$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908.cer File: 719e4812-21fe-4f17-9bde-b69687fea908.cer (raw, json) Hash identifier: CkHPkC0nRc2Q1XzEh0PJPiYKJeFvIUh3a6LYtRyYhMY= Subject key identifier: 9B:B4:A4:66:DD:27:3A:77:74:6D:B7:99:AB:1A:90:C9:35:55:5B:0F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858488BDB65AF134A483FE37FB680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908/719e4812-21fe-4f17-9bde-b69687fea908.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jan 2025 22:26:18 +0000 Certificate not after: Mon 19 Apr 2027 21:26:18 +0000 Subordinate resources: IP: 204.76.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8b:db:65:af:13:4a:48:3f:e3:7f:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 14 22:26:18 2025 GMT Not After : Apr 19 21:26:18 2027 GMT Subject: CN=719e4812-21fe-4f17-9bde-b69687fea908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:dd:36:4a:aa:a9:8e:2b:0a:90:16:71:54: 5a:7b:80:79:97:28:08:70:5b:e0:40:fc:b7:a3:53: e3:5e:10:dc:f2:74:0d:26:d3:1e:5e:f2:6b:18:29: 30:62:47:27:d7:3e:29:b9:01:e2:80:62:21:1d:e8: ee:55:2e:6d:93:b1:3e:63:22:ec:0a:bd:a1:af:19: 0e:c5:07:59:a2:e1:4b:11:21:c8:f1:11:61:ca:3d: 53:be:3c:3f:8e:33:70:72:b5:77:7d:a3:1c:c4:a8: 75:fa:15:71:eb:db:89:a4:a9:7e:b6:c9:1c:0c:b1: 16:b8:74:37:de:04:ee:df:0e:c1:4e:90:e9:66:fb: 50:f0:59:92:89:ff:d6:c7:17:9d:aa:18:69:94:dc: b7:27:cd:ee:f0:0e:30:fd:f7:b5:1f:a1:b0:3e:fe: e6:1b:f8:ce:f0:0d:fd:8c:54:bc:07:90:f6:c9:33: 32:30:cc:94:30:5f:d7:31:1d:34:2c:82:6c:b8:c5: 3c:2d:af:2e:64:fd:c9:c7:83:61:ca:4f:87:04:88: 37:09:55:09:f9:dd:c2:fd:fa:01:a9:96:0a:4a:c8: 16:1c:ad:54:86:9d:e5:61:72:9a:a6:d5:78:ce:3d: 66:4c:60:53:af:8f:05:f7:55:8b:97:a8:17:4e:bf: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:A4:66:DD:27:3A:77:74:6D:B7:99:AB:1A:90:C9:35:55:5B:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/719e4812-21fe-4f17-9bde-b69687fea908/719e4812-21fe-4f17-9bde-b69687fea908.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 204.76.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:90:90:df:ca:d7:28:36:a2:3f:4e:87:3f:fe:aa:54:73:d2: 80:a2:8a:b3:3a:80:40:25:45:c6:26:fb:4b:3d:01:fe:dd:4e: 6d:45:61:72:52:b3:57:7e:63:fc:b4:2e:9e:5d:28:d0:f0:23: 2d:b1:93:36:84:ce:72:18:76:01:73:d3:f5:52:13:49:d1:67: dc:a6:6b:30:23:de:dc:76:6f:96:70:c3:42:8d:73:29:24:66: 97:29:ab:c9:12:a0:97:2e:b2:1b:65:3a:ac:80:5c:5e:70:d7: 18:93:f9:00:78:aa:fa:da:92:54:b2:2d:24:d7:e0:f6:f0:55: a2:33:73:1c:6f:ae:58:7f:c8:e0:db:07:ae:31:37:e5:64:9f: 5d:4a:58:b1:87:e8:6a:b5:24:4c:a7:fc:60:9f:22:5d:e2:d5: 84:83:fb:35:c8:4d:95:c6:4c:dd:3a:c6:e5:14:18:d3:c5:0b: 03:50:bf:7c:16:85:e8:bd:f4:c4:92:b0:4d:c0:f2:e3:81:b0: c0:92:26:eb:a0:c5:ee:95:28:f5:17:65:80:8a:91:77:3c:79: 87:57:02:87:16:70:3b:1b:8f:43:4c:9e:b0:e0:34:10:24:26: 6c:bf:56:fe:93:79:29:d8:c6:24:3e:e0:87:42:6a:cc:d4:a6: 14:91:01:87 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEiL22WvE0pIP+N/toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDExNDIyMjYxOFoXDTI3MDQxOTIxMjYxOFowLzEtMCsGA1UEAxMk NzE5ZTQ4MTItMjFmZS00ZjE3LTliZGUtYjY5Njg3ZmVhOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwrdNkqqqY4rCpAWcVRae4B5lygIcFvgQPy3 o1PjXhDc8nQNJtMeXvJrGCkwYkcn1z4puQHigGIhHejuVS5tk7E+YyLsCr2hrxkO xQdZouFLESHI8RFhyj1Tvjw/jjNwcrV3faMcxKh1+hVx69uJpKl+tskcDLEWuHQ3 3gTu3w7BTpDpZvtQ8FmSif/WxxedqhhplNy3J83u8A4w/fe1H6GwPv7mG/jO8A39 jFS8B5D2yTMyMMyUMF/XMR00LIJsuMU8La8uZP3Jx4Nhyk+HBIg3CVUJ+d3C/foB qZYKSsgWHK1Uhp3lYXKaptV4zj1mTGBTr48F91WLl6gXTr/6HwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJu0pGbdJzp3dG23masakMk1VVsPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 MTllNDgxMi0yMWZlLTRmMTctOWJkZS1iNjk2ODdmZWE5MDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzcxOWU0ODEyLTIxZmUtNGYxNy05 YmRlLWI2OTY4N2ZlYTkwOC83MTllNDgxMi0yMWZlLTRmMTctOWJkZS1iNjk2ODdm ZWE5MDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAbMTEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgJCQ38rXKDaiP06HP/6q VHPSgKKKszqAQCVFxib7Sz0B/t1ObUVhclKzV35j/LQunl0o0PAjLbGTNoTOchh2 AXPT9VITSdFn3KZrMCPe3HZvlnDDQo1zKSRmlymryRKgly6yG2U6rIBcXnDXGJP5 AHiq+tqSVLItJNfg9vBVojNzHG+uWH/I4NsHrjE35WSfXUpYsYfoarUkTKf8YJ8i XeLVhIP7NchNlcZM3TrG5RQY08ULA1C/fBaF6L30xJKwTcDy44GwwJIm66DF7pUo 9RdlgIqRdzx5h1cChxZwOxuPQ0yesOA0ECQmbL9W/pN5KdjGJD7gh0JqzNSmFJEB hw== -----END CERTIFICATE-----Generated at Fri May 9 04:58:47 2025 by rpki-client