$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c.cer File: c8735afd-0489-4381-a272-01f568cf031c.cer (raw, json) Hash identifier: UdCHuCT64nl7nYY7xCFqnQJu82GTx9LjDWDgSDRQ5Tw= Subject key identifier: 1F:5C:16:0D:B0:62:36:BA:5C:93:02:BF:E0:CB:34:FD:44:D2:97:73 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848FEB45709BE31C30CB7D3FCE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/c8735afd-0489-4381-a272-01f568cf031c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Feb 2025 01:45:34 +0000 Certificate not after: Mon 31 May 2027 00:45:34 +0000 Subordinate resources: AS: 36786 IP: 2620:0:1af0::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:b4:57:09:be:31:c3:0c:b7:d3:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 25 01:45:34 2025 GMT Not After : May 31 00:45:34 2027 GMT Subject: CN=c8735afd-0489-4381-a272-01f568cf031c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:74:f4:2b:63:f6:4e:8c:5e:15:a3:ab:00: 60:71:37:77:e0:e4:76:42:10:ee:3d:e8:39:e5:62: b5:c0:e1:d0:a6:91:be:a2:b8:40:3b:81:6f:9b:15: 1c:df:76:3f:bc:d6:b2:f3:4a:83:ea:22:ed:6c:bf: 11:4a:60:ea:f6:93:cf:df:ba:fc:28:40:00:33:76: fb:d8:bb:41:3b:02:58:df:06:11:38:fa:ca:c2:54: fb:26:42:0b:b5:88:9d:16:60:65:e7:34:39:34:ed: cc:81:2e:8e:4a:2e:4d:a9:0d:87:b6:c9:5b:be:6a: 65:a3:37:ba:a2:78:85:78:d2:7c:f2:a8:f9:4a:ca: 06:e7:da:02:91:eb:cf:78:95:c2:92:85:7b:5f:cb: 8e:6d:0c:14:2f:9d:8c:e3:67:c0:4a:a6:6a:4e:0b: 05:ea:e1:29:59:0a:5a:93:8f:8a:f2:73:dc:80:ed: b7:e7:28:fe:6b:b3:6e:c9:34:b8:33:75:f8:d4:01: 94:ed:10:2f:5d:18:f7:b1:b3:80:be:44:b3:da:8c: 9c:a0:29:00:b2:f0:3b:63:66:18:a6:30:f2:e9:5c: ed:3c:7d:58:b8:43:b4:05:14:e4:d1:26:7b:4a:1e: 72:c6:8d:1d:5c:bd:15:0f:3f:1f:01:97:d5:22:98: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5C:16:0D:B0:62:36:BA:5C:93:02:BF:E0:CB:34:FD:44:D2:97:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/c8735afd-0489-4381-a272-01f568cf031c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:1af0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36786 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2d:a3:24:a1:c5:13:89:f5:d6:ef:11:0d:30:4e:26:f2:5f: 22:60:bf:9e:cf:a1:04:6c:15:20:e9:07:29:b0:cf:e4:55:a9: 95:69:aa:08:d5:7a:40:63:27:d2:9a:2d:0b:36:09:19:62:00: 96:28:54:ca:97:07:02:a6:60:87:8c:6a:9b:85:f9:65:65:4f: 67:45:5d:bd:54:7a:fa:c7:58:57:eb:3a:e9:1a:74:73:21:9b: 0d:f6:0c:4f:2e:b6:a0:f2:85:3e:80:01:b1:4b:3b:98:6e:ec: c3:a8:8d:bd:49:12:4a:7b:23:5f:fe:6b:73:96:05:26:a6:fa: ef:32:ea:c1:b6:4b:dd:ea:61:a9:47:a4:2b:1b:31:7f:19:8a: 73:ab:ec:92:33:26:13:51:1f:39:36:19:6d:ee:2e:30:8d:5c: 5d:7d:21:0d:4a:8e:35:84:d4:be:23:85:49:0c:eb:26:ca:1c: c7:92:8d:8f:fd:3e:a2:09:8c:b6:77:a6:fb:c7:0d:cd:46:bd: ab:3a:fa:c3:69:24:d2:b6:ea:4b:4a:be:c4:b9:7e:27:fd:41: 2a:26:62:65:8c:31:5c:7b:79:4c:86:1f:e3:07:2a:ae:49:b0: 6b:82:dc:d4:21:9f:27:3d:16:e3:f3:34:77:70:6e:e9:04:65: 72:30:8b:4e -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEj+tFcJvjHDDLfT/OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIyNTAxNDUzNFoXDTI3MDUzMTAwNDUzNFowLzEtMCsGA1UEAxMk Yzg3MzVhZmQtMDQ4OS00MzgxLWEyNzItMDFmNTY4Y2YwMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCl09Ctj9k6MXhWjqwBgcTd34OR2QhDuPeg5 5WK1wOHQppG+orhAO4FvmxUc33Y/vNay80qD6iLtbL8RSmDq9pPP37r8KEAAM3b7 2LtBOwJY3wYROPrKwlT7JkILtYidFmBl5zQ5NO3MgS6OSi5NqQ2Htslbvmploze6 oniFeNJ88qj5SsoG59oCkevPeJXCkoV7X8uObQwUL52M42fASqZqTgsF6uEpWQpa k4+K8nPcgO235yj+a7NuyTS4M3X41AGU7RAvXRj3sbOAvkSz2oycoCkAsvA7Y2YY pjDy6VztPH1YuEO0BRTk0SZ7Sh5yxo0dXL0VDz8fAZfVIpgZrQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFB9cFg2wYja6XJMCv+DLNP1E0pdzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j ODczNWFmZC0wNDg5LTQzODEtYTI3Mi0wMWY1NjhjZjAzMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M4NzM1YWZkLTA0ODktNDM4MS1h MjcyLTAxZjU2OGNmMDMxYy9jODczNWFmZC0wNDg5LTQzODEtYTI3Mi0wMWY1Njhj ZjAzMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAAGvAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAI+yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAI8toyShxROJ9dbvEQ0wTibyXyJgv57PoQRsFSDpBymw z+RVqZVpqgjVekBjJ9KaLQs2CRliAJYoVMqXBwKmYIeMapuF+WVlT2dFXb1UevrH WFfrOukadHMhmw32DE8utqDyhT6AAbFLO5hu7MOojb1JEkp7I1/+a3OWBSam+u8y 6sG2S93qYalHpCsbMX8ZinOr7JIzJhNRHzk2GW3uLjCNXF19IQ1KjjWE1L4jhUkM 6ybKHMeSjY/9PqIJjLZ3pvvHDc1Gvas6+sNpJNK26ktKvsS5fif9QSomYmWMMVx7 eUyGH+MHKq5JsGuC3NQhnyc9FuPzNHdwbukEZXIwi04= -----END CERTIFICATE-----Generated at Sat May 10 13:49:06 2025 by rpki-client