$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer File: a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer (raw, json) Hash identifier: TMNGW6yQqyYgqXQaKpSqHyvgjm50tzQO4eUAxJyRO2Q= Subject key identifier: EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849AE77A9671AB12FEE09E656C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Apr 2025 00:45:35 +0000 Certificate not after: Mon 02 Aug 2027 00:45:35 +0000 Subordinate resources: IP: 216.87.48.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:77:a9:67:1a:b1:2f:ee:09:e6:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 29 00:45:35 2025 GMT Not After : Aug 2 00:45:35 2027 GMT Subject: CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:91:61:ef:dc:39:43:34:f6:d7:cd:41:e0: 5b:bf:cf:1c:85:3b:cf:50:f8:5e:4d:7f:e6:97:42: 2d:c9:ac:22:16:c9:a5:78:22:86:c7:c6:82:df:cd: 5c:81:55:de:c3:5e:c3:c8:77:34:4c:ec:61:37:2d: 05:5c:4d:16:b2:8c:84:bb:29:4f:d1:fb:5f:fb:cb: 4c:88:1b:d3:2d:ca:87:5a:ec:e6:21:99:ee:ed:23: d7:fd:76:37:ed:2c:00:6c:8a:74:84:ec:fa:dd:4e: e1:94:d5:ca:b6:a9:cb:6d:90:2a:57:f9:3c:42:21: 37:78:bc:be:5e:e0:b0:26:ff:53:35:6a:5c:55:d7: d0:e1:6c:96:87:f6:09:46:53:b9:04:33:c5:44:0d: ef:69:45:8b:4f:02:35:e1:93:72:2a:e5:60:2d:33: a0:80:d4:b4:76:0f:f4:29:d9:09:41:d9:1d:7c:48: 30:e9:d6:72:1b:e6:d6:85:bb:e1:81:a1:ae:b1:eb: 3c:e7:7a:21:e3:09:3e:8e:89:33:30:f6:cd:ff:5a: 22:a2:65:30:1f:9f:8a:63:1b:ca:cf:86:bf:a6:d5: ff:40:64:c5:0f:ee:02:89:98:b8:37:e3:11:3b:7c: 07:1d:42:64:91:0b:ce:aa:00:61:3d:4c:5d:4e:e4: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 216.87.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6d:35:23:52:bc:fd:b9:ab:e2:bf:a6:71:37:c7:71:d7:08: 54:de:97:14:6a:6a:ca:42:26:aa:fe:00:32:5a:19:a1:cf:e5: 1a:3c:c8:6d:ba:a6:c0:ed:22:e7:c9:ea:94:31:ec:2b:ca:30: d5:a2:4d:e5:29:3f:a5:29:e0:db:df:4a:f5:bf:3e:fd:8f:10: ea:9b:23:5e:c4:83:76:74:12:ad:c9:dc:21:56:41:62:fe:76: 0c:61:ec:ce:c2:17:32:a1:a3:84:18:cd:61:66:eb:36:e2:c9: ea:e6:10:31:5e:93:ce:e3:56:2e:e9:a0:aa:cc:df:6a:42:eb: 2d:27:bb:c6:0a:e9:bf:c6:40:9c:b4:cc:1e:14:0a:03:e0:c4: d4:41:b9:76:10:80:b3:05:5a:18:d2:55:b5:c2:67:08:4a:49: e9:80:a1:64:dd:7c:05:2d:ad:24:12:a7:5b:2f:39:72:a3:34: 53:fe:04:d2:7e:01:65:a0:c3:ce:74:ce:e7:48:40:9e:e0:b2: e2:0b:00:62:5e:27:6c:bf:6b:ef:51:e8:df:e1:ff:34:2b:1e: 22:65:72:f3:18:27:cc:05:04:2b:6e:e8:5d:27:d0:48:88:7d: d7:f3:f6:51:ab:24:9e:80:14:e8:40:0f:c8:93:68:77:27:8c: c4:cb:19:c9 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmud6lnGrEv7gnmVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyOTAwNDUzNVoXDTI3MDgwMjAwNDUzNVowLzEtMCsGA1UEAxMk YTQ3ZTI4NDMtMTZlMS00ZWQwLWFjYzItN2E5NDJiZmM0NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXqRYe/cOUM09tfNQeBbv88chTvPUPheTX/m l0ItyawiFsmleCKGx8aC381cgVXew17DyHc0TOxhNy0FXE0WsoyEuylP0ftf+8tM iBvTLcqHWuzmIZnu7SPX/XY37SwAbIp0hOz63U7hlNXKtqnLbZAqV/k8QiE3eLy+ XuCwJv9TNWpcVdfQ4WyWh/YJRlO5BDPFRA3vaUWLTwI14ZNyKuVgLTOggNS0dg/0 KdkJQdkdfEgw6dZyG+bWhbvhgaGuses853oh4wk+jokzMPbN/1oiomUwH5+KYxvK z4a/ptX/QGTFD+4CiZi4N+MRO3wHHUJkkQvOqgBhPUxdTuQWWQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFO+f9kdW8OI9aapolNfh+I63zgE4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h NDdlMjg0My0xNmUxLTRlZDAtYWNjMi03YTk0MmJmYzQ2Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2E0N2UyODQzLTE2ZTEtNGVkMC1h Y2MyLTdhOTQyYmZjNDZjZS9hNDdlMjg0My0xNmUxLTRlZDAtYWNjMi03YTk0MmJm YzQ2Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHYVzAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPW01I1K8/bmr4r+mcTfH cdcIVN6XFGpqykImqv4AMloZoc/lGjzIbbqmwO0i58nqlDHsK8ow1aJN5Sk/pSng 299K9b8+/Y8Q6psjXsSDdnQSrcncIVZBYv52DGHszsIXMqGjhBjNYWbrNuLJ6uYQ MV6TzuNWLumgqszfakLrLSe7xgrpv8ZAnLTMHhQKA+DE1EG5dhCAswVaGNJVtcJn CEpJ6YChZN18BS2tJBKnWy85cqM0U/4E0n4BZaDDznTO50hAnuCy4gsAYl4nbL9r 71Ho3+H/NCseImVy8xgnzAUEK27oXSfQSIh91/P2UasknoAU6EAPyJNodyeMxMsZ yQ== -----END CERTIFICATE-----Generated at Thu May 8 11:40:13 2025 by rpki-client