$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer File: f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer (raw, json) Hash identifier: jT0p0V8+SNhcXFPEtDdKUT5buKdiozP5nnKmYaTjchM= Subject key identifier: 25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848F38999599311969B056C8D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Feb 2025 01:45:33 +0000 Certificate not after: Thu 27 May 2027 00:45:33 +0000 Subordinate resources: IP: 66.129.176.0/20 IP: 67.226.192.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f3:89:99:59:93:11:96:9b:05:6c:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 21 01:45:33 2025 GMT Not After : May 27 00:45:33 2027 GMT Subject: CN=f96100a5-de6f-4e8d-a5f0-be83c31160b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8f:12:71:dd:d6:70:cf:cd:34:92:d3:4d:c6: 06:12:b2:37:8c:52:ab:5b:05:74:81:77:b3:e8:42: ac:94:1c:69:79:ba:55:01:f4:b8:59:e6:9d:1a:6e: fe:c3:b0:91:e8:51:5d:d4:8f:35:e1:28:c0:d0:e0: 81:4e:41:f8:70:01:fd:b0:c0:fa:2f:4a:d9:ea:02: 4d:47:16:ae:ff:df:02:ac:33:48:6e:52:d9:06:bf: f0:89:48:4e:2f:6d:a6:5b:47:e1:2f:0b:ed:2a:7e: 91:55:fe:dd:2e:74:2b:8b:e8:07:56:e5:18:9b:e3: 0d:eb:d3:ee:35:90:7c:c6:2b:64:b7:52:cb:37:33: 28:6b:f9:c2:89:62:d6:81:43:3f:42:06:be:94:92: b5:25:18:57:25:23:df:9f:e2:f4:33:f4:dc:e5:77: 78:92:4d:9e:41:f7:1c:20:09:71:4e:01:90:69:64: 59:cd:ff:21:89:cd:6e:50:17:eb:96:c4:2a:70:05: 7d:f2:2f:48:f0:37:f1:ff:3d:ee:81:5a:fb:d0:18: cf:f1:1e:94:e2:b7:81:ee:af:0f:60:15:4a:4b:6f: bc:0a:09:a8:1a:32:c8:4b:c1:66:a9:b5:84:40:6f: 7e:b4:9b:52:e9:88:8f:dd:1b:bf:e6:a9:ca:2c:62: 5d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.129.176.0/20 67.226.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a5:d6:b5:7a:b8:50:da:11:00:86:60:42:20:76:e4:23:71: 68:17:7b:77:7f:68:1a:c9:0f:1b:d6:e9:a6:4b:2c:cf:01:1a: cb:91:73:1e:93:ca:1d:fc:06:ce:28:37:3c:f6:36:4b:b2:00: 67:1c:70:df:76:8d:b4:7f:08:c6:c1:94:78:d7:68:aa:bd:3b: 6b:1c:4a:21:0d:31:62:c0:99:a9:d0:38:c9:78:1c:0a:93:f0: 3b:fa:ff:d4:1f:85:89:82:c6:fb:a9:c6:92:d4:3e:02:37:ca: 07:38:98:b7:7b:31:82:e8:76:42:3a:43:2a:a1:67:67:e8:5c: 39:0c:df:18:66:ce:f9:07:cb:49:be:97:8c:1d:e5:30:cd:5b: 62:03:4a:f0:30:2b:2a:2e:3e:c5:28:78:0d:76:12:1c:9c:70: a6:5d:e1:98:c6:8a:ce:34:a4:bd:15:0f:18:97:38:f4:31:a3: 75:72:d7:36:0f:ff:cf:f4:91:49:0e:1e:b1:75:50:fe:bf:4d: c5:b1:f2:b2:cd:aa:4e:a4:54:12:3e:88:10:c7:dd:06:32:cc: 95:49:85:c9:eb:20:5a:07:84:de:83:60:33:de:d4:bf:c3:0d: 32:21:9a:b8:9f:26:6d:4c:e7:43:aa:65:c9:bf:01:a9:dc:52: 81:d6:83:ef -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEjziZlZkxGWmwVsjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDIyMTAxNDUzM1oXDTI3MDUyNzAwNDUzM1owLzEtMCsGA1UEAxMk Zjk2MTAwYTUtZGU2Zi00ZThkLWE1ZjAtYmU4M2MzMTE2MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y8Scd3WcM/NNJLTTcYGErI3jFKrWwV0gXez 6EKslBxpebpVAfS4WeadGm7+w7CR6FFd1I814SjA0OCBTkH4cAH9sMD6L0rZ6gJN Rxau/98CrDNIblLZBr/wiUhOL22mW0fhLwvtKn6RVf7dLnQri+gHVuUYm+MN69Pu NZB8xitkt1LLNzMoa/nCiWLWgUM/Qga+lJK1JRhXJSPfn+L0M/Tc5Xd4kk2eQfcc IAlxTgGQaWRZzf8hic1uUBfrlsQqcAV98i9I8Dfx/z3ugVr70BjP8R6U4reB7q8P YBVKS2+8CgmoGjLIS8FmqbWEQG9+tJtS6YiP3Ru/5qnKLGJdAwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFCVpIOhRxTWXY6iEEfT65385rliFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m OTYxMDBhNS1kZTZmLTRlOGQtYTVmMC1iZTgzYzMxMTYwYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Y5NjEwMGE1LWRlNmYtNGU4ZC1h NWYwLWJlODNjMzExNjBiNy9mOTYxMDBhNS1kZTZmLTRlOGQtYTVmMC1iZTgzYzMx MTYwYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARCgbADBARD4sAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAB6XWtXq4UNoR AIZgQiB25CNxaBd7d39oGskPG9bppksszwEay5FzHpPKHfwGzig3PPY2S7IAZxxw 33aNtH8IxsGUeNdoqr07axxKIQ0xYsCZqdA4yXgcCpPwO/r/1B+FiYLG+6nGktQ+ AjfKBziYt3sxguh2QjpDKqFnZ+hcOQzfGGbO+QfLSb6XjB3lMM1bYgNK8DArKi4+ xSh4DXYSHJxwpl3hmMaKzjSkvRUPGJc49DGjdXLXNg//z/SRSQ4esXVQ/r9NxbHy ss2qTqRUEj6IEMfdBjLMlUmFyesgWgeE3oNgM97Uv8MNMiGauJ8mbUznQ6plyb8B qdxSgdaD7w== -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:04 2025 by rpki-client