$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer File: 4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer (raw, json) Hash identifier: 05z45LM701p/IYS4Tl5BAZxXcBvd4bQlFczn1k2Z0TQ= Subject key identifier: 96:C5:1D:10:E4:05:BD:BB:D6:D7:16:DD:55:60:46:7C:91:EF:F4:7F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858499E43E0716E9AE4A0F80BA980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 05:28:18 +0000 Certificate not after: Tue 27 Jul 2027 05:28:18 +0000 Subordinate resources: IP: 45.132.80.0/22 IP: 45.150.52.0/22 IP: 80.91.218.0/24 IP: 91.238.92.0/23 IP: 91.239.148.0/23 IP: 91.244.196.0/22 IP: 95.214.176.0/22 IP: 176.105.228.0/22 IP: 185.177.24.0/22 IP: 194.179.146.0/23 IP: 212.115.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9e:43:e0:71:6e:9a:e4:a0:f8:0b:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 23 05:28:18 2025 GMT Not After : Jul 27 05:28:18 2027 GMT Subject: CN=4265131f-f3fe-4bd3-9309-8f048cc23b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:70:9c:c5:0c:d5:77:ff:51:cb:b0:eb:7f:f8: df:00:d0:35:63:54:4e:e0:d6:05:c9:76:64:b9:09: 9c:ad:b3:38:1a:f0:1b:92:cd:78:5e:cc:6a:9d:49: fb:d9:e1:12:a9:a0:13:7d:a1:e1:51:08:98:29:4f: 13:95:ba:74:b0:ac:58:68:ca:a7:17:6d:79:90:97: 8c:1e:5e:9c:1b:5c:91:ec:91:c3:70:fc:d0:8d:21: ef:47:e2:4b:94:87:52:a3:c3:52:57:c2:59:43:0e: 6a:49:8c:a7:93:1b:1f:69:83:a3:31:2d:8c:4d:b0: f2:82:ce:31:4a:4b:0b:bb:b6:84:63:9d:9e:e9:59: 00:aa:ef:91:83:8e:d8:2d:74:f4:99:be:8e:e9:b9: d5:ee:67:0e:c4:d7:8f:5a:09:3f:5f:84:40:4a:4c: a7:68:fa:2a:9e:1c:19:db:58:1a:7a:6c:6e:19:a5: 9f:e1:e3:73:84:1c:ca:2b:55:fa:0d:4a:d8:a5:1a: 2b:85:a8:75:7a:52:97:75:89:f8:05:61:57:13:ab: 09:c7:03:a1:ae:e2:5b:f6:b7:40:24:c4:14:25:64: fc:c6:f4:5d:65:39:79:c9:0a:c2:bb:d5:0f:84:c7: c4:f1:1c:6a:16:d5:e9:28:c5:44:e9:95:06:7b:c9: 76:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C5:1D:10:E4:05:BD:BB:D6:D7:16:DD:55:60:46:7C:91:EF:F4:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 45.132.80.0/22 45.150.52.0/22 80.91.218.0/24 91.238.92.0/23 91.239.148.0/23 91.244.196.0/22 95.214.176.0/22 176.105.228.0/22 185.177.24.0/22 194.179.146.0/23 212.115.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ae:d9:0e:22:a9:e0:cf:3e:8d:36:42:1e:fc:5c:05:2e:1a: 85:82:b1:82:9d:ec:22:ea:88:63:7a:d9:3a:36:50:24:eb:ee: c3:4c:07:54:97:2a:a5:b0:7f:ba:fe:ef:ae:b0:47:e1:e8:be: d0:95:3d:39:4c:fc:d4:32:b3:40:fe:1a:67:65:8a:ef:d4:d4: cf:94:d7:bc:4c:4a:ec:db:6c:af:09:16:4a:f4:f9:fb:9d:d4: b4:f5:6f:40:76:29:8b:0f:6c:d7:df:bc:fd:f3:26:bb:08:51: 19:87:f0:73:4d:3a:c3:3c:14:78:a9:24:0a:85:41:56:0b:84: 93:7e:42:a4:45:a1:33:15:eb:81:1a:d8:ec:02:33:20:ee:ca: fa:33:f0:fb:42:bc:26:d9:df:e4:71:8a:2c:82:62:9d:3d:45: 18:88:f5:7d:74:c2:02:ff:4a:85:f4:ca:57:57:d3:b0:10:14: ee:44:b7:c6:3f:fb:4b:fc:7b:d6:54:fd:c1:8e:fb:ed:6c:66: 5d:9b:fb:9e:38:1b:27:d1:05:a0:4f:e9:53:47:23:be:75:b3: 76:70:4a:b6:d9:a2:76:27:17:82:b2:4a:d5:d4:41:5d:0e:1f: 6a:3c:3d:2d:e2:df:f2:ba:7a:ea:e5:56:b1:f7:58:39:d9:db: 1b:f5:20:f1 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEmeQ+BxbprkoPgLqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyMzA1MjgxOFoXDTI3MDcyNzA1MjgxOFowLzEtMCsGA1UEAxMk NDI2NTEzMWYtZjNmZS00YmQzLTkzMDktOGYwNDhjYzIzYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnCcxQzVd/9Ry7Drf/jfANA1Y1RO4NYFyXZk uQmcrbM4GvAbks14XsxqnUn72eESqaATfaHhUQiYKU8Tlbp0sKxYaMqnF215kJeM Hl6cG1yR7JHDcPzQjSHvR+JLlIdSo8NSV8JZQw5qSYynkxsfaYOjMS2MTbDygs4x SksLu7aEY52e6VkAqu+Rg47YLXT0mb6O6bnV7mcOxNePWgk/X4RASkynaPoqnhwZ 21gaemxuGaWf4eNzhBzKK1X6DUrYpRorhah1elKXdYn4BWFXE6sJxwOhruJb9rdA JMQUJWT8xvRdZTl5yQrCu9UPhMfE8RxqFtXpKMVE6ZUGe8l2NQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFJbFHRDkBb271tcW3VVgRnyR7/R/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 MjY1MTMxZi1mM2ZlLTRiZDMtOTMwOS04ZjA0OGNjMjNiN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05 MzA5LThmMDQ4Y2MyM2I3ZS80MjY1MTMxZi1mM2ZlLTRiZDMtOTMwOS04ZjA0OGNj MjNiN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwWwYIKwYBBQUH AQcBAf8ETDBKMEgEAgABMEIDBAIthFADBAItljQDBABQW9oDBAFb7lwDBAFb75QD BAJb9MQDBAJf1rADBAKwaeQDBAK5sRgDBAHCs5IDBALUc3wwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc67Z DiKp4M8+jTZCHvxcBS4ahYKxgp3sIuqIY3rZOjZQJOvuw0wHVJcqpbB/uv7vrrBH 4ei+0JU9OUz81DKzQP4aZ2WK79TUz5TXvExK7NtsrwkWSvT5+53UtPVvQHYpiw9s 19+8/fMmuwhRGYfwc006wzwUeKkkCoVBVguEk35CpEWhMxXrgRrY7AIzIO7K+jPw +0K8Jtnf5HGKLIJinT1FGIj1fXTCAv9KhfTKV1fTsBAU7kS3xj/7S/x71lT9wY77 7WxmXZv7njgbJ9EFoE/pU0cjvnWzdnBKttmidicXgrJK1dRBXQ4fajw9LeLf8rp6 6uVWsfdYOdnbG/Ug8Q== -----END CERTIFICATE-----Generated at Sat Apr 26 16:23:29 2025 by rpki-client