$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer File: c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer (raw, json) Hash identifier: st8oQ+m6ZWEHutF5YLIaCKGP7Y1eyXH6N7n8OYOVyqU= Subject key identifier: C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858493C019C84C6E8BF4C9529B060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Mar 2025 00:45:33 +0000 Certificate not after: Tue 22 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 62902 IP: 2607:2540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:01:9c:84:c6:e8:bf:4c:95:29:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 19 00:45:33 2025 GMT Not After : Jun 22 00:45:33 2027 GMT Subject: CN=c305f65e-54a0-41ec-b65c-ae91eca6cca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:20:c9:3a:ee:40:c5:fa:51:54:07:a6:32:ab: bd:d7:b3:a7:58:32:d1:1c:ab:ca:81:e0:69:cb:49: b3:d4:da:01:ee:ed:6d:64:d5:20:a7:c0:e3:f1:ab: f3:a4:a3:dd:9b:22:d8:a0:c7:e4:93:fc:6b:29:91: 2c:8b:a6:3e:6e:e8:07:64:88:42:95:db:81:27:76: 5d:7b:f4:00:93:b2:63:9c:02:1f:e2:42:15:db:97: bc:bf:4a:fe:08:9a:b6:94:06:ea:05:4f:1e:59:b4: 66:90:7a:af:e8:43:c3:4b:6c:31:5f:ed:36:4d:99: 61:33:d3:40:0a:70:86:33:c7:61:79:41:51:83:e9: 12:62:83:49:f4:0d:8a:ee:f0:e1:34:f3:96:25:12: f0:37:db:54:d3:fc:fe:b9:e9:ed:57:30:11:ca:30: 98:0d:51:e4:ad:31:68:7d:e6:14:3a:6a:9d:a9:55: 02:00:b1:3a:b1:5b:f0:f3:a1:00:dc:6c:55:a9:25: 8b:a8:a5:94:95:45:81:2b:5e:d4:57:89:06:ed:c7: 97:16:ab:96:6f:0c:e7:ad:c0:4e:32:38:fe:44:07: db:01:4d:b8:45:ec:1f:5c:c9:9d:2a:43:66:19:03: c6:e8:01:ec:47:c9:b7:7e:01:f2:fb:5e:a0:07:88: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2607:2540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62902 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c6:7a:0f:d5:4d:2e:cb:34:3f:98:3f:9c:92:5b:22:0e:23: 75:0b:db:4e:07:b7:ef:ff:de:38:c4:97:d9:14:0d:4d:0c:f3: 18:51:0e:23:c9:51:1c:2f:e9:be:c0:ee:7d:39:b4:40:f8:8f: 57:f1:0b:16:ec:b0:85:e7:56:86:3e:51:06:0c:b3:2e:30:fc: 6d:f3:75:e5:d7:93:5d:86:f3:8c:e0:66:c4:c4:e5:6e:c6:df: 8e:dd:e2:45:61:7e:d9:83:8e:6b:85:fe:a6:15:0f:ef:5d:05: 5d:c4:8a:f4:02:79:ad:64:13:88:36:7e:e8:ee:dd:0a:71:6f: 70:60:90:58:f3:49:86:95:89:6b:73:25:14:94:d2:3b:25:f0: 19:24:12:8c:b7:06:c3:57:22:0b:08:6f:e1:1a:07:81:c8:87: 3d:c6:ee:bd:69:7c:98:64:62:20:3f:b3:0e:25:23:09:ab:fd: f1:96:f6:e2:81:37:cc:b0:2a:77:55:39:50:fe:7d:2d:37:4b: bf:73:3f:d0:f1:5a:83:f6:c8:c6:d4:4a:6b:02:14:a4:d9:7f: a3:06:3c:c4:28:c5:b0:7b:4e:f7:8b:d0:d6:48:45:41:d9:63: 36:6e:45:cb:0d:06:03:51:90:f3:0e:dd:7b:a6:b0:35:56:f1: 7e:48:da:0d -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEk8AZyExui/TJUpsGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxOTAwNDUzM1oXDTI3MDYyMjAwNDUzM1owLzEtMCsGA1UEAxMk YzMwNWY2NWUtNTRhMC00MWVjLWI2NWMtYWU5MWVjYTZjY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyDJOu5AxfpRVAemMqu917OnWDLRHKvKgeBp y0mz1NoB7u1tZNUgp8Dj8avzpKPdmyLYoMfkk/xrKZEsi6Y+bugHZIhClduBJ3Zd e/QAk7JjnAIf4kIV25e8v0r+CJq2lAbqBU8eWbRmkHqv6EPDS2wxX+02TZlhM9NA CnCGM8dheUFRg+kSYoNJ9A2K7vDhNPOWJRLwN9tU0/z+uentVzARyjCYDVHkrTFo feYUOmqdqVUCALE6sVvw86EA3GxVqSWLqKWUlUWBK17UV4kG7ceXFquWbwznrcBO Mjj+RAfbAU24RewfXMmdKkNmGQPG6AHsR8m3fgHy+16gB4iJWwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFMnad8d7J0ZOtoH2pGVnPUXF1MUzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j MzA1ZjY1ZS01NGEwLTQxZWMtYjY1Yy1hZTkxZWNhNmNjYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2MzMDVmNjVlLTU0YTAtNDFlYy1i NjVjLWFlOTFlY2E2Y2NhMC9jMzA1ZjY1ZS01NGEwLTQxZWMtYjY1Yy1hZTkxZWNh NmNjYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmByVAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwD1tjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA9xnoP1U0uyzQ/mD+cklsiDiN1C9tOB7fv/944xJfZFA1N DPMYUQ4jyVEcL+m+wO59ObRA+I9X8QsW7LCF51aGPlEGDLMuMPxt83Xl15NdhvOM 4GbExOVuxt+O3eJFYX7Zg45rhf6mFQ/vXQVdxIr0AnmtZBOINn7o7t0KcW9wYJBY 80mGlYlrcyUUlNI7JfAZJBKMtwbDVyILCG/hGgeByIc9xu69aXyYZGIgP7MOJSMJ q/3xlvbigTfMsCp3VTlQ/n0tN0u/cz/Q8VqD9sjG1EprAhSk2X+jBjzEKMWwe073 i9DWSEVB2WM2bkXLDQYDUZDzDt17prA1VvF+SNoN -----END CERTIFICATE-----Generated at Wed May 7 09:01:44 2025 by rpki-client