$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer File: ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer (raw, json) Hash identifier: TWkpiywW33lB6Mr3nN3sSIIGiKClz7KYQExWDARM9fg= Subject key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858491D69DA364D19DCECF566D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 08 Mar 2025 01:45:32 +0000 Certificate not after: Fri 11 Jun 2027 00:45:32 +0000 Subordinate resources: IP: 170.52.20.0 -- 170.52.40.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:69:da:36:4d:19:dc:ec:f5:66:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 8 01:45:32 2025 GMT Not After : Jun 11 00:45:32 2027 GMT Subject: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:75:28:11:fd:e0:bf:1d:f2:da:d1:7f:76: 5f:69:ba:78:a7:56:c5:a8:b7:90:b4:5a:0e:9f:83: de:68:4c:2d:2c:fc:15:d7:a8:8f:71:65:68:ef:be: cf:d9:90:37:61:00:f8:c8:ab:ac:62:b1:1b:74:12: 97:18:d6:21:19:b7:b5:e8:34:9a:f4:b6:2a:24:98: 43:51:b8:bc:e7:b7:a2:6f:6a:20:4b:8c:c9:89:7a: 35:f1:51:90:99:b9:41:59:bd:cc:1e:a3:a2:98:7d: 9c:d3:14:7d:e7:3e:79:60:b9:76:6c:65:73:93:9d: 44:f1:1e:0b:d2:fa:45:98:ec:40:e4:6b:95:95:ac: 50:11:c4:71:5e:4a:4b:c3:97:36:d9:ae:2e:f1:68: 0f:10:d1:c2:05:57:5a:5e:13:f6:2c:5f:ef:d8:b0: 94:63:37:81:4d:45:6d:6e:b0:eb:19:c5:7c:18:73: c9:f1:9b:81:4f:46:69:4b:5f:89:81:dc:d5:ff:58: 47:1b:9f:d2:b3:be:7c:ef:fe:c4:d2:b2:fe:e3:13: a9:8c:ce:16:09:fe:71:4f:90:3f:7e:df:63:6a:57: d5:cd:54:6d:74:59:c7:cc:b1:3c:ba:e8:d1:16:71: 59:65:00:c3:ce:35:14:c9:3c:a7:ca:a8:12:85:24: dc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 170.52.20.0-170.52.40.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a4:b8:76:4c:1d:d8:27:7c:1c:02:69:15:ee:cc:2e:35:c4: 1b:fd:84:e1:e4:ef:ae:09:9e:a9:0d:f2:05:ca:6a:ca:bf:d9: 1a:3a:a1:e5:fe:ad:64:61:f8:c6:ab:24:8d:d0:41:15:de:94: c2:a5:aa:e7:f0:5d:ab:ce:81:47:cb:77:e2:55:7d:a3:fd:45: ff:4c:2e:5d:c7:47:70:82:61:da:84:76:2d:10:91:92:f6:e4: b7:33:e7:d3:a9:86:75:c4:e5:b6:9d:cb:8b:a5:0f:4a:e6:d6: 4d:22:8a:73:5c:c3:62:7b:83:d3:db:59:74:ae:eb:5e:5f:41: df:90:85:ed:05:a2:2e:a0:8c:cf:46:21:c3:75:1b:f1:ab:be: 33:95:48:1f:7d:10:5c:e4:39:ef:d5:28:59:09:02:1c:97:b5: ad:17:1d:f5:30:19:bf:6e:f9:35:90:84:7e:7b:9b:91:90:5f: db:36:db:98:86:2e:6a:43:97:fc:13:b3:ac:c9:62:bb:ff:93: 5e:73:0d:5c:0a:66:4e:f9:dd:cf:56:83:9f:40:29:d2:c8:e3: 04:d6:36:33:3b:04:9c:38:4f:6d:b7:bb:f5:18:90:68:02:6b: bd:e5:6a:b4:5c:d5:a5:02:62:c7:f7:fd:6b:14:01:9d:0e:47: d5:b5:a2:83 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEkdado2TRnc7PVm1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMwODAxNDUzMloXDTI3MDYxMTAwNDUzMlowLzEtMCsGA1UEAxMk ZWU4NmJhYjAtZWY3ZS00ZTIzLTg0ZmUtYmNkNWNlZTg2OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PB1KBH94L8d8trRf3Zfabp4p1bFqLeQtFoO n4PeaEwtLPwV16iPcWVo777P2ZA3YQD4yKusYrEbdBKXGNYhGbe16DSa9LYqJJhD Ubi857eib2ogS4zJiXo18VGQmblBWb3MHqOimH2c0xR95z55YLl2bGVzk51E8R4L 0vpFmOxA5GuVlaxQEcRxXkpLw5c22a4u8WgPENHCBVdaXhP2LF/v2LCUYzeBTUVt brDrGcV8GHPJ8ZuBT0ZpS1+JgdzV/1hHG5/Ss7587/7E0rL+4xOpjM4WCf5xT5A/ ft9jalfVzVRtdFnHzLE8uujRFnFZZQDDzjUUyTynyqgShSTcQwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFBfTgyGnPOYnbQfbonAtG5XC7i8NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l ZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2VlODY5YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2VlODZiYWIwLWVmN2UtNGUyMy04 NGZlLWJjZDVjZWU4NjliYi9lZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2Vl ODY5YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAqo0FAMEAKo0KDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVpLh2TB3Y J3wcAmkV7swuNcQb/YTh5O+uCZ6pDfIFymrKv9kaOqHl/q1kYfjGqySN0EEV3pTC parn8F2rzoFHy3fiVX2j/UX/TC5dx0dwgmHahHYtEJGS9uS3M+fTqYZ1xOW2ncuL pQ9K5tZNIopzXMNie4PT21l0ruteX0HfkIXtBaIuoIzPRiHDdRvxq74zlUgffRBc 5Dnv1ShZCQIcl7WtFx31MBm/bvk1kIR+e5uRkF/bNtuYhi5qQ5f8E7OsyWK7/5Ne cw1cCmZO+d3PVoOfQCnSyOME1jYzOwScOE9tt7v1GJBoAmu95Wq0XNWlAmLH9/1r FAGdDkfVtaKD -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:06 2025 by rpki-client