$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer File: 31009a8b-537b-4076-8ee6-38c45e51e37a.cer (raw, json) Hash identifier: uy9IZC1Qil89uOM74s3KemxSwDPu5yzofcIWqpdxBIM= Subject key identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858499DB7948F7D29A01713192980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 00:45:37 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: IP: 63.133.215.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:b7:94:8f:7d:29:a0:17:13:19:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 23 00:45:37 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=31009a8b-537b-4076-8ee6-38c45e51e37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:19:57:c0:26:fb:fb:6d:8a:1a:c5:1d:e2:51: 50:ea:5d:94:21:eb:c7:72:32:c5:6d:b7:c4:fb:c6: 40:b1:cb:01:62:b5:22:fa:24:cb:3c:6e:b8:cf:da: cf:89:df:dd:47:b5:f2:69:39:22:bf:b7:9a:3b:2b: 8e:1f:13:be:4d:0d:de:23:8d:fe:26:43:f0:e0:cc: e2:22:a0:de:f0:d7:84:22:3d:96:b4:b4:97:0a:bd: 7c:fb:bf:71:73:86:c1:1c:a4:27:4e:c5:03:b8:fa: f2:0e:4c:5b:1e:83:a4:bb:64:7d:84:c3:c7:8c:74: 65:07:7d:67:2f:eb:a7:ed:1c:09:d2:ed:6b:82:27: b7:23:e4:8d:51:47:f9:4a:cd:b9:23:3c:a0:49:a7: f8:c8:ab:64:1c:e8:2f:23:5c:f9:4c:6f:49:f7:9f: 6c:95:6a:22:6f:9c:6a:9c:94:0a:8b:c5:6b:1b:4f: 5c:26:4d:86:07:4d:62:dd:e7:5a:02:0c:17:e1:8d: 8b:3d:53:36:37:9e:da:63:01:86:71:c2:27:9d:de: dd:0e:9a:c2:64:29:68:a3:6b:64:42:6e:83:70:6d: 0e:cc:b4:e7:cf:2e:b2:ba:a2:7b:5b:89:b7:b9:13: 34:50:19:f1:18:f3:85:36:94:b9:dd:ed:cc:2c:10: 7a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 63.133.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4f:a9:27:90:31:5e:db:71:e8:18:1a:45:87:64:86:7f:63: eb:a5:f9:20:c2:9d:69:1b:86:85:85:31:58:a6:77:3b:a0:c5: eb:08:d5:10:43:9d:70:b1:d9:cb:68:e8:9e:c3:a4:3c:02:8b: 94:52:02:9c:8e:f1:fe:b7:4d:ec:84:08:6c:22:2d:9b:ed:e9: b3:38:99:50:87:2f:10:a7:fa:f9:9c:db:2c:4d:5c:df:be:00: 2b:99:28:19:b4:92:40:19:e5:f3:46:37:39:15:df:51:b0:f7: 3c:3c:a1:28:ca:25:38:fb:a7:2c:82:7c:5e:c9:7b:6a:32:d1: dd:86:b1:d9:e9:fd:80:39:39:ef:9e:04:31:f4:5f:a5:53:90: 17:af:f3:ba:c2:90:56:e2:34:86:f2:c1:a6:a7:36:d6:fb:ce: 8a:f1:75:a8:92:24:f9:4e:ef:ad:de:3c:00:86:c6:f8:18:af: 53:9e:b8:64:a2:bb:06:4c:e2:05:81:6f:7a:ee:55:68:69:7d: fd:1d:62:93:fa:bf:f2:44:67:94:e0:5a:dd:f0:d9:13:c5:5b: 1d:a9:e0:1c:34:96:3c:c0:56:39:ce:35:ea:1c:53:be:7d:64: bb:c0:32:38:9a:91:0b:7e:fb:1a:5c:1f:63:43:c3:ed:1c:ba: 8f:83:08:f4 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmdt5SPfSmgFxMZKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyMzAwNDUzN1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk MzEwMDlhOGItNTM3Yi00MDc2LThlZTYtMzhjNDVlNTFlMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxlXwCb7+22KGsUd4lFQ6l2UIevHcjLFbbfE +8ZAscsBYrUi+iTLPG64z9rPid/dR7XyaTkiv7eaOyuOHxO+TQ3eI43+JkPw4Mzi IqDe8NeEIj2WtLSXCr18+79xc4bBHKQnTsUDuPryDkxbHoOku2R9hMPHjHRlB31n L+un7RwJ0u1rgie3I+SNUUf5Ss25IzygSaf4yKtkHOgvI1z5TG9J959slWoib5xq nJQKi8VrG09cJk2GB01i3edaAgwX4Y2LPVM2N57aYwGGccInnd7dDprCZCloo2tk Qm6DcG0OzLTnzy6yuqJ7W4m3uRM0UBnxGPOFNpS53e3MLBB65QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMi/WKPo4Pcntvgf68owH6C3RJExMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z MTAwOWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0NWU1MWUzN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzMxMDA5YThiLTUzN2ItNDA3Ni04 ZWU2LTM4YzQ1ZTUxZTM3YS8zMTAwOWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0NWU1 MWUzN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAA/hdcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAC0+pJ5AxXttx6BgaRYdk hn9j66X5IMKdaRuGhYUxWKZ3O6DF6wjVEEOdcLHZy2jonsOkPAKLlFICnI7x/rdN 7IQIbCItm+3psziZUIcvEKf6+ZzbLE1c374AK5koGbSSQBnl80Y3ORXfUbD3PDyh KMolOPunLIJ8Xsl7ajLR3Yax2en9gDk5754EMfRfpVOQF6/zusKQVuI0hvLBpqc2 1vvOivF1qJIk+U7vrd48AIbG+BivU564ZKK7BkziBYFveu5VaGl9/R1ik/q/8kRn lOBa3fDZE8VbHangHDSWPMBWOc416hxTvn1ku8AyOJqRC377GlwfY0PD7Ry6j4MI 9A== -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:29 2025 by rpki-client