$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer File: 1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer (raw, json) Hash identifier: DEUMHAl7dunDSrgn2msw13P0HIipo216nWCblu80qqk= Subject key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 Authority key identifier: 85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69 Certificate issuer: /CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a Certificate serial: 010D0C9F4328584949F705605C6BDB5764251040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 24 Mar 2025 00:45:33 +0000 Certificate not after: Sun 27 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 23.145.56.0/23 IP: 170.39.49.0/24 IP: 2602:fab8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:f7:05:60:5c:6b:db:57:64:25:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a Validity Not Before: Mar 24 00:45:33 2025 GMT Not After : Jun 27 00:45:33 2027 GMT Subject: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:97:4b:de:42:a3:c4:f6:7e:fd:cf:ba:14: ab:26:2c:7e:ae:a1:ca:bb:80:0f:bf:25:7d:2b:25: 2b:bf:8c:c0:79:97:6b:5a:58:8e:62:06:21:fe:f0: 9e:59:86:70:28:5e:bc:c6:95:66:0e:61:55:49:c9: 2e:46:b7:6d:9d:22:b0:61:e5:fa:bd:51:39:50:d4: 3f:91:a0:ee:12:2a:36:71:11:40:0e:d2:d7:26:f9: ef:cd:f8:da:15:21:9e:36:8e:5a:6e:30:e0:95:80: 39:9c:20:6b:bc:3c:94:b4:97:e2:88:b7:b3:be:a3: 43:93:16:2f:43:6e:68:6d:5a:7d:7e:8c:a6:fd:02: 8f:52:a4:da:22:7d:a4:0e:15:37:c1:0c:75:bf:b6: 6b:68:a8:3c:b3:69:d9:20:82:19:cb:28:5c:1e:e6: 7c:e9:3f:7e:20:2b:39:bd:5a:6a:29:0b:f4:f1:16: ab:66:e5:cd:0b:5e:81:43:ca:8a:df:bd:54:44:2e: cc:e8:c7:b1:95:62:25:09:c1:65:01:a9:bd:9c:56: b4:a3:d5:cc:cf:5b:d0:bb:dc:c8:71:9c:e3:f9:98: 72:69:ba:57:f0:14:48:bd:d8:e2:42:0d:de:f7:ea: b9:c4:ee:0c:e5:2e:fd:72:12:d3:83:bb:ec:c1:79: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl X509v3 Authority Key Identifier: keyid:85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer sbgp-ipAddrBlock: critical IPv4: 23.145.56.0/23 170.39.49.0/24 IPv6: 2602:fab8::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:50:7b:8c:05:29:58:bf:15:ce:48:b3:ca:a3:b2:2b:b7:52: 7b:d4:32:16:fd:c0:7d:af:e7:c1:41:e1:53:8c:b7:87:b0:86: ab:88:68:c6:28:7a:09:cd:e9:81:18:b5:54:7e:78:9d:4b:2f: e8:cd:b7:4b:bc:5e:14:a2:21:70:f7:cb:9d:ee:a4:ea:40:97: d0:9e:3a:f6:98:a8:0d:ed:93:57:2d:cc:ad:c4:14:5a:2f:39: 07:b4:9b:ea:3f:0c:dd:7a:5f:c8:06:03:5a:b7:ec:98:82:4f: 16:aa:a9:72:3a:fd:5a:5a:f7:b1:3c:d2:f6:08:e7:41:47:5d: ce:ab:17:21:df:d5:bd:7b:c3:75:5c:82:2c:ef:28:2e:3d:4f: c4:8f:08:ca:ff:fb:5b:4f:69:15:c7:ba:ba:0a:2e:2e:f2:f8: 2d:7b:bb:c6:c5:84:31:6b:ef:50:8a:72:f7:63:ef:e0:7b:91: 25:54:57:52:6a:99:48:a9:e6:40:c5:57:eb:8b:97:2e:19:3e: c7:6d:48:30:d5:d1:c5:75:50:66:5d:18:a2:fa:32:54:a3:e1: bf:b0:16:81:f2:e6:81:0c:26:fa:93:6e:4a:07:d7:74:be:c0: 5c:77:77:76:41:c1:28:1f:2d:34:38:3e:36:6d:b1:ce:95:96: b2:24:28:b0 -----BEGIN CERTIFICATE----- MIIG0zCCBbugAwIBAgIUAQ0Mn0MoWElJ9wVgXGvbV2QlEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2M2UyZjktNGQ5Yi00MGMzLWFmYTItY2U3MDQ1ZmZk MjNhMB4XDTI1MDMyNDAwNDUzM1oXDTI3MDYyNzAwNDUzM1owPTE7MDkGA1UEAxMy MTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4Zjc5NGRmMzJiZmU5ZWQw NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lJdL3kKjxPZ+/c+6 FKsmLH6uocq7gA+/JX0rJSu/jMB5l2taWI5iBiH+8J5ZhnAoXrzGlWYOYVVJyS5G t22dIrBh5fq9UTlQ1D+RoO4SKjZxEUAO0tcm+e/N+NoVIZ42jlpuMOCVgDmcIGu8 PJS0l+KIt7O+o0OTFi9DbmhtWn1+jKb9Ao9SpNoifaQOFTfBDHW/tmtoqDyzadkg ghnLKFwe5nzpP34gKzm9WmopC/TxFqtm5c0LXoFDyorfvVRELszox7GVYiUJwWUB qb2cVrSj1czPW9C73MhxnOP5mHJpulfwFEi92OJCDd736rnE7gzlLv1yEtODu+zB eXr/AgMBAAGjggPXMIID0zAdBgNVHQ4EFgQUk7ApbDF4d4D+hBMxj9DScIODTMUw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2 NS04YTE2LWRiZmM0NTkzYzFhOC84LzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00 NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzgvOTNCMDI5NkMzMTc4Nzc4MEZFODQxMzMx OEZEMEQyNzA4MzgzNENDNS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkz M2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1jZTcwNDVmZmQyM2EvNTU2M2Uy ZjktNGQ5Yi00MGMzLWFmYTItY2U3MDQ1ZmZkMjNhLmNybDAfBgNVHSMEGDAWgBSF t4gi8sjghNUB5gDhLXlBKDalaTAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzU1 NjNlMmY5LTRkOWItNDBjMy1hZmEyLWNlNzA0NWZmZDIzYS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXkTgDBACqJzEwDgQCAAIwCAMGBCYC+rgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFQe4wFKVi/Fc5Is8qjsiu3UnvUMhb9wH2v58FB4VOMt4ewhquIaMYo egnN6YEYtVR+eJ1LL+jNt0u8XhSiIXD3y53upOpAl9CeOvaYqA3tk1ctzK3EFFov OQe0m+o/DN16X8gGA1q37JiCTxaqqXI6/Vpa97E80vYI50FHXc6rFyHf1b17w3Vc gizvKC49T8SPCMr/+1tPaRXHuroKLi7y+C17u8bFhDFr71CKcvdj7+B7kSVUV1Jq mUip5kDFV+uLly4ZPsdtSDDV0cV1UGZdGKL6MlSj4b+wFoHy5oEMJvqTbkoH13S+ wFx3d3ZBwSgfLTQ4PjZtsc6VlrIkKLA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:32 2025 by rpki-client