$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer File: 503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer (raw, json) Hash identifier: yZUAXvKFPSX1AWYn4uWIQ7DSGv6YipH58HJxAcKM4Us= Subject key identifier: 6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584911465AE0C79C9C3D64489300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Mar 2025 17:24:19 +0000 Certificate not after: Sun 06 Jun 2027 16:24:19 +0000 Subordinate resources: IP: 208.77.184.0/22 IP: 208.81.20.0/22 IP: 2606:7600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:46:5a:e0:c7:9c:9c:3d:64:48:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 3 17:24:19 2025 GMT Not After : Jun 6 16:24:19 2027 GMT Subject: CN=503b7ff7-eb05-4b50-bb5b-d7fc378b78dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e3:ac:7c:7a:4c:a4:d2:8b:84:52:18:23:27: 7e:4e:a6:c0:3a:8a:36:3f:3e:20:87:80:7e:d7:b2: ba:02:bc:13:2e:04:93:26:e1:d2:95:5f:5a:64:3c: 9e:8a:e7:58:d0:8a:74:3e:dd:25:46:99:e1:ba:14: b8:29:af:2c:0c:5b:e6:33:6b:8f:52:9f:24:02:ee: d9:7b:3b:fc:a6:fa:4a:52:8f:20:ec:5e:3f:b9:03: b8:f4:38:b0:c7:96:16:cd:7f:4a:10:09:5b:df:aa: aa:9d:2a:06:b8:ab:36:6b:8b:55:98:5f:ef:d8:8b: e2:a6:9f:a6:e0:68:0a:64:d2:8b:58:e5:63:51:38: f7:9d:9b:72:ae:3d:f5:4e:b0:93:3c:48:a4:fd:1d: b0:d0:94:89:ed:84:3c:4f:4a:7d:0f:d2:6b:1e:b2: 6f:f4:6c:0c:a4:e7:87:aa:c9:61:d4:eb:3f:c7:a2: ee:cf:da:06:b1:16:6c:ed:bf:bf:cc:f1:4b:6c:f7: bf:e5:8f:87:62:d9:10:7a:09:3c:bd:e2:dc:04:e1: a6:9f:ae:2a:18:57:ce:26:dd:af:6f:c9:5f:f0:81: b9:78:78:0e:b1:34:fe:31:b7:85:b0:1e:05:4d:db: c5:83:a1:5e:ad:e3:9e:fe:f0:03:74:bd:d8:f7:cf: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 208.77.184.0/22 208.81.20.0/22 IPv6: 2606:7600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a4:24:54:4d:f0:07:f8:05:78:b7:5b:de:59:c7:48:9b:72: 0e:7f:02:39:fc:95:a1:d7:3c:67:05:54:6b:09:02:65:cb:96: 05:e9:b7:ae:d7:a7:03:2e:f5:c4:99:41:71:46:e0:ec:86:c5: 29:28:e3:2a:4f:03:55:cc:39:ba:fa:54:d7:97:86:99:f5:97: f0:ba:a7:18:26:e9:32:21:4d:17:8b:05:a6:b5:e4:32:65:b4: bf:fe:db:5a:41:71:28:3a:82:f2:27:e8:aa:a1:05:8d:b7:11: b6:f0:74:88:7b:b4:b5:f6:64:0d:f1:f2:ed:b2:4c:04:ec:bc: d4:91:18:50:ae:5f:29:3b:2c:d1:db:34:fa:2e:73:f6:d2:99: ec:49:c2:a4:49:50:cd:fe:90:f0:fd:56:8b:be:b4:84:4a:b2: 1a:84:eb:b6:f0:33:8f:f4:6b:24:dc:d5:c1:70:31:9d:db:3e: e9:25:e7:bb:b6:24:fa:69:c8:3f:85:ad:46:02:a3:a0:fa:c3: dc:c3:9b:71:53:8b:c8:97:f4:ef:76:65:9c:19:c4:2b:91:34: be:2e:73:a6:7b:78:f9:40:d1:a9:9d:2a:c4:ac:75:0d:c6:90: 21:bb:35:93:40:52:a1:c2:a9:f0:79:87:92:23:f4:57:51:6e: 6b:61:81:9a -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEkRRlrgx5ycPWRIkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwMzE3MjQxOVoXDTI3MDYwNjE2MjQxOVowLzEtMCsGA1UEAxMk NTAzYjdmZjctZWIwNS00YjUwLWJiNWItZDdmYzM3OGI3OGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eOsfHpMpNKLhFIYIyd+TqbAOoo2Pz4gh4B+ 17K6ArwTLgSTJuHSlV9aZDyeiudY0Ip0Pt0lRpnhuhS4Ka8sDFvmM2uPUp8kAu7Z ezv8pvpKUo8g7F4/uQO49Diwx5YWzX9KEAlb36qqnSoGuKs2a4tVmF/v2Ivipp+m 4GgKZNKLWOVjUTj3nZtyrj31TrCTPEik/R2w0JSJ7YQ8T0p9D9JrHrJv9GwMpOeH qslh1Os/x6Luz9oGsRZs7b+/zPFLbPe/5Y+HYtkQegk8veLcBOGmn64qGFfOJt2v b8lf8IG5eHgOsTT+MbeFsB4FTdvFg6FereOe/vADdL3Y98+VRQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFGzcuCDE3EeMRUVGMOT5RR0gWQRsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 MDNiN2ZmNy1lYjA1LTRiNTAtYmI1Yi1kN2ZjMzc4Yjc4ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzUwM2I3ZmY3LWViMDUtNGI1MC1i YjViLWQ3ZmMzNzhiNzhkYy81MDNiN2ZmNy1lYjA1LTRiNTAtYmI1Yi1kN2ZjMzc4 Yjc4ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALQTbgDBALQURQwDQQCAAIwBwMFACYGdgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWaQkVE3wB/gFeLdb3lnHSJtyDn8COfyVodc8ZwVUawkCZcuWBem3rten Ay71xJlBcUbg7IbFKSjjKk8DVcw5uvpU15eGmfWX8LqnGCbpMiFNF4sFprXkMmW0 v/7bWkFxKDqC8ifoqqEFjbcRtvB0iHu0tfZkDfHy7bJMBOy81JEYUK5fKTss0ds0 +i5z9tKZ7EnCpElQzf6Q8P1Wi760hEqyGoTrtvAzj/RrJNzVwXAxnds+6SXnu7Yk +mnIP4WtRgKjoPrD3MObcVOLyJf073ZlnBnEK5E0vi5zpnt4+UDRqZ0qxKx1DcaQ Ibs1k0BSocKp8HmHkiP0V1Fua2GBmg== -----END CERTIFICATE-----Generated at Tue May 6 12:52:24 2025 by rpki-client