c:52:7e:e7:9a:5f:2a:d3:58: b9:52:29:da:4f:00:a0:0f:24:10:fb:f9:e2:1c:d5: e5:45:2f:8e:29:f3:43:e8:67:a6:67:b5:0c:6d:6a: 45:66:64:8d:15:f0:6b:51:61:a4:fe:4b:ec:12:61: 68:93:73:5d:09:2a:40:2c:89:fa:19:e2:de:aa:8f: 1f:b8:10:83:06:5a:f4:ec:0f:c6:33:e5:04:0f:a8: cd:d9:ca:9c:68:8a:1d:86:d9:07:09:3e:37:d5:41: a9:21:14:b9:6b:62:81:f4:ab:24:5e:d8:d9:2e:59: 72:41:43:f7:b4:fa:83:c7:3e:8f:45:02:ff:e5:87: 08:ef:7c:ec:b9:a8:83:d5:8c:e0:e3:31:d6:58:06: 80:a3:30:a6:6f:e3:79:5d:35:9b:33:e0:dd:1e:e0: d1:8a:7f:e4:08:81:0e:5b:73:19:85:b0:3d:37:43: c6:7d:3d:a0:a7:c9:73:f4:a6:3a:9a:15:e7:27:99: 6f:8c:d3:4a:5a:42:97:ac:d5:a0:ad:4e:1b:c1:e8: 6b:be:3f:83:1f:32:03:2c:69:88:12:04:fb:c3:78: b1:08:bc:79:c3:f4:a7:6d:f8:7e:99:7b:73:75:bd: 7a:de:4c:b3:26:aa:a1:8e:78:a4:fc:e5:d0:97:97: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.43.188.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 68 79 550 1829 1839 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:04:07:34:2b:3f:69:01:fc:b7:69:d4:bb:59:8e:9b:35:ff: 92:17:91:51:8e:f8:31:04:fc:11:a3:4a:a4:7a:00:7c:ae:0f: fc:ef:20:64:b9:0a:30:c6:fe:1a:51:3e:71:f2:45:db:1e:45: 50:6b:15:b0:79:4f:f0:1c:39:04:59:d3:3a:46:fe:f5:89:13: be:4c:dc:d0:82:09:87:b6:3f:1d:69:63:a0:6e:21:c0:9b:d7: de:86:c0:51:be:69:72:4c:3f:80:31:9b:4d:63:4b:ea:43:3b: fb:09:6b:93:ef:f4:fe:44:78:2d:dd:6b:69:0c:a8:c8:2a:9a: aa:52:44:e1:7d:41:fa:8e:1d:de:8f:6e:3d:c8:7f:30:88:3b: c9:05:34:0a:3d:43:d4:be:4f:47:ae:bf:04:2a:70:fa:f9:41: 85:e4:55:b1:01:fe:d0:14:5f:5b:9c:a5:b6:33:a0:15:b2:f7: c9:07:e0:26:3a:f9:bc:8f:38:42:7f:89:63:4e:53:83:fd:ba: 37:58:1c:35:11:64:6b:8d:64:a1:03:d2:46:49:9b:c6:a5:08: 29:5c:a0:78:a5:d6:22:55:7b:8d:69:d1:6d:62:c2:31:6a:22: bc:ae:60:7a:96:13:e8:e6:24:d4:b8:ba:03:fa:77:77:71:c4: 63:7d:e0:65 -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEmBzLX7n0XGKrEObwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQxMzAwNDUzNFoXDTI3MDcxNzAwNDUzNFowLzEtMCsGA1UEAxMk NWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2EzMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16PthMMsUn7nml8q01i5UinaTwCgDyQQ+/ni HNXlRS+OKfND6GemZ7UMbWpFZmSNFfBrUWGk/kvsEmFok3NdCSpALIn6GeLeqo8f uBCDBlr07A/GM+UED6jN2cqcaIodhtkHCT431UGpIRS5a2KB9KskXtjZLllyQUP3 tPqDxz6PRQL/5YcI73zsuaiD1Yzg4zHWWAaAozCmb+N5XTWbM+DdHuDRin/kCIEO W3MZhbA9N0PGfT2gp8lz9KY6mhXnJ5lvjNNKWkKXrNWgrU4bwehrvj+DHzIDLGmI EgT7w3ixCLx5w/Snbfh+mXtzdb163kyzJqqhjnik/OXQl5dAzwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFHyyKIT90FsUjv2HNP2mE/rMOSawMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzVlMmRhODhmLTYwMjktNDJiOS1i NTk4LTI2MjMzNDNhMzE1MC81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQz YTMxNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MD0EAgABMDcDAwCApQMDAII3AwMAimIDAwCNbwMEAMAMuAMEAMAM 0AMEAMArvAMEAMA0RgMEAMBBXwMDAMx5MCcGCCsGAQUFBwEIAQH/BBgwFqAUMBIC AUQCAU8CAgImAgIHJQICBy8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASwQHNCs/aQH8t2nUu1mOmzX/kheR UY74MQT8EaNKpHoAfK4P/O8gZLkKMMb+GlE+cfJF2x5FUGsVsHlP8Bw5BFnTOkb+ 9YkTvkzc0IIJh7Y/HWljoG4hwJvX3obAUb5pckw/gDGbTWNL6kM7+wlrk+/0/kR4 Ld1raQyoyCqaqlJE4X1B+o4d3o9uPch/MIg7yQU0Cj1D1L5PR66/BCpw+vlBheRV sQH+0BRfW5yltjOgFbL3yQfgJjr5vI84Qn+JY05Tg/26N1gcNRFka41koQPSRkmb xqUIKVygeKXWIlV7jWnRbWLCMWoivK5gepYT6OYk1Li6A/p3d3HEY33gZQ== -----END CERTIFICATE-----Generated at Sun May 11 01:26:27 2025 by rpki-client