$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer File: 0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer (raw, json) Hash identifier: GB/K5lrNGoQ7DloiSR4qxwrYAKeRa3nOySpM7mcENcI= Subject key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849788B587EC04C6DCA3F4C6500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 17:11:35 +0000 Certificate not after: Tue 13 Jul 2027 17:11:35 +0000 Subordinate resources: IP: 204.235.48.0 -- 204.235.59.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:8b:58:7e:c0:4c:6d:ca:3f:4c:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 9 17:11:35 2025 GMT Not After : Jul 13 17:11:35 2027 GMT Subject: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:e2:5d:48:fa:78:ee:83:4a:55:c9:5a:02: 29:14:41:0d:f2:06:e5:3c:15:d6:e2:b2:0e:ce:8b: ae:47:96:d2:95:c0:d4:7a:49:76:fb:5a:fe:de:ac: 75:5f:75:77:79:c5:de:cb:b0:51:40:fa:c0:ce:49: 64:f1:6e:17:fe:0b:91:46:7d:e6:3f:f8:ad:6c:2a: 77:7c:4b:05:47:4a:53:04:d6:02:e4:db:fb:a5:d8: 33:2c:83:f7:bc:75:3a:79:8b:f5:f0:dc:92:d9:62: 69:6c:cd:61:a2:50:25:11:26:84:4b:0e:b2:bc:60: 93:cc:c5:a1:b3:8d:14:65:71:7d:0e:c8:55:08:3a: aa:2b:48:4a:0b:c2:94:83:8a:fe:44:90:8d:34:ac: d7:9c:4b:7a:b8:77:da:dd:04:bc:bb:c1:ff:bb:90: 2c:70:a8:58:02:e5:b8:2a:d5:98:0a:81:e0:b6:30: 6c:66:1c:42:03:57:7b:26:fd:f7:28:ab:e1:7e:6e: 4f:ef:51:e8:be:96:75:5f:27:5e:73:4c:17:ab:9b: b2:92:d2:62:97:3e:f4:bc:b3:a8:c0:29:07:c8:e3: 90:55:f0:2f:ed:a3:5a:63:58:c1:5c:77:37:ab:26: ae:a2:0e:ba:ed:53:d2:57:13:09:50:9b:62:8d:b1: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.235.48.0-204.235.59.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e3:b2:32:d1:ca:7e:6f:23:23:c0:3f:e3:a3:15:f9:0a:4c: 24:13:54:4e:4c:b4:e1:41:65:c6:84:4e:43:d7:64:29:35:09: b4:08:4c:e1:64:fc:12:56:0d:83:85:a8:cd:33:f2:ca:b8:16: be:41:1a:c6:e7:40:2a:32:59:80:70:7e:ff:26:77:92:d4:60: 97:65:94:0a:66:c6:e3:dd:f8:13:96:12:41:43:68:2d:98:36: 64:e7:0f:14:7e:87:3d:e2:99:95:bf:20:c9:87:9c:65:a2:e8: 5c:a7:83:75:5f:87:17:f3:76:a5:11:f3:c5:8a:60:a6:b2:03: ae:2b:54:bc:dc:77:21:5d:81:23:99:66:f5:49:05:b6:c3:03: 18:b6:b8:0f:b7:28:e8:5f:1b:23:11:4d:7e:e7:4f:98:ea:18: a0:52:7c:00:61:fb:50:22:9b:68:5e:9a:82:41:c3:08:43:a9: 9f:b3:d2:3d:8e:5c:55:e3:a2:61:27:a5:63:eb:60:77:28:c6: 24:8f:80:77:88:d9:d5:91:15:69:ba:68:27:21:eb:ca:1f:76: 01:4a:6e:cb:78:b5:ec:66:cf:a6:9b:6b:f9:fa:b5:ba:fe:e8: 6c:53:c2:ac:fa:b3:48:77:9d:5d:53:66:6e:ec:57:c0:21:cf: e5:b4:a3:d5 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEl4i1h+wExtyj9MZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwOTE3MTEzNVoXDTI3MDcxMzE3MTEzNVowLzEtMCsGA1UEAxMk MGZiNDhjZTUtMjFhMy00YjYwLTliY2YtZjFlMGQ2YTQwMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBHiXUj6eO6DSlXJWgIpFEEN8gblPBXW4rIO zouuR5bSlcDUekl2+1r+3qx1X3V3ecXey7BRQPrAzklk8W4X/guRRn3mP/itbCp3 fEsFR0pTBNYC5Nv7pdgzLIP3vHU6eYv18NyS2WJpbM1holAlESaESw6yvGCTzMWh s40UZXF9DshVCDqqK0hKC8KUg4r+RJCNNKzXnEt6uHfa3QS8u8H/u5AscKhYAuW4 KtWYCoHgtjBsZhxCA1d7Jv33KKvhfm5P71HovpZ1Xydec0wXq5uyktJilz70vLOo wCkHyOOQVfAv7aNaY1jBXHc3qyauog667VPSVxMJUJtijbGxrQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFEnkXCf1egpf3Mia3+cmv6JbBQ3lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w ZmI0OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUwZDZhNDAzMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzBmYjQ4Y2U1LTIxYTMtNGI2MC05 YmNmLWYxZTBkNmE0MDMxNy8wZmI0OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUwZDZh NDAzMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBMzrMAMEAszrODBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU47Iy0cp+ byMjwD/joxX5CkwkE1ROTLThQWXGhE5D12QpNQm0CEzhZPwSVg2DhajNM/LKuBa+ QRrG50AqMlmAcH7/JneS1GCXZZQKZsbj3fgTlhJBQ2gtmDZk5w8Ufoc94pmVvyDJ h5xlouhcp4N1X4cX83alEfPFimCmsgOuK1S83HchXYEjmWb1SQW2wwMYtrgPtyjo XxsjEU1+50+Y6higUnwAYftQIptoXpqCQcMIQ6mfs9I9jlxV46JhJ6Vj62B3KMYk j4B3iNnVkRVpumgnIevKH3YBSm7LeLXsZs+mm2v5+rW6/uhsU8Ks+rNId51dU2Zu 7FfAIc/ltKPV -----END CERTIFICATE-----Generated at Sat Apr 26 22:57:50 2025 by rpki-client