$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer File: d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer (raw, json) Hash identifier: s4nbd8rHf524RGH2qKGmb2vmDOHa3t53Xk+xvHZTopk= Subject key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849753CA15D7B356B7BB5C3A3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Apr 2025 12:45:34 +0000 Certificate not after: Mon 12 Jul 2027 12:45:34 +0000 Subordinate resources: IP: 104.193.192.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:3c:a1:5d:7b:35:6b:7b:b5:c3:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 8 12:45:34 2025 GMT Not After : Jul 12 12:45:34 2027 GMT Subject: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:8c:81:50:ce:4f:df:56:59:3d:d5:64:40: 36:61:70:e0:c2:f6:0d:e7:b0:6c:a0:ef:0a:34:db: 3b:32:fb:09:ef:91:5d:f7:92:a4:42:d3:48:25:ee: 48:70:33:f4:76:c0:88:50:2a:11:1f:22:2d:d4:d1: 34:d1:7b:74:26:7e:e1:c4:ab:bc:5d:21:67:5d:00: ae:a6:6d:90:40:72:ac:8d:0f:c0:1e:a2:0c:59:f4: d0:4a:3e:da:eb:c7:a1:6b:3a:0b:b6:5c:c8:76:8f: 0e:a9:a2:c8:9f:aa:4b:ca:8a:75:a2:f6:05:e8:36: 07:6c:0b:9e:82:4f:92:38:d9:ff:08:14:05:8c:2e: 26:b7:d7:a1:23:6b:cb:f1:1b:ce:4e:56:fd:cd:b1: 6d:25:7d:bd:d0:b6:e8:62:e2:38:fa:f2:3c:34:de: 85:0d:34:21:ce:9b:a3:6d:b5:c8:53:5a:11:81:f6: f9:18:f0:13:f1:4b:f3:ed:aa:49:dc:6b:b7:71:87: a5:c1:e8:c9:c2:d5:a7:ec:0e:ae:f9:a8:6c:8b:6f: c7:03:24:a1:58:0d:0e:c9:1d:db:09:db:5f:31:df: d4:4e:86:3a:f0:bb:6e:13:35:e1:51:d2:62:4d:66: 75:59:ee:28:37:8e:4f:4f:49:51:96:4f:0d:49:8f: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.193.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:02:d8:65:c1:97:23:a0:02:63:54:0b:8b:13:47:b3:34:21: 5a:69:d1:5a:88:d7:ea:93:c2:44:20:0f:8e:c5:13:ef:6c:f7: 74:41:33:b8:5a:be:9c:cf:a4:78:34:17:c5:8f:dd:6f:d1:df: 8c:eb:04:13:ff:bf:94:f8:1d:08:9b:82:e7:55:7c:fe:ca:e3: cc:57:50:ae:71:ff:d7:ee:34:33:4c:54:56:75:bf:5f:83:55: 04:44:75:8e:bd:d6:4b:65:d8:26:80:9b:3a:16:8e:26:95:3b: 45:c2:bd:6c:3a:b9:37:b4:6a:70:de:c4:37:3d:48:d9:3e:b9: 15:5e:1b:b0:74:7a:e7:6f:cb:39:85:9b:9c:3d:ab:f3:90:72: de:ee:4a:f5:cf:7d:cc:72:8f:31:95:d5:b1:89:bc:20:00:7f: 88:f7:28:f8:a5:b6:fc:06:b5:5d:1b:e4:91:1a:73:67:4f:32: 11:ab:9a:7e:d5:47:49:1a:36:2b:d9:85:0d:75:10:ec:31:a8: 60:50:77:5f:9e:6d:cc:f0:d6:7f:15:15:40:a3:44:f0:07:8a: 0e:cb:68:16:86:f4:d9:85:f2:1b:a1:6c:3c:78:64:54:56:94: af:79:67:d2:2b:0e:5e:14:14:9f:be:45:6d:c1:ff:22:f9:98: 75:be:a1:f7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEl1PKFdezVre7XDo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwODEyNDUzNFoXDTI3MDcxMjEyNDUzNFowLzEtMCsGA1UEAxMk ZDBlYTEyZmYtZjk1NC00MjI5LTg4YTItZDJjNjY1NmEwZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuKMgVDOT99WWT3VZEA2YXDgwvYN57BsoO8K NNs7MvsJ75Fd95KkQtNIJe5IcDP0dsCIUCoRHyIt1NE00Xt0Jn7hxKu8XSFnXQCu pm2QQHKsjQ/AHqIMWfTQSj7a68ehazoLtlzIdo8OqaLIn6pLyop1ovYF6DYHbAue gk+SONn/CBQFjC4mt9ehI2vL8RvOTlb9zbFtJX290LboYuI4+vI8NN6FDTQhzpuj bbXIU1oRgfb5GPAT8Uvz7apJ3Gu3cYelwejJwtWn7A6u+ahsi2/HAyShWA0OyR3b CdtfMd/UToY68LtuEzXhUdJiTWZ1We4oN45PT0lRlk8NSY9g6QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFNEfwljklB3z2Wm7g99H+a9zqSzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2YTBlY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QwZWExMmZmLWY5NTQtNDIyOS04 OGEyLWQyYzY2NTZhMGVjYS9kMGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2 YTBlY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJowcAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkQLYZcGXI6ACY1QLixNH szQhWmnRWojX6pPCRCAPjsUT72z3dEEzuFq+nM+keDQXxY/db9HfjOsEE/+/lPgd CJuC51V8/srjzFdQrnH/1+40M0xUVnW/X4NVBER1jr3WS2XYJoCbOhaOJpU7RcK9 bDq5N7RqcN7ENz1I2T65FV4bsHR652/LOYWbnD2r85By3u5K9c99zHKPMZXVsYm8 IAB/iPco+KW2/Aa1XRvkkRpzZ08yEauaftVHSRo2K9mFDXUQ7DGoYFB3X55tzPDW fxUVQKNE8AeKDstoFob02YXyG6FsPHhkVFaUr3ln0isOXhQUn75FbcH/IvmYdb6h 9w== -----END CERTIFICATE-----Generated at Tue May 6 10:29:31 2025 by rpki-client