$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502.cer File: cd00af7c-48e4-48bb-914f-0c2662c5f502.cer (raw, json) Hash identifier: nx0LKKZ+UOkGVxHhEEUovllJykVuI+1PPe5wqA77/pw= Subject key identifier: 26:8B:8F:D7:28:2A:7A:0B:B8:A6:6E:95:5C:8D:12:89:F4:8E:9E:1C Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285848F91EF7CD14A7362EED07ADB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/cd00af7c-48e4-48bb-914f-0c2662c5f502.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Feb 2025 01:45:33 +0000 Certificate not after: Sat 29 May 2027 00:45:33 +0000 Subordinate resources: IP: 206.130.88.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:1e:f7:cd:14:a7:36:2e:ed:07:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Feb 23 01:45:33 2025 GMT Not After : May 29 00:45:33 2027 GMT Subject: CN=cd00af7c-48e4-48bb-914f-0c2662c5f502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:af:60:ef:d7:34:48:75:c8:c3:cb:41:a0: 7a:f0:e2:df:f0:d6:33:6d:31:fa:6d:ed:35:0a:20: 5a:4e:19:bd:e4:4e:ac:e1:e4:ac:92:ab:1b:18:a0: a8:96:d6:84:3b:86:55:10:42:ab:81:50:08:c4:fb: be:fc:6b:d6:9e:ac:7e:e1:8b:5d:c2:c7:46:32:12: 54:b1:db:4d:ae:16:f7:74:e9:06:60:d1:21:39:6c: 5c:a6:ea:9f:cf:5f:fa:9a:cb:5b:6a:a3:9c:6f:1f: 0e:4f:b7:8a:f6:de:d7:bd:48:75:6b:7c:6b:ec:06: 59:69:17:dc:79:53:f9:65:7c:d1:93:0c:a0:02:e6: bb:dd:f2:6d:35:64:cd:95:6d:63:0b:d4:84:68:74: 8d:e0:05:1e:74:93:16:8e:4e:f6:9a:8e:64:7d:cd: 8c:15:4c:1a:ed:7d:6f:52:36:8c:4f:10:f2:8c:43: 51:cf:fe:f8:0b:ab:0f:ab:01:d7:33:90:f5:b8:fc: 1b:a6:b9:56:a0:5e:38:c5:3c:82:2c:1c:fe:03:56: 0a:55:cc:b8:6f:8c:b0:86:8f:a5:ca:21:40:c2:23: ca:8e:8e:24:58:94:4c:b8:d8:8a:e6:a4:30:30:f8: 8c:a4:d6:c9:0c:c3:ea:6b:f8:a6:a5:76:be:69:a3: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8B:8F:D7:28:2A:7A:0B:B8:A6:6E:95:5C:8D:12:89:F4:8E:9E:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/cd00af7c-48e4-48bb-914f-0c2662c5f502.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 206.130.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b6:85:f4:1f:40:33:a2:14:89:fb:e1:46:83:56:78:0b:48: be:c3:55:e5:74:ff:6a:27:30:33:05:be:13:e3:f6:00:74:67: af:7c:db:6b:e1:ee:0f:5f:40:e1:35:9e:41:a9:8b:6f:c0:f7: 5d:33:af:d0:95:82:04:be:03:82:3f:aa:e7:f3:49:43:9a:61: b4:38:bb:59:5e:75:51:fe:aa:2a:9c:8a:b3:1c:c1:9c:09:d6: 5c:62:78:29:19:c9:de:a9:7a:5e:0c:d2:db:80:8d:61:0e:ca: 2e:0b:78:92:4a:e0:f9:0b:33:62:1d:c3:13:5c:b7:01:24:18: e4:1c:9e:6f:f8:b2:44:72:99:5c:76:94:b7:a6:44:ee:e5:02: a9:6b:79:c3:5a:9d:e9:9a:57:b4:75:80:d8:8b:b8:e2:21:a1: e3:01:97:fb:99:2e:98:bf:78:86:98:62:4c:c0:00:62:f6:7e: 4a:35:cf:ab:c8:2d:fc:40:cd:ce:78:f4:f8:10:6b:73:40:cc: 04:4b:b4:5d:71:2f:18:ec:6d:7d:ab:9d:a9:5e:9e:7a:cb:3e: 66:92:e8:d6:e6:08:6d:a7:73:87:e8:f7:3e:63:32:28:f4:c1: e3:9d:a5:61:2d:a6:e2:7a:6a:a4:45:6e:4d:a1:c0:bd:54:92: b0:dd:9e:0a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEj5HvfNFKc2Lu0HrbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDIyMzAxNDUzM1oXDTI3MDUyOTAwNDUzM1owLzEtMCsGA1UEAxMk Y2QwMGFmN2MtNDhlNC00OGJiLTkxNGYtMGMyNjYyYzVmNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4ivYO/XNEh1yMPLQaB68OLf8NYzbTH6be01 CiBaThm95E6s4eSskqsbGKColtaEO4ZVEEKrgVAIxPu+/GvWnqx+4YtdwsdGMhJU sdtNrhb3dOkGYNEhOWxcpuqfz1/6mstbaqOcbx8OT7eK9t7XvUh1a3xr7AZZaRfc eVP5ZXzRkwygAua73fJtNWTNlW1jC9SEaHSN4AUedJMWjk72mo5kfc2MFUwa7X1v UjaMTxDyjENRz/74C6sPqwHXM5D1uPwbprlWoF44xTyCLBz+A1YKVcy4b4ywho+l yiFAwiPKjo4kWJRMuNiK5qQwMPiMpNbJDMPqa/impXa+aaO2WQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCaLj9coKnoLuKZulVyNEon0jp4cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9j ZDAwYWY3Yy00OGU0LTQ4YmItOTE0Zi0wYzI2NjJjNWY1MDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2NkMDBhZjdjLTQ4ZTQtNDhiYi05 MTRmLTBjMjY2MmM1ZjUwMi9jZDAwYWY3Yy00OGU0LTQ4YmItOTE0Zi0wYzI2NjJj NWY1MDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHOglgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGraF9B9AM6IUifvhRoNW eAtIvsNV5XT/aicwMwW+E+P2AHRnr3zba+HuD19A4TWeQamLb8D3XTOv0JWCBL4D gj+q5/NJQ5phtDi7WV51Uf6qKpyKsxzBnAnWXGJ4KRnJ3ql6XgzS24CNYQ7KLgt4 kkrg+QszYh3DE1y3ASQY5Byeb/iyRHKZXHaUt6ZE7uUCqWt5w1qd6ZpXtHWA2Iu4 4iGh4wGX+5kumL94hphiTMAAYvZ+SjXPq8gt/EDNznj0+BBrc0DMBEu0XXEvGOxt faudqV6eess+ZpLo1uYIbadzh+j3PmMyKPTB452lYS2m4npqpEVuTaHAvVSSsN2e Cg== -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:07 2025 by rpki-client