$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac.cer File: 5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac.cer (raw, json) Hash identifier: xrhh7n5J9l9nqEAc3Be/uOHGfWsHw5VQUWNZ3f0TQaU= Subject key identifier: 55:71:3A:D6:9A:12:74:BF:85:C6:E5:F4:17:6C:10:2F:CC:91:5F:2C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487AAF913CA590B6BC6E686B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jan 2025 18:49:15 +0000 Certificate not after: Tue 13 Apr 2027 17:49:15 +0000 Subordinate resources: IP: 205.134.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:af:91:3c:a5:90:b6:bc:6e:68:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 8 18:49:15 2025 GMT Not After : Apr 13 17:49:15 2027 GMT Subject: CN=5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3b:9c:c9:54:2b:0d:44:34:db:ca:44:70:00: 71:65:5b:4f:72:c3:5c:5e:67:14:f5:c5:4f:8d:cc: 1f:b5:bf:ae:d3:78:e9:e8:ac:ac:82:b8:bd:2e:cd: 41:25:c0:67:19:9a:cc:6d:bc:e4:a5:01:a5:ad:4c: d3:1d:be:74:c3:e3:20:6c:cf:2b:89:d8:fe:c0:05: 99:f6:ca:00:12:aa:87:bf:ca:e4:76:0d:7a:a7:de: 34:b8:f7:20:69:bf:ff:d4:74:bf:02:8f:62:39:84: d8:a2:85:c3:1b:c6:bc:fc:a1:f3:ec:0a:cd:9d:86: b8:3a:a1:28:f0:c2:a4:34:4a:f3:26:a7:e2:19:29: 24:52:58:7d:e5:4d:b1:58:9e:aa:16:39:8f:bd:19: 73:f5:47:dd:a2:eb:a1:a9:39:98:48:2c:1e:59:97: cf:ea:4a:57:67:65:ef:48:4c:3a:ca:d1:42:9c:4f: 9a:25:31:b8:e5:65:16:8c:7a:f2:3c:b3:40:9c:14: d3:5a:69:6e:15:e2:12:7d:82:47:ae:c8:08:8c:f6: fe:1a:18:20:58:1e:e5:e7:01:d1:5e:7d:3f:d0:df: 37:ab:64:ce:a4:d6:2e:34:05:07:c1:cd:b7:2f:fa: 93:86:6d:1d:e9:38:dd:f4:74:d9:02:e1:0e:32:da: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:71:3A:D6:9A:12:74:BF:85:C6:E5:F4:17:6C:10:2F:CC:91:5F:2C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 205.134.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6a:1b:1e:ce:b0:24:e6:74:34:1f:63:7a:47:37:5e:8e:93: 97:26:01:29:2f:84:8d:0d:f2:8d:ac:81:c1:f1:cf:0c:cc:f7: 96:98:04:0f:13:5f:2e:a5:fc:1d:1c:05:45:76:1d:05:d5:54: 74:e6:1c:24:62:3b:c7:24:ea:23:72:ec:b8:42:78:26:3f:23: b3:42:55:9b:9f:46:99:d1:d7:ed:7a:82:59:12:a4:1e:59:f2: 17:4f:82:24:d0:93:14:ad:cf:ce:1a:6e:b5:ef:f6:4e:3f:49: 15:e1:b4:e5:37:31:07:5f:14:31:13:f4:b4:66:43:3e:40:e5: 7f:ef:2e:06:65:68:4e:bb:71:de:16:9a:35:bd:91:66:d9:a0: 62:54:5c:eb:f5:a8:ab:0a:26:93:01:63:ae:c8:be:86:d3:90: 1f:88:0b:53:7d:69:f1:8a:65:e7:e8:ed:cd:dd:74:2a:43:62: 16:d2:88:59:e2:4a:82:b7:90:1a:25:b1:66:50:04:93:db:6e: af:d8:db:81:b0:22:ab:30:ca:05:07:dc:d1:71:3f:94:ec:3a: 6d:4f:c7:7d:99:1d:e3:6c:81:e8:d6:59:76:71:c4:c3:4e:bd: ce:09:99:d7:d3:cd:a4:c9:25:30:aa:91:77:b2:1c:35:5b:9e: 2e:fb:8c:f6 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEh6r5E8pZC2vG5oawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwODE4NDkxNVoXDTI3MDQxMzE3NDkxNVowLzEtMCsGA1UEAxMk NWMzODRmZmQtYjY3Yi00YTZkLTlhZjctYjRhZDhlZDg1ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTucyVQrDUQ028pEcABxZVtPcsNcXmcU9cVP jcwftb+u03jp6Kysgri9Ls1BJcBnGZrMbbzkpQGlrUzTHb50w+MgbM8ridj+wAWZ 9soAEqqHv8rkdg16p940uPcgab//1HS/Ao9iOYTYooXDG8a8/KHz7ArNnYa4OqEo 8MKkNErzJqfiGSkkUlh95U2xWJ6qFjmPvRlz9UfdouuhqTmYSCweWZfP6kpXZ2Xv SEw6ytFCnE+aJTG45WUWjHryPLNAnBTTWmluFeISfYJHrsgIjPb+GhggWB7l5wHR Xn0/0N83q2TOpNYuNAUHwc23L/qThm0d6Tjd9HTZAuEOMtqacwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFVxOtaaEnS/hcbl9BdsEC/MkV8sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 YzM4NGZmZC1iNjdiLTRhNmQtOWFmNy1iNGFkOGVkODVlYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVjMzg0ZmZkLWI2N2ItNGE2ZC05 YWY3LWI0YWQ4ZWQ4NWVhYy81YzM4NGZmZC1iNjdiLTRhNmQtOWFmNy1iNGFkOGVk ODVlYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXNhoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYmobHs6wJOZ0NB9jekc3 Xo6TlyYBKS+EjQ3yjayBwfHPDMz3lpgEDxNfLqX8HRwFRXYdBdVUdOYcJGI7xyTq I3LsuEJ4Jj8js0JVm59GmdHX7XqCWRKkHlnyF0+CJNCTFK3Pzhpute/2Tj9JFeG0 5TcxB18UMRP0tGZDPkDlf+8uBmVoTrtx3haaNb2RZtmgYlRc6/WoqwomkwFjrsi+ htOQH4gLU31p8Ypl5+jtzd10KkNiFtKIWeJKgreQGiWxZlAEk9tur9jbgbAiqzDK BQfc0XE/lOw6bU/HfZkd42yB6NZZdnHEw069zgmZ19PNpMklMKqRd7IcNVueLvuM 9g== -----END CERTIFICATE-----Generated at Tue May 6 06:17:38 2025 by rpki-client