$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d.cer File: 47c48cee-f4dd-490d-8a19-50715f604b9d.cer (raw, json) Hash identifier: FYB3uhMduw/JbD5oU/x+32whq1hAM3Bw3ThxeFJSIpc= Subject key identifier: E0:4D:EE:E4:16:1B:B3:69:62:A0:62:5C:26:90:19:00:22:8F:2F:E9 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858496F0A57A4C694C5B568790F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/47c48cee-f4dd-490d-8a19-50715f604b9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Apr 2025 07:29:23 +0000 Certificate not after: Sat 10 Jul 2027 07:29:23 +0000 Subordinate resources: IP: 23.180.72.0/24 IP: 2602:f8c1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:0a:57:a4:c6:94:c5:b5:68:79:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 6 07:29:23 2025 GMT Not After : Jul 10 07:29:23 2027 GMT Subject: CN=47c48cee-f4dd-490d-8a19-50715f604b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:61:4a:79:59:9c:e0:c7:a0:f8:c3:78:96:ad: d2:ba:d1:d4:8d:93:12:a3:d8:1f:49:3d:3d:2e:bb: 5b:34:89:a5:78:9a:2e:3b:14:cd:3e:88:a0:f7:e0: 2d:32:24:92:aa:bd:7f:0d:25:a2:04:a3:49:aa:49: e7:7e:66:ca:36:7a:dc:b4:23:db:6e:8b:1a:c0:de: b4:ae:b4:1d:aa:71:d7:ee:64:e4:d2:db:1a:41:29: af:5f:85:f7:c5:d3:03:07:68:9e:c5:50:95:20:02: a4:8d:b6:9f:f7:ec:73:88:b5:ec:24:a1:e7:2b:94: c7:ed:8b:34:81:df:b3:0b:e8:c1:f2:34:97:7d:fc: 68:d5:6b:99:39:dd:65:39:8d:a2:22:c7:ae:6b:3f: 85:46:90:05:e2:9a:41:f0:f6:e7:46:9a:2f:d6:e8: f5:a3:ac:ca:23:85:2b:1a:10:ce:b3:f6:2c:90:bb: bc:b0:ce:0b:16:31:d4:a0:c9:25:4e:97:36:e1:0d: d1:34:fb:36:8e:07:02:9a:21:83:36:31:45:81:4b: 9d:f9:88:db:07:37:18:d7:11:be:98:fc:85:27:b8: 95:69:cb:64:95:3c:e4:04:03:21:eb:81:60:95:28: 64:b5:7d:fc:fe:a7:f5:24:9a:39:96:ed:0c:dc:d9: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4D:EE:E4:16:1B:B3:69:62:A0:62:5C:26:90:19:00:22:8F:2F:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47c48cee-f4dd-490d-8a19-50715f604b9d/47c48cee-f4dd-490d-8a19-50715f604b9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.180.72.0/24 IPv6: 2602:f8c1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d1:92:20:03:66:2b:9c:78:80:3f:76:8f:fd:3d:ed:91:55: 51:3d:8d:f1:23:28:1b:00:6b:9f:3e:60:2b:e2:ae:8c:a7:9b: 57:39:d2:4b:a9:ca:61:9b:7c:af:39:53:d1:d3:39:49:33:1f: 03:6d:a8:51:50:e8:44:e0:96:4e:6e:05:b7:9f:86:5a:1f:66: 65:76:6c:ed:1b:59:cd:41:d3:8a:54:0b:80:df:f1:b0:7d:16: 4b:e9:0b:87:16:5f:7b:04:7c:54:b2:14:13:30:64:48:64:0a: 3a:ab:3b:ad:1e:03:c9:9c:a2:a3:20:2d:84:eb:64:25:33:5c: fd:92:cb:23:2d:02:71:b1:e7:b6:80:03:63:c6:47:f0:ff:1c: 3c:61:e8:f4:1e:14:a0:22:78:a8:da:b8:49:bb:5d:27:91:b3: ce:59:e8:16:29:e4:28:91:0e:f1:5d:e5:e7:f5:58:27:3a:e3: 9d:fc:66:3a:ef:45:d8:05:bc:94:40:9d:7b:13:90:23:a0:2d: 90:a2:24:b1:f6:56:bf:32:fe:84:b5:d0:2b:24:82:ce:f1:af: 90:a5:60:29:d9:ae:eb:dd:67:46:35:3c:69:cf:1d:06:0d:e1: 1c:f6:b6:f5:06:8d:fb:a7:9f:b2:72:4c:a7:1b:3c:83:3d:0e: 74:3d:8a:b4 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWElvClekxpTFtWh5D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwNjA3MjkyM1oXDTI3MDcxMDA3MjkyM1owLzEtMCsGA1UEAxMk NDdjNDhjZWUtZjRkZC00OTBkLThhMTktNTA3MTVmNjA0YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmFKeVmc4Meg+MN4lq3SutHUjZMSo9gfST09 LrtbNImleJouOxTNPoig9+AtMiSSqr1/DSWiBKNJqknnfmbKNnrctCPbbosawN60 rrQdqnHX7mTk0tsaQSmvX4X3xdMDB2iexVCVIAKkjbaf9+xziLXsJKHnK5TH7Ys0 gd+zC+jB8jSXffxo1WuZOd1lOY2iIseuaz+FRpAF4ppB8PbnRpov1uj1o6zKI4Ur GhDOs/YskLu8sM4LFjHUoMklTpc24Q3RNPs2jgcCmiGDNjFFgUud+YjbBzcY1xG+ mPyFJ7iVactklTzkBAMh64FglShktX38/qf1JJo5lu0M3Nmz7wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOBN7uQWG7NpYqBiXCaQGQAijy/pMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 N2M0OGNlZS1mNGRkLTQ5MGQtOGExOS01MDcxNWY2MDRiOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ3YzQ4Y2VlLWY0ZGQtNDkwZC04 YTE5LTUwNzE1ZjYwNGI5ZC80N2M0OGNlZS1mNGRkLTQ5MGQtOGExOS01MDcxNWY2 MDRiOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtEgwDgQCAAIwCAMGACYC+MEAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJXRkiADZiuceIA/do/9Pe2RVVE9jfEjKBsAa58+YCviroynm1c50kupymGbfK85 U9HTOUkzHwNtqFFQ6ETglk5uBbefhlofZmV2bO0bWc1B04pUC4Df8bB9FkvpC4cW X3sEfFSyFBMwZEhkCjqrO60eA8mcoqMgLYTrZCUzXP2SyyMtAnGx57aAA2PGR/D/ HDxh6PQeFKAieKjauEm7XSeRs85Z6BYp5CiRDvFd5ef1WCc64538ZjrvRdgFvJRA nXsTkCOgLZCiJLH2Vr8y/oS10Cskgs7xr5ClYCnZruvdZ0Y1PGnPHQYN4Rz2tvUG jfunn7JyTKcbPIM9DnQ9irQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:49:35 2025 by rpki-client