$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer File: ebf21e98-3294-441a-9899-9d935ac6c3d1.cer (raw, json) Hash identifier: Wp8VLJHrzrt0ZqYIl5lGigkewYphAhR/Y+cyE07US9U= Subject key identifier: 85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848D6C424B6B576921E6FBD1BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Feb 2025 18:25:05 +0000 Certificate not after: Sun 16 May 2027 17:25:05 +0000 Subordinate resources: IP: 205.237.72.0 -- 205.237.77.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:c4:24:b6:b5:76:92:1e:6f:bd:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 10 18:25:05 2025 GMT Not After : May 16 17:25:05 2027 GMT Subject: CN=ebf21e98-3294-441a-9899-9d935ac6c3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:a0:48:80:07:bd:93:ff:4b:1c:00:a3:b1: 66:61:64:61:6c:6e:60:72:f4:d5:ed:08:82:8c:b9: 95:50:c0:5d:2b:43:b8:99:0e:fe:91:dc:02:7c:df: d0:c5:59:08:75:30:22:06:e5:9f:bb:4b:fc:25:ee: 5c:1d:dc:ef:3a:58:07:06:1a:64:e9:2d:b4:d5:c5: a4:a2:af:11:70:c6:5a:00:7d:21:48:73:63:06:1f: 85:da:00:f4:c5:36:e7:dc:a6:32:8b:e6:51:fa:29: 5a:83:95:88:14:2f:cb:82:73:99:71:f7:37:4f:45: e8:18:01:7b:e7:9d:87:50:0b:bf:74:c2:96:15:44: 97:a9:7a:e9:68:fa:ba:a2:28:c7:02:64:a7:ae:a7: ea:c5:fe:55:80:7d:d9:27:1f:f5:29:bb:4e:e2:12: a3:c0:63:6c:b6:28:77:e1:a1:81:2e:b6:f7:60:9b: 25:ee:89:c1:cf:13:5f:58:4f:62:81:16:68:cb:02: f3:85:52:69:9f:b5:37:44:5a:e9:ed:51:75:6d:4d: 05:9a:c7:d9:0a:11:db:de:81:03:a6:42:74:da:33: a6:cb:22:46:1d:b7:db:87:5e:ce:1e:81:5e:92:ff: 1c:ab:4c:a4:46:8c:1b:ec:79:b1:03:c5:8b:fd:ff: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 205.237.72.0-205.237.77.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:65:6e:ad:e5:43:e4:ac:0f:8e:45:1a:2d:76:36:88:1d:b8: d8:75:04:1e:8d:59:3b:0c:db:eb:73:64:75:5d:60:4b:8f:f5: dd:23:41:9b:1f:11:d5:a1:12:0b:71:26:ec:e2:df:1e:1c:c8: 4a:d8:33:51:37:dc:56:29:5b:f2:6f:09:5f:51:33:cb:7b:db: a2:4d:1e:23:e3:61:07:91:69:22:71:8d:2b:8a:bc:23:e6:ee: 40:a6:a1:0f:93:b7:28:f7:36:4d:44:a8:b9:07:bb:e3:62:c5: e1:e4:ae:97:8a:af:dc:18:bc:66:9b:b1:ec:40:3f:b3:7d:3c: ff:dd:d5:3e:9f:79:06:b3:bb:45:b4:6a:05:33:31:2f:49:3c: 7b:bd:3f:f8:06:ca:b3:21:e8:ae:ce:88:1a:9f:42:e9:90:ea: 48:4f:4a:7b:e9:02:7f:bf:65:3e:49:4f:8f:f3:0b:4b:54:58: 39:28:37:62:3d:97:e4:ca:9a:26:c7:ef:bf:c2:e1:2d:0a:6f: ab:13:68:80:cd:30:06:c2:0a:db:2b:ca:de:3d:63:6d:9c:a1: ee:97:32:d1:56:60:58:a1:93:1a:86:3e:bb:25:0c:98:f7:9c: d0:1b:b6:c6:b4:fa:a1:7a:57:46:b1:aa:5b:5b:78:6c:21:f4: 8c:d3:0f:a8 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEjWxCS2tXaSHm+9G8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMDE4MjUwNVoXDTI3MDUxNjE3MjUwNVowLzEtMCsGA1UEAxMk ZWJmMjFlOTgtMzI5NC00NDFhLTk4OTktOWQ5MzVhYzZjM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaqgSIAHvZP/SxwAo7FmYWRhbG5gcvTV7QiC jLmVUMBdK0O4mQ7+kdwCfN/QxVkIdTAiBuWfu0v8Je5cHdzvOlgHBhpk6S201cWk oq8RcMZaAH0hSHNjBh+F2gD0xTbn3KYyi+ZR+ilag5WIFC/LgnOZcfc3T0XoGAF7 552HUAu/dMKWFUSXqXrpaPq6oijHAmSnrqfqxf5VgH3ZJx/1KbtO4hKjwGNstih3 4aGBLrb3YJsl7onBzxNfWE9igRZoywLzhVJpn7U3RFrp7VF1bU0FmsfZChHb3oED pkJ02jOmyyJGHbfbh17OHoFekv8cq0ykRowb7HmxA8WL/f+XswIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFIVztz1/W6T1woWJ9L8v5pWd06QKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l YmYyMWU5OC0zMjk0LTQ0MWEtOTg5OS05ZDkzNWFjNmMzZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2ViZjIxZTk4LTMyOTQtNDQxYS05 ODk5LTlkOTM1YWM2YzNkMS9lYmYyMWU5OC0zMjk0LTQ0MWEtOTg5OS05ZDkzNWFj NmMzZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEA83tSAMEAc3tTDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOZW6t5UPk rA+ORRotdjaIHbjYdQQejVk7DNvrc2R1XWBLj/XdI0GbHxHVoRILcSbs4t8eHMhK 2DNRN9xWKVvybwlfUTPLe9uiTR4j42EHkWkicY0rirwj5u5ApqEPk7co9zZNRKi5 B7vjYsXh5K6Xiq/cGLxmm7HsQD+zfTz/3dU+n3kGs7tFtGoFMzEvSTx7vT/4Bsqz Ieiuzogan0LpkOpIT0p76QJ/v2U+SU+P8wtLVFg5KDdiPZfkypomx++/wuEtCm+r E2iAzTAGwgrbK8rePWNtnKHulzLRVmBYoZMahj67JQyY95zQG7bGtPqheldGsapb W3hsIfSM0w+o -----END CERTIFICATE-----Generated at Wed May 7 12:04:50 2025 by rpki-client