$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer File: 4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer (raw, json) Hash identifier: ry3fUnKXWd4kblx1Y8TQxc00zfvjMCKuIXAqNL8qies= Subject key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858492779A4431F2DBE4EE12326C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Mar 2025 16:15:27 +0000 Certificate not after: Sun 27 Dec 2026 06:47:02 +0000 Subordinate resources: IP: 204.57.240.0/21 IP: 2607:d540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:27:79:a4:43:1f:2d:be:4e:e1:23:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 11 16:15:27 2025 GMT Not After : Dec 27 06:47:02 2026 GMT Subject: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:48:85:48:52:17:e2:5f:4c:d7:f3:1b:a1:cd: b0:f0:6c:38:23:72:32:a1:7c:f4:7c:27:fe:aa:41: 62:26:56:9f:20:6a:04:85:c1:e2:1a:35:2f:67:72: e6:cb:fb:a3:38:8e:30:8a:65:59:15:8d:7b:16:1f: fb:47:69:ba:86:cf:18:bb:17:8a:44:c2:50:e2:3a: bd:46:d4:db:ba:36:4e:22:ce:a6:e6:98:a3:03:20: e5:7d:6a:17:15:3b:7a:68:b6:39:1f:e6:0e:55:5c: 69:3e:e6:76:5b:4d:af:0f:77:18:12:5d:e8:48:46: 99:b0:05:8c:1f:19:d8:81:06:7e:c4:32:fa:a7:23: 30:2b:97:78:51:2c:7c:dc:88:15:0e:70:5f:24:5f: aa:87:ce:9b:6e:56:22:d6:6c:a0:99:8f:36:82:7b: 8c:fe:71:70:d9:b4:69:89:ce:2b:ee:08:93:ca:c3: a2:7a:d2:5e:c1:c1:2f:e8:2c:61:c1:ff:0c:f0:74: 05:fe:06:06:95:a5:cb:16:72:77:9f:20:76:c1:f9: ad:ef:09:75:e8:bd:bf:4e:48:c9:d4:2f:6a:8b:13: f1:21:6a:cf:91:10:d8:cf:1e:8d:4a:f9:5f:db:86: 6d:aa:2d:e1:04:63:cf:74:03:cb:65:7f:37:16:b4: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 204.57.240.0/21 IPv6: 2607:d540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ed:20:22:7e:f3:d4:91:5e:c0:0e:88:11:3c:26:1b:8c:31: 4f:0d:9b:fd:12:63:ba:4e:5d:c7:21:99:f5:bf:e0:38:63:ed: e2:a5:49:42:6c:c1:bf:0c:1c:1d:49:da:50:96:eb:66:ab:f9: 6a:07:f9:a4:69:7d:cc:60:f4:e7:d2:94:3b:b5:58:fb:53:39: 20:8c:ed:3d:d5:0a:85:16:ac:3e:1a:bb:a9:ae:44:09:73:10: 64:7d:ca:15:95:fe:11:20:87:8a:41:e4:db:24:16:66:62:e7: 16:81:f2:73:60:8c:26:5f:a6:2c:2d:3d:25:ae:6f:00:1c:d5: 2f:3f:a8:23:a1:17:2c:c0:9d:e2:1c:6f:0f:a8:7e:13:93:98: 1f:d4:26:05:61:5e:d5:29:bb:36:21:b6:ed:a7:a1:ec:c2:4e: 3b:fd:b9:c4:8b:4a:21:54:8c:59:b0:ed:f1:f7:e3:e6:e9:63: 0b:92:9e:2a:59:f5:8b:b7:74:af:aa:3c:6c:68:bd:5a:97:63: 6f:30:96:11:c0:ef:1a:87:66:83:89:63:9a:63:d2:89:8f:ea: be:5f:40:25:0d:a7:aa:33:d5:31:35:9e:70:39:a4:03:a2:2a: 76:e8:40:96:a6:fa:6b:fe:e5:85:f1:4a:22:7d:af:1a:0d:4c: ba:e5:36:16 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEkneaRDHy2+TuEjJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDMxMTE2MTUyN1oXDTI2MTIyNzA2NDcwMlowLzEtMCsGA1UEAxMk NGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2UzMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kiFSFIX4l9M1/Mboc2w8Gw4I3IyoXz0fCf+ qkFiJlafIGoEhcHiGjUvZ3Lmy/ujOI4wimVZFY17Fh/7R2m6hs8YuxeKRMJQ4jq9 RtTbujZOIs6m5pijAyDlfWoXFTt6aLY5H+YOVVxpPuZ2W02vD3cYEl3oSEaZsAWM HxnYgQZ+xDL6pyMwK5d4USx83IgVDnBfJF+qh86bblYi1mygmY82gnuM/nFw2bRp ic4r7giTysOietJewcEv6Cxhwf8M8HQF/gYGlaXLFnJ3nyB2wfmt7wl16L2/TkjJ 1C9qixPxIWrPkRDYzx6NSvlf24Ztqi3hBGPPdAPLZX83FrSX9wIDAQABo4IEDjCC BAowHQYDVR0OBBYEFEUktD6OEzDt1ZYNOaDFDT2WwFb6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzRkODBkYWE1LTc5ZGMtNGMyYS04 ODc5LTI0OGEzZjNlMzM5Yy80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2Yz ZTMzOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPMOfAwDQQCAAIwBwMFACYH1UAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA YO0gIn7z1JFewA6IETwmG4wxTw2b/RJjuk5dxyGZ9b/gOGPt4qVJQmzBvwwcHUna UJbrZqv5agf5pGl9zGD059KUO7VY+1M5IIztPdUKhRasPhq7qa5ECXMQZH3KFZX+ ESCHikHk2yQWZmLnFoHyc2CMJl+mLC09Ja5vABzVLz+oI6EXLMCd4hxvD6h+E5OY H9QmBWFe1Sm7NiG27aeh7MJOO/25xItKIVSMWbDt8ffj5uljC5KeKln1i7d0r6o8 bGi9WpdjbzCWEcDvGodmg4ljmmPSiY/qvl9AJQ2nqjPVMTWecDmkA6IqduhAlqb6 a/7lhfFKIn2vGg1MuuU2Fg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:59:14 2025 by rpki-client