$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f.cer File: eddf1acb-5049-45cb-bca5-5af458d9f04f.cer (raw, json) Hash identifier: PZ8+dKmEBaafTWlEQ4jOJHcxmlGGy6ldP3lzPUVZmR0= Subject key identifier: 57:26:99:63:A3:D8:A5:D9:6C:A1:5D:BB:37:63:12:26:80:6F:48:E6 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858499DB7949A5435E52A18BDD180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/eddf1acb-5049-45cb-bca5-5af458d9f04f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 00:45:37 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: IP: 204.174.56.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:b7:94:9a:54:35:e5:2a:18:bd:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 23 00:45:37 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=eddf1acb-5049-45cb-bca5-5af458d9f04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:8b:5c:a6:f0:7e:c4:e2:22:0b:ed:2c:13: 50:00:02:50:af:f7:84:bc:75:da:40:71:6b:30:62: d1:ce:02:9e:f9:83:d4:b6:c6:f3:16:c4:f8:7d:14: 21:9f:6a:00:5c:16:84:4e:84:f6:eb:06:1a:04:79: 6f:a8:67:49:6f:e6:0a:ec:87:b3:ce:b3:ec:82:1f: 86:15:e2:95:be:1d:3b:e3:01:6b:68:0c:f7:28:06: cd:85:20:c3:15:95:e2:13:8c:65:f3:ab:38:f6:31: 3b:99:7e:e0:02:97:fe:d5:38:12:cf:ed:14:9f:5a: 48:47:31:36:b6:43:61:0a:59:5c:d0:53:c8:29:da: b0:92:cf:5b:08:6d:a6:bb:65:02:cd:7d:f8:17:c1: f8:7e:e8:49:2b:3a:54:9c:7b:99:dd:0f:8b:a3:0b: 49:1a:bc:c2:5f:e6:5a:81:c6:ad:58:57:06:59:86: 98:6c:70:ed:71:ec:4d:d9:52:8a:b7:4a:57:e0:b9: 0e:71:ab:27:32:7b:8f:ac:d1:87:96:ab:ee:4e:ed: e7:29:0b:62:c0:46:c6:07:05:cc:74:70:da:be:60: 5b:75:aa:c4:42:0f:0b:68:a9:58:ef:d0:f2:8d:e1: 7c:41:16:74:68:86:c1:56:c5:e3:1f:28:4f:32:71: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:26:99:63:A3:D8:A5:D9:6C:A1:5D:BB:37:63:12:26:80:6F:48:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/eddf1acb-5049-45cb-bca5-5af458d9f04f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 204.174.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:27:87:bb:be:13:35:02:58:84:7d:5c:3b:f5:82:97:80:e6: bc:65:fb:50:3e:f1:03:f7:fe:22:ca:60:a3:e1:3c:c6:25:82: 5d:5e:93:6c:c3:52:03:b1:a4:3c:16:5d:21:81:2f:2b:6f:2a: 59:5e:42:03:8c:dd:e5:5e:4e:24:9d:eb:24:30:d2:93:bc:d0: 3c:06:0b:6a:9f:0e:0a:99:46:81:17:28:87:04:c3:28:cc:26: c5:01:65:a1:7f:e5:38:c4:12:dd:43:41:af:45:d1:7a:21:af: 4a:59:0c:fd:a5:02:38:31:f9:98:c7:c9:91:d0:6d:58:9b:72: 73:b6:20:d6:54:55:d4:9e:a3:19:99:11:6c:00:82:44:35:44: c0:1e:60:9e:bb:54:c0:df:40:7f:d8:fd:4e:e9:f4:37:cb:14: e0:dc:89:54:f6:05:1d:12:ad:5e:0e:a8:f5:2f:1e:c9:b7:0c: ed:d4:33:15:ba:66:9a:c9:95:66:49:b7:59:ab:5a:0f:41:e5: 78:6d:19:2b:3f:81:9e:98:fb:26:f3:eb:93:f8:00:64:66:81: e5:06:4b:e9:a5:9f:b5:1b:61:68:e2:bd:89:ae:3e:3f:f6:f7: bc:a6:b9:35:cf:15:b3:d4:2f:b2:f1:b8:dd:df:08:f9:1c:9a: 5c:2f:49:8e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmdt5SaVDXlKhi90YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyMzAwNDUzN1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk ZWRkZjFhY2ItNTA0OS00NWNiLWJjYTUtNWFmNDU4ZDlmMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR6LXKbwfsTiIgvtLBNQAAJQr/eEvHXaQHFr MGLRzgKe+YPUtsbzFsT4fRQhn2oAXBaEToT26wYaBHlvqGdJb+YK7IezzrPsgh+G FeKVvh074wFraAz3KAbNhSDDFZXiE4xl86s49jE7mX7gApf+1TgSz+0Un1pIRzE2 tkNhCllc0FPIKdqwks9bCG2mu2UCzX34F8H4fuhJKzpUnHuZ3Q+LowtJGrzCX+Za gcatWFcGWYaYbHDtcexN2VKKt0pX4LkOcasnMnuPrNGHlqvuTu3nKQtiwEbGBwXM dHDavmBbdarEQg8LaKlY79DyjeF8QRZ0aIbBVsXjHyhPMnFz4QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFcmmWOj2KXZbKFduzdjEiaAb0jmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l ZGRmMWFjYi01MDQ5LTQ1Y2ItYmNhNS01YWY0NThkOWYwNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2VkZGYxYWNiLTUwNDktNDVjYi1i Y2E1LTVhZjQ1OGQ5ZjA0Zi9lZGRmMWFjYi01MDQ5LTQ1Y2ItYmNhNS01YWY0NThk OWYwNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPMrjgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfCeHu74TNQJYhH1cO/WC l4DmvGX7UD7xA/f+Ispgo+E8xiWCXV6TbMNSA7GkPBZdIYEvK28qWV5CA4zd5V5O JJ3rJDDSk7zQPAYLap8OCplGgRcohwTDKMwmxQFloX/lOMQS3UNBr0XReiGvSlkM /aUCODH5mMfJkdBtWJtyc7Yg1lRV1J6jGZkRbACCRDVEwB5gnrtUwN9Af9j9Tun0 N8sU4NyJVPYFHRKtXg6o9S8eybcM7dQzFbpmmsmVZkm3WataD0HleG0ZKz+Bnpj7 JvPrk/gAZGaB5QZL6aWftRthaOK9ia4+P/b3vKa5Nc8Vs9QvsvG43d8I+RyaXC9J jg== -----END CERTIFICATE-----Generated at Tue May 6 13:23:35 2025 by rpki-client