$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer File: 47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer (raw, json) Hash identifier: CZbvi67sLfHjncnyJbMZO1r4lL/wPsuJ8K0SOv2zeG4= Subject key identifier: 8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849A4C643B30A6D89F8AE336F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Apr 2025 13:25:52 +0000 Certificate not after: Thu 29 Jul 2027 13:25:52 +0000 Subordinate resources: IP: 199.20.14.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:c6:43:b3:0a:6d:89:f8:ae:33:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 25 13:25:52 2025 GMT Not After : Jul 29 13:25:52 2027 GMT Subject: CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f3:d3:e9:5b:57:14:76:c4:4c:45:58:be:ef: e4:aa:f8:42:55:ef:4a:a4:79:18:72:c7:e9:4f:be: e6:40:61:99:0e:fc:05:b0:c1:48:45:f7:4b:69:74: cd:57:15:8a:8f:09:21:87:9a:80:e0:c1:d6:a1:ed: b4:3f:68:ef:dd:ba:98:28:3c:13:88:6e:6c:fd:f7: 89:82:25:be:3b:ca:a5:e3:cd:88:3b:ab:33:de:52: ff:1f:ec:2f:91:0e:fe:15:1c:5f:02:22:97:47:75: 3d:d7:87:9b:de:42:5e:73:32:30:0c:bc:21:ce:c0: ca:7a:ea:63:bc:9f:06:89:1f:d1:b9:8c:a8:69:12: 48:35:eb:4c:21:71:a3:23:57:ec:24:a1:2a:90:dd: 4c:bf:93:3a:d4:78:94:01:9e:eb:10:56:50:6a:82: 20:dd:27:77:1c:80:d9:72:41:1c:e0:c7:da:e8:10: fa:1d:2a:46:62:da:e5:21:05:01:95:76:96:4a:ab: 5c:da:0f:46:3a:04:84:a6:fb:d6:a3:01:f2:dc:92: 27:bb:30:8d:36:8f:a1:bf:2c:c8:e1:62:1a:6e:ed: 9a:2a:62:47:c4:36:c4:9d:8e:68:30:d4:56:90:f5: 4c:88:25:d3:a0:be:39:f4:69:f2:bb:8d:88:ed:e5: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.20.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bd:b9:f4:87:d8:45:56:89:10:a9:74:ed:df:bb:3b:96:44: cd:19:0e:76:99:41:04:e3:b4:3c:2a:e7:54:6b:09:15:ab:3e: ab:c6:2d:4d:52:34:92:84:25:5d:6b:25:a5:27:bd:cb:97:16: 05:ef:ea:1d:28:f1:0c:cb:a1:b7:eb:95:b7:98:29:d4:6b:7e: 59:3d:06:a5:23:36:1a:6c:81:54:bd:6f:9a:85:7e:a4:ba:d7: 02:f6:96:12:2b:17:84:1c:b8:91:5d:1b:9f:f7:67:fb:36:66: 71:2b:07:ee:ff:1e:22:46:a1:60:04:19:3c:15:bd:e7:a3:ed: fb:fe:d5:d0:c7:29:15:2f:30:03:f0:30:eb:98:9a:09:01:e9: 57:16:e1:d6:1e:c1:bf:24:69:b7:a8:5d:db:f7:63:c3:15:d5: a7:f8:99:ff:c3:37:36:a2:41:de:3c:13:10:eb:50:66:b2:b8: 6d:74:36:0d:6b:ce:70:33:40:f1:cb:90:c7:67:73:ed:44:97: d9:e6:f2:7d:1b:88:52:45:d2:5b:10:9a:15:3b:25:70:6e:2f: 33:a6:5d:9b:7c:ac:c2:2a:f9:6b:34:02:88:d9:26:a0:26:4a: d4:b6:93:6a:4c:00:ec:f5:ee:29:86:28:34:fd:4f:c2:5a:9a: 17:ec:69:44 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmkxkOzCm2J+K4zb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyNTEzMjU1MloXDTI3MDcyOTEzMjU1MlowLzEtMCsGA1UEAxMk NDdiOTIyZDUtZWI4ZS00MDI4LWFiYTgtMmUyODJjMGI1ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/PT6VtXFHbETEVYvu/kqvhCVe9KpHkYcsfp T77mQGGZDvwFsMFIRfdLaXTNVxWKjwkhh5qA4MHWoe20P2jv3bqYKDwTiG5s/feJ giW+O8ql482IO6sz3lL/H+wvkQ7+FRxfAiKXR3U914eb3kJeczIwDLwhzsDKeupj vJ8GiR/RuYyoaRJINetMIXGjI1fsJKEqkN1Mv5M61HiUAZ7rEFZQaoIg3Sd3HIDZ ckEc4Mfa6BD6HSpGYtrlIQUBlXaWSqtc2g9GOgSEpvvWowHy3JInuzCNNo+hvyzI 4WIabu2aKmJHxDbEnY5oMNRWkPVMiCXToL459Gnyu42I7eVE3wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFI6q52QC3bWKSa2dg48oqaXWt9ydMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 N2I5MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4MmMwYjVlNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ3YjkyMmQ1LWViOGUtNDAyOC1h YmE4LTJlMjgyYzBiNWU3Ni80N2I5MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4MmMw YjVlNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHFA4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAM7259IfYRVaJEKl07d+7 O5ZEzRkOdplBBOO0PCrnVGsJFas+q8YtTVI0koQlXWslpSe9y5cWBe/qHSjxDMuh t+uVt5gp1Gt+WT0GpSM2GmyBVL1vmoV+pLrXAvaWEisXhBy4kV0bn/dn+zZmcSsH 7v8eIkahYAQZPBW956Pt+/7V0McpFS8wA/Aw65iaCQHpVxbh1h7BvyRpt6hd2/dj wxXVp/iZ/8M3NqJB3jwTEOtQZrK4bXQ2DWvOcDNA8cuQx2dz7USX2ebyfRuIUkXS WxCaFTslcG4vM6Zdm3yswir5azQCiNkmoCZK1LaTakwA7PXuKYYoNP1PwlqaF+xp RA== -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:24 2025 by rpki-client