$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer File: d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer (raw, json) Hash identifier: gESZaoP/nJl1ZHFDjnZJb+EMseG5L2RQqlOo3sV27Kc= Subject key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Authority key identifier: 47:48:42:15:CC:58:81:BA:B2:36:64:C5:7F:B1:B8:61:95:79:3B:82 Certificate issuer: /CN=4016a9a5-6e7c-4633-a4c3-24ad1b7f0785 Certificate serial: 010D0C9F43285849691AD4EA2372A8BBD82A9C70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 04 Apr 2025 04:27:46 +0000 Certificate not after: Thu 08 Jul 2027 04:27:46 +0000 Subordinate resources: IP: 64.52.14.0/24 IP: 147.189.152.0/23 IP: 173.249.188.0/22 IP: 176.103.218.0/24 IP: 199.7.252.0/22 IP: 216.211.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:1a:d4:ea:23:72:a8:bb:d8:2a:9c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4016a9a5-6e7c-4633-a4c3-24ad1b7f0785 Validity Not Before: Apr 4 04:27:46 2025 GMT Not After : Jul 8 04:27:46 2027 GMT Subject: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:ae:ee:75:a5:73:ed:71:81:c3:f5:a2:d4: b1:37:ac:92:a2:83:df:a9:5b:09:df:ce:df:46:dd: 26:c1:8a:64:d8:a1:0b:13:91:39:05:ca:d1:72:d2: 6a:57:7a:e7:e9:9f:59:03:77:97:39:d7:28:b7:32: 00:63:c1:1f:82:3c:ba:90:f9:81:ae:7a:0b:d1:a0: 89:80:e7:88:6d:0b:77:cf:b9:2b:99:90:52:5a:b3: 75:df:bb:37:e1:99:1b:cb:ae:dc:a9:d5:fe:47:3f: 26:e9:a8:db:06:d4:bf:26:38:c7:3c:97:b8:87:f6: 6b:5a:e5:7a:d2:31:ae:3b:89:f7:31:b2:71:53:71: 2e:06:fd:dc:10:3d:dd:3d:80:c7:90:1a:04:16:ac: 3c:6d:3c:99:ff:f2:59:8a:d9:d2:5d:c0:1c:f1:ed: 82:6e:f2:65:bc:1a:4e:a7:73:a6:ca:84:c4:6b:df: 81:3a:36:16:30:ad:22:ba:1a:8f:e4:a4:b5:e2:e5: 9a:12:d4:e2:47:d8:4d:65:30:62:70:af:24:6b:bc: 83:78:92:23:f0:c2:a0:c6:60:19:3d:99:94:de:b0: da:91:66:33:4a:d2:21:6d:83:6d:88:b4:f9:23:e2: 0c:5a:d0:82:df:cf:4a:23:d0:51:e2:62:4e:50:f4: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl X509v3 Authority Key Identifier: keyid:47:48:42:15:CC:58:81:BA:B2:36:64:C5:7F:B1:B8:61:95:79:3B:82 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer sbgp-ipAddrBlock: critical IPv4: 64.52.14.0/24 147.189.152.0/23 173.249.188.0/22 176.103.218.0/24 199.7.252.0/22 216.211.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cd:aa:ca:9e:54:4a:4f:ac:65:4a:32:8d:25:54:1f:6f:27: e5:65:af:a4:4a:ef:35:a7:02:75:f7:03:31:4e:93:d2:33:bc: d6:2d:d3:d1:e5:c2:2b:e3:27:b7:bc:00:19:9e:5c:01:47:17: f0:14:d4:e0:0e:ea:e4:42:ab:e7:4d:db:d4:7d:e7:cf:67:86: df:e5:80:83:99:d6:d0:cf:ab:fa:fa:22:77:a7:38:68:6a:4e: 71:80:40:8d:87:10:f0:9e:ec:d7:c8:27:74:5a:e1:a9:f4:aa: a0:6f:b1:0e:f4:a8:7f:f9:d4:40:3c:8a:75:cd:0f:c3:dd:fe: 88:96:38:9c:e5:fe:da:4e:42:12:0d:b1:e9:ef:99:32:d9:7f: 9a:61:36:a8:29:d3:32:78:bc:60:2d:f2:12:a6:2a:59:94:54: c2:02:8f:c2:af:2b:21:03:95:23:43:90:ee:87:f9:ed:7b:c9: b7:d6:2b:8a:36:b9:df:75:43:21:d9:88:98:49:37:37:82:44: b5:1b:6f:b8:80:da:4c:fe:ee:2e:cd:d9:e0:5c:c9:e8:b8:23: 34:f4:d0:15:d6:04:ab:2c:d0:bc:bd:1e:bd:bf:93:a2:e4:eb: c7:08:0d:e8:a5:b6:a7:ca:92:0a:d7:22:73:c9:a6:32:95:8b: f9:2c:a1:ba -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUAQ0Mn0MoWElpGtTqI3Kou9gqnHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNmE5YTUtNmU3Yy00NjMzLWE0YzMtMjRhZDFiN2Yw Nzg1MB4XDTI1MDQwNDA0Mjc0NloXDTI3MDcwODA0Mjc0NlowPTE7MDkGA1UEAxMy ZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJlYTMwMjU5NzdiYTk2YzMx NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5R67udaVz7XGBw/Wi 1LE3rJKig9+pWwnfzt9G3SbBimTYoQsTkTkFytFy0mpXeufpn1kDd5c51yi3MgBj wR+CPLqQ+YGuegvRoImA54htC3fPuSuZkFJas3XfuzfhmRvLrtyp1f5HPybpqNsG 1L8mOMc8l7iH9mta5XrSMa47ifcxsnFTcS4G/dwQPd09gMeQGgQWrDxtPJn/8lmK 2dJdwBzx7YJu8mW8Gk6nc6bKhMRr34E6NhYwrSK6Go/kpLXi5ZoS1OJH2E1lMGJw ryRrvIN4kiPwwqDGYBk9mZTesNqRZjNK0iFtg22ItPkj4gxa0ILfz0oj0FHiYk5Q 9NnPAgMBAAGjggPDMIIDvzAdBgNVHQ4EFgQUHpJwl/lhzWLGhCIRIGeRWFaI6msw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4Y2VhMmFjNjAxOGRjYzYx YjQyNjUxZDYvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4Y2VhMmFjNjAxOGRjYzYxYjQyNjUxZDYv MC8xRTkyNzA5N0Y5NjFDRDYyQzY4NDIyMTEyMDY3OTE1ODU2ODhFQTZCLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1 Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMz LTI0YWQxYjdmMDc4NS80MDE2YTlhNS02ZTdjLTQ2MzMtYTRjMy0yNGFkMWI3ZjA3 ODUuY3JsMB8GA1UdIwQYMBaAFEdIQhXMWIG6sjZkxX+xuGGVeTuCMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt OGY2Yy1kNmM5MWIwYjg0MTUvNDAxNmE5YTUtNmU3Yy00NjMzLWE0YzMtMjRhZDFi N2YwNzg1LmNlcjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAEA0DgMEAZO9 mAMEAq35vAMEALBn2gMEAscH/AMEAtjT0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJzarKnlRKT6xlSjKN JVQfbyflZa+kSu81pwJ19wMxTpPSM7zWLdPR5cIr4ye3vAAZnlwBRxfwFNTgDurk QqvnTdvUfefPZ4bf5YCDmdbQz6v6+iJ3pzhoak5xgECNhxDwnuzXyCd0WuGp9Kqg b7EO9Kh/+dRAPIp1zQ/D3f6Iljic5f7aTkISDbHp75ky2X+aYTaoKdMyeLxgLfIS pipZlFTCAo/CryshA5UjQ5Duh/nte8m31iuKNrnfdUMh2YiYSTc3gkS1G2+4gNpM /u4uzdngXMnouCM09NAV1gSrLNC8vR69v5Oi5OvHCA3opbanypIK1yJzyaYylYv5 LKG6 -----END CERTIFICATE-----Generated at Mon Apr 21 05:29:58 2025 by rpki-client