$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer File: 5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer (raw, json) Hash identifier: DXXOBvAhAOZ14ryyBz7qQ/IFOuEULz3SdJWwxwo2jVo= Subject key identifier: B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858496770D53C85266139E391EC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Apr 2025 14:09:26 +0000 Certificate not after: Wed 28 Apr 2027 17:20:17 +0000 Subordinate resources: IP: 104.238.196.0/24 IP: 199.182.205.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:70:d5:3c:85:26:61:39:e3:91:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 3 14:09:26 2025 GMT Not After : Apr 28 17:20:17 2027 GMT Subject: CN=5c76d4a1-73e2-4f34-9886-0c16d4b02008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:12:7e:98:96:25:c2:4e:88:32:14:7d:86: 6c:89:ba:da:e0:5c:6b:25:65:86:a0:6e:da:b5:fc: eb:c5:62:d0:af:15:f3:40:89:29:d4:08:3f:e9:7b: 37:3b:8a:b9:5c:9e:fd:88:e4:f3:38:5e:7c:44:83: 60:14:67:9b:13:4a:ef:32:16:30:c6:36:ac:8e:8e: 7d:db:d2:bf:46:37:2b:91:be:ed:8b:d3:74:19:a8: 8f:b2:f8:b7:6e:1a:32:0f:68:2c:98:28:cc:29:22: 13:1f:fa:06:32:85:44:d0:f8:28:a0:be:60:2a:94: ce:e2:ec:57:4f:d0:58:f0:4f:da:51:c9:ab:e8:70: 1f:90:20:98:a8:2a:b4:3e:59:f0:18:cf:90:12:6e: c0:e2:4a:ef:9c:f6:4b:b2:b5:bd:f0:5b:68:2d:b0: 88:92:9e:69:85:b4:ce:d5:cd:6a:18:d1:d3:e6:cf: 2b:90:5d:ae:f9:3e:2c:e7:da:be:80:62:08:cc:42: 7f:aa:89:68:35:3a:5e:1a:35:1e:c4:5b:c5:76:90: af:07:67:f3:23:54:94:ee:50:ca:34:68:93:2b:de: 1c:e4:fc:a9:cd:c5:b4:b1:e7:00:08:59:8c:b6:b9: 11:7c:82:af:c3:9d:02:e0:f8:ae:fb:b5:53:b2:f1: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 104.238.196.0/24 199.182.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:38:55:bf:7c:4e:2f:2c:22:a0:fe:d8:1e:29:b2:19:1d:32: 0f:41:41:f7:c5:3e:92:94:f8:18:b5:94:7b:d6:64:4b:5a:01: eb:a7:18:0e:65:00:10:43:11:f0:94:8b:5e:f5:b1:d9:31:9b: f0:48:a4:1d:62:02:bf:a8:12:d5:ad:f5:d2:d5:90:7c:1c:19: 90:9d:b4:1e:fe:90:35:19:27:91:7f:2e:06:87:8a:89:63:b2: bd:bb:be:8d:a4:9a:76:2d:1c:83:3c:dc:9c:87:2a:ee:37:7a: e1:d4:31:80:97:4b:53:dc:f4:a7:b4:8a:5c:5c:31:d8:60:47: 44:cd:ad:02:4c:ac:e3:b9:3f:0d:0f:69:4f:7d:c9:9b:16:d1: 1b:6f:e7:15:cd:c0:b4:6c:e6:55:ba:64:91:e8:bb:06:51:81: 5b:b6:e8:76:78:b9:83:61:9f:0e:1c:c2:3a:17:5d:67:24:67: 7c:c8:00:88:e2:a5:3d:9d:33:8e:fe:51:57:14:ce:7e:9f:56: e8:c7:46:f6:c5:59:cb:bc:1d:f7:eb:6f:7d:a0:73:7d:12:49: 3a:05:b4:d1:27:2e:d6:b5:46:c6:b6:3b:4a:5a:60:e6:fa:95: 21:b9:10:24:b2:0d:cc:f1:e1:18:98:2f:52:1a:33:72:74:7d: 49:8f:63:db -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWElncNU8hSZhOeOR7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDQwMzE0MDkyNloXDTI3MDQyODE3MjAxN1owLzEtMCsGA1UEAxMk NWM3NmQ0YTEtNzNlMi00ZjM0LTk4ODYtMGMxNmQ0YjAyMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqASfpiWJcJOiDIUfYZsibra4FxrJWWGoG7a tfzrxWLQrxXzQIkp1Ag/6Xs3O4q5XJ79iOTzOF58RINgFGebE0rvMhYwxjasjo59 29K/Rjcrkb7ti9N0GaiPsvi3bhoyD2gsmCjMKSITH/oGMoVE0PgooL5gKpTO4uxX T9BY8E/aUcmr6HAfkCCYqCq0PlnwGM+QEm7A4krvnPZLsrW98FtoLbCIkp5phbTO 1c1qGNHT5s8rkF2u+T4s59q+gGIIzEJ/qoloNTpeGjUexFvFdpCvB2fzI1SU7lDK NGiTK94c5PypzcW0secACFmMtrkRfIKvw50C4Piu+7VTsvHUUQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFLDoHBlLPpu70cjZuKhwzY5Kw3fSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 Yzc2ZDRhMS03M2UyLTRmMzQtOTg4Ni0wYzE2ZDRiMDIwMDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVjNzZkNGExLTczZTItNGYzNC05 ODg2LTBjMTZkNGIwMjAwOC81Yzc2ZDRhMS03M2UyLTRmMzQtOTg4Ni0wYzE2ZDRi MDIwMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABo7sQDBADHts0wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWThVv3xOLywi oP7YHimyGR0yD0FB98U+kpT4GLWUe9ZkS1oB66cYDmUAEEMR8JSLXvWx2TGb8Eik HWICv6gS1a310tWQfBwZkJ20Hv6QNRknkX8uBoeKiWOyvbu+jaSadi0cgzzcnIcq 7jd64dQxgJdLU9z0p7SKXFwx2GBHRM2tAkys47k/DQ9pT33JmxbRG2/nFc3AtGzm Vbpkkei7BlGBW7bodni5g2GfDhzCOhddZyRnfMgAiOKlPZ0zjv5RVxTOfp9W6MdG 9sVZy7wd9+tvfaBzfRJJOgW00Scu1rVGxrY7Slpg5vqVIbkQJLINzPHhGJgvUhoz cnR9SY9j2w== -----END CERTIFICATE-----Generated at Wed May 7 22:09:11 2025 by rpki-client