$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer File: cf438e4b-3515-40c3-b514-36b1b15593d8.cer (raw, json) Hash identifier: 7oydhyobXe41CDPBU4VoNxcsPYhJyei+/r3q5JlX+oU= Subject key identifier: BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285849387A59084B94129A44E77D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Mar 2025 18:25:36 +0000 Certificate not after: Sun 20 Jun 2027 18:25:36 +0000 Subordinate resources: IP: 23.142.82.0 -- 23.142.84.255 IP: 2602:fafe::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:38:7a:59:08:4b:94:12:9a:44:e7:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 17 18:25:36 2025 GMT Not After : Jun 20 18:25:36 2027 GMT Subject: CN=cf438e4b-3515-40c3-b514-36b1b15593d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4b:1b:c6:de:84:de:c2:7e:06:25:21:23:42: fb:18:df:b0:c8:38:19:39:0d:76:18:a3:ed:44:c5: e2:fa:72:92:8c:0a:f2:27:24:cf:78:49:fd:9c:3d: a1:84:20:1f:6d:22:75:1d:1d:d8:e8:7f:29:eb:53: 09:37:05:e5:76:1a:41:1f:6d:cf:05:f0:6d:e8:b9: a0:0b:8c:b0:51:a7:7f:0b:19:e6:9e:7f:44:e8:76: dd:6a:4f:79:e0:47:39:50:8b:ca:61:87:39:3c:7c: 71:87:38:53:c7:8d:45:9d:a5:4f:a0:d4:ef:3a:ce: c3:8d:25:e1:66:ab:95:97:88:d2:3b:6d:fe:0d:73: 4c:98:c0:17:95:d9:4f:3c:12:ba:9b:b7:b4:bc:1b: bc:ad:e1:92:2f:2d:f1:b0:65:21:59:74:92:27:ca: 6e:98:6c:14:a1:c8:45:05:8d:dd:21:ae:2f:8b:78: e2:d7:62:8c:de:37:32:b4:ed:8b:33:6d:4b:56:ec: d3:ce:a7:12:19:80:a4:9b:b7:81:ab:27:7a:d9:9a: 8d:b8:98:c3:e0:cf:ef:fd:fa:54:a0:ab:4c:db:ef: 85:4e:b8:9e:ff:57:98:4d:9e:04:dd:7f:19:90:6d: 7b:1e:ba:c7:70:ad:7b:a5:b5:68:2b:97:90:24:f7: 59:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.142.82.0-23.142.84.255 IPv6: 2602:fafe::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c9:3f:04:e5:46:0c:36:7b:9a:8b:d8:79:25:94:66:a5:4b: 79:04:71:4e:d3:e0:50:db:96:9a:73:e6:d0:09:3e:6e:e9:e3: 1b:8c:f2:f3:4f:a9:d0:a2:55:41:b5:b5:76:e3:14:81:98:d6: 48:0d:de:7d:af:f0:f8:07:db:ff:46:59:a0:e7:6e:0d:be:04: a6:2d:ea:56:7a:91:db:0b:b9:d7:79:5a:bb:c9:dc:66:a9:bc: 8b:17:0b:0f:8a:b5:1f:de:68:6d:5b:a2:12:b8:b6:70:a0:38: 29:58:49:93:9d:3f:82:ba:ad:eb:28:5c:86:51:2a:64:82:40: 8c:4e:ba:44:2f:03:8e:8d:b4:bd:7d:0e:66:b7:68:5f:55:6c: 98:c5:cd:aa:18:85:d3:c7:65:34:96:f1:42:b0:e4:45:e2:7c: 91:3b:1e:b9:12:dc:63:d7:60:4c:28:cf:24:e2:a3:d9:a7:b9: ed:32:08:91:35:16:14:c5:2b:c4:d5:31:b1:ee:41:a5:25:ba: 48:65:46:43:ca:e6:b1:70:d3:27:2e:d9:14:b7:b4:42:2a:6f: 3c:b0:94:07:90:e5:d4:6f:54:0b:b2:74:66:e2:99:a2:69:6b: 4f:31:44:c1:87:65:f4:b0:e6:68:82:34:28:2f:43:e8:98:9e: 99:ce:ff:cc -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIUAQ0Mn0MoWEk4elkIS5QSmkTnfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxNzE4MjUzNloXDTI3MDYyMDE4MjUzNlowLzEtMCsGA1UEAxMk Y2Y0MzhlNGItMzUxNS00MGMzLWI1MTQtMzZiMWIxNTU5M2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEsbxt6E3sJ+BiUhI0L7GN+wyDgZOQ12GKPt RMXi+nKSjAryJyTPeEn9nD2hhCAfbSJ1HR3Y6H8p61MJNwXldhpBH23PBfBt6Lmg C4ywUad/Cxnmnn9E6Hbdak954Ec5UIvKYYc5PHxxhzhTx41FnaVPoNTvOs7DjSXh ZquVl4jSO23+DXNMmMAXldlPPBK6m7e0vBu8reGSLy3xsGUhWXSSJ8pumGwUochF BY3dIa4vi3ji12KM3jcytO2LM21LVuzTzqcSGYCkm7eBqyd62ZqNuJjD4M/v/fpU oKtM2++FTrie/1eYTZ4E3X8ZkG17HrrHcK17pbVoK5eQJPdZGQIDAQABo4IEFzCC BBMwHQYDVR0OBBYEFL6ScGX15g20EQas1hqsIiY9jE3dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j ZjQzOGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIxYjE1NTkzZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2NmNDM4ZTRiLTM1MTUtNDBjMy1i NTE0LTM2YjFiMTU1OTNkOC9jZjQzOGU0Yi0zNTE1LTQwYzMtYjUxNC0zNmIxYjE1 NTkzZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMBQEAgABMA4wDAMEAReOUgMEABeOVDAOBAIAAjAIAwYEJgL6/gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeMk/BOVGDDZ7movYeSWUZqVLeQRxTtPgUNuWmnPm0Ak+bunjG4zy 80+p0KJVQbW1duMUgZjWSA3efa/w+Afb/0ZZoOduDb4Epi3qVnqR2wu513lau8nc Zqm8ixcLD4q1H95obVuiEri2cKA4KVhJk50/grqt6yhchlEqZIJAjE66RC8Djo20 vX0OZrdoX1VsmMXNqhiF08dlNJbxQrDkReJ8kTseuRLcY9dgTCjPJOKj2ae57TII kTUWFMUrxNUxse5BpSW6SGVGQ8rmsXDTJy7ZFLe0QipvPLCUB5Dl1G9UC7J0ZuKZ omlrTzFEwYdl9LDmaII0KC9D6Jiemc7/zA== -----END CERTIFICATE-----Generated at Sun Apr 27 00:26:33 2025 by rpki-client