$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36.cer File: d027abf1-e88b-4e64-9ddd-7a8c9aafca36.cer (raw, json) Hash identifier: stpA6s26JijdTIhRHfH7cx34Qblb7Uk8MsGTWHIjngk= Subject key identifier: A1:BD:46:35:47:6D:BF:1B:88:5B:9F:18:E4:F9:95:55:BD:4E:1B:D6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584943307EBE28E7232BF1DA6290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36/d027abf1-e88b-4e64-9ddd-7a8c9aafca36.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 14:30:42 +0000 Certificate not after: Thu 24 Jun 2027 14:30:42 +0000 Subordinate resources: IP: 192.245.91.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:30:7e:be:28:e7:23:2b:f1:da:62:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 21 14:30:42 2025 GMT Not After : Jun 24 14:30:42 2027 GMT Subject: CN=d027abf1-e88b-4e64-9ddd-7a8c9aafca36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:e7:aa:1e:29:2e:02:b1:93:22:c8:e2:b5: c7:a9:86:9f:a2:5f:84:75:25:d5:32:78:41:11:19: 2e:e0:db:03:4f:db:b7:7d:77:b1:be:ee:21:6d:f1: b7:dd:31:a3:a7:42:78:5b:7b:22:a7:ce:ae:2c:69: e3:f7:ad:3c:a8:ca:7a:b0:08:1c:29:38:42:81:7c: c4:7e:fe:e5:f6:d8:ff:9c:bc:a8:bf:0b:10:aa:d2: 59:89:c6:82:b2:17:0e:88:6f:c8:9d:5c:47:f3:0a: 89:f2:b1:f2:ec:60:3b:18:37:07:d1:0d:bd:7a:6e: 54:3a:b6:e9:8a:00:ad:04:a2:fe:cc:88:34:9b:9d: 53:14:81:cb:ae:b2:10:69:89:cb:f5:11:80:7c:ab: 64:cb:25:af:7c:1e:a4:b6:5e:93:a7:2f:30:64:ea: 62:1a:7a:28:e7:3f:a3:63:ba:5a:90:81:f7:86:1c: cf:a1:c1:9a:00:61:09:6f:76:5c:46:c7:4c:8a:9f: d3:93:7c:28:fa:88:5b:3d:7a:3b:71:d5:57:d9:56: ea:77:c0:b9:35:58:90:60:3d:a7:f9:f1:ff:41:a4: 83:bd:f7:44:65:8c:f8:e3:6c:84:55:08:be:90:20: bc:1e:fc:ad:6a:c9:7b:c5:69:8b:b0:16:4c:a4:48: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BD:46:35:47:6D:BF:1B:88:5B:9F:18:E4:F9:95:55:BD:4E:1B:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36/d027abf1-e88b-4e64-9ddd-7a8c9aafca36.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.245.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:dc:9a:72:00:24:f8:12:66:ff:c4:4b:b5:7f:3b:53:ba:1e: bb:78:05:51:89:a0:88:28:ea:db:8b:8d:45:75:20:9d:a4:15: 69:10:d1:15:c9:f4:af:e5:ff:b1:0e:92:b4:10:0d:dd:5b:f7: 25:79:46:f0:48:64:95:36:a4:3b:cb:e7:a8:ed:80:3f:ee:45: a1:e2:ab:df:e9:9c:11:12:42:aa:7d:20:42:34:cc:be:30:92: 66:c9:64:34:c4:d9:d7:20:24:02:0b:f4:e1:8c:0b:4a:42:f5: 26:99:25:4c:5a:3a:ff:32:88:78:89:28:f7:02:3e:49:dc:c5: 29:a3:fc:31:c8:3b:f5:a3:cf:63:73:95:00:85:d4:fa:ec:2d: a5:91:d3:d7:97:a0:5e:c7:b8:1e:f9:76:5f:97:8e:99:a0:96: c0:65:45:d7:81:aa:dd:cf:ee:23:26:48:15:b3:ec:f6:35:58: 4c:91:38:94:08:af:9d:e3:a8:73:92:1b:05:27:9f:e5:1e:c2: 41:d2:05:f8:fd:16:5c:96:5e:08:2b:31:5c:f5:20:10:5e:56: 01:71:2d:1f:30:30:18:bd:e0:8c:2d:f5:c3:79:33:2e:0b:ed: 9f:3b:49:b9:66:32:ce:a2:ae:8d:c9:9f:28:cc:e2:82:49:46: 00:51:2f:df -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElDMH6+KOcjK/HaYpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMyMTE0MzA0MloXDTI3MDYyNDE0MzA0MlowLzEtMCsGA1UEAxMk ZDAyN2FiZjEtZTg4Yi00ZTY0LTlkZGQtN2E4YzlhYWZjYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdjnqh4pLgKxkyLI4rXHqYafol+EdSXVMnhB ERku4NsDT9u3fXexvu4hbfG33TGjp0J4W3sip86uLGnj9608qMp6sAgcKThCgXzE fv7l9tj/nLyovwsQqtJZicaCshcOiG/InVxH8wqJ8rHy7GA7GDcH0Q29em5UOrbp igCtBKL+zIg0m51TFIHLrrIQaYnL9RGAfKtkyyWvfB6ktl6Tpy8wZOpiGnoo5z+j Y7pakIH3hhzPocGaAGEJb3ZcRsdMip/Tk3wo+ohbPXo7cdVX2Vbqd8C5NViQYD2n +fH/QaSDvfdEZYz442yEVQi+kCC8Hvytasl7xWmLsBZMpEjh1wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKG9RjVHbb8biFufGOT5lVW9ThvWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k MDI3YWJmMS1lODhiLTRlNjQtOWRkZC03YThjOWFhZmNhMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2QwMjdhYmYxLWU4OGItNGU2NC05 ZGRkLTdhOGM5YWFmY2EzNi9kMDI3YWJmMS1lODhiLTRlNjQtOWRkZC03YThjOWFh ZmNhMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA9VswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE9yacgAk+BJm/8RLtX87 U7oeu3gFUYmgiCjq24uNRXUgnaQVaRDRFcn0r+X/sQ6StBAN3Vv3JXlG8EhklTak O8vnqO2AP+5FoeKr3+mcERJCqn0gQjTMvjCSZslkNMTZ1yAkAgv04YwLSkL1Jpkl TFo6/zKIeIko9wI+SdzFKaP8Mcg79aPPY3OVAIXU+uwtpZHT15egXse4Hvl2X5eO maCWwGVF14Gq3c/uIyZIFbPs9jVYTJE4lAivneOoc5IbBSef5R7CQdIF+P0WXJZe CCsxXPUgEF5WAXEtHzAwGL3gjC31w3kzLgvtnztJuWYyzqKujcmfKMzigklGAFEv 3w== -----END CERTIFICATE-----Generated at Tue May 6 08:40:11 2025 by rpki-client