$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f.cer File: 76315bad-1202-4f19-a255-ee554973714f.cer (raw, json) Hash identifier: aWs+IfiisTuBBR7IB/RWbonB+z4mvCsC5hnsxmEXqLg= Subject key identifier: 1E:0D:CB:1E:DB:46:B5:DB:72:84:3A:43:A9:54:74:1F:C3:00:76:EB Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848A7398F44B51D70FC464ED030 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/76315bad-1202-4f19-a255-ee554973714f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jan 2025 17:42:51 +0000 Certificate not after: Thu 29 Apr 2027 16:42:51 +0000 Subordinate resources: IP: 160.102.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a7:39:8f:44:b5:1d:70:fc:46:4e:d0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 24 17:42:51 2025 GMT Not After : Apr 29 16:42:51 2027 GMT Subject: CN=76315bad-1202-4f19-a255-ee554973714f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:b4:87:54:07:e0:a4:45:35:7e:8d:0d:be: 87:f3:0f:fc:61:c4:a5:3f:3e:a2:14:e1:19:d3:ac: 81:1f:fb:31:36:37:c4:91:e2:78:1f:35:d4:3d:2e: 69:e2:76:1c:5a:88:72:9b:c3:fc:df:e6:4a:7c:0f: ca:e5:cd:5a:c9:dd:8a:f0:4e:37:0f:ac:19:09:1b: 88:b4:2d:8e:47:b4:6a:a6:2e:a8:d8:92:89:e4:28: af:f9:19:4c:49:d5:91:69:09:83:4e:d5:ee:64:80: 12:e5:eb:c3:ca:a1:b1:5b:2a:1b:06:2c:81:f4:51: d2:3b:36:af:35:1a:7a:fe:6e:ff:a4:63:6a:52:fd: ec:9e:df:76:64:c7:2c:38:d6:fe:6d:89:0f:47:c2: 8d:8f:4a:d5:bf:6c:b2:a1:42:10:1a:8a:f2:70:e9: be:0f:ba:87:1e:20:59:b1:50:57:4e:73:f1:c7:09: be:12:2d:c9:ce:2b:e0:4c:46:03:f7:13:6b:1a:9b: eb:39:0f:c1:04:b7:e9:5b:2f:06:67:c0:e4:c8:c8: 5d:ca:23:7f:c6:9c:93:d2:ac:0c:90:d4:e2:c8:07: 3f:84:04:fd:ce:4c:8d:d6:73:36:5d:43:22:e5:6b: 6d:58:69:81:0e:09:7a:0d:60:67:48:d7:6b:eb:7b: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0D:CB:1E:DB:46:B5:DB:72:84:3A:43:A9:54:74:1F:C3:00:76:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/76315bad-1202-4f19-a255-ee554973714f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 160.102.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:01:bd:ed:8d:1f:c1:2f:24:c8:b8:96:d7:dd:dd:66:9c:2f: 51:6b:3c:1a:a3:52:27:65:8d:0d:43:30:1c:71:95:4d:3f:2d: 31:6d:a1:ff:46:6e:ac:0d:4d:31:f5:49:15:ca:dc:0b:78:40: 54:0d:c5:54:8c:bf:55:82:53:7f:52:e4:6c:94:71:de:5d:82: f2:76:6a:91:ab:f9:d1:78:82:ac:f6:ed:e2:83:86:97:3d:86: 23:ab:1e:25:82:3b:de:52:77:7f:c5:a4:8d:6e:e3:cd:21:b4: e2:b9:db:dc:6c:31:9a:1a:06:a8:5a:db:ce:c5:61:89:0d:80: fe:0b:04:0e:ce:fa:4a:4f:b5:b4:aa:e1:84:79:84:a2:2b:73: 6c:72:1a:6d:bc:cb:97:7d:90:24:da:c4:18:b5:14:6a:18:15: 7f:b8:b7:70:59:a5:08:92:ff:f5:99:cb:07:bc:f1:05:b9:4d: f1:09:88:65:39:73:05:29:5e:22:36:29:26:4e:9d:39:34:3f: a4:ae:d9:a7:b5:a6:55:b3:e8:22:83:a4:63:7a:2e:44:4d:2e: d3:a6:1c:8e:c5:dc:85:23:07:98:88:9f:95:a8:4e:ff:1e:2d: 96:e5:3d:66:77:07:6f:07:d3:43:1b:8c:7e:6d:a2:f9:1d:e2: f3:2b:02:a0 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEinOY9EtR1w/EZO0DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyNDE3NDI1MVoXDTI3MDQyOTE2NDI1MVowLzEtMCsGA1UEAxMk NzYzMTViYWQtMTIwMi00ZjE5LWEyNTUtZWU1NTQ5NzM3MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiq0h1QH4KRFNX6NDb6H8w/8YcSlPz6iFOEZ 06yBH/sxNjfEkeJ4HzXUPS5p4nYcWohym8P83+ZKfA/K5c1ayd2K8E43D6wZCRuI tC2OR7Rqpi6o2JKJ5Civ+RlMSdWRaQmDTtXuZIAS5evDyqGxWyobBiyB9FHSOzav NRp6/m7/pGNqUv3snt92ZMcsONb+bYkPR8KNj0rVv2yyoUIQGorycOm+D7qHHiBZ sVBXTnPxxwm+Ei3JzivgTEYD9xNrGpvrOQ/BBLfpWy8GZ8DkyMhdyiN/xpyT0qwM kNTiyAc/hAT9zkyN1nM2XUMi5WttWGmBDgl6DWBnSNdr63vmhQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFB4Nyx7bRrXbcoQ6Q6lUdB/DAHbrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 NjMxNWJhZC0xMjAyLTRmMTktYTI1NS1lZTU1NDk3MzcxNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc2MzE1YmFkLTEyMDItNGYxOS1h MjU1LWVlNTU0OTczNzE0Zi83NjMxNWJhZC0xMjAyLTRmMTktYTI1NS1lZTU1NDk3 MzcxNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCgZjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlAb3tjR/BLyTIuJbX3d1m nC9Razwao1InZY0NQzAccZVNPy0xbaH/Rm6sDU0x9UkVytwLeEBUDcVUjL9VglN/ UuRslHHeXYLydmqRq/nReIKs9u3ig4aXPYYjqx4lgjveUnd/xaSNbuPNIbTiudvc bDGaGgaoWtvOxWGJDYD+CwQOzvpKT7W0quGEeYSiK3NschptvMuXfZAk2sQYtRRq GBV/uLdwWaUIkv/1mcsHvPEFuU3xCYhlOXMFKV4iNikmTp05ND+krtmntaZVs+gi g6Rjei5ETS7TphyOxdyFIweYiJ+VqE7/Hi2W5T1mdwdvB9NDG4x+baL5HeLzKwKg -----END CERTIFICATE-----Generated at Sun May 11 00:42:30 2025 by rpki-client