$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a.cer File: 252bb797-8be3-4178-8149-ed86949ba85a.cer (raw, json) Hash identifier: +PnZljoaCo4nET5bUlbmH4FzWz4z3zWYGhSw02xT6GU= Subject key identifier: 99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487A2F19A7DFE8C00CEA881C38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jan 2025 14:30:24 +0000 Certificate not after: Tue 13 Apr 2027 13:30:24 +0000 Subordinate resources: IP: 24.50.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:2f:19:a7:df:e8:c0:0c:ea:88:1c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 8 14:30:24 2025 GMT Not After : Apr 13 13:30:24 2027 GMT Subject: CN=252bb797-8be3-4178-8149-ed86949ba85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:b5:df:9e:80:77:cb:8f:32:d8:6a:4d:b2: 2b:70:2b:9e:70:95:0d:9a:7b:34:f5:8a:d8:56:34: 3e:33:32:a6:ec:2d:b5:ce:84:81:02:1c:40:94:81: d5:83:dc:97:88:2d:43:77:56:e5:d4:40:b8:c5:25: 12:37:2c:28:ca:09:35:7b:43:00:da:14:d4:95:34: 08:36:d8:bf:5e:27:70:98:65:66:a0:d2:db:dc:4a: 83:92:b7:b7:b5:06:48:ec:5e:14:41:5a:07:cf:51: de:26:40:ff:2b:33:ce:69:97:00:65:3f:94:96:49: 01:5d:2d:68:c0:81:7a:f1:dd:20:b1:88:4d:cc:9a: ca:00:d0:b1:f6:72:66:af:83:3f:da:cb:93:58:9a: 36:13:ea:38:96:71:18:31:24:10:cb:eb:e4:3c:a4: f1:f8:19:d1:04:7f:96:62:f6:22:c2:91:3e:52:54: 87:8a:61:4f:84:c2:f9:1f:4f:99:ef:7f:c4:df:b6: 26:fa:08:d1:ae:01:17:f7:01:c0:3f:4a:cd:9c:89: ed:72:74:1c:bc:79:42:f4:e7:2d:37:e3:ee:3d:4e: f8:b8:07:e8:6a:07:c1:dd:6e:55:99:78:51:94:d5: 3c:d8:22:2a:dd:2e:01:ae:d9:e0:71:df:3b:27:f3: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 24.50.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2f:9c:fd:d6:5c:00:be:36:23:66:a1:75:dd:52:0c:17:2a: d7:c3:68:a0:b2:0e:28:eb:04:0a:fa:d6:8f:09:a5:90:e2:4e: 65:3f:fa:a3:96:c6:b5:8f:c1:6c:cc:6b:39:57:65:9a:b3:bd: e5:fe:af:7c:08:b0:c0:e5:a8:7e:84:63:7d:0b:ab:8b:d4:e6: e3:68:3b:ee:7b:ec:c5:a8:1d:33:f5:ce:4a:6c:83:64:29:5b: 06:c8:ea:58:06:a3:65:dd:d8:44:95:28:ad:da:55:6d:32:5d: 28:3d:da:3f:85:ee:83:d1:ac:51:64:6e:0f:8e:77:46:2b:0b: 5c:a9:65:b9:7f:09:ab:50:b1:20:f5:65:ae:ad:bf:e0:ae:47: 4c:a9:04:4b:25:79:16:26:f9:75:33:db:ec:64:5d:d9:01:7b: dc:ea:ee:c3:41:d8:89:2b:ac:73:ad:04:9d:86:5c:3a:2a:19: 7a:fe:17:b6:48:d1:e2:de:b1:11:33:c9:e9:6e:86:c5:e6:3e: b5:a5:1c:dc:df:b6:c5:a0:ab:5a:95:fd:ee:b5:55:fc:13:5b: 6c:a9:5b:91:48:8e:e9:96:17:64:22:55:c5:31:3d:dd:08:cf: 39:31:82:ed:66:c5:15:64:15:52:a3:b3:74:6f:93:87:5e:84: 30:7b:36:0f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEh6Lxmn3+jADOqIHDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwODE0MzAyNFoXDTI3MDQxMzEzMzAyNFowLzEtMCsGA1UEAxMk MjUyYmI3OTctOGJlMy00MTc4LTgxNDktZWQ4Njk0OWJhODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq521356Ad8uPMthqTbIrcCuecJUNmns09YrY VjQ+MzKm7C21zoSBAhxAlIHVg9yXiC1Dd1bl1EC4xSUSNywoygk1e0MA2hTUlTQI Nti/XidwmGVmoNLb3EqDkre3tQZI7F4UQVoHz1HeJkD/KzPOaZcAZT+UlkkBXS1o wIF68d0gsYhNzJrKANCx9nJmr4M/2suTWJo2E+o4lnEYMSQQy+vkPKTx+BnRBH+W YvYiwpE+UlSHimFPhML5H0+Z73/E37Ym+gjRrgEX9wHAP0rNnIntcnQcvHlC9Oct N+PuPU74uAfoagfB3W5VmXhRlNU82CIq3S4Brtngcd87J/PN+QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJnqgXESbkaG2T18b+HVG16WnkBAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y NTJiYjc5Ny04YmUzLTQxNzgtODE0OS1lZDg2OTQ5YmE4NWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI1MmJiNzk3LThiZTMtNDE3OC04 MTQ5LWVkODY5NDliYTg1YS8yNTJiYjc5Ny04YmUzLTQxNzgtODE0OS1lZDg2OTQ5 YmE4NWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAUYMqAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjy+c/dZcAL42I2ahdd1S DBcq18NooLIOKOsECvrWjwmlkOJOZT/6o5bGtY/BbMxrOVdlmrO95f6vfAiwwOWo foRjfQuri9Tm42g77nvsxagdM/XOSmyDZClbBsjqWAajZd3YRJUordpVbTJdKD3a P4Xug9GsUWRuD453RisLXKlluX8Jq1CxIPVlrq2/4K5HTKkESyV5Fib5dTPb7GRd 2QF73Oruw0HYiSusc60EnYZcOioZev4XtkjR4t6xETPJ6W6GxeY+taUc3N+2xaCr WpX97rVV/BNbbKlbkUiO6ZYXZCJVxTE93QjPOTGC7WbFFWQVUqOzdG+Th16EMHs2 Dw== -----END CERTIFICATE-----Generated at Thu May 1 23:13:57 2025 by rpki-client