$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c.cer File: 13f95d00-e723-4d02-a4d7-88fe5200506c.cer (raw, json) Hash identifier: /MRIOw96PXteaYPyIH5G6G8rstAFWXr3Gw5QcLiiZVY= Subject key identifier: A6:7D:68:B8:9B:31:85:E4:CE:33:14:66:7C:8E:62:5A:9B:00:6E:0C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848D89C3AFDC3870DE3C1982368 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/13f95d00-e723-4d02-a4d7-88fe5200506c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 10:16:17 +0000 Certificate not after: Mon 17 May 2027 09:16:17 +0000 Subordinate resources: IP: 153.40.0.0/16 IP: 163.35.0.0 -- 163.39.255.255 IP: 192.193.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d8:9c:3a:fd:c3:87:0d:e3:c1:98:23:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 11 10:16:17 2025 GMT Not After : May 17 09:16:17 2027 GMT Subject: CN=13f95d00-e723-4d02-a4d7-88fe5200506c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:70:d9:5b:df:b0:cf:8e:48:6b:dc:cb:57: af:91:dc:13:7d:70:ac:e1:08:52:b5:e5:9b:65:c3: fc:96:ad:be:95:ea:c8:6d:aa:c8:8a:f4:16:be:c9: 86:f1:fc:81:68:58:d2:3d:8f:dc:b9:c2:79:c1:d5: 24:4c:cd:7d:a3:f5:ea:6e:d4:fd:19:d6:8a:60:4b: 17:bb:dd:30:c7:90:0d:50:e2:36:82:9d:f1:0b:27: 7e:fc:1d:1e:42:49:c2:80:c2:46:e1:d1:93:32:4a: 85:fa:5a:91:6a:56:7c:09:7e:f7:04:ab:d8:c2:ec: 98:3f:57:0d:bb:46:6c:b0:8f:b5:13:db:62:01:cd: 40:6b:17:38:7e:dc:59:7a:a0:e4:93:d3:35:b1:cc: 65:af:51:32:6a:43:09:01:14:2c:53:da:02:71:f9: 73:8d:d3:d0:3e:f6:a0:ab:74:d6:c3:95:ed:64:21: 44:25:ae:92:43:95:61:30:84:78:92:f0:9d:18:ae: e2:c2:29:7d:d9:57:82:a6:0e:60:27:99:1e:33:a5: 6e:35:e9:da:f0:b6:57:4b:d2:c8:39:03:9f:07:dd: bc:4d:e5:e6:b9:a0:d2:f8:fb:e1:01:65:13:b6:aa: 8d:d4:c2:40:79:0b:1b:8b:40:f4:41:4c:53:2f:31: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7D:68:B8:9B:31:85:E4:CE:33:14:66:7C:8E:62:5A:9B:00:6E:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/13f95d00-e723-4d02-a4d7-88fe5200506c/13f95d00-e723-4d02-a4d7-88fe5200506c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 153.40.0.0/16 163.35.0.0-163.39.255.255 192.193.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:e5:52:15:98:6d:39:68:0d:1b:51:27:c3:fb:b9:33:c0:f0: 42:e2:30:6e:50:aa:47:0f:ec:fe:ac:41:48:64:58:08:2a:e9: 69:6f:6b:3e:82:b0:c1:cb:bb:e1:95:7a:21:de:5f:4a:82:19: fe:da:ce:a0:7d:cb:2e:14:34:93:3f:ff:a1:cc:6f:25:e3:fb: 3d:ed:19:1f:4f:a1:49:fa:b5:05:65:44:42:58:74:6e:96:ae: 00:87:08:a9:bb:86:75:a8:52:3b:76:91:87:ac:34:9e:69:86: 50:b3:fd:7e:0f:1d:86:43:3b:89:58:a2:e8:03:ab:26:09:5d: 2e:d4:ad:55:0b:3d:00:49:af:7b:c8:e4:1d:01:35:39:2a:c0: de:5e:2f:61:bd:51:72:70:77:c4:00:ba:4d:f2:be:73:5e:c2: c3:b6:ea:d5:ac:4c:1e:2b:1c:a1:a1:e5:39:06:ef:ab:d2:10: 79:78:72:3e:cb:ad:f4:6d:00:31:21:e5:e7:e1:8e:f6:51:48: c3:e7:9f:ad:fd:c8:9a:ee:a4:7b:12:4e:ad:76:73:45:a0:76: 98:0e:c0:98:8d:49:06:00:6a:3a:05:d1:a4:f1:bb:f3:79:d9: b5:41:5f:fd:91:f6:5d:80:1b:0d:f6:08:79:68:e9:51:37:1b: 6f:ff:49:0d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEjYnDr9w4cN48GYI2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMTEwMTYxN1oXDTI3MDUxNzA5MTYxN1owLzEtMCsGA1UEAxMk MTNmOTVkMDAtZTcyMy00ZDAyLWE0ZDctODhmZTUyMDA1MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4tw2VvfsM+OSGvcy1evkdwTfXCs4QhSteWb ZcP8lq2+lerIbarIivQWvsmG8fyBaFjSPY/cucJ5wdUkTM19o/XqbtT9GdaKYEsX u90wx5ANUOI2gp3xCyd+/B0eQknCgMJG4dGTMkqF+lqRalZ8CX73BKvYwuyYP1cN u0ZssI+1E9tiAc1Aaxc4ftxZeqDkk9M1scxlr1EyakMJARQsU9oCcflzjdPQPvag q3TWw5XtZCFEJa6SQ5VhMIR4kvCdGK7iwil92VeCpg5gJ5keM6VuNena8LZXS9LI OQOfB928TeXmuaDS+PvhAWUTtqqN1MJAeQsbi0D0QUxTLzEcQwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKZ9aLibMYXkzjMUZnyOYlqbAG4MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x M2Y5NWQwMC1lNzIzLTRkMDItYTRkNy04OGZlNTIwMDUwNmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzEzZjk1ZDAwLWU3MjMtNGQwMi1h NGQ3LTg4ZmU1MjAwNTA2Yy8xM2Y5NWQwMC1lNzIzLTRkMDItYTRkNy04OGZlNTIw MDUwNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMBwEAgABMBYDAwCZKDAKAwMAoyMDAwOjIAMDAMDBMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKjlUhWYbTloDRtRJ8P7uTPA8ELiMG5QqkcP7P6sQUhkWAgq6Wlvaz6CsMHLu+GV eiHeX0qCGf7azqB9yy4UNJM//6HMbyXj+z3tGR9PoUn6tQVlREJYdG6WrgCHCKm7 hnWoUjt2kYesNJ5phlCz/X4PHYZDO4lYougDqyYJXS7UrVULPQBJr3vI5B0BNTkq wN5eL2G9UXJwd8QAuk3yvnNewsO26tWsTB4rHKGh5TkG76vSEHl4cj7LrfRtADEh 5efhjvZRSMPnn639yJrupHsSTq12c0WgdpgOwJiNSQYAajoF0aTxu/N52bVBX/2R 9l2AGw32CHlo6VE3G2//SQ0= -----END CERTIFICATE-----Generated at Tue May 6 00:03:57 2025 by rpki-client