$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer File: 1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer (raw, json) Hash identifier: kNB1L7h6f5cIn+YVvVtqZvPbfxzi9oG6f1JTP6RCkuo= Subject key identifier: 4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858488C3E481AA5102D65EEDEB940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Jan 2025 01:45:32 +0000 Certificate not after: Tue 20 Apr 2027 00:45:32 +0000 Subordinate resources: IP: 204.228.68.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8c:3e:48:1a:a5:10:2d:65:ee:de:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 15 01:45:32 2025 GMT Not After : Apr 20 00:45:32 2027 GMT Subject: CN=1562c1ab-b395-48ee-8d2d-f34d47e4ee63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:27:3e:cd:91:21:69:6f:77:5d:a5:e1:1d: dc:6b:0c:d0:7f:dc:2b:67:9f:8d:0b:50:00:b8:00: 78:bc:dc:ca:5b:1d:23:fa:32:94:bc:ea:a6:bc:bd: a0:fd:9d:de:0f:45:4b:f5:e6:fa:04:02:28:b8:11: 1f:30:89:9d:e9:0b:88:f5:6c:bd:65:f3:d9:e5:82: 98:66:9a:65:92:3e:8e:9c:b9:fd:0a:f4:21:17:bc: 07:9f:81:51:30:69:bd:eb:97:9d:de:fc:0e:a2:e7: be:a1:b6:b1:44:98:88:60:8d:03:63:86:59:89:db: 24:db:5c:fc:09:25:01:20:63:d5:8a:7e:eb:d2:aa: 7d:84:18:43:13:71:78:df:52:78:34:97:e6:47:42: b4:3d:f4:6c:6d:6c:30:60:15:80:37:4e:dc:a7:94: 1e:08:ab:bc:f0:77:a5:3c:d7:f2:45:6f:f8:fd:f6: 6f:af:c4:a3:cb:ac:a2:53:19:c7:2f:89:cb:76:c8: d3:db:a7:f1:79:26:72:b5:1b:d1:73:03:da:b4:73: 67:64:36:89:e2:ea:6d:e3:34:f0:64:eb:ef:4e:d4: 82:c4:d6:7d:52:c2:19:22:3d:88:95:6f:51:a3:ec: 1e:ac:d2:5e:4a:d3:a5:9b:bd:c3:e4:a1:06:87:d3: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 204.228.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1b:4d:bf:47:5f:45:75:ea:55:f9:16:94:da:c4:d3:d5:ab: d7:8e:a6:c4:7f:ff:9f:6a:df:69:a8:52:34:4f:40:3f:fe:a8: b4:1d:da:0d:17:fb:7e:05:9b:c5:b2:c7:10:ed:ae:3e:6e:b7: a8:5f:14:76:2f:a1:40:c1:e6:49:89:4f:a6:5e:34:69:88:49: 5f:7f:32:c2:31:17:02:f1:b1:2b:b3:28:86:c0:e3:e9:27:20: da:5a:e6:63:ce:40:10:ec:0a:4e:77:75:64:ca:23:8a:2e:09: ea:41:92:c2:ae:33:d8:9a:b6:21:9c:0f:d6:2e:86:ff:2d:ab: 3d:dc:4d:6e:d6:29:7c:d8:2c:52:c3:b8:f0:a0:fa:49:ea:55: 5c:18:fb:da:e3:92:b2:30:d4:b5:4b:15:2f:07:d6:e6:77:93: cd:c5:4b:42:97:c7:13:17:f0:22:02:da:7a:58:93:34:dd:44: 9e:12:72:77:73:de:a0:7b:48:a8:36:9d:2a:80:42:0d:cf:d3: 45:5d:89:7a:61:ee:5a:36:29:5f:08:9b:93:6b:d6:b8:bd:29: e0:da:e5:25:86:62:1f:de:b8:f8:b6:32:cc:3f:ce:90:63:15: 37:b9:f5:92:9c:0b:91:53:95:99:72:2f:e8:2a:81:47:de:05: 99:6d:e1:7d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEiMPkgapRAtZe7euUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDExNTAxNDUzMloXDTI3MDQyMDAwNDUzMlowLzEtMCsGA1UEAxMk MTU2MmMxYWItYjM5NS00OGVlLThkMmQtZjM0ZDQ3ZTRlZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrMnPs2RIWlvd12l4R3cawzQf9wrZ5+NC1AA uAB4vNzKWx0j+jKUvOqmvL2g/Z3eD0VL9eb6BAIouBEfMImd6QuI9Wy9ZfPZ5YKY Zpplkj6OnLn9CvQhF7wHn4FRMGm965ed3vwOoue+obaxRJiIYI0DY4ZZidsk21z8 CSUBIGPVin7r0qp9hBhDE3F431J4NJfmR0K0PfRsbWwwYBWAN07cp5QeCKu88Hel PNfyRW/4/fZvr8Sjy6yiUxnHL4nLdsjT26fxeSZytRvRcwPatHNnZDaJ4upt4zTw ZOvvTtSCxNZ9UsIZIj2IlW9Ro+werNJeStOlm73D5KEGh9OGVQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEogwXh5iLBPGI/LQM/Bi2kNgouwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x NTYyYzFhYi1iMzk1LTQ4ZWUtOGQyZC1mMzRkNDdlNGVlNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzE1NjJjMWFiLWIzOTUtNDhlZS04 ZDJkLWYzNGQ0N2U0ZWU2My8xNTYyYzFhYi1iMzk1LTQ4ZWUtOGQyZC1mMzRkNDdl NGVlNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALM5EQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARhtNv0dfRXXqVfkWlNrE 09Wr146mxH//n2rfaahSNE9AP/6otB3aDRf7fgWbxbLHEO2uPm63qF8Udi+hQMHm SYlPpl40aYhJX38ywjEXAvGxK7MohsDj6Scg2lrmY85AEOwKTnd1ZMojii4J6kGS wq4z2Jq2IZwP1i6G/y2rPdxNbtYpfNgsUsO48KD6SepVXBj72uOSsjDUtUsVLwfW 5neTzcVLQpfHExfwIgLaeliTNN1EnhJyd3PeoHtIqDadKoBCDc/TRV2JemHuWjYp Xwibk2vWuL0p4NrlJYZiH964+LYyzD/OkGMVN7n1kpwLkVOVmXIv6CqBR94FmW3h fQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:20:46 2025 by rpki-client