$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer File: 8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.cer (raw, json) Hash identifier: +2BNnZLl38tt42mrSSzdvYFmLAgYOdU/95w8mOUrr3I= Subject key identifier: 47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849864BC9049FF67BCCCDF8A140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 15:24:50 +0000 Certificate not after: Sun 18 Jul 2027 15:24:50 +0000 Subordinate resources: IP: 155.58.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:4b:c9:04:9f:f6:7b:cc:cd:f8:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 14 15:24:50 2025 GMT Not After : Jul 18 15:24:50 2027 GMT Subject: CN=8bf48a28-7aa2-4a7f-b85e-71b770da2ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:53:1d:9c:5d:62:e2:b6:3b:ed:81:f3:24: 15:28:50:2d:76:6b:ca:34:c2:76:17:12:d6:0e:3e: 15:1e:b8:dd:25:cf:79:14:be:4f:43:22:45:b6:30: 59:91:3a:08:91:5b:12:56:b7:a3:2a:37:4c:9e:69: 63:28:fd:33:d0:c1:d6:88:87:40:a7:1e:1a:ba:9d: 85:51:89:b1:7d:b1:a0:a9:5a:47:06:70:ad:6a:db: 6e:ac:26:e4:a8:81:17:86:b2:73:8e:98:79:0c:79: 24:99:01:38:46:9a:6a:ce:fb:18:cf:d1:88:2a:94: 79:89:95:be:59:8d:fe:a4:5a:43:1e:fe:da:9b:b2: 7e:cd:fd:54:ef:c3:30:e3:82:6b:26:84:e9:57:ba: 0c:cd:67:4b:c1:5f:37:e0:ce:28:bd:2a:d1:cf:58: e4:55:31:53:9d:7e:5d:c0:d8:17:1e:9f:0d:03:d0: 3e:4c:73:13:b0:a9:35:76:1d:dd:06:b5:c3:28:77: b0:76:ef:da:ba:12:14:b4:8d:64:aa:df:2c:39:d1: 02:5d:32:c8:d8:78:bc:8c:bb:2f:21:c3:ff:01:39: dc:c3:7e:29:2f:8c:4a:b7:dd:c1:75:ac:a5:08:ad: b9:6a:2c:7e:86:ed:a7:fd:07:83:36:d2:02:fb:23: d6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1B:4A:40:74:AE:CE:15:8F:F9:7A:E9:1E:B5:52:55:C4:52:91:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5/8bf48a28-7aa2-4a7f-b85e-71b770da2ee5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 155.58.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f3:b5:26:bf:e8:3e:f1:85:11:93:5d:b6:81:92:b4:92:1e: 44:bb:a1:3d:d2:a9:57:2e:3c:b6:06:7e:e9:ef:ae:2c:17:b1: fd:62:0c:3f:40:a9:bc:b3:7d:34:61:47:42:86:48:9c:ee:db: ae:2f:7b:ee:0d:e6:36:fb:e0:88:43:28:46:82:62:55:2d:2e: 79:cf:64:c9:c3:fd:0a:15:b4:f2:78:58:e1:94:3d:8a:5e:ac: 06:57:2a:5a:0f:2d:01:0e:55:f4:be:dd:60:b0:e3:67:4e:c3: 48:f4:a3:17:54:54:4b:25:6b:9d:d3:38:bf:33:63:ef:d7:3f: 20:49:d9:e6:e5:48:ff:69:52:a2:ef:12:3a:03:ea:c3:86:60: 74:b1:38:73:99:68:48:17:40:fb:a2:d1:c9:43:0f:70:16:2d: 3b:fe:2e:af:51:a4:cc:7d:8b:9c:29:c3:78:66:0e:3f:04:69: 82:f3:ce:69:86:2b:d1:28:9a:2d:1d:78:5d:79:c6:1e:0d:08: 82:6e:48:26:fa:f0:d2:bc:d0:af:f0:1b:92:37:ab:08:86:e9: 00:03:ca:29:e2:87:1e:00:98:97:b8:19:c7:b6:0a:f0:00:95: 36:16:a3:cf:ae:ab:8a:53:db:43:3f:e2:3b:48:42:ed:d3:2b: a2:3d:14:fa -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEmGS8kEn/Z7zM34oUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNDE1MjQ1MFoXDTI3MDcxODE1MjQ1MFowLzEtMCsGA1UEAxMk OGJmNDhhMjgtN2FhMi00YTdmLWI4NWUtNzFiNzcwZGEyZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT9THZxdYuK2O+2B8yQVKFAtdmvKNMJ2FxLW Dj4VHrjdJc95FL5PQyJFtjBZkToIkVsSVrejKjdMnmljKP0z0MHWiIdApx4aup2F UYmxfbGgqVpHBnCtatturCbkqIEXhrJzjph5DHkkmQE4RppqzvsYz9GIKpR5iZW+ WY3+pFpDHv7am7J+zf1U78Mw44JrJoTpV7oMzWdLwV834M4ovSrRz1jkVTFTnX5d wNgXHp8NA9A+THMTsKk1dh3dBrXDKHewdu/auhIUtI1kqt8sOdECXTLI2Hi8jLsv IcP/ATncw34pL4xKt93BdaylCK25aix+hu2n/QeDNtIC+yPW4QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFEcbSkB0rs4Vj/l66R61UlXEUpEfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 YmY0OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3NzBkYTJlZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzhiZjQ4YTI4LTdhYTItNGE3Zi1i ODVlLTcxYjc3MGRhMmVlNS84YmY0OGEyOC03YWEyLTRhN2YtYjg1ZS03MWI3NzBk YTJlZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCbOjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBv87Umv+g+8YURk122gZK0 kh5Eu6E90qlXLjy2Bn7p764sF7H9Ygw/QKm8s300YUdChkic7tuuL3vuDeY2++CI QyhGgmJVLS55z2TJw/0KFbTyeFjhlD2KXqwGVypaDy0BDlX0vt1gsONnTsNI9KMX VFRLJWud0zi/M2Pv1z8gSdnm5Uj/aVKi7xI6A+rDhmB0sThzmWhIF0D7otHJQw9w Fi07/i6vUaTMfYucKcN4Zg4/BGmC885phivRKJotHXhdecYeDQiCbkgm+vDSvNCv 8BuSN6sIhukAA8op4oceAJiXuBnHtgrwAJU2FqPPrquKU9tDP+I7SELt0yuiPRT6 -----END CERTIFICATE-----Generated at Sun Apr 27 00:15:27 2025 by rpki-client