$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594.cer File: 647c9192-235d-4283-a432-fa5f0508c594.cer (raw, json) Hash identifier: rujj64Nx+v15sb1DsIPQM26wxexIXI1ysErN7TBoDec= Subject key identifier: CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584919AAEA581DF0DE5E524E0780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Mar 2025 17:33:24 +0000 Certificate not after: Tue 01 Jun 2027 07:24:22 +0000 Subordinate resources: IP: 23.135.188.0/24 IP: 45.45.132.0/22 IP: 2604:6a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:aa:ea:58:1d:f0:de:5e:52:4e:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 6 17:33:24 2025 GMT Not After : Jun 1 07:24:22 2027 GMT Subject: CN=647c9192-235d-4283-a432-fa5f0508c594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:b2:98:2b:0a:44:5c:39:59:bb:3e:ee:a2: 79:78:9e:44:dc:ae:60:ca:b4:9e:b2:22:c1:7c:35: 44:9b:59:53:4d:4b:43:c1:7c:f8:19:2d:77:ee:db: 36:ec:0f:dd:20:d5:af:da:24:e4:7c:16:7c:77:15: c9:93:d2:ed:42:be:90:d2:48:80:96:71:68:ec:09: d1:99:04:38:70:54:03:37:08:75:5d:88:a5:f1:ad: 97:10:16:be:c8:46:a2:d2:61:a1:67:9f:94:7e:42: 37:4f:92:f9:02:d6:10:0e:f6:a8:80:ba:e8:72:47: 96:86:f6:31:d6:fb:50:e3:64:4f:85:8d:bc:94:84: a9:56:39:b6:7b:67:5c:b7:10:44:ca:02:d2:98:1b: 40:96:8f:17:2a:64:c4:e5:b4:27:91:bf:0a:a3:1d: 66:c8:21:f4:3a:99:4c:66:30:ec:44:2d:2b:79:2b: 00:67:a7:24:92:6e:82:7e:a3:9c:f0:e8:bc:6f:75: 1b:00:44:a0:5c:59:fc:d8:91:c7:75:b9:a6:7a:b8: 99:ee:f3:22:1a:00:c1:d6:4b:a9:b9:6a:b4:dc:13: 26:ec:86:c1:14:ce:0a:6d:e2:2c:fd:dd:af:73:1d: 4f:8b:42:23:b0:1e:5f:69:82:68:9e:9f:e0:03:7a: 23:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.188.0/24 45.45.132.0/22 IPv6: 2604:6a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b7:23:85:c0:d9:ca:68:bf:ef:42:46:14:cf:ee:22:a4:51: 4f:c8:68:4e:d6:56:3d:90:13:9c:74:1a:62:ce:db:f6:16:da: b8:2b:28:88:4d:27:a5:ad:c6:8e:73:10:46:2d:64:d1:c9:39: 48:6f:d4:47:0b:f0:7c:70:90:e1:a9:ba:b4:4c:8e:f9:66:4d: 19:eb:94:02:31:91:99:d1:28:23:7e:1e:e8:8f:d7:75:32:47: e6:79:82:70:a8:15:43:b0:22:c8:37:0a:aa:23:ab:50:29:13: ec:ca:bf:88:a8:07:51:fc:4e:e7:a6:96:6c:ed:b2:f7:b7:d6: 16:47:bd:67:05:0c:67:4b:37:2c:48:f6:9e:d4:93:c3:37:1f: 57:e8:a0:74:f9:ed:e2:41:a4:80:db:9a:de:b5:3c:2a:08:9b: 45:fd:c1:47:80:25:7d:7a:5b:cd:43:05:ae:4c:5f:9a:81:ef: 60:97:e8:d9:03:ee:63:62:82:0a:f8:85:30:a0:dc:d5:17:44: c5:e5:f8:12:d6:cb:db:bb:16:c5:f0:8f:91:ac:9a:16:17:7f: 02:07:9f:36:57:87:87:a8:c6:49:1b:f7:3b:af:98:86:8b:c4: a7:a9:2c:37:61:39:93:2c:78:91:91:22:62:e9:f5:42:2c:0b: 45:25:09:9c -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEkZqupYHfDeXlJOB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNjE3MzMyNFoXDTI3MDYwMTA3MjQyMlowLzEtMCsGA1UEAxMk NjQ3YzkxOTItMjM1ZC00MjgzLWE0MzItZmE1ZjA1MDhjNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVqymCsKRFw5Wbs+7qJ5eJ5E3K5gyrSesiLB fDVEm1lTTUtDwXz4GS137ts27A/dINWv2iTkfBZ8dxXJk9LtQr6Q0kiAlnFo7AnR mQQ4cFQDNwh1XYil8a2XEBa+yEai0mGhZ5+UfkI3T5L5AtYQDvaogLrockeWhvYx 1vtQ42RPhY28lISpVjm2e2dctxBEygLSmBtAlo8XKmTE5bQnkb8Kox1myCH0OplM ZjDsRC0reSsAZ6ckkm6CfqOc8Oi8b3UbAESgXFn82JHHdbmmeriZ7vMiGgDB1kup uWq03BMm7IbBFM4KbeIs/d2vcx1Pi0IjsB5faYJonp/gA3ojSQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFM0xH3Zz9JhTr0/TJV9TtLpPR8kBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 NDdjOTE5Mi0yMzVkLTQyODMtYTQzMi1mYTVmMDUwOGM1OTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY0N2M5MTkyLTIzNWQtNDI4My1h NDMyLWZhNWYwNTA4YzU5NC82NDdjOTE5Mi0yMzVkLTQyODMtYTQzMi1mYTVmMDUw OGM1OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXh7wDBAItLYQwDQQCAAIwBwMFACYEBqAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHrcjhcDZymi/70JGFM/uIqRRT8hoTtZWPZATnHQaYs7b9hbauCsoiE0n pa3GjnMQRi1k0ck5SG/URwvwfHCQ4am6tEyO+WZNGeuUAjGRmdEoI34e6I/XdTJH 5nmCcKgVQ7AiyDcKqiOrUCkT7Mq/iKgHUfxO56aWbO2y97fWFke9ZwUMZ0s3LEj2 ntSTwzcfV+igdPnt4kGkgNua3rU8KgibRf3BR4AlfXpbzUMFrkxfmoHvYJfo2QPu Y2KCCviFMKDc1RdExeX4EtbL27sWxfCPkayaFhd/AgefNleHh6jGSRv3O6+YhovE p6ksN2E5kyx4kZEiYun1QiwLRSUJnA== -----END CERTIFICATE-----Generated at Sat May 10 22:16:17 2025 by rpki-client