$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.cer File: be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.cer (raw, json) Hash identifier: d91iyCqaN3aCmNSVYCvGeb/A85sp4shD0QQZYqPJAVo= Subject key identifier: CA:7E:20:30:C2:33:74:06:1A:99:76:50:EC:22:FC:E1:1A:39:61:C9 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858496A481E565C7691720DDECB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Apr 2025 14:34:49 +0000 Certificate not after: Thu 08 Jul 2027 14:34:49 +0000 Subordinate resources: IP: 205.236.174.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:48:1e:56:5c:76:91:72:0d:de:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 4 14:34:49 2025 GMT Not After : Jul 8 14:34:49 2027 GMT Subject: CN=be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:b1:e7:03:0a:17:b3:da:38:a4:e0:8a:c7: b4:78:5a:63:58:73:2a:0f:c6:7f:7f:3a:f7:85:a1: cd:9c:c2:67:d3:00:c4:61:9a:b1:00:84:87:23:e3: a9:26:cf:7d:39:8d:75:5b:ca:34:8c:02:7e:af:8f: c4:c8:a0:4c:d0:5b:75:79:69:10:58:7a:f4:e4:ec: 76:6a:84:50:30:55:2b:1f:e8:9e:a8:0a:09:c7:a8: 32:b9:4a:08:10:10:d4:7d:d0:71:0f:a5:e8:b4:db: 39:e4:a8:46:9b:27:b5:0e:db:fd:22:a0:1a:90:61: 20:71:e2:3b:7a:2f:ee:df:6a:7a:bc:50:59:03:dd: 68:29:ba:dc:4d:6d:bb:bd:04:f1:56:7a:e3:04:d4: 71:10:d3:f3:0e:93:f0:40:e3:53:0a:03:39:55:4e: 62:03:8c:6d:23:c7:75:b4:65:8c:54:fd:86:57:21: 74:48:c6:39:39:91:27:20:aa:6f:6e:77:b1:91:d1: cf:3f:13:3f:12:56:d5:be:6a:56:30:63:4f:48:69: 1a:af:db:bf:80:e6:b4:14:1a:99:c9:81:b3:b5:67: 36:3f:95:5b:2f:0b:ca:dc:c5:b6:f7:b9:bb:9d:08: be:97:fc:93:59:ce:9c:95:ee:99:4f:e9:1b:81:d8: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7E:20:30:C2:33:74:06:1A:99:76:50:EC:22:FC:E1:1A:39:61:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad/be5f240f-e9f7-43ab-b5df-5ab7fe8d47ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 205.236.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:1e:a1:44:4e:4f:ab:9c:3b:ac:e2:1a:e5:12:1b:48:af:cf: 52:89:6f:80:c6:27:14:4d:6d:c7:31:4c:4a:c4:14:30:10:f8: 5b:32:58:e9:e4:f8:7b:fb:57:2b:6d:19:9a:9d:17:55:e9:f5: e6:6c:c0:e4:75:88:54:31:fc:6f:c0:64:20:4f:d0:46:7c:6e: 7f:c0:28:00:fb:23:30:9b:f0:4b:5f:9f:58:7b:07:45:a7:36: fc:1a:3b:46:59:43:52:2d:c8:90:04:f0:8c:c0:e1:2c:83:3a: ac:d4:20:a1:9c:29:f4:c0:79:c1:29:bd:22:50:2d:cd:68:a7: db:9d:0b:6a:96:d8:50:58:ad:8b:75:e8:69:78:07:70:66:45: 4b:88:0f:66:58:8e:4d:68:26:f6:b5:b5:db:1b:81:a8:34:a3: 9d:5d:d6:13:48:b7:b5:d8:cb:7f:8f:f6:c5:c2:1e:93:71:2f: 1c:c1:a9:b2:fa:a9:04:fc:45:0f:47:55:89:e1:f9:39:91:1e: 0f:8d:3c:2b:da:9f:49:b6:e8:b6:5f:26:2f:d1:cd:f2:97:d2: 2e:d4:f0:4c:86:09:e8:64:94:1d:3b:3f:fe:55:b7:46:fc:db: d1:b3:7a:98:ad:2f:a1:d4:fa:6e:3b:67:a9:af:c0:c9:24:3a: 68:f4:f2:f5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElqSB5WXHaRcg3eywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwNDE0MzQ0OVoXDTI3MDcwODE0MzQ0OVowLzEtMCsGA1UEAxMk YmU1ZjI0MGYtZTlmNy00M2FiLWI1ZGYtNWFiN2ZlOGQ0N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWOx5wMKF7PaOKTgise0eFpjWHMqD8Z/fzr3 haHNnMJn0wDEYZqxAISHI+OpJs99OY11W8o0jAJ+r4/EyKBM0Ft1eWkQWHr05Ox2 aoRQMFUrH+ieqAoJx6gyuUoIEBDUfdBxD6XotNs55KhGmye1Dtv9IqAakGEgceI7 ei/u32p6vFBZA91oKbrcTW27vQTxVnrjBNRxENPzDpPwQONTCgM5VU5iA4xtI8d1 tGWMVP2GVyF0SMY5OZEnIKpvbnexkdHPPxM/ElbVvmpWMGNPSGkar9u/gOa0FBqZ yYGztWc2P5VbLwvK3MW297m7nQi+l/yTWc6cle6ZT+kbgdhTewIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMp+IDDCM3QGGpl2UOwi/OEaOWHJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i ZTVmMjQwZi1lOWY3LTQzYWItYjVkZi01YWI3ZmU4ZDQ3YWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2JlNWYyNDBmLWU5ZjctNDNhYi1i NWRmLTVhYjdmZThkNDdhZC9iZTVmMjQwZi1lOWY3LTQzYWItYjVkZi01YWI3ZmU4 ZDQ3YWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN7K4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlx6hRE5Pq5w7rOIa5RIb SK/PUolvgMYnFE1txzFMSsQUMBD4WzJY6eT4e/tXK20Zmp0XVen15mzA5HWIVDH8 b8BkIE/QRnxuf8AoAPsjMJvwS1+fWHsHRac2/Bo7RllDUi3IkATwjMDhLIM6rNQg oZwp9MB5wSm9IlAtzWin250LapbYUFiti3XoaXgHcGZFS4gPZliOTWgm9rW12xuB qDSjnV3WE0i3tdjLf4/2xcIek3EvHMGpsvqpBPxFD0dVieH5OZEeD408K9qfSbbo tl8mL9HN8pfSLtTwTIYJ6GSUHTs//lW3Rvzb0bN6mK0vodT6bjtnqa/AySQ6aPTy 9Q== -----END CERTIFICATE-----Generated at Sun Apr 27 20:42:30 2025 by rpki-client