$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer File: e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer (raw, json) Hash identifier: sbCqjzq1tnK2rXfHKb43BU36rfsKZV9rUKomOr4K+WU= Subject key identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584953F3F64B7A38844E2B49BA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Mar 2025 14:37:28 +0000 Certificate not after: Wed 30 Jun 2027 14:37:28 +0000 Subordinate resources: IP: 146.88.208.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:f3:f6:4b:7a:38:84:4e:2b:49:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 27 14:37:28 2025 GMT Not After : Jun 30 14:37:28 2027 GMT Subject: CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:2d:64:ad:3e:3c:e1:07:13:cc:fd:f3:56: 03:81:18:10:64:35:eb:5d:90:ef:6a:f4:14:2b:25: d0:5a:af:bf:f4:bd:73:6f:28:20:8f:55:4e:01:e9: 59:88:90:fe:68:e8:2c:33:4b:08:9f:57:56:6b:69: 66:f7:ed:0e:cd:1b:36:f7:0c:e4:8b:f9:3e:90:34: cf:8a:0e:15:5e:a9:31:9c:ee:b6:b3:81:f7:18:f7: 88:fa:28:f8:ca:af:cf:71:39:91:ce:a9:06:af:d7: 6d:05:65:f2:73:eb:87:8a:0c:b2:e0:bc:83:30:0e: 82:9c:ab:5b:b3:dc:5d:94:52:b4:f9:1b:c9:92:5c: 3c:cc:b2:16:3c:ca:37:30:01:4f:3e:5b:29:53:b4: 04:50:78:f4:0d:7b:07:9d:20:54:f1:15:c0:dc:75: 67:7c:a5:d0:e9:6f:ec:37:67:1f:6e:f9:79:ec:90: cd:8f:bd:5a:c2:63:3c:9c:34:c4:29:79:3d:85:4a: 1f:60:40:ce:4a:09:83:e2:64:55:4f:6f:16:ef:2a: 1c:b3:68:b8:c1:10:f9:9f:84:d3:13:e7:71:dd:b4: 80:43:7b:3f:bd:3c:fb:55:64:fa:d6:ac:39:4f:22: 8d:1e:5e:d3:30:80:b8:d1:0d:d9:96:ba:87:1f:61: 52:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 146.88.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:fa:c0:3c:2f:01:02:90:33:36:20:e5:e5:43:6b:f9:f6:c2: 25:fd:58:81:3c:35:f8:d4:e1:7b:66:a4:22:fa:05:b1:14:94: fb:c1:62:e9:da:d4:45:fa:e7:11:a0:c4:50:01:b3:2c:38:13: c7:8e:27:71:4f:81:ac:89:ec:5b:8d:c5:54:10:4c:02:aa:4b: 06:3f:14:58:77:6f:ab:86:19:f7:d3:f6:56:12:bd:16:61:22: 9f:22:de:d2:83:c9:fc:4f:24:6c:fa:f7:32:4a:08:a6:85:9e: 24:08:28:3f:73:67:46:c5:27:f4:fd:c8:73:cb:20:27:0a:84: a4:70:de:c6:80:5c:54:aa:64:76:75:5a:83:7f:41:7b:a3:ae: ab:0b:11:1f:ab:7f:8f:70:e5:a1:96:27:47:20:02:b0:35:b7: 4a:5b:72:19:28:f7:20:70:7c:31:6e:03:14:49:28:20:3c:29: 3f:a4:6c:d0:79:47:71:f4:32:be:94:85:4d:c6:78:33:34:a4: b7:2e:29:41:1b:b6:6f:e0:d9:9d:87:fd:f0:b1:de:c1:90:26: d6:8e:0d:de:b8:7e:39:9b:1f:36:d7:cd:0e:0e:a3:05:8d:7d: c2:53:42:05:06:29:a0:82:86:1e:9a:6f:82:7d:bc:cf:67:06: 53:9a:6d:a6 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElT8/ZLejiETitJugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNzE0MzcyOFoXDTI3MDYzMDE0MzcyOFowLzEtMCsGA1UEAxMk ZTA0YzAzN2QtZjA2ZC00YzAxLTlhZjUtZWYwYjJhZDNlZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+0tZK0+POEHE8z981YDgRgQZDXrXZDvavQU KyXQWq+/9L1zbyggj1VOAelZiJD+aOgsM0sIn1dWa2lm9+0OzRs29wzki/k+kDTP ig4VXqkxnO62s4H3GPeI+ij4yq/PcTmRzqkGr9dtBWXyc+uHigyy4LyDMA6CnKtb s9xdlFK0+RvJklw8zLIWPMo3MAFPPlspU7QEUHj0DXsHnSBU8RXA3HVnfKXQ6W/s N2cfbvl57JDNj71awmM8nDTEKXk9hUofYEDOSgmD4mRVT28W7yocs2i4wRD5n4TT E+dx3bSAQ3s/vTz7VWT61qw5TyKNHl7TMIC40Q3ZlrqHH2FSqwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFINb+dDyfWUtloYv6Faquh2fxWCDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l MDRjMDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBiMmFkM2VkZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2UwNGMwMzdkLWYwNmQtNGMwMS05 YWY1LWVmMGIyYWQzZWRlOC9lMDRjMDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBiMmFk M2VkZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOSWNAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkPrAPC8BApAzNiDl5UNr +fbCJf1YgTw1+NThe2akIvoFsRSU+8Fi6drURfrnEaDEUAGzLDgTx44ncU+BrIns W43FVBBMAqpLBj8UWHdvq4YZ99P2VhK9FmEinyLe0oPJ/E8kbPr3MkoIpoWeJAgo P3NnRsUn9P3Ic8sgJwqEpHDexoBcVKpkdnVag39Be6OuqwsRH6t/j3DloZYnRyAC sDW3SltyGSj3IHB8MW4DFEkoIDwpP6Rs0HlHcfQyvpSFTcZ4MzSkty4pQRu2b+DZ nYf98LHewZAm1o4N3rh+OZsfNtfNDg6jBY19wlNCBQYpoIKGHppvgn28z2cGU5pt pg== -----END CERTIFICATE-----Generated at Mon May 12 22:01:42 2025 by rpki-client