$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16.cer File: 483acfc7-39d2-4411-8cda-97152f12ce16.cer (raw, json) Hash identifier: Z1g0z/r+1IseyKjIP5iJ90CNdD40dm4ipaUD1iZcurw= Subject key identifier: CF:CE:BC:D0:44:F4:46:17:80:0A:66:51:B0:57:13:33:07:B2:41:2E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849017F03A877F4F57F2551ED80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/483acfc7-39d2-4411-8cda-97152f12ce16.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 01:45:33 +0000 Certificate not after: Tue 01 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 23.138.112.0/22 IP: 2602:fe55::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:7f:03:a8:77:f4:f5:7f:25:51:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 26 01:45:33 2025 GMT Not After : Jun 1 00:45:33 2027 GMT Subject: CN=483acfc7-39d2-4411-8cda-97152f12ce16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:94:65:bf:43:9f:20:50:c6:fa:e3:a2:ba: 8c:78:f9:37:8d:2d:31:3b:15:96:98:12:68:b9:79: 12:a1:7c:91:39:73:6e:48:0f:e1:f6:ec:52:49:32: cc:c8:1b:e4:ce:84:1e:01:82:23:e6:45:c0:ef:9c: bf:f3:92:97:d1:2e:b5:f7:10:65:9e:53:fa:4f:79: b5:f3:af:49:a0:7d:b6:7a:91:d3:60:43:8c:c2:fa: 36:bb:15:5c:e8:55:53:af:11:2b:75:44:50:90:c0: 3c:2f:1d:c4:4c:d6:6e:8b:07:2e:70:56:2a:10:96: b7:b2:c9:4d:26:64:79:09:59:17:e6:bf:bc:dc:6a: fc:4b:a8:ae:93:73:c2:22:28:83:21:4f:b8:17:c6: bb:14:df:09:19:5c:a1:6d:40:49:d7:2d:de:33:c7: 09:57:3d:76:c5:ab:80:3b:69:a7:4c:f6:69:4d:26: 6f:eb:78:a2:0b:25:05:36:12:4b:5a:34:12:c7:5b: b4:3b:2d:64:0e:fa:97:eb:6d:d0:15:3c:8a:37:d4: 94:a4:77:b2:79:6b:d8:49:56:ac:e0:b4:f8:c5:0b: 1c:83:e1:fd:35:5d:24:c0:90:0c:89:bb:99:82:3b: 11:ef:f7:6c:70:1a:a2:0a:3b:8d:67:ab:6b:24:d1: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:BC:D0:44:F4:46:17:80:0A:66:51:B0:57:13:33:07:B2:41:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/483acfc7-39d2-4411-8cda-97152f12ce16.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.138.112.0/22 IPv6: 2602:fe55::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1d:1d:30:30:3c:ab:52:33:8c:3b:7f:ed:2d:0d:54:2e:87: d3:6b:3d:79:93:f3:5e:28:f8:07:85:0b:5e:7f:22:79:a4:de: c9:1a:2b:6e:63:5a:26:ea:01:a3:73:a8:7b:dc:a6:9b:b0:70: 0c:c5:62:9d:38:73:45:cd:0d:2e:f8:b1:82:a1:10:7f:ab:7a: 85:8c:fa:d1:62:42:67:5a:59:21:08:87:77:39:98:97:ce:97: dd:63:13:8c:04:44:98:85:7b:6f:8c:ac:ef:f2:c9:7b:9a:d8: 26:10:d5:4c:44:63:5e:48:60:9a:67:02:b9:43:ac:fc:76:0d: b5:45:71:4e:0e:7f:90:31:cb:8a:06:63:a4:69:f7:07:7d:5b: bb:16:87:a4:47:7b:65:30:7f:b2:94:83:b7:28:b8:5a:ba:f5: c2:38:47:3b:d0:a1:cf:67:0c:17:62:78:96:da:97:94:a9:43: e7:56:6c:c3:05:cd:3a:c5:a9:e3:da:ee:d4:6f:5b:5a:a5:96: da:2d:fd:dd:9d:90:f3:57:7b:c8:51:86:86:e8:c1:84:ca:12: aa:f6:1d:12:f1:d8:34:9a:4f:b7:5d:3b:ae:cc:eb:8e:f4:38: 96:b0:db:65:4b:05:ec:9d:12:50:ae:44:d4:ad:50:5f:6e:fb: 41:dc:02:7f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEkBfwOod/T1fyVR7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIyNjAxNDUzM1oXDTI3MDYwMTAwNDUzM1owLzEtMCsGA1UEAxMk NDgzYWNmYzctMzlkMi00NDExLThjZGEtOTcxNTJmMTJjZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysyUZb9DnyBQxvrjorqMePk3jS0xOxWWmBJo uXkSoXyROXNuSA/h9uxSSTLMyBvkzoQeAYIj5kXA75y/85KX0S619xBlnlP6T3m1 869JoH22epHTYEOMwvo2uxVc6FVTrxErdURQkMA8Lx3ETNZuiwcucFYqEJa3sslN JmR5CVkX5r+83Gr8S6iuk3PCIiiDIU+4F8a7FN8JGVyhbUBJ1y3eM8cJVz12xauA O2mnTPZpTSZv63iiCyUFNhJLWjQSx1u0Oy1kDvqX623QFTyKN9SUpHeyeWvYSVas 4LT4xQscg+H9NV0kwJAMibuZgjsR7/dscBqiCjuNZ6trJNFXRwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFM/OvNBE9EYXgApmUbBXEzMHskEuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 ODNhY2ZjNy0zOWQyLTQ0MTEtOGNkYS05NzE1MmYxMmNlMTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ4M2FjZmM3LTM5ZDItNDQxMS04 Y2RhLTk3MTUyZjEyY2UxNi80ODNhY2ZjNy0zOWQyLTQ0MTEtOGNkYS05NzE1MmYx MmNlMTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAIXinAwDgQCAAIwCAMGBCYC/lUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABcdHTAwPKtSM4w7f+0tDVQuh9NrPXmT814o+AeFC15/Inmk3skaK25jWibqAaNz qHvcppuwcAzFYp04c0XNDS74sYKhEH+reoWM+tFiQmdaWSEIh3c5mJfOl91jE4wE RJiFe2+MrO/yyXua2CYQ1UxEY15IYJpnArlDrPx2DbVFcU4Of5Axy4oGY6Rp9wd9 W7sWh6RHe2Uwf7KUg7couFq69cI4RzvQoc9nDBdieJbal5SpQ+dWbMMFzTrFqePa 7tRvW1qlltot/d2dkPNXe8hRhobowYTKEqr2HRLx2DSaT7ddO67M6470OJaw22VL BeydElCuRNStUF9u+0HcAn8= -----END CERTIFICATE-----Generated at Wed May 7 11:41:29 2025 by rpki-client