$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d.cer File: ef44742e-e289-4929-aa2c-7657c06d160d.cer (raw, json) Hash identifier: b/OY+GDPg/AE+SQMIgaRcDGZxLOIuFu4aEuvNd10KKU= Subject key identifier: 89:77:CE:08:E3:14:EE:1A:F7:12:AF:74:96:0E:93:E7:4B:0E:86:7C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584857334B63B33E7B0A3765F2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ef44742e-e289-4929-aa2c-7657c06d160d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Dec 2024 01:45:34 +0000 Certificate not after: Thu 01 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 13655 AS: 400645 IP: 130.250.218.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:57:33:4b:63:b3:3e:7b:0a:37:65:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 27 01:45:34 2024 GMT Not After : Apr 1 00:45:34 2027 GMT Subject: CN=ef44742e-e289-4929-aa2c-7657c06d160d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:cd:b4:ed:f2:48:67:31:b6:04:7d:41:fc: db:12:f6:43:75:c7:cd:f7:d4:49:21:17:46:9d:f8: a3:b4:2f:44:f9:55:1b:07:b8:a9:61:29:c2:7f:85: 7d:5b:1b:08:a2:51:70:dc:5f:bd:21:a2:fd:13:d0: 68:91:00:20:54:0e:55:1d:95:df:e3:44:c0:73:7a: 3a:f7:02:e7:7f:23:58:72:c9:44:2f:e8:64:f4:da: 8e:e0:68:48:8f:11:9b:d8:ea:f9:0a:bb:5b:3c:7b: 8e:7b:a2:b6:51:1e:ab:94:35:8c:18:ab:06:92:77: e3:ef:27:d0:3d:e3:2d:03:a1:7f:ba:3e:95:fb:c3: 32:ba:3e:94:19:cd:a4:33:76:7a:cf:a1:5b:7c:2b: ed:8c:10:68:16:63:77:78:08:51:74:30:47:d3:de: d5:d6:b9:91:1f:03:08:43:b7:24:c0:5a:9c:ad:8a: 70:77:de:03:ee:0b:af:15:d6:1d:b9:b0:3d:3e:32: 7f:4f:22:e1:ea:5b:eb:59:6c:98:09:b2:60:53:2d: 37:da:9a:6d:de:71:39:f2:4d:52:b0:49:4a:d2:a7: a3:72:75:c5:4b:1a:02:97:8d:a0:81:44:e4:ee:96: 00:38:1d:ee:f5:19:93:4a:ad:cf:e2:5c:10:65:1d: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:77:CE:08:E3:14:EE:1A:F7:12:AF:74:96:0E:93:E7:4B:0E:86:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ef44742e-e289-4929-aa2c-7657c06d160d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 130.250.218.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13655 400645 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:56:fb:47:48:15:11:9b:22:2b:45:b8:fd:7b:91:ec:49:f4: 95:4a:54:67:0f:d3:93:3d:1d:bf:da:b7:4c:3b:17:c9:f2:1b: 87:fd:45:c9:84:83:c7:2a:80:00:f9:01:79:27:f9:96:7b:76: f3:81:cf:41:94:23:b0:19:11:2f:74:7f:1f:53:79:a1:4f:03: 8e:f4:bb:79:69:09:d9:de:92:ff:ed:de:c6:66:29:f6:bf:d4: e7:a2:8c:40:18:9d:d9:d1:d7:e1:8b:67:a9:b5:92:53:e6:f5: 3f:23:8d:e5:8b:49:7b:6a:17:02:6d:66:92:4e:7d:25:85:74: 87:e2:19:08:c1:cc:db:28:c8:f5:b4:e3:4c:20:6f:bd:65:1a: 68:ee:77:ab:67:82:36:f1:38:23:e7:71:d6:d0:cb:9d:16:1c: 7c:f0:fe:7e:45:d4:4d:1d:d3:96:71:2f:bd:85:99:d1:7f:d0: 96:f3:b9:67:85:22:6f:cd:d2:87:26:0c:20:d8:2e:47:3a:cf: 1c:8a:10:1b:5f:d5:9d:c2:cc:3a:3b:d4:ca:0f:12:f1:4d:9c: 36:35:7f:a0:64:b4:5d:63:a7:d7:60:53:58:c9:76:66:76:ce: 1a:66:06:9e:22:51:c7:31:90:32:30:1c:af:17:06:65:26:a5: 99:78:29:81 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEhXM0tjsz57Cjdl8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MTIyNzAxNDUzNFoXDTI3MDQwMTAwNDUzNFowLzEtMCsGA1UEAxMk ZWY0NDc0MmUtZTI4OS00OTI5LWFhMmMtNzY1N2MwNmQxNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8LNtO3ySGcxtgR9QfzbEvZDdcfN99RJIRdG nfijtC9E+VUbB7ipYSnCf4V9WxsIolFw3F+9IaL9E9BokQAgVA5VHZXf40TAc3o6 9wLnfyNYcslEL+hk9NqO4GhIjxGb2Or5CrtbPHuOe6K2UR6rlDWMGKsGknfj7yfQ PeMtA6F/uj6V+8Myuj6UGc2kM3Z6z6FbfCvtjBBoFmN3eAhRdDBH097V1rmRHwMI Q7ckwFqcrYpwd94D7guvFdYdubA9PjJ/TyLh6lvrWWyYCbJgUy032ppt3nE58k1S sElK0qejcnXFSxoCl42ggUTk7pYAOB3u9RmTSq3P4lwQZR2JNwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFIl3zgjjFO4a9xKvdJYOk+dLDoZ8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l ZjQ0NzQyZS1lMjg5LTQ5MjktYWEyYy03NjU3YzA2ZDE2MGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2VmNDQ3NDJlLWUyODktNDkyOS1h YTJjLTc2NTdjMDZkMTYwZC9lZjQ0NzQyZS1lMjg5LTQ5MjktYWEyYy03NjU3YzA2 ZDE2MGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGC+towHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC NVcCAwYdBTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBDVvtHSBURmyIrRbj9e5HsSfSVSlRnD9OTPR2/2rdM OxfJ8huH/UXJhIPHKoAA+QF5J/mWe3bzgc9BlCOwGREvdH8fU3mhTwOO9Lt5aQnZ 3pL/7d7GZin2v9TnooxAGJ3Z0dfhi2eptZJT5vU/I43li0l7ahcCbWaSTn0lhXSH 4hkIwczbKMj1tONMIG+9ZRpo7nerZ4I28Tgj53HW0MudFhx88P5+RdRNHdOWcS+9 hZnRf9CW87lnhSJvzdKHJgwg2C5HOs8cihAbX9Wdwsw6O9TKDxLxTZw2NX+gZLRd Y6fXYFNYyXZmds4aZgaeIlHHMZAyMByvFwZlJqWZeCmB -----END CERTIFICATE-----Generated at Sat May 10 10:45:19 2025 by rpki-client