$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer (raw, json) Hash identifier: x4KtvolwHjIUHXL9idx3kbkmHiQiU1NcUWnW1LhL6Mc= Subject key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848E5942BFF1E188FAD830A2480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Feb 2025 01:45:32 +0000 Certificate not after: Sat 22 May 2027 00:45:32 +0000 Subordinate resources: IP: 74.117.52.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:94:2b:ff:1e:18:8f:ad:83:0a:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 16 01:45:32 2025 GMT Not After : May 22 00:45:32 2027 GMT Subject: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:aa:b1:0f:dd:bf:d0:26:4b:ea:3f:08:16: c3:6e:25:01:b6:73:1f:43:45:ca:27:7f:cb:31:31: 45:fe:1a:f0:fe:a5:d1:b3:47:56:30:99:29:f9:99: ca:e8:fd:5e:a2:71:2d:da:82:93:e0:0f:de:19:5d: c6:57:7b:38:ec:43:bc:c2:0d:7b:73:f8:31:7b:fc: d2:ed:be:aa:90:06:28:ea:db:1f:29:ef:97:fc:fc: 79:23:f2:6a:83:76:4e:d5:08:56:55:a3:c0:0f:b2: 91:bf:0a:4a:ac:17:2f:4b:34:11:0b:b5:54:5d:04: 5c:38:02:98:29:92:c3:fc:e6:66:97:e6:b3:11:38: 7f:16:ae:fa:10:ce:81:02:5b:3c:e9:68:be:97:d4: 06:0b:bb:8b:1a:e6:7c:5e:d7:80:0a:a1:25:12:ec: 5b:8b:a4:60:23:17:1b:cb:ca:9e:2c:57:40:61:d7: d4:5f:65:bf:cc:71:9e:88:c8:55:82:98:11:2c:46: 3c:cb:1c:7c:89:da:e7:b6:da:3c:d2:d4:8e:52:9a: 1b:3d:dd:99:28:9c:81:23:df:8c:e0:53:4b:6e:d6: 11:d8:fc:1c:00:7c:de:df:60:02:02:40:e4:15:d9: 59:53:72:95:c5:0e:ba:5f:58:fd:71:d2:71:fb:ea: f3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 74.117.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1c:c4:a2:c4:46:a7:c3:c2:90:1f:e4:46:70:bd:19:be:fd: 87:7d:98:79:4f:0c:15:38:ea:ce:e5:7f:f0:c3:1f:b7:f6:07: a7:2f:68:00:48:3d:4d:58:2e:9f:4b:ec:0d:13:b6:15:a1:32: 64:26:35:a2:3b:dc:d4:ed:ff:73:27:91:b3:d6:3a:ec:8d:c0: 40:6a:66:74:62:44:56:2b:f2:77:ad:e8:db:c5:42:2c:be:b7: 9e:06:02:47:51:6a:b3:a0:78:c0:83:b1:77:f1:8a:1f:7d:60: ca:29:37:4e:cd:20:56:5b:bb:d6:88:ef:da:2c:55:3c:63:3c: 1d:d8:0a:f1:b2:39:5e:74:4e:98:ed:e1:58:5b:90:e0:15:f2: 29:0d:27:11:60:c3:0c:da:b3:07:d5:ad:62:20:f2:c9:87:7e: bf:0b:cc:40:cb:d1:07:19:9f:85:7e:9b:a1:e5:1a:29:f0:9f: ab:5a:5c:99:d7:79:9e:14:4c:6f:02:95:3c:52:dd:af:dc:e3: de:56:86:4f:33:0a:f7:c1:9b:82:83:a7:02:fd:02:8e:09:2c: 29:fe:fc:9f:75:3c:3f:85:c8:11:c3:8a:66:58:4b:40:1b:c2: 12:5a:a9:72:d4:bb:27:31:b4:48:66:1c:9a:b1:47:b5:b4:b9: a6:09:b3:00 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjllCv/HhiPrYMKJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxNjAxNDUzMloXDTI3MDUyMjAwNDUzMlowLzEtMCsGA1UEAxMk ZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZiOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1yqsQ/dv9AmS+o/CBbDbiUBtnMfQ0XKJ3/L MTFF/hrw/qXRs0dWMJkp+ZnK6P1eonEt2oKT4A/eGV3GV3s47EO8wg17c/gxe/zS 7b6qkAYo6tsfKe+X/Px5I/Jqg3ZO1QhWVaPAD7KRvwpKrBcvSzQRC7VUXQRcOAKY KZLD/OZml+azETh/Fq76EM6BAls86Wi+l9QGC7uLGuZ8XteACqElEuxbi6RgIxcb y8qeLFdAYdfUX2W/zHGeiMhVgpgRLEY8yxx8idrntto80tSOUpobPd2ZKJyBI9+M 4FNLbtYR2PwcAHze32ACAkDkFdlZU3KVxQ66X1j9cdJx++rzHQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK/5VVClwZAYzlp9eDJWPDoLAq3eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k ZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2RkMGZmMjIxLWYwYzQtNGM1NC05 NmQ5LTVmM2UwZjE2YjhlMi9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYx NmI4ZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKdTQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACxzEosRGp8PCkB/kRnC9 Gb79h32YeU8MFTjqzuV/8MMft/YHpy9oAEg9TVgun0vsDRO2FaEyZCY1ojvc1O3/ cyeRs9Y67I3AQGpmdGJEVivyd63o28VCLL63ngYCR1Fqs6B4wIOxd/GKH31gyik3 Ts0gVlu71ojv2ixVPGM8HdgK8bI5XnROmO3hWFuQ4BXyKQ0nEWDDDNqzB9WtYiDy yYd+vwvMQMvRBxmfhX6boeUaKfCfq1pcmdd5nhRMbwKVPFLdr9zj3laGTzMK98Gb goOnAv0CjgksKf78n3U8P4XIEcOKZlhLQBvCElqpctS7JzG0SGYcmrFHtbS5pgmz AA== -----END CERTIFICATE-----Generated at Tue May 6 03:39:49 2025 by rpki-client