$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer File: b1b35dc3-b096-40ba-8edf-87e481b625c4.cer (raw, json) Hash identifier: r96XdxB/D4cP1ROAgdKU1I7q8EUiZGdP09SlYCWv+KA= Subject key identifier: 2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584925AC200A7F58FD083D6EA4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Mar 2025 00:45:32 +0000 Certificate not after: Mon 14 Jun 2027 00:45:32 +0000 Subordinate resources: AS: 393559 IP: 2602:f8c8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:ac:20:0a:7f:58:fd:08:3d:6e:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 11 00:45:32 2025 GMT Not After : Jun 14 00:45:32 2027 GMT Subject: CN=b1b35dc3-b096-40ba-8edf-87e481b625c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:6a:25:44:27:97:02:ea:4c:cc:b7:ef:aa: 4c:97:f7:38:a1:6e:10:81:50:3c:1f:f3:63:8e:00: e1:58:3f:cb:8a:f9:f2:f6:98:45:84:97:e1:76:bb: 77:21:41:cc:17:b0:fc:a4:08:9d:53:70:b7:35:d8: 7f:2b:84:59:57:1b:b2:78:73:0b:10:cb:9f:c5:b0: 24:28:c2:42:a7:d9:cb:82:74:4a:6a:fc:93:ec:75: c2:2f:d0:46:99:5f:5c:39:f1:61:6e:f5:d5:9c:34: a6:a9:90:3d:ca:6c:d3:6c:84:bc:7a:33:ac:62:c6: 13:c4:43:ef:cc:4f:1e:e4:8c:bc:9d:ba:ca:33:4b: 96:19:dc:a7:d4:44:e5:2d:8d:22:02:3e:af:94:ca: 41:53:89:e6:80:0b:eb:1c:76:44:ea:8d:00:c4:42: 81:e2:f3:73:97:20:d4:5b:8d:db:97:cd:5e:47:c7: 64:83:dd:17:90:4f:bb:04:e3:8c:05:90:8e:62:15: 06:bd:f2:d5:7e:be:53:f2:5d:53:22:a9:2a:5e:dc: e6:5f:11:2c:c6:08:02:b9:14:66:ca:fd:f7:f3:f0: c0:b6:2b:c1:7a:01:c9:02:b4:7e:49:f9:a8:e3:70: 79:cb:86:8d:9d:ab:6c:31:51:ae:11:6f:c9:0a:2c: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8c8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393559 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1b:0c:83:53:4c:92:01:44:91:9f:c2:7e:80:79:b3:d0:d8: 50:a2:e3:5b:a5:cc:b4:97:b7:c4:fd:07:7c:22:dd:a9:91:53: 22:2f:e8:8d:ed:41:1e:46:99:3c:4d:79:9b:86:93:8b:d2:98: 94:fd:0c:dd:07:7b:0c:f5:b5:d7:a0:eb:1a:ce:26:32:aa:28: 78:a5:2b:27:5b:74:01:ed:12:ab:1b:70:84:12:58:92:63:0a: 89:59:c0:7e:03:a7:48:1f:1a:5d:7c:61:ba:e8:68:c9:4a:78: 40:10:e0:90:c8:d1:42:9f:33:5f:78:a8:9b:e9:32:08:b1:9e: 30:fc:50:0e:5f:37:29:e3:b6:c9:b3:06:81:b0:84:c4:4c:ab: df:29:80:6c:20:ea:96:9c:38:c7:69:d5:bb:32:73:d4:bb:f2: b9:dd:05:0f:1d:d7:46:1b:c6:4b:c2:2f:92:d8:18:70:f8:3d: 09:70:bc:93:57:b1:a6:0c:1e:9a:96:04:a7:df:b4:77:e3:ee: 59:ca:29:9b:ed:e9:e3:81:0f:41:97:96:3f:03:bd:d2:46:03: 88:98:c6:a2:99:6a:e9:14:a3:25:f6:66:11:60:0e:24:2a:c1: b6:3d:ba:1d:39:64:07:a3:4b:32:73:c1:63:e9:b3:81:b0:d3: fd:2a:30:dc -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEklrCAKf1j9CD1upMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxMTAwNDUzMloXDTI3MDYxNDAwNDUzMlowLzEtMCsGA1UEAxMk YjFiMzVkYzMtYjA5Ni00MGJhLThlZGYtODdlNDgxYjYyNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsFqJUQnlwLqTMy376pMl/c4oW4QgVA8H/Nj jgDhWD/Livny9phFhJfhdrt3IUHMF7D8pAidU3C3Ndh/K4RZVxuyeHMLEMufxbAk KMJCp9nLgnRKavyT7HXCL9BGmV9cOfFhbvXVnDSmqZA9ymzTbIS8ejOsYsYTxEPv zE8e5Iy8nbrKM0uWGdyn1ETlLY0iAj6vlMpBU4nmgAvrHHZE6o0AxEKB4vNzlyDU W43bl81eR8dkg90XkE+7BOOMBZCOYhUGvfLVfr5T8l1TIqkqXtzmXxEsxggCuRRm yv338/DAtivBegHJArR+Sfmo43B5y4aNnatsMVGuEW/JCiybxwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFC50zWsLu0l77+Iy5LvaophU68brMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i MWIzNWRjMy1iMDk2LTQwYmEtOGVkZi04N2U0ODFiNjI1YzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2IxYjM1ZGMzLWIwOTYtNDBiYS04 ZWRmLTg3ZTQ4MWI2MjVjNC9iMWIzNWRjMy1iMDk2LTQwYmEtOGVkZi04N2U0ODFi NjI1YzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvjIADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGAVcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAChsMg1NMkgFEkZ/CfoB5s9DYUKLjW6XMtJe3xP0HfCLd qZFTIi/oje1BHkaZPE15m4aTi9KYlP0M3Qd7DPW116DrGs4mMqooeKUrJ1t0Ae0S qxtwhBJYkmMKiVnAfgOnSB8aXXxhuuhoyUp4QBDgkMjRQp8zX3iom+kyCLGeMPxQ Dl83KeO2ybMGgbCExEyr3ymAbCDqlpw4x2nVuzJz1Lvyud0FDx3XRhvGS8IvktgY cPg9CXC8k1expgwempYEp9+0d+PuWcopm+3p44EPQZeWPwO90kYDiJjGoplq6RSj JfZmEWAOJCrBtj26HTlkB6NLMnPBY+mzgbDT/Sow3A== -----END CERTIFICATE-----Generated at Fri May 9 02:36:29 2025 by rpki-client