$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa.cer File: 7a399323-7b1b-4575-b54c-0fca76ac3dfa.cer (raw, json) Hash identifier: Lhf6rBCxlQm3ce/NGDfHdKykSr1SLwBdUsmtyjTXFL4= Subject key identifier: CE:AB:69:B8:E4:70:3B:19:7D:E7:C2:E9:8A:3E:57:6E:3D:7C:1E:83 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858486528B7045E19067FEDB21700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/7a399323-7b1b-4575-b54c-0fca76ac3dfa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jan 2025 01:45:33 +0000 Certificate not after: Tue 06 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 199.249.224.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:28:b7:04:5e:19:06:7f:ed:b2:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 1 01:45:33 2025 GMT Not After : Apr 6 00:45:33 2027 GMT Subject: CN=7a399323-7b1b-4575-b54c-0fca76ac3dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:c9:ac:62:3e:16:48:bb:9a:e2:ec:fd:a5: 16:04:49:d3:ea:d5:22:be:5f:db:d1:56:36:d0:fd: 55:b6:82:00:4b:28:43:c6:d6:96:69:92:63:76:06: 15:0a:e7:81:17:0d:b9:38:2d:83:92:03:8c:f0:fc: 84:b9:13:5b:ce:72:65:23:26:e8:e3:ac:ba:64:46: 9b:6b:e2:6c:39:df:78:66:6d:f9:e8:49:f0:4e:f9: 94:dc:72:cf:bf:9c:4d:ed:d8:49:75:5a:ea:3b:ef: be:f4:1f:7f:8d:1c:a3:8b:b9:23:a1:38:fa:68:04: d7:44:df:98:00:3c:05:a5:29:e0:b6:75:6a:30:35: ec:d9:cc:74:51:f7:e2:a1:13:13:14:f1:ba:53:cf: 63:0f:cb:5b:f4:a4:38:3e:3a:c8:c3:c5:c5:8d:13: c7:79:ee:53:c4:7b:7c:4c:b4:b9:01:ed:62:bd:b3: 59:99:50:6d:71:19:18:2a:63:d8:f6:9e:76:30:1a: 3c:00:30:43:8c:79:ff:60:86:98:ac:9b:9f:83:08: 9c:8b:04:e5:a6:9f:40:b9:d8:5f:f6:b2:bb:f0:f6: 14:82:3d:76:8f:e0:9d:c9:f2:e9:90:b9:1d:6b:bb: 5b:c4:f5:53:d3:93:c5:a4:cd:c4:86:ab:a2:60:3a: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AB:69:B8:E4:70:3B:19:7D:E7:C2:E9:8A:3E:57:6E:3D:7C:1E:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/7a399323-7b1b-4575-b54c-0fca76ac3dfa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 199.249.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a9:d2:cb:34:16:5d:2b:e7:97:1a:24:2f:bf:9d:f2:5b:4a: a2:72:c1:a7:2a:8e:30:a6:d2:5a:b2:85:9f:5d:59:7f:eb:7e: 8b:a1:6f:7e:72:5d:c5:19:fd:44:97:cb:04:60:8f:a3:34:88: 3f:b0:4e:76:bc:b5:49:0d:00:bf:72:63:7a:81:3b:f1:ba:0f: 0d:6f:0b:e0:e3:b6:26:8a:ea:5a:41:f4:04:fd:a8:99:4a:68: 05:53:7a:82:7e:04:96:7e:83:9f:e6:8b:64:05:21:95:1b:52: 77:77:bd:80:6b:ec:7d:57:fb:f9:a6:f7:8d:d4:15:ef:52:07: 22:0c:85:72:b9:90:80:26:24:0d:2e:28:7d:03:bb:f9:c9:bf: 36:4a:31:ba:42:27:2a:04:ef:06:58:57:55:aa:e3:44:28:b1: 5f:f6:2e:83:5b:4e:fb:57:44:ea:02:70:65:90:e6:6b:9e:18: 79:50:d0:c0:3b:f7:d6:0e:fb:e8:30:c2:e4:d8:ef:bf:e0:dc: 0e:68:9c:dd:d8:af:e2:2d:b7:eb:2b:0c:bf:b6:24:2b:e3:14: 0c:87:16:72:73:ff:15:40:6c:61:60:58:26:7a:7c:68:4a:d1: 4e:d7:0a:f4:a6:49:1b:93:09:55:5e:e2:0a:20:54:3a:e2:82: dd:c0:ad:89 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEhlKLcEXhkGf+2yFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDEwMTAxNDUzM1oXDTI3MDQwNjAwNDUzM1owLzEtMCsGA1UEAxMk N2EzOTkzMjMtN2IxYi00NTc1LWI1NGMtMGZjYTc2YWMzZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWnJrGI+Fki7muLs/aUWBEnT6tUivl/b0VY2 0P1VtoIASyhDxtaWaZJjdgYVCueBFw25OC2DkgOM8PyEuRNbznJlIybo46y6ZEab a+JsOd94Zm356EnwTvmU3HLPv5xN7dhJdVrqO+++9B9/jRyji7kjoTj6aATXRN+Y ADwFpSngtnVqMDXs2cx0UffioRMTFPG6U89jD8tb9KQ4PjrIw8XFjRPHee5TxHt8 TLS5Ae1ivbNZmVBtcRkYKmPY9p52MBo8ADBDjHn/YIaYrJufgwiciwTlpp9Audhf 9rK78PYUgj12j+CdyfLpkLkda7tbxPVT05PFpM3EhquiYDpl4wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFM6rabjkcDsZfefC6Yo+V249fB6DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 YTM5OTMyMy03YjFiLTQ1NzUtYjU0Yy0wZmNhNzZhYzNkZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzdhMzk5MzIzLTdiMWItNDU3NS1i NTRjLTBmY2E3NmFjM2RmYS83YTM5OTMyMy03YjFiLTQ1NzUtYjU0Yy0wZmNhNzZh YzNkZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADH+eAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk6nSyzQWXSvnlxokL7+d 8ltKonLBpyqOMKbSWrKFn11Zf+t+i6FvfnJdxRn9RJfLBGCPozSIP7BOdry1SQ0A v3JjeoE78boPDW8L4OO2JorqWkH0BP2omUpoBVN6gn4Eln6Dn+aLZAUhlRtSd3e9 gGvsfVf7+ab3jdQV71IHIgyFcrmQgCYkDS4ofQO7+cm/NkoxukInKgTvBlhXVarj RCixX/Yug1tO+1dE6gJwZZDma54YeVDQwDv31g776DDC5Njvv+DcDmic3div4i23 6ysMv7YkK+MUDIcWcnP/FUBsYWBYJnp8aErRTtcK9KZJG5MJVV7iCiBUOuKC3cCt iQ== -----END CERTIFICATE-----Generated at Sun Apr 27 00:23:45 2025 by rpki-client