$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer File: 5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.cer (raw, json) Hash identifier: hU4Ibw0Bxo7JccnGisgAmYh8z1j2TYCw+zqfxDNPTWQ= Subject key identifier: F3:CD:BC:7F:03:30:AF:B8:46:96:69:54:22:1D:93:81:31:B0:3C:09 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584991A79FD51C254436236047A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 17:03:47 +0000 Certificate not after: Thu 22 Jul 2027 17:03:47 +0000 Subordinate resources: IP: 23.137.212.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:a7:9f:d5:1c:25:44:36:23:60:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 18 17:03:47 2025 GMT Not After : Jul 22 17:03:47 2027 GMT Subject: CN=5aa08268-5ec4-4fb1-b2a8-05d6a90ac091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:e2:c2:bd:7f:d8:83:c2:33:d9:82:7f:18: 27:b5:5d:3a:48:7a:96:11:70:47:f3:f2:22:7a:38: c8:81:35:46:45:80:a7:9b:d3:2f:80:86:ae:ca:f6: 63:28:e2:16:04:80:36:87:50:41:8a:94:0f:76:17: 02:3e:e9:77:0c:23:fc:68:3c:27:08:c7:c3:6c:8a: d0:7b:a6:89:75:e5:19:f6:ca:71:72:9d:de:ec:30: 0e:55:58:7a:47:cc:2f:f8:23:da:f6:b9:75:60:0b: 33:97:1b:a3:4a:ec:15:ce:22:ef:ae:80:dc:ec:74: e1:05:a5:95:40:8f:01:dd:fc:30:7c:53:42:cf:0c: 8e:7c:b7:f4:2f:41:3f:6d:e0:78:97:71:1f:3a:51: 0e:1b:eb:d6:cb:f6:b4:c1:99:cc:33:ff:c5:3c:65: 1c:86:75:bb:4a:2b:85:30:cf:d9:a1:5e:cc:fc:d0: 7d:82:a1:78:07:e2:26:e0:bf:ac:49:e0:22:80:91: 2d:99:88:6b:1a:18:56:d3:17:ca:bc:05:ad:7f:a0: 3f:5a:fc:96:32:c6:21:ff:d8:61:60:61:49:ca:9e: 07:22:eb:58:28:67:20:a8:36:a1:04:62:cf:7e:74: 6b:54:b5:81:d1:f8:98:a8:2a:23:de:51:fa:81:1d: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:BC:7F:03:30:AF:B8:46:96:69:54:22:1D:93:81:31:B0:3C:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091/5aa08268-5ec4-4fb1-b2a8-05d6a90ac091.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3d:9b:52:23:c7:48:4c:0f:00:a4:88:01:27:60:32:b5:60: a3:2d:f0:a5:57:56:91:77:92:06:12:b6:10:3b:ad:ad:e9:da: 2d:45:f1:12:67:f9:e3:ef:d8:2c:b4:52:4d:c3:d9:7a:43:93: d0:c6:4f:86:05:08:27:b0:9d:13:27:3e:3e:b0:d9:94:ce:b0: 08:2a:07:7f:96:19:18:f8:69:b8:d5:78:48:ac:18:39:e2:fe: a8:61:f5:d3:a9:61:2a:18:85:35:d0:65:2c:da:cd:4a:04:e4: f0:84:c4:18:d0:af:2f:00:34:bb:6a:57:d9:0b:42:fe:8d:46: 98:f7:88:86:dc:57:d7:4a:79:4f:49:01:a2:eb:db:ad:08:46: a9:d5:bf:b8:54:56:8d:71:9f:f5:8f:69:ee:a3:03:c3:b0:91: 7f:6d:fd:78:64:43:6c:6a:c3:2e:44:e6:a5:cc:bd:1c:bb:08: c5:f1:59:62:df:f8:c4:e3:99:1a:d9:ee:63:f2:8c:5c:81:2a: 00:69:c0:08:79:8b:32:63:9c:f4:ae:19:86:81:e6:95:a5:1b: 2a:f7:bf:89:f0:46:ef:d7:97:f6:c2:3d:e3:84:d2:71:44:b6: 60:01:53:b2:4e:71:8d:e2:ff:fe:f3:2c:85:94:a8:af:33:1d: 7a:20:10:d7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmRp5/VHCVENiNgR6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxODE3MDM0N1oXDTI3MDcyMjE3MDM0N1owLzEtMCsGA1UEAxMk NWFhMDgyNjgtNWVjNC00ZmIxLWIyYTgtMDVkNmE5MGFjMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvefiwr1/2IPCM9mCfxgntV06SHqWEXBH8/Ii ejjIgTVGRYCnm9MvgIauyvZjKOIWBIA2h1BBipQPdhcCPul3DCP8aDwnCMfDbIrQ e6aJdeUZ9spxcp3e7DAOVVh6R8wv+CPa9rl1YAszlxujSuwVziLvroDc7HThBaWV QI8B3fwwfFNCzwyOfLf0L0E/beB4l3EfOlEOG+vWy/a0wZnMM//FPGUchnW7SiuF MM/ZoV7M/NB9gqF4B+Im4L+sSeAigJEtmYhrGhhW0xfKvAWtf6A/WvyWMsYh/9hh YGFJyp4HIutYKGcgqDahBGLPfnRrVLWB0fiYqCoj3lH6gR0hGwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPPNvH8DMK+4RpZpVCIdk4ExsDwJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 YWEwODI2OC01ZWM0LTRmYjEtYjJhOC0wNWQ2YTkwYWMwOTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzVhYTA4MjY4LTVlYzQtNGZiMS1i MmE4LTA1ZDZhOTBhYzA5MS81YWEwODI2OC01ZWM0LTRmYjEtYjJhOC0wNWQ2YTkw YWMwOTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXidQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABD2bUiPHSEwPAKSIASdg MrVgoy3wpVdWkXeSBhK2EDutrenaLUXxEmf54+/YLLRSTcPZekOT0MZPhgUIJ7Cd Eyc+PrDZlM6wCCoHf5YZGPhpuNV4SKwYOeL+qGH106lhKhiFNdBlLNrNSgTk8ITE GNCvLwA0u2pX2QtC/o1GmPeIhtxX10p5T0kBouvbrQhGqdW/uFRWjXGf9Y9p7qMD w7CRf239eGRDbGrDLkTmpcy9HLsIxfFZYt/4xOOZGtnuY/KMXIEqAGnACHmLMmOc 9K4ZhoHmlaUbKve/ifBG79eX9sI944TScUS2YAFTsk5xjeL//vMshZSorzMdeiAQ 1w== -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:45 2025 by rpki-client