$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer File: 56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer (raw, json) Hash identifier: qWfhvpz3J/0+LingDYrrxa6BpjblJyXYtWtGfb9H0Z0= Subject key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71 Authority key identifier: 4A:E3:61:EF:B1:F3:D9:E5:56:24:25:30:EB:80:12:56:38:98:7E:7B Certificate issuer: /CN=414a8094-a4a0-4822-9bac-5c5a83afca3d Certificate serial: 010D0C9F4328584656BD6F773C9D56BD11ADEA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer Manifest: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft caRepository: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/ Notify URL: https://cloudie.rpki.app/rrdp/notification.xml Certificate not before: Wed 26 Jun 2024 12:14:13 +0000 Certificate not after: Tue 29 Sep 2026 12:14:13 +0000 Subordinate resources: IP: 23.140.248.0/23 IP: 147.160.138.0/23 IP: 2602:fafd::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:56:bd:6f:77:3c:9d:56:bd:11:ad:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=414a8094-a4a0-4822-9bac-5c5a83afca3d Validity Not Before: Jun 26 12:14:13 2024 GMT Not After : Sep 29 12:14:13 2026 GMT Subject: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:95:25:be:05:60:36:90:d7:8d:f7:33:8e: 19:ad:93:8d:92:86:7c:21:61:aa:62:21:42:c4:ab: 7d:f2:e2:dc:2b:78:6a:e8:49:8a:ac:1c:87:50:8d: 0a:3f:5f:2d:d8:4f:b2:f5:fe:b8:cf:c3:b0:c2:29: 66:de:e8:47:c9:2e:45:62:48:a9:e1:7e:99:47:98: 60:0c:a3:17:e2:70:28:85:d8:04:f8:bc:6e:ba:62: ed:d9:d0:2b:82:db:8c:8e:ce:4d:c1:d7:61:63:51: b4:19:53:de:66:f1:1c:31:13:f6:99:ea:6d:a3:d3: ee:3f:4d:f5:c2:d9:03:ea:9f:e2:b2:5d:a7:4c:0d: c7:51:2b:35:0d:21:06:6d:54:1e:4e:f3:82:ec:57: 6a:fa:9c:a4:e1:13:18:c5:b4:77:55:f9:7a:4b:17: 6c:55:36:fd:f3:60:f6:22:8d:48:b9:42:61:27:de: 62:25:ca:78:82:40:5d:bd:17:87:22:b2:4f:ff:6d: 82:cf:f0:e3:dc:e6:64:4b:87:6f:32:b6:8a:51:05: ae:b1:d1:53:7b:e2:fa:df:88:77:44:61:ad:df:66: d2:4a:c1:f5:55:12:d2:0c:46:28:11:35:53:06:be: 0a:e3:68:0e:7b:1d:10:ab:2e:00:66:9b:58:e5:22: 34:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71 Subject Information Access: CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/ RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.mft RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/414a8094-a4a0-4822-9bac-5c5a83afca3d.crl X509v3 Authority Key Identifier: keyid:4A:E3:61:EF:B1:F3:D9:E5:56:24:25:30:EB:80:12:56:38:98:7E:7B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d.cer sbgp-ipAddrBlock: critical IPv4: 23.140.248.0/23 147.160.138.0/23 IPv6: 2602:fafd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:5a:32:71:44:ba:62:be:34:bd:c2:54:36:7a:1a:b7:34:2c: a6:83:df:bc:84:17:e9:d7:3f:ae:33:05:9f:16:01:69:ec:14: 29:f6:16:75:ac:0b:64:13:5a:51:64:99:16:ea:27:89:76:c7: 54:bf:51:59:e7:5f:c9:77:5a:d6:b3:0f:53:c1:08:0d:fa:e8: 35:62:63:c8:cd:1b:db:40:9c:ae:07:f0:d8:55:53:14:1a:2e: 13:9a:0b:1f:32:ac:ca:36:e9:51:77:4c:63:4c:37:6e:df:3d: 9e:02:ca:4f:68:0a:18:c4:b6:8b:25:38:5d:8b:8d:be:62:98: 41:cc:47:3b:b6:79:4b:62:28:b5:c0:83:fd:ea:d1:bc:4d:38: 9f:5a:5d:14:39:8e:11:8d:ed:3a:8c:a8:be:f7:9a:ae:11:42: c8:a7:f9:f3:51:f2:15:cc:83:c1:08:b8:d3:78:24:a2:88:7d: d7:75:28:67:b4:2b:1d:69:6d:4d:fc:bf:d4:ab:41:f1:5b:02: 80:8e:68:bc:2d:ab:91:f4:0e:8c:a8:fe:80:32:b6:fa:b1:01: 2e:89:92:72:75:55:39:5f:37:cf:c4:0f:89:50:b1:a4:d3:7a: 16:c9:98:27:76:3f:6e:ba:19:93:d9:3d:ed:d0:f7:db:68:89: 9b:30:97:63 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEZWvW93PJ1WvRGt6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE0YTgwOTQtYTRhMC00ODIyLTliYWMtNWM1YTgzYWZj YTNkMB4XDTI0MDYyNjEyMTQxM1oXDTI2MDkyOTEyMTQxM1owPTE7MDkGA1UEAxMy NTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZhOTA0OTU5YmIxOGIwM2Rl NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+ZUlvgVgNpDXjfcz jhmtk42ShnwhYapiIULEq33y4twreGroSYqsHIdQjQo/Xy3YT7L1/rjPw7DCKWbe 6EfJLkViSKnhfplHmGAMoxficCiF2AT4vG66Yu3Z0CuC24yOzk3B12FjUbQZU95m 8RwxE/aZ6m2j0+4/TfXC2QPqn+KyXadMDcdRKzUNIQZtVB5O84LsV2r6nKThExjF tHdV+XpLF2xVNv3zYPYijUi5QmEn3mIlyniCQF29F4cisk//bYLP8OPc5mRLh28y topRBa6x0VN74vrfiHdEYa3fZtJKwfVVEtIMRigRNVMGvgrjaA57HRCrLgBmm1jl IjT1AgMBAAGjggOPMIIDizAdBgNVHQ4EFgQU5Rh9Tah2GdPbuXUOg9GeW3+AMnEw gfgGCCsGAQUFBwELBIHrMIHoMD4GCCsGAQUFBzAFhjJyc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xLzBqBggrBgEFBQcwCoZe cnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kv MS9FNTE4N0Q0REE4NzYxOUQzREJCOTc1MEU4M0QxOUU1QjdGODAzMjcxLm1mdDA6 BggrBgEFBQcwDYYuaHR0cHM6Ly9jbG91ZGllLnJwa2kuYXBwL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8EgdQwgdEwgc6ggcug gciGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0 LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4MjIt OWJhYy01YzVhODNhZmNhM2QvNDE0YTgwOTQtYTRhMC00ODIyLTliYWMtNWM1YTgz YWZjYTNkLmNybDAfBgNVHSMEGDAWgBRK42HvsfPZ5VYkJTDrgBJWOJh+ezAOBgNV HQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggrBgEFBQcwAoaBoHJz eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00 OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQxNGE4MDk0LWE0YTAtNDgyMi05YmFjLTVj NWE4M2FmY2EzZC5jZXIwNQYIKwYBBQUHAQcBAf8EJjAkMBIEAgABMAwDBAEXjPgD BAGToIowDgQCAAIwCAMGBCYC+v0AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAOBaMnFEumK+NL3CVDZ6Grc0 LKaD37yEF+nXP64zBZ8WAWnsFCn2FnWsC2QTWlFkmRbqJ4l2x1S/UVnnX8l3Wtaz D1PBCA366DViY8jNG9tAnK4H8NhVUxQaLhOaCx8yrMo26VF3TGNMN27fPZ4Cyk9o ChjEtoslOF2Ljb5imEHMRzu2eUtiKLXAg/3q0bxNOJ9aXRQ5jhGN7TqMqL73mq4R Qsin+fNR8hXMg8EIuNN4JKKIfdd1KGe0Kx1pbU38v9SrQfFbAoCOaLwtq5H0Doyo /oAytvqxAS6JknJ1VTlfN8/ED4lQsaTTehbJmCd2P266GZPZPe3Q99toiZswl2M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:18 2025 by rpki-client