$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer File: 8f1868fa-3526-44ef-8aae-27ceceb072f9.cer (raw, json) Hash identifier: vb+tPMUjY1VwOIC72e4lFqodIf4YQi3FZ14jFLt1M5c= Subject key identifier: AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B9EC93C3AF5A6607EA4D8E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Jan 2025 10:28:06 +0000 Certificate not after: Thu 06 May 2027 09:28:06 +0000 Subordinate resources: IP: 208.84.80.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b9:ec:93:c3:af:5a:66:07:ea:4d:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 31 10:28:06 2025 GMT Not After : May 6 09:28:06 2027 GMT Subject: CN=8f1868fa-3526-44ef-8aae-27ceceb072f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2c:53:b7:28:0e:c3:f9:ea:0e:e5:b1:24:f6: f2:a9:b7:db:7c:8e:ac:ae:37:3c:fa:8e:75:f8:45: 0a:f4:60:d7:60:ca:3c:d5:23:45:4f:59:32:e0:6a: b0:4c:1f:39:ae:f0:e3:6a:a0:b6:4a:91:ff:ee:5d: 68:fd:81:f9:5f:bf:b1:5e:ce:5d:a3:db:f4:6b:6c: d0:4f:d8:a4:15:e1:b6:7f:bc:32:d3:f3:28:e3:13: d3:e9:6d:9f:88:ad:b3:48:15:ce:7f:ca:ed:37:ee: 1d:48:99:07:23:dd:5d:ed:72:0e:62:f0:a4:80:45: 30:99:92:c0:75:98:2c:24:2e:64:13:fd:e9:89:da: e5:01:a4:58:45:f4:0e:61:41:53:1a:03:a5:bd:68: 53:f4:b6:57:34:d0:52:6d:02:ec:d1:9d:3b:78:f6: 2f:fe:fb:81:19:4b:44:2b:62:1b:97:5f:a5:0a:36: d7:3a:84:d2:57:0e:bd:7f:9a:a3:a3:15:0e:9d:72: 80:ac:39:1f:c7:b9:11:45:d7:e9:ac:63:86:3b:03: 65:88:93:88:57:0b:25:db:86:32:4d:08:6d:ef:74: e7:b7:40:ee:bb:c9:0f:bc:bc:95:ac:bb:19:0c:3d: 26:37:70:29:11:ea:0c:b7:98:20:71:4a:6e:f9:b4: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 208.84.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0a:6c:ad:0c:d5:4b:51:04:ac:09:f9:8f:af:24:0f:34:c0: e5:2e:f1:8b:1e:a9:91:78:88:07:7f:30:66:f8:af:0a:90:c5: 9e:23:a5:07:7e:62:23:b3:05:13:51:a7:27:01:93:4e:01:f1: e3:94:66:0e:df:c9:44:98:24:1e:2f:6f:5f:39:ed:b1:d6:43: dd:90:64:c2:8e:97:cc:88:e0:c6:ce:00:8a:31:e5:f8:4b:f7: bd:d8:7a:15:e1:c0:8c:ad:c0:bd:7c:6b:04:2a:3d:53:ec:ed: 34:bf:95:11:9d:a4:2c:23:b3:f0:2f:80:a8:f2:cc:b8:6d:70: 09:3c:8b:98:52:2e:25:67:1c:93:94:44:ef:59:3d:5b:f7:3e: 65:fd:9d:3b:c5:f9:bc:e2:9f:ce:05:13:5a:fa:67:64:12:e2: 4a:26:3a:43:e4:18:82:2a:87:b6:a6:ac:7d:ec:c2:05:e8:e7: df:ea:6a:1a:e8:32:2c:5f:ce:2c:dc:2b:df:c4:43:60:16:b5: 4f:20:67:b6:e8:88:65:7b:71:67:58:49:a7:48:06:80:5a:ac: d9:30:48:75:78:1f:47:d3:49:06:95:e4:d3:96:6f:ab:69:c0: a8:50:1c:fa:ea:b0:75:87:f6:3b:63:b8:98:90:31:e7:93:01: d3:2d:e1:b7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEi57JPDr1pmB+pNjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEzMTEwMjgwNloXDTI3MDUwNjA5MjgwNlowLzEtMCsGA1UEAxMk OGYxODY4ZmEtMzUyNi00NGVmLThhYWUtMjdjZWNlYjA3MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjixTtygOw/nqDuWxJPbyqbfbfI6srjc8+o51 +EUK9GDXYMo81SNFT1ky4GqwTB85rvDjaqC2SpH/7l1o/YH5X7+xXs5do9v0a2zQ T9ikFeG2f7wy0/Mo4xPT6W2fiK2zSBXOf8rtN+4dSJkHI91d7XIOYvCkgEUwmZLA dZgsJC5kE/3pidrlAaRYRfQOYUFTGgOlvWhT9LZXNNBSbQLs0Z07ePYv/vuBGUtE K2Ibl1+lCjbXOoTSVw69f5qjoxUOnXKArDkfx7kRRdfprGOGOwNliJOIVwsl24Yy TQht73Tnt0Duu8kPvLyVrLsZDD0mN3ApEeoMt5ggcUpu+bTqeQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK4NKVdHb4v3zZ8J2LXNinw/5EGbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 ZjE4NjhmYS0zNTI2LTQ0ZWYtOGFhZS0yN2NlY2ViMDcyZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhmMTg2OGZhLTM1MjYtNDRlZi04 YWFlLTI3Y2VjZWIwNzJmOS84ZjE4NjhmYS0zNTI2LTQ0ZWYtOGFhZS0yN2NlY2Vi MDcyZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQVFAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcQpsrQzVS1EErAn5j68k DzTA5S7xix6pkXiIB38wZvivCpDFniOlB35iI7MFE1GnJwGTTgHx45RmDt/JRJgk Hi9vXzntsdZD3ZBkwo6XzIjgxs4AijHl+Ev3vdh6FeHAjK3AvXxrBCo9U+ztNL+V EZ2kLCOz8C+AqPLMuG1wCTyLmFIuJWcck5RE71k9W/c+Zf2dO8X5vOKfzgUTWvpn ZBLiSiY6Q+QYgiqHtqasfezCBejn3+pqGugyLF/OLNwr38RDYBa1TyBntuiIZXtx Z1hJp0gGgFqs2TBIdXgfR9NJBpXk05Zvq2nAqFAc+uqwdYf2O2O4mJAx55MB0y3h tw== -----END CERTIFICATE-----Generated at Sun Apr 27 17:54:45 2025 by rpki-client