$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1.cer File: 0904b695-2226-49f0-a43e-0bd98a26b3c1.cer (raw, json) Hash identifier: PYBFNQi8ceArYipfHagUKuAKSDzpIHWfiApMkDfv27Y= Subject key identifier: 7B:1B:39:1D:D3:E3:AA:B4:D2:C0:F6:77:DB:AC:88:99:87:53:5A:AE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858492A901DA7BE7129F6B5F1EA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1/0904b695-2226-49f0-a43e-0bd98a26b3c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Mar 2025 18:48:09 +0000 Certificate not after: Tue 15 Jun 2027 18:48:09 +0000 Subordinate resources: IP: 192.80.58.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:90:1d:a7:be:71:29:f6:b5:f1:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 12 18:48:09 2025 GMT Not After : Jun 15 18:48:09 2027 GMT Subject: CN=0904b695-2226-49f0-a43e-0bd98a26b3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:32:1f:f3:69:87:6a:27:59:7d:e8:a5:10:c3: 96:08:cf:bc:8c:80:da:1e:bf:4d:d8:e0:03:41:5e: e3:ac:b1:4b:4c:5d:22:ee:7f:b1:55:07:a5:b8:96: a9:57:90:b4:3a:69:b9:ce:08:4b:33:44:58:f1:6f: d8:c9:c3:e9:4a:e8:b1:3c:66:c4:cf:f9:79:8b:c5: bf:71:5d:dc:49:3d:05:24:4d:45:36:73:3e:03:e2: 90:f8:ab:2f:b3:92:a4:d3:ee:1a:4f:ea:eb:6c:12: 9b:5e:b3:14:a8:5d:56:0e:80:ff:c4:a4:78:af:96: c9:77:c0:e5:c5:76:27:cb:01:82:9a:3b:f3:76:d7: fa:ac:74:74:93:11:46:88:1e:d3:6f:de:9e:ee:eb: b5:48:76:cf:2e:20:83:34:b5:25:9a:ff:40:c0:d8: 0e:3f:e5:89:74:7d:fd:27:09:69:90:da:ed:90:12: 5d:87:1d:1f:a8:0e:94:21:f7:e0:d4:03:56:30:4b: ff:ed:0d:9a:b2:32:1b:07:cf:a3:23:31:9a:cf:01: ef:e7:52:db:be:cf:2b:d6:57:94:38:47:72:68:c8: 3b:3d:06:b9:a6:f8:74:39:5f:70:29:1c:30:a4:67: ac:e9:b8:ea:89:30:c2:3a:3b:fe:af:53:d4:0d:10: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1B:39:1D:D3:E3:AA:B4:D2:C0:F6:77:DB:AC:88:99:87:53:5A:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0904b695-2226-49f0-a43e-0bd98a26b3c1/0904b695-2226-49f0-a43e-0bd98a26b3c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.80.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f2:5f:6e:32:f6:c5:3e:57:2d:f1:1f:e4:74:d0:18:ba:39: 46:48:ea:d6:d6:ec:17:43:16:a8:2c:74:a9:55:3f:16:b5:45: 85:7e:03:bb:66:2a:24:4a:f7:f3:bc:38:ad:78:60:ac:b8:32: d2:30:cc:04:0a:9c:e5:96:89:ea:ec:f9:5e:28:52:ff:4c:3d: 8a:e6:cc:22:68:44:0d:0d:77:08:d3:9b:1f:dd:45:23:b6:11: 6b:0f:f6:43:3a:99:47:80:1a:d7:7f:83:a0:89:c0:a9:32:a8: 17:5a:79:b9:03:8f:c1:ae:1d:da:c3:f0:d4:88:27:18:a6:06: 3b:bb:34:87:e6:4a:66:24:6a:cd:7d:72:8e:66:70:8f:1e:6c: f1:d3:9e:5c:14:ac:1b:9e:c2:d6:8c:f9:93:2e:73:45:b1:9a: 7d:8b:44:4d:c9:ec:42:3e:d1:b6:0b:9c:a6:bc:82:94:87:c9: 7c:ca:d4:d7:7a:23:eb:e8:56:e7:83:02:a6:3c:d5:c4:59:63: 80:77:13:a0:df:35:51:27:2b:9f:aa:11:3a:3c:f0:c3:1f:fc: e2:18:f9:9a:a3:9b:8c:b1:6d:d9:08:5f:0d:87:f0:83:ea:6a: ff:6b:03:0b:8c:ef:e1:64:0a:f9:83:4e:2a:73:f0:d7:c0:f4: ac:b0:19:3c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEkqkB2nvnEp9rXx6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxMjE4NDgwOVoXDTI3MDYxNTE4NDgwOVowLzEtMCsGA1UEAxMk MDkwNGI2OTUtMjIyNi00OWYwLWE0M2UtMGJkOThhMjZiM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TIf82mHaidZfeilEMOWCM+8jIDaHr9N2OAD QV7jrLFLTF0i7n+xVQeluJapV5C0Omm5zghLM0RY8W/YycPpSuixPGbEz/l5i8W/ cV3cST0FJE1FNnM+A+KQ+Ksvs5Kk0+4aT+rrbBKbXrMUqF1WDoD/xKR4r5bJd8Dl xXYnywGCmjvzdtf6rHR0kxFGiB7Tb96e7uu1SHbPLiCDNLUlmv9AwNgOP+WJdH39 JwlpkNrtkBJdhx0fqA6UIffg1ANWMEv/7Q2asjIbB8+jIzGazwHv51Lbvs8r1leU OEdyaMg7PQa5pvh0OV9wKRwwpGes6bjqiTDCOjv+r1PUDRA75wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHsbOR3T46q00sD2d9usiJmHU1quMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8w OTA0YjY5NS0yMjI2LTQ5ZjAtYTQzZS0wYmQ5OGEyNmIzYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzA5MDRiNjk1LTIyMjYtNDlmMC1h NDNlLTBiZDk4YTI2YjNjMS8wOTA0YjY5NS0yMjI2LTQ5ZjAtYTQzZS0wYmQ5OGEy NmIzYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAUDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEPJfbjL2xT5XLfEf5HTQ GLo5Rkjq1tbsF0MWqCx0qVU/FrVFhX4Du2YqJEr387w4rXhgrLgy0jDMBAqc5ZaJ 6uz5XihS/0w9iubMImhEDQ13CNObH91FI7YRaw/2QzqZR4Aa13+DoInAqTKoF1p5 uQOPwa4d2sPw1IgnGKYGO7s0h+ZKZiRqzX1yjmZwjx5s8dOeXBSsG57C1oz5ky5z RbGafYtETcnsQj7RtgucpryClIfJfMrU13oj6+hW54MCpjzVxFljgHcToN81UScr n6oROjzwwx/84hj5mqObjLFt2QhfDYfwg+pq/2sDC4zv4WQK+YNOKnPw18D0rLAZ PA== -----END CERTIFICATE-----Generated at Wed May 7 11:39:20 2025 by rpki-client