$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer File: 1ff04835-864a-40da-a12f-dcad0faabb8c.cer (raw, json) Hash identifier: xgTlskWlb/fBLOHJA2tlmBH4LS7CQQg094SrXKGT4HI= Subject key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858499C41FE37EFC313AD021DE8DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Apr 2025 12:12:54 +0000 Certificate not after: Mon 26 Jul 2027 12:12:54 +0000 Subordinate resources: IP: 104.152.88.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:41:fe:37:ef:c3:13:ad:02:1d:e8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 22 12:12:54 2025 GMT Not After : Jul 26 12:12:54 2027 GMT Subject: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:d6:f2:02:93:67:db:d8:3b:f6:f1:3a:ed: 29:ab:a0:bd:fb:4b:10:45:56:16:2a:be:72:86:b7: 3c:08:3d:26:d4:ff:17:10:3d:b9:0e:c3:f4:97:bf: 81:96:f7:08:ac:8d:7d:f7:60:5f:cd:f4:d5:d9:58: 23:b1:f6:48:05:b0:48:2a:d0:fb:8d:95:df:1f:c9: b9:a7:0c:3c:d6:68:a6:eb:8e:52:c7:5f:1e:52:a1: 1d:d6:fa:e5:80:cb:7e:59:e9:34:dd:03:a8:af:8d: 8c:db:b2:9f:a3:c0:9d:65:5a:b8:77:8f:d8:d4:b3: 4c:59:76:85:d0:cb:75:d5:80:df:a3:06:e6:55:ec: 2d:fa:37:a5:5d:6c:58:26:57:74:bf:4f:2b:e4:0e: a1:2e:55:ee:2e:f4:a4:2c:74:e2:f8:6e:13:48:41: 3d:3e:3c:ff:40:93:52:51:8b:3c:1b:7c:76:1e:fc: 36:b1:6c:bb:32:01:4e:b3:c8:93:34:b9:0a:6b:c7: 65:66:89:85:60:71:1a:80:95:b3:4e:32:f3:79:6a: b2:f4:50:9c:e7:79:73:6a:26:7f:53:3f:fb:09:a4: 2f:7d:0c:77:5d:ad:84:ea:76:ca:34:d8:4a:67:84: 97:88:19:a0:fa:ff:8d:45:6c:7d:b3:81:00:27:cf: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 104.152.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c2:a9:49:9e:93:dd:94:5c:84:28:57:0b:ca:ff:48:cf:9f: d4:46:b1:e7:6d:30:3d:67:e6:9c:c5:6f:07:16:6d:c5:76:f3: ae:dd:eb:e1:34:ee:e0:13:4e:f9:55:9a:5a:12:65:ef:eb:eb: b7:d8:c1:cd:12:4d:ca:8b:4e:c8:54:0f:54:c3:d1:a0:4d:8b: 20:6a:36:ba:58:8c:8c:9a:80:a9:8d:de:8e:5f:38:07:56:6d: 97:87:31:fb:a8:cd:75:77:19:62:a7:bf:ca:c8:73:2e:34:d0: 2c:7b:05:b7:8e:61:f3:27:32:99:e1:f3:f1:45:21:53:ee:89: 87:c3:16:bd:1f:74:de:56:73:96:23:6b:81:e1:0b:6f:52:bb: ff:ce:85:dc:39:e1:2f:4f:bf:5d:ce:7e:07:49:ac:45:04:f4: b0:af:89:19:de:37:21:f5:da:3b:ea:81:ac:66:80:45:9d:07: 11:72:fe:1e:12:c5:81:6f:1e:27:bf:68:32:5f:83:a2:33:cd: ed:ce:b1:17:08:a7:02:d2:2b:c9:e8:e8:7b:c2:a7:cc:62:bc: cb:a6:66:01:c2:66:bd:6b:aa:c3:59:4f:59:00:4f:fd:76:e3: 3e:2d:cf:c6:b9:cc:9a:b6:5c:dd:48:32:3f:3d:95:4d:df:c0: 41:30:9c:ef -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmcQf4378MTrQId6NwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyMjEyMTI1NFoXDTI3MDcyNjEyMTI1NFowLzEtMCsGA1UEAxMk MWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFiYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG/W8gKTZ9vYO/bxOu0pq6C9+0sQRVYWKr5y hrc8CD0m1P8XED25DsP0l7+BlvcIrI1992BfzfTV2VgjsfZIBbBIKtD7jZXfH8m5 pww81mim645Sx18eUqEd1vrlgMt+Wek03QOor42M27Kfo8CdZVq4d4/Y1LNMWXaF 0Mt11YDfowbmVewt+jelXWxYJld0v08r5A6hLlXuLvSkLHTi+G4TSEE9Pjz/QJNS UYs8G3x2Hvw2sWy7MgFOs8iTNLkKa8dlZomFYHEagJWzTjLzeWqy9FCc53lzaiZ/ Uz/7CaQvfQx3Xa2E6nbKNNhKZ4SXiBmg+v+NRWx9s4EAJ8+QpQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHMP7lS8ctHOKpw0fce/IFb08puEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x ZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzFmZjA0ODM1LTg2NGEtNDBkYS1h MTJmLWRjYWQwZmFhYmI4Yy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZh YWJiOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJomFgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVMKpSZ6T3ZRchChXC8r/ SM+f1Eax520wPWfmnMVvBxZtxXbzrt3r4TTu4BNO+VWaWhJl7+vrt9jBzRJNyotO yFQPVMPRoE2LIGo2uliMjJqAqY3ejl84B1Ztl4cx+6jNdXcZYqe/yshzLjTQLHsF t45h8ycymeHz8UUhU+6Jh8MWvR903lZzliNrgeELb1K7/86F3DnhL0+/Xc5+B0ms RQT0sK+JGd43IfXaO+qBrGaARZ0HEXL+HhLFgW8eJ79oMl+DojPN7c6xFwinAtIr yejoe8KnzGK8y6ZmAcJmvWuqw1lPWQBP/XbjPi3PxrnMmrZc3UgyPz2VTd/AQTCc 7w== -----END CERTIFICATE-----Generated at Sun Apr 27 17:58:09 2025 by rpki-client