$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer File: 1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer (raw, json) Hash identifier: uPe8hOpVjesqTsO+8G2JYp+Fsd6zggBs+QvjFci+0yw= Subject key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487A2D69829F2BF984A9DE8780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jan 2025 14:27:00 +0000 Certificate not after: Tue 13 Apr 2027 13:27:00 +0000 Subordinate resources: IP: 24.53.240.0/20 IP: 24.54.64.0/19 IP: 24.156.176.0/20 IP: 45.3.0.0/19 IP: 45.74.96.0/19 IP: 104.193.56.0/21 IP: 108.168.0.0/17 IP: 142.90.0.0/18 IP: 198.2.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:2d:69:82:9f:2b:f9:84:a9:de:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 8 14:27:00 2025 GMT Not After : Apr 13 13:27:00 2027 GMT Subject: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:c6:ba:f3:97:3d:c6:ec:9b:eb:18:cc:87: 18:35:3d:8b:3f:71:91:f3:66:09:2b:74:56:4a:06: b0:a5:7f:5d:9e:08:03:70:9a:d6:df:4a:79:e4:58: 55:35:f2:1c:cb:27:93:d3:be:73:4e:df:ac:5b:80: c8:fb:0d:4f:aa:6a:24:64:29:48:88:32:4c:2b:c4: 2a:a7:21:4d:0b:ee:04:29:5e:16:fa:c2:f4:b9:d8: 88:14:ed:9b:39:d8:98:2a:3d:2f:61:29:11:d3:77: 50:95:4f:11:46:19:89:c4:cb:69:8a:49:16:2a:36: 93:ff:5b:21:ee:ac:7d:23:10:09:7a:58:69:2f:a3: a2:98:03:19:0f:fb:83:48:a1:e4:1e:ee:7a:42:20: 5d:77:9a:e6:ef:2e:ed:01:70:ad:7f:0c:ed:05:ff: f7:f9:1a:6b:39:8b:be:12:33:ed:a6:e8:f1:91:5a: 9f:2d:b8:ff:f7:5e:ff:60:13:30:5e:41:ee:00:85: f2:63:04:a4:8b:8f:01:7e:b0:66:8d:c1:eb:e8:93: 9d:97:65:b3:aa:66:34:64:f5:71:be:08:7a:39:d4: ec:79:9b:63:d9:7e:f7:ee:39:6a:97:4e:16:cd:1c: 47:7a:36:8e:33:86:cf:47:75:71:ac:3c:a9:bd:1e: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 24.53.240.0/20 24.54.64.0/19 24.156.176.0/20 45.3.0.0/19 45.74.96.0/19 104.193.56.0/21 108.168.0.0/17 142.90.0.0/18 198.2.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0e:17:01:c2:7b:4c:55:8a:46:b9:48:b9:49:41:bf:64:91: 6a:4c:55:da:db:42:5d:8f:e8:6a:38:a9:8a:61:3a:1c:bb:2c: bf:36:6f:fa:87:2a:9c:a5:8d:6c:65:41:36:eb:ed:f1:ee:1e: 64:6d:4f:ee:9c:86:2c:d6:73:51:a9:3e:9a:a5:f7:96:81:3b: 48:68:40:1d:48:b5:e0:81:9b:78:80:78:d2:31:9d:b0:27:0c: 8b:5a:f8:75:d9:ac:4f:b3:03:7e:82:f0:bd:af:0c:d4:16:37: fa:67:f6:15:95:f0:24:44:69:8f:e5:e4:06:26:a9:43:10:d0: cb:f6:1e:d2:e0:62:fe:05:7a:b1:ae:98:e3:0f:8e:c9:e6:c0: d2:76:1e:b4:e6:e1:c7:27:c6:43:38:1a:88:28:e7:ad:00:c2: 64:35:22:da:b8:65:0d:3f:76:e9:12:0e:3a:63:f6:8c:df:9b: a3:a3:c9:19:5b:4a:4a:f9:b0:e0:6b:55:87:e6:87:8c:a5:08: 32:bc:94:2a:c3:04:7b:c4:39:bf:4c:24:79:b4:90:94:4c:b5: 73:ad:a0:de:d0:6a:ed:0d:3d:bd:b9:84:57:9f:2d:6d:9b:56: 67:28:ea:fe:bb:19:7e:df:31:77:52:42:13:1a:d3:f7:35:87: ae:75:fc:1e -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEh6LWmCnyv5hKneh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwODE0MjcwMFoXDTI3MDQxMzEzMjcwMFowLzEtMCsGA1UEAxMk MWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2FlMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/bGuvOXPcbsm+sYzIcYNT2LP3GR82YJK3RW SgawpX9dnggDcJrW30p55FhVNfIcyyeT075zTt+sW4DI+w1PqmokZClIiDJMK8Qq pyFNC+4EKV4W+sL0udiIFO2bOdiYKj0vYSkR03dQlU8RRhmJxMtpikkWKjaT/1sh 7qx9IxAJelhpL6OimAMZD/uDSKHkHu56QiBdd5rm7y7tAXCtfwztBf/3+RprOYu+ EjPtpujxkVqfLbj/917/YBMwXkHuAIXyYwSki48BfrBmjcHr6JOdl2WzqmY0ZPVx vgh6OdTseZtj2X737jlql04WzRxHejaOM4bPR3VxrDypvR7iHQIDAQABo4IELzCC BCswHQYDVR0OBBYEFLfpR4dz3u1GrXLGPxJtEK6xVpkeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x YzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzFjMjlhMGJlLTcyYTgtNDg5NC04 YzBjLWY0ZDI2ZTNhZTA1OS8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUz YWUwNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MDwEAgABMDYDBAQYNfADBAUYNkADBAQYnLADBAUtAwADBAUtSmAD BANowTgDBAdsqAADBAaOWgADBAbGAkAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbg4XAcJ7TFWKRrlIuUlB v2SRakxV2ttCXY/oajipimE6HLssvzZv+ocqnKWNbGVBNuvt8e4eZG1P7pyGLNZz Uak+mqX3loE7SGhAHUi14IGbeIB40jGdsCcMi1r4ddmsT7MDfoLwva8M1BY3+mf2 FZXwJERpj+XkBiapQxDQy/Ye0uBi/gV6sa6Y4w+OyebA0nYetObhxyfGQzgaiCjn rQDCZDUi2rhlDT926RIOOmP2jN+bo6PJGVtKSvmw4GtVh+aHjKUIMryUKsMEe8Q5 v0wkebSQlEy1c62g3tBq7Q09vbmEV58tbZtWZyjq/rsZft8xd1JCExrT9zWHrnX8 Hg== -----END CERTIFICATE-----Generated at Thu May 1 23:06:26 2025 by rpki-client