$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer File: 66580030-eaac-4617-b624-3b0a2974a04d.cer (raw, json) Hash identifier: TWyfWXb5YjPxYG5H5HveqYnL8rxvAJUFkoEcNPpRTa4= Subject key identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858499557809F775EDDA9E107C900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Apr 2025 00:45:34 +0000 Certificate not after: Sat 24 Jul 2027 00:45:34 +0000 Subordinate resources: IP: 199.30.216.0/22 IP: 2607:4440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:57:80:9f:77:5e:dd:a9:e1:07:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 20 00:45:34 2025 GMT Not After : Jul 24 00:45:34 2027 GMT Subject: CN=66580030-eaac-4617-b624-3b0a2974a04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a6:8b:37:49:59:97:f6:39:21:69:46:ac:30: 14:f2:3d:43:41:96:2f:ff:77:dd:d3:8f:14:59:d7: 76:8f:82:6d:43:4e:67:1a:ca:46:20:66:61:9f:c7: 93:70:db:ef:2c:03:7c:9e:de:a2:9c:f2:c4:cf:f4: 26:f6:56:c3:a2:4a:ac:3e:76:0e:cc:21:dd:69:d7: 99:7f:7f:3a:fb:d8:07:3d:42:10:48:40:e0:83:9d: f0:9f:fb:a9:fb:ba:38:62:21:64:af:dd:9f:e5:2e: 03:a8:e8:f6:46:f1:db:92:55:cf:cf:86:bf:fe:95: e1:4a:13:8b:9c:03:08:25:52:7f:ad:ac:ea:c7:ab: 96:b9:f8:75:1f:bb:18:26:ac:fa:33:0b:ba:5a:9a: 26:f0:2b:29:8c:57:39:75:18:81:e9:7e:9b:9c:bd: 53:71:41:a6:ae:f4:75:7b:8b:0a:92:8c:ca:e2:9b: 83:b8:cf:39:57:8b:b3:65:0d:1e:7c:f7:da:30:b4: 95:9d:8b:d0:e1:ce:8e:95:8d:0b:1b:7e:53:e2:27: e8:0e:3b:8f:dc:58:70:b5:4d:16:1a:2f:66:9f:a7: 1d:f2:55:49:6f:97:9f:ff:cc:9f:05:b1:5b:2f:c8: 7e:46:73:e7:d3:9f:2d:98:77:85:a0:72:a8:04:08: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.30.216.0/22 IPv6: 2607:4440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f8:3f:84:19:45:70:a7:23:70:91:b7:b5:09:11:ee:05:fe: f5:cd:a8:10:b0:3f:d6:16:c7:99:87:d4:b1:f2:05:49:db:0b: d0:98:87:71:ff:be:3d:30:34:79:ab:00:fa:fb:23:54:02:36: 77:46:5b:e2:f7:67:4e:45:6a:ae:c3:2e:26:1a:8f:d0:18:4c: 11:fa:fc:0c:64:d9:a5:8c:1a:74:ac:84:50:3a:42:b8:ca:fb: a7:02:d6:dc:82:a1:90:5d:b0:a8:fe:8f:0e:bd:a2:6e:8d:cd: 84:d9:53:62:6d:20:f6:c6:58:b3:02:64:2d:42:ec:df:27:db: 2d:d6:89:29:50:f9:f2:06:83:9a:15:93:fd:f7:df:db:83:86: b0:12:3b:83:24:06:07:90:56:0b:c3:7a:3e:42:59:dd:3e:fd: 00:07:6f:a2:28:fb:5a:bb:53:ab:c9:1e:dd:b8:02:7a:71:dd: ef:2e:11:65:6a:99:b0:5c:55:64:81:5f:af:06:3d:b3:f1:d5: 02:1c:aa:5c:59:cf:e0:e9:95:e2:cb:18:3b:fd:5c:22:1e:de: ba:4b:8c:a8:63:38:1d:76:0d:9d:d4:bc:4c:7e:f0:a7:5c:a4: 4c:f5:65:eb:47:d2:d5:f7:60:5b:ea:58:b8:30:75:09:d7:de: 91:f8:48:9f -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEmVV4Cfd17dqeEHyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDQyMDAwNDUzNFoXDTI3MDcyNDAwNDUzNFowLzEtMCsGA1UEAxMk NjY1ODAwMzAtZWFhYy00NjE3LWI2MjQtM2IwYTI5NzRhMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqaLN0lZl/Y5IWlGrDAU8j1DQZYv/3fd048U Wdd2j4JtQ05nGspGIGZhn8eTcNvvLAN8nt6inPLEz/Qm9lbDokqsPnYOzCHdadeZ f386+9gHPUIQSEDgg53wn/up+7o4YiFkr92f5S4DqOj2RvHbklXPz4a//pXhShOL nAMIJVJ/razqx6uWufh1H7sYJqz6Mwu6Wpom8CspjFc5dRiB6X6bnL1TcUGmrvR1 e4sKkozK4puDuM85V4uzZQ0efPfaMLSVnYvQ4c6OlY0LG35T4ifoDjuP3FhwtU0W Gi9mn6cd8lVJb5ef/8yfBbFbL8h+RnPn058tmHeFoHKoBAiz1QIDAQABo4IEDjCC BAowHQYDVR0OBBYEFHy0nn1k2pwFv8hy9BV4tX4LMylJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 NjU4MDAzMC1lYWFjLTQ2MTctYjYyNC0zYjBhMjk3NGEwNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzY2NTgwMDMwLWVhYWMtNDYxNy1i NjI0LTNiMGEyOTc0YTA0ZC82NjU4MDAzMC1lYWFjLTQ2MTctYjYyNC0zYjBhMjk3 NGEwNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALHHtgwDQQCAAIwBwMFACYHREAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Nvg/hBlFcKcjcJG3tQkR7gX+9c2oELA/1hbHmYfUsfIFSdsL0JiHcf++PTA0easA +vsjVAI2d0Zb4vdnTkVqrsMuJhqP0BhMEfr8DGTZpYwadKyEUDpCuMr7pwLW3IKh kF2wqP6PDr2ibo3NhNlTYm0g9sZYswJkLULs3yfbLdaJKVD58gaDmhWT/fff24OG sBI7gyQGB5BWC8N6PkJZ3T79AAdvoij7WrtTq8ke3bgCenHd7y4RZWqZsFxVZIFf rwY9s/HVAhyqXFnP4OmV4ssYO/1cIh7eukuMqGM4HXYNndS8TH7wp1ykTPVl60fS 1fdgW+pYuDB1CdfekfhInw== -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:57 2025 by rpki-client