$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer File: fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer (raw, json) Hash identifier: Td7pcP02q1BOqlUIn09F43M9RTVXXdMrYZF0Jch7aQw= Subject key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849C8D79FB86B4C3B0EF7D2A740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 May 2025 11:29:57 +0000 Certificate not after: Wed 11 Aug 2027 11:29:57 +0000 Subordinate resources: IP: 157.239.0.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c8:d7:9f:b8:6b:4c:3b:0e:f7:d2:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 8 11:29:57 2025 GMT Not After : Aug 11 11:29:57 2027 GMT Subject: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:e3:5e:8d:7c:2c:57:78:92:71:60:f1:7f: e2:d0:ad:cd:2a:f2:50:ea:f6:58:96:7b:d5:b1:7b: a7:48:e7:d7:b3:2f:4a:ec:91:9c:18:05:b4:51:6b: 35:62:1b:ac:3f:0c:5c:55:ac:e4:c6:12:59:6d:9d: b1:6c:2c:ab:b8:aa:20:69:d3:cd:80:b4:12:c5:75: bf:1e:5e:43:58:be:35:e7:a3:8e:e2:a7:af:35:0e: a0:43:ea:53:4e:d1:41:c2:bf:1b:06:0d:a6:c5:93: a7:20:d6:4f:9d:d3:de:b0:de:28:bd:a3:0c:6e:63: a3:61:a4:4f:2b:a3:fe:c5:5c:1b:00:fd:0c:2b:48: 69:ab:9c:1f:d9:76:57:db:48:9f:f0:67:c4:58:89: 40:ca:9c:fa:58:63:34:df:f0:d4:1c:93:46:83:15: a3:98:17:8a:ad:fe:c7:22:3e:56:b7:ce:fd:0e:ff: 28:a2:04:01:bf:57:92:14:1d:8e:a6:e2:03:b0:8c: 11:93:8e:0b:c0:8c:01:ab:97:45:cd:58:22:85:41: 21:75:8e:cf:1d:63:0b:19:e6:af:0d:07:ab:02:58: af:9b:10:70:da:62:57:8e:cc:af:8c:07:2b:87:33: 1b:94:f1:87:de:8e:79:07:12:b6:5d:0a:59:2b:d7: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 157.239.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d2:0c:ab:8c:c3:77:66:25:6a:7e:a2:c6:ed:27:7d:0e:8f: 72:96:9f:e3:fe:ec:63:a7:94:5f:bb:60:6c:3e:84:02:9b:9b: 68:d9:60:cb:d8:96:b0:8f:2a:28:e3:62:68:8b:e9:9f:2a:73: e8:f3:72:94:b7:6a:af:9c:81:bc:c2:6b:aa:87:d7:5c:3e:37: 0b:b4:84:ba:e9:3a:66:ab:f5:67:df:4e:c4:99:03:11:8b:e3: 91:98:21:c1:94:82:0c:73:1d:57:d7:79:cf:6b:38:e1:c1:88: 81:72:1d:b7:1d:07:0d:1a:94:71:03:f4:1c:21:a9:55:92:71: 81:ba:dc:ea:7d:a4:41:7c:49:28:d0:60:97:76:d6:28:34:24: 45:e0:1b:9d:f5:96:69:0b:a1:39:65:a7:76:3b:4a:9d:d5:52: 6c:94:ce:00:d3:8f:fe:78:cd:0c:96:4b:8d:9d:df:51:d0:30: 83:00:0b:3d:e2:ce:0e:c9:87:a0:fb:9e:e1:b6:58:36:f0:3f: 99:c1:9c:f6:a0:d1:83:ff:e8:87:6e:39:08:c5:44:f4:63:d6: 72:15:41:7b:19:19:72:51:51:e4:f4:4b:7c:c8:2a:a1:3a:91: 73:d6:d6:41:c5:55:5e:5e:f2:21:31:01:6b:81:8d:7d:00:00: 92:0a:fc:e1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEnI15+4a0w7DvfSp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwODExMjk1N1oXDTI3MDgxMTExMjk1N1owLzEtMCsGA1UEAxMk ZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2ExZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSbjXo18LFd4knFg8X/i0K3NKvJQ6vZYlnvV sXunSOfXsy9K7JGcGAW0UWs1YhusPwxcVazkxhJZbZ2xbCyruKogadPNgLQSxXW/ Hl5DWL4156OO4qevNQ6gQ+pTTtFBwr8bBg2mxZOnINZPndPesN4ovaMMbmOjYaRP K6P+xVwbAP0MK0hpq5wf2XZX20if8GfEWIlAypz6WGM03/DUHJNGgxWjmBeKrf7H Ij5Wt879Dv8oogQBv1eSFB2OpuIDsIwRk44LwIwBq5dFzVgihUEhdY7PHWMLGeav DQerAlivmxBw2mJXjsyvjAcrhzMblPGH3o55BxK2XQpZK9fXbQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDxsaTlkZJKPIM44yiZmG8hp9lI8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m ZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZkZDRiNWFkLWJiY2EtNGZlOS04 NWI0LThmMmU1Y2NhMWQ0Ny9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNj YTFkNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAWd7wAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb9IMq4zDd2Ylan6ixu0n fQ6Pcpaf4/7sY6eUX7tgbD6EApubaNlgy9iWsI8qKONiaIvpnypz6PNylLdqr5yB vMJrqofXXD43C7SEuuk6Zqv1Z99OxJkDEYvjkZghwZSCDHMdV9d5z2s44cGIgXId tx0HDRqUcQP0HCGpVZJxgbrc6n2kQXxJKNBgl3bWKDQkReAbnfWWaQuhOWWndjtK ndVSbJTOANOP/njNDJZLjZ3fUdAwgwALPeLODsmHoPue4bZYNvA/mcGc9qDRg//o h245CMVE9GPWchVBexkZclFR5PRLfMgqoTqRc9bWQcVVXl7yITEBa4GNfQAAkgr8 4Q== -----END CERTIFICATE-----Generated at Mon May 12 18:04:55 2025 by rpki-client