$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40.cer File: a6460218-3a41-487d-a351-7e888c417b40.cer (raw, json) Hash identifier: 7PHonci9Xhdcr8nICZZJMAivUNiGT4ENyqzcfHu8tfY= Subject key identifier: 68:A7:6C:A5:99:9B:E2:2B:09:9A:F7:EB:74:18:77:F1:CD:07:AF:F3 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584917D47D39E9A28D5EF9419B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/a6460218-3a41-487d-a351-7e888c417b40.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Mar 2025 01:45:33 +0000 Certificate not after: Wed 09 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 400067 IP: 198.212.37.0/24 IP: 205.236.54.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:d4:7d:39:e9:a2:8d:5e:f9:41:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 6 01:45:33 2025 GMT Not After : Jun 9 00:45:33 2027 GMT Subject: CN=a6460218-3a41-487d-a351-7e888c417b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:fa:a0:b7:6d:9b:0f:45:2d:57:92:ca:a0: de:3a:1b:c8:30:1e:38:b6:78:ce:47:2b:68:83:99: 69:51:26:56:2e:e7:3b:f3:ef:7c:c2:dd:6e:57:69: fb:fe:ab:3e:15:eb:9a:26:2e:a1:6a:08:1e:2d:60: d1:9c:4d:5e:e0:02:3d:dc:f2:de:35:ca:dd:05:19: 15:64:e3:27:55:85:a5:c6:e5:0f:35:7d:0b:21:e6: 33:06:7c:ed:cf:ab:20:2c:f0:56:bb:81:5d:a0:a5: 69:28:6b:0a:03:35:7d:bd:09:05:9a:3a:e1:90:ce: e8:34:22:7a:1e:1d:66:4e:b5:04:0a:bc:06:86:ab: d2:5e:fd:a0:be:15:dd:a4:4b:ad:8a:21:27:b9:5e: 8d:89:03:0d:57:c0:8b:31:06:00:e9:ed:a2:1d:15: 9a:20:38:d5:57:93:a2:b4:f2:e1:6d:87:f4:3b:56: d4:f3:3f:ff:6b:bb:01:49:d3:dd:c6:62:40:64:a6: d2:d1:ba:2d:d2:1a:85:58:5c:d1:52:c3:15:3f:06: 44:af:4a:94:3e:cb:50:24:00:12:a2:0e:04:d2:01: b9:1d:3c:78:f4:70:e1:90:cb:37:fd:d0:f3:ed:ec: f4:0d:c4:e8:83:b0:76:fc:57:32:50:31:ab:9f:0e: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A7:6C:A5:99:9B:E2:2B:09:9A:F7:EB:74:18:77:F1:CD:07:AF:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/a6460218-3a41-487d-a351-7e888c417b40.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 198.212.37.0/24 205.236.54.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400067 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:06:cf:ff:dd:49:f0:3e:70:71:22:ed:b3:a8:41:dd:6f:f4: cc:ca:e2:ef:56:9d:c7:53:3e:84:5e:75:6d:35:57:82:c0:ce: bf:21:b3:07:fe:7a:c6:0f:08:cf:63:fc:83:19:8f:35:06:04: 6a:2e:d9:7e:64:7b:35:28:be:28:6e:5c:e7:df:37:59:d3:96: 0c:4f:e5:c7:05:6f:23:7c:8d:27:8f:c4:1b:39:47:52:ce:16: de:ff:69:fb:38:31:72:3b:f4:9b:08:5b:5b:d7:61:33:43:15: a4:f4:83:4a:9b:48:54:53:ee:b9:05:81:4a:8a:98:32:16:03: 95:6b:39:2d:2c:d4:9d:1d:9d:04:5d:75:82:8b:5e:c3:33:14: c6:bf:5d:f7:1c:1c:6a:7f:2d:02:7c:d6:13:55:ed:87:a7:91: 08:92:6e:62:d1:c9:8a:c9:67:39:2f:13:e8:88:2f:64:f8:95: d3:9b:22:fc:1f:11:7f:cc:9b:6f:d4:b6:0d:a2:7c:d3:d5:a7: 8a:db:7f:ef:a5:35:a6:af:5d:6b:c9:4a:cf:cf:ca:6c:f9:12: 1f:b4:8a:e0:b6:62:1e:02:0b:1e:fd:78:cc:4d:ff:49:de:0e: 26:70:f6:ce:78:fc:7d:a9:61:06:55:2e:b4:c6:e1:8b:77:76: 64:0c:65:cb -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEkX1H056aKNXvlBm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwNjAxNDUzM1oXDTI3MDYwOTAwNDUzM1owLzEtMCsGA1UEAxMk YTY0NjAyMTgtM2E0MS00ODdkLWEzNTEtN2U4ODhjNDE3YjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzln6oLdtmw9FLVeSyqDeOhvIMB44tnjORyto g5lpUSZWLuc78+98wt1uV2n7/qs+FeuaJi6haggeLWDRnE1e4AI93PLeNcrdBRkV ZOMnVYWlxuUPNX0LIeYzBnztz6sgLPBWu4FdoKVpKGsKAzV9vQkFmjrhkM7oNCJ6 Hh1mTrUECrwGhqvSXv2gvhXdpEutiiEnuV6NiQMNV8CLMQYA6e2iHRWaIDjVV5Oi tPLhbYf0O1bU8z//a7sBSdPdxmJAZKbS0bot0hqFWFzRUsMVPwZEr0qUPstQJAAS og4E0gG5HTx49HDhkMs3/dDz7ez0DcTog7B2/FcyUDGrnw4t9QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGinbKWZm+IrCZr363QYd/HNB6/zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h NjQ2MDIxOC0zYTQxLTQ4N2QtYTM1MS03ZTg4OGM0MTdiNDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2E2NDYwMjE4LTNhNDEtNDg3ZC1h MzUxLTdlODg4YzQxN2I0MC9hNjQ2MDIxOC0zYTQxLTQ4N2QtYTM1MS03ZTg4OGM0 MTdiNDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADG1CUDBADN7DYwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhrDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADUGz//dSfA+cHEi7bOoQd1v9MzK4u9WncdTPoRe dW01V4LAzr8hswf+esYPCM9j/IMZjzUGBGou2X5kezUovihuXOffN1nTlgxP5ccF byN8jSePxBs5R1LOFt7/afs4MXI79JsIW1vXYTNDFaT0g0qbSFRT7rkFgUqKmDIW A5VrOS0s1J0dnQRddYKLXsMzFMa/XfccHGp/LQJ81hNV7YenkQiSbmLRyYrJZzkv E+iIL2T4ldObIvwfEX/Mm2/Utg2ifNPVp4rbf++lNaavXWvJSs/Pymz5Eh+0iuC2 Yh4CCx79eMxN/0neDiZw9s54/H2pYQZVLrTG4Yt3dmQMZcs= -----END CERTIFICATE-----Generated at Sun May 11 00:40:11 2025 by rpki-client