$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013.cer File: b15f8fb3-7cfd-4593-ada0-a231ef250013.cer (raw, json) Hash identifier: LlvJIh+ssMNn3PuTQr9KTu2s3V0UoUeKR9Ac7LsGDRc= Subject key identifier: F1:7E:BE:4F:7B:D1:B7:79:F4:5A:8F:58:F8:7D:D5:78:0B:F0:C7:96 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848EF9087ADAB60B768F1089F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/b15f8fb3-7cfd-4593-ada0-a231ef250013.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 15:36:18 +0000 Certificate not after: Tue 25 May 2027 14:36:18 +0000 Subordinate resources: IP: 199.84.132.0 -- 199.84.134.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:90:87:ad:ab:60:b7:68:f1:08:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 19 15:36:18 2025 GMT Not After : May 25 14:36:18 2027 GMT Subject: CN=b15f8fb3-7cfd-4593-ada0-a231ef250013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:3e:21:45:49:c3:55:b1:f5:0f:f6:ac:d2: 93:68:b0:0b:24:51:b0:2a:37:c4:3a:88:a5:34:df: ad:59:ef:44:27:cf:e4:85:5a:01:16:22:e7:a5:66: bc:2f:37:66:92:8b:56:83:b5:bc:32:80:4b:97:0f: 5d:3b:0d:4d:c3:cc:51:90:02:f3:fe:37:7a:cf:31: 70:29:84:1b:74:9b:91:14:d9:c0:1e:74:5f:2c:96: 16:59:52:81:16:a2:4b:50:5b:2b:d1:b1:88:a6:b1: f5:b0:5b:a2:42:b8:66:c7:11:ee:e8:5c:5b:ea:ed: ba:56:73:7c:45:f5:df:25:51:d0:99:c7:af:d4:4c: 9f:eb:26:9a:f0:21:99:ae:a5:f1:30:af:a9:9a:10: ac:f0:3c:11:4a:a9:5c:9a:1e:b2:9e:54:6a:e9:c0: a6:1e:41:bd:4a:f3:ac:b7:63:c4:f1:bc:87:6f:4e: 81:97:53:68:49:58:a7:b1:f2:19:a5:4e:74:0e:63: 49:92:58:a7:ee:f1:8e:9a:01:e7:cd:ef:82:0b:30: 33:0e:92:a3:c6:f5:57:f8:c2:a8:d4:92:15:bb:a9: 6a:38:67:49:52:1d:a3:0f:60:4e:6d:6e:06:59:10: 79:6e:8d:4d:ab:65:b2:59:d4:a2:13:82:a3:dd:2b: 5e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7E:BE:4F:7B:D1:B7:79:F4:5A:8F:58:F8:7D:D5:78:0B:F0:C7:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/b15f8fb3-7cfd-4593-ada0-a231ef250013.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.84.132.0-199.84.134.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:69:01:f6:df:e9:b7:5b:2b:c6:bd:5d:0f:a6:48:1d:31:bf: 66:47:af:b6:1b:c4:30:d5:2a:39:5a:e0:4d:09:8e:3e:26:58: bc:5d:da:3d:05:05:e1:7e:6f:8b:5c:44:e9:c8:15:40:44:f1: e2:6b:21:6f:82:7f:13:b8:98:ef:71:4e:f4:fc:2b:5f:40:3a: 91:34:52:6c:c9:ac:21:3f:fd:35:ab:f9:db:4e:af:25:18:17: b5:15:cf:39:db:a9:01:be:c5:4b:59:ce:98:c1:b0:b5:1f:ff: 09:f7:3f:a7:d5:d4:b3:36:30:88:84:ae:85:b5:d3:70:f9:24: 98:8c:52:f3:5b:6f:94:33:3e:f6:e3:a8:b6:aa:59:d2:45:32: 04:b6:10:7d:49:f1:99:5e:e7:46:bd:3a:a5:aa:6c:d3:ef:2e: ff:3c:63:fd:7f:01:34:a6:f0:76:37:79:c4:8f:16:aa:3e:b5: 8f:cc:16:1b:e1:c4:74:05:69:5f:03:19:ec:c7:aa:1b:1b:5f: f1:4c:7a:d6:eb:b3:6d:bb:f2:76:66:41:28:6c:4f:1f:7c:e5: 25:97:1b:1f:d3:9b:c0:57:39:57:ac:0e:59:44:73:f7:d4:c3: 1a:0e:ca:8c:1e:0a:3e:f4:92:b9:ff:57:47:bb:aa:6c:9c:19: dc:36:ee:95 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEjvkIetq2C3aPEInwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxOTE1MzYxOFoXDTI3MDUyNTE0MzYxOFowLzEtMCsGA1UEAxMk YjE1ZjhmYjMtN2NmZC00NTkzLWFkYTAtYTIzMWVmMjUwMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq90+IUVJw1Wx9Q/2rNKTaLALJFGwKjfEOoil NN+tWe9EJ8/khVoBFiLnpWa8LzdmkotWg7W8MoBLlw9dOw1Nw8xRkALz/jd6zzFw KYQbdJuRFNnAHnRfLJYWWVKBFqJLUFsr0bGIprH1sFuiQrhmxxHu6Fxb6u26VnN8 RfXfJVHQmcev1Eyf6yaa8CGZrqXxMK+pmhCs8DwRSqlcmh6ynlRq6cCmHkG9SvOs t2PE8byHb06Bl1NoSVinsfIZpU50DmNJklin7vGOmgHnze+CCzAzDpKjxvVX+MKo 1JIVu6lqOGdJUh2jD2BObW4GWRB5bo1Nq2WyWdSiE4Kj3SteYQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFPF+vk970bd59FqPWPh91XgL8MeWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i MTVmOGZiMy03Y2ZkLTQ1OTMtYWRhMC1hMjMxZWYyNTAwMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2IxNWY4ZmIzLTdjZmQtNDU5My1h ZGEwLWEyMzFlZjI1MDAxMy9iMTVmOGZiMy03Y2ZkLTQ1OTMtYWRhMC1hMjMxZWYy NTAwMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAsdUhAMEAMdUhjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaaQH23+m3 WyvGvV0PpkgdMb9mR6+2G8Qw1So5WuBNCY4+Jli8Xdo9BQXhfm+LXETpyBVARPHi ayFvgn8TuJjvcU70/CtfQDqRNFJsyawhP/01q/nbTq8lGBe1Fc8526kBvsVLWc6Y wbC1H/8J9z+n1dSzNjCIhK6FtdNw+SSYjFLzW2+UMz7246i2qlnSRTIEthB9SfGZ XudGvTqlqmzT7y7/PGP9fwE0pvB2N3nEjxaqPrWPzBYb4cR0BWlfAxnsx6obG1/x THrW67Ntu/J2ZkEobE8ffOUllxsf05vAVzlXrA5ZRHP31MMaDsqMHgo+9JK5/1dH u6psnBncNu6V -----END CERTIFICATE-----Generated at Fri May 9 23:12:40 2025 by rpki-client