$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer File: 91625b8e-8d13-496f-b542-d170ffd5f3fa.cer (raw, json) Hash identifier: pxmD2xEYYfPjWQgk76L/LgtabPrPrTSDOzVqcH+lDfs= Subject key identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849A3EC7B7C07E8D201E7A5C8D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Apr 2025 06:07:04 +0000 Certificate not after: Thu 29 Jul 2027 06:07:04 +0000 Subordinate resources: AS: 5065 AS: 6207 IP: 148.222.158.0/24 IP: 165.140.192.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:ec:7b:7c:07:e8:d2:01:e7:a5:c8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 25 06:07:04 2025 GMT Not After : Jul 29 06:07:04 2027 GMT Subject: CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:43:9f:0c:b9:d6:86:4f:49:e8:e2:2b:59:fa: fc:da:49:40:c3:51:71:a3:98:d5:3b:d0:9e:6f:99: b3:2c:67:d7:77:f1:15:19:20:8e:ca:c3:e3:f1:30: 4c:8d:ba:76:24:b3:0a:65:4e:47:f8:68:c0:34:40: e5:e9:2c:d1:61:20:d8:68:eb:04:79:f1:7b:ad:a1: 00:f1:c2:a4:9a:95:42:76:8e:24:87:5e:2f:96:fb: f8:8f:53:c7:c9:74:e8:44:90:1f:a1:fd:42:9c:bc: c7:79:1d:be:a7:57:c7:a6:97:19:b7:45:11:51:d1: af:9b:73:63:82:b8:5f:b0:86:f4:ce:a4:7e:66:1c: c5:58:57:04:1b:14:f9:db:bc:5b:d4:79:09:3d:ab: e3:fa:e2:12:5f:dc:70:89:79:00:7f:1a:f1:7d:51: a4:ec:51:fe:82:bc:a6:3c:e8:68:81:c2:a0:1d:82: 09:f9:f1:8c:ef:d9:5b:58:d3:a5:48:4b:df:8b:42: 5d:c6:48:2f:a5:84:ff:d6:fe:3e:ce:08:20:57:82: 8f:e2:8c:ff:72:21:a4:8b:b9:d7:96:32:5b:6d:ec: 8f:c6:f3:1c:69:70:60:0d:a9:51:c5:14:eb:89:5a: 5e:7d:4f:1d:bf:75:9f:51:b4:29:65:10:5a:21:bc: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 148.222.158.0/24 165.140.192.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5065 6207 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0a:01:de:e7:5b:12:d4:e5:7f:ad:e3:7b:b9:39:fe:62:5d: 4b:ac:4f:89:0c:56:01:28:10:a6:ad:66:aa:be:2a:ff:23:39: ea:a2:f4:3a:6a:db:94:96:0a:d5:4d:f8:2e:59:4a:31:90:e8: 5a:8e:f8:42:8d:4d:59:f2:20:97:ad:82:b9:71:2d:fa:0b:da: 53:91:27:d0:78:35:57:e7:c4:5c:ed:be:5a:19:b3:10:3f:77: 77:db:69:a2:01:6d:90:e9:02:2e:1d:eb:77:6a:d5:78:ab:86: df:4f:36:1e:bc:27:29:2b:f6:96:99:6b:32:3f:30:a3:a4:81: 16:f7:bc:ea:99:21:55:09:b7:16:4f:4c:5e:09:e5:39:54:9c: 93:35:59:d4:7f:fa:7f:38:ff:18:0e:f4:37:a4:80:67:55:53: 33:a2:ad:a2:a4:89:4c:33:17:10:c5:3b:2c:6d:51:41:11:cd: ad:68:fb:88:71:e1:12:24:ad:87:f1:f5:e8:28:b2:9c:95:09: 5a:d5:ea:b7:4e:8f:a2:6b:30:ff:0b:3e:2b:65:e9:4f:fc:e1: 6e:f1:aa:f0:d9:4d:f1:07:12:62:3d:42:7c:60:78:58:61:df: 81:e8:29:e5:8f:f4:53:db:ca:2d:d2:8d:f8:8a:29:d8:2b:e7: cf:14:81:ad -----BEGIN CERTIFICATE----- MIIHEjCCBfqgAwIBAgIUAQ0Mn0MoWEmj7Ht8B+jSAeelyNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyNTA2MDcwNFoXDTI3MDcyOTA2MDcwNFowLzEtMCsGA1UEAxMk OTE2MjViOGUtOGQxMy00OTZmLWI1NDItZDE3MGZmZDVmM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkOfDLnWhk9J6OIrWfr82klAw1Fxo5jVO9Ce b5mzLGfXd/EVGSCOysPj8TBMjbp2JLMKZU5H+GjANEDl6SzRYSDYaOsEefF7raEA 8cKkmpVCdo4kh14vlvv4j1PHyXToRJAfof1CnLzHeR2+p1fHppcZt0URUdGvm3Nj grhfsIb0zqR+ZhzFWFcEGxT527xb1HkJPavj+uISX9xwiXkAfxrxfVGk7FH+grym POhogcKgHYIJ+fGM79lbWNOlSEvfi0JdxkgvpYT/1v4+zgggV4KP4oz/ciGki7nX ljJbbeyPxvMcaXBgDalRxRTriVpefU8dv3WfUbQpZRBaIbxcPQIDAQABo4IEJDCC BCAwHQYDVR0OBBYEFJX7XefvtMK4EcadA4swRbzeCRCrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 MTYyNWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcwZmZkNWYzZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzkxNjI1YjhlLThkMTMtNDk2Zi1i NTQyLWQxNzBmZmQ1ZjNmYS85MTYyNWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcwZmZk NWYzZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACU3p4DBAKljMAwHQYIKwYBBQUHAQgBAf8EDjAM oAowCAICE8kCAhg/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHAKAd7nWxLU5X+t43u5Of5iXUusT4kMVgEo EKatZqq+Kv8jOeqi9Dpq25SWCtVN+C5ZSjGQ6FqO+EKNTVnyIJetgrlxLfoL2lOR J9B4NVfnxFztvloZsxA/d3fbaaIBbZDpAi4d63dq1Xirht9PNh68Jykr9paZazI/ MKOkgRb3vOqZIVUJtxZPTF4J5TlUnJM1WdR/+n84/xgO9DekgGdVUzOiraKkiUwz FxDFOyxtUUERza1o+4hx4RIkrYfx9egospyVCVrV6rdOj6JrMP8LPitl6U/84W7x qvDZTfEHEmI9QnxgeFhh34HoKeWP9FPbyi3SjfiKKdgr588Uga0= -----END CERTIFICATE-----Generated at Thu May 1 09:12:56 2025 by rpki-client