$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer File: 25d202df-6bec-4085-8c1b-d1f141557cfe.cer (raw, json) Hash identifier: v7JEDLWXnehGWTgVFt6EKlqYO0NGBkiWkKiUhbxZrOY= Subject key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584886A8EB17C33F418EE81E4680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jan 2025 01:45:33 +0000 Certificate not after: Sun 18 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 23.144.232.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:a8:eb:17:c3:3f:41:8e:e8:1e:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 13 01:45:33 2025 GMT Not After : Apr 18 00:45:33 2027 GMT Subject: CN=25d202df-6bec-4085-8c1b-d1f141557cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:2a:6e:17:9b:83:cc:9e:ba:d7:a5:9e:e0: da:7e:ab:c6:a0:1e:4d:01:c4:7a:38:40:5f:3f:d3: 4e:cd:8a:f3:15:5c:be:38:af:e6:fa:1b:15:10:26: ec:05:d5:cb:35:5a:af:11:88:21:03:5f:a1:0e:e4: 19:7d:6a:c8:3f:1f:68:21:17:26:ff:2e:d4:a3:02: e2:a9:f8:de:f9:75:e2:e7:56:a7:fa:9d:31:eb:df: ef:42:2f:31:94:95:d4:00:bf:e6:ca:01:14:99:14: 28:8b:6b:5b:96:8f:e8:98:e7:71:2b:03:6b:b3:dc: 0b:01:8f:a3:80:a3:81:4b:0f:90:26:ac:6c:5f:fb: 1c:17:ae:b1:e2:6c:e5:b3:bd:3c:21:f9:ea:4f:94: 20:15:c2:8e:74:89:7d:ab:3a:a8:c6:21:63:1c:4e: 42:b5:c6:95:33:7b:67:f4:73:e0:11:d1:e7:b5:a9: 98:01:37:93:bf:a0:d5:f9:ba:68:9f:eb:ce:1c:12: 73:f3:b8:30:56:c5:92:ed:82:26:82:20:c2:9f:66: 6e:ff:3e:81:40:0a:84:06:ed:80:d6:b1:a9:c5:ca: 6f:89:4c:d5:3e:28:7e:ad:89:ea:0b:f8:75:57:ba: 33:2a:ae:65:ce:ff:16:0d:a6:d0:9e:15:fb:23:a9: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.144.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e4:61:e9:0b:b0:8f:0c:be:9c:5e:28:be:d6:16:fb:e7:9c: 2a:f0:df:1f:58:02:b2:9b:0f:04:9a:c3:9b:d0:ab:4e:9a:69: 3d:f2:1b:43:33:c5:34:17:be:95:ff:93:3c:f4:da:31:50:4b: 7d:3d:3b:a6:82:26:11:eb:67:d7:61:ca:12:1c:fe:d7:0d:d5: 5c:27:3e:18:97:75:9f:30:49:2d:4a:2f:2c:ac:29:66:96:bd: 00:1b:6a:70:14:14:50:36:c6:b1:6f:e1:cb:26:24:41:8b:2c: 71:c3:24:7e:56:6b:e4:4b:73:40:57:d5:e2:d8:8e:6e:38:74: 6e:1d:ac:18:74:e5:d0:0e:37:b2:54:9b:3c:0c:01:df:e8:d1: 42:0c:8e:75:d6:bc:c6:8f:8a:27:a9:cc:b2:93:c4:dd:09:82: 62:e4:0f:cd:c8:03:df:ee:71:5c:f6:ef:0f:7b:4a:d4:78:2e: 34:44:11:41:db:d7:88:7b:d3:11:7e:2f:fb:40:6f:6d:1f:18: d5:e6:4e:f9:9a:d5:41:a9:0e:32:59:8e:f9:36:ae:d0:6a:25: fb:5c:2f:28:c7:72:6d:e4:bc:10:a0:a0:e2:9f:77:29:93:ba: 2c:15:e1:c9:9c:89:44:92:9f:23:10:91:97:a1:9c:cf:67:67: 4d:22:6c:c5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEiGqOsXwz9BjugeRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDExMzAxNDUzM1oXDTI3MDQxODAwNDUzM1owLzEtMCsGA1UEAxMk MjVkMjAyZGYtNmJlYy00MDg1LThjMWItZDFmMTQxNTU3Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswsqbhebg8yeutelnuDafqvGoB5NAcR6OEBf P9NOzYrzFVy+OK/m+hsVECbsBdXLNVqvEYghA1+hDuQZfWrIPx9oIRcm/y7UowLi qfje+XXi51an+p0x69/vQi8xlJXUAL/mygEUmRQoi2tblo/omOdxKwNrs9wLAY+j gKOBSw+QJqxsX/scF66x4mzls708IfnqT5QgFcKOdIl9qzqoxiFjHE5CtcaVM3tn 9HPgEdHntamYATeTv6DV+bpon+vOHBJz87gwVsWS7YImgiDCn2Zu/z6BQAqEBu2A 1rGpxcpviUzVPih+rYnqC/h1V7ozKq5lzv8WDabQnhX7I6nOyQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGIpNm9vuFH7bvmnoXER61hHBBHJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y NWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1NTdjZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI1ZDIwMmRmLTZiZWMtNDA4NS04 YzFiLWQxZjE0MTU1N2NmZS8yNWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1 NTdjZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXkOgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOORh6Quwjwy+nF4ovtYW ++ecKvDfH1gCspsPBJrDm9CrTpppPfIbQzPFNBe+lf+TPPTaMVBLfT07poImEetn 12HKEhz+1w3VXCc+GJd1nzBJLUovLKwpZpa9ABtqcBQUUDbGsW/hyyYkQYssccMk flZr5EtzQFfV4tiObjh0bh2sGHTl0A43slSbPAwB3+jRQgyOdda8xo+KJ6nMspPE 3QmCYuQPzcgD3+5xXPbvD3tK1HguNEQRQdvXiHvTEX4v+0BvbR8Y1eZO+ZrVQakO MlmO+Tau0Gol+1wvKMdybeS8EKCg4p93KZO6LBXhyZyJRJKfIxCRl6Gcz2dnTSJs xQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:18:38 2025 by rpki-client