$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer File: 1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer (raw, json) Hash identifier: m6ZG8ZNBMDcUaFUicQFbrDlPb6LUJzcRryQBsQF+cSI= Subject key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584917817DD5A6759A7B4108F920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 22:58:20 +0000 Certificate not after: Tue 08 Jun 2027 21:58:20 +0000 Subordinate resources: IP: 66.170.0.0/19 IP: 162.218.0.0/22 IP: 198.27.60.0/22 IP: 199.91.248.0/22 IP: 2607:f4e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:81:7d:d5:a6:75:9a:7b:41:08:f9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 5 22:58:20 2025 GMT Not After : Jun 8 21:58:20 2027 GMT Subject: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:f3:af:e5:63:3d:85:1c:54:20:21:f9:0b: 4e:53:9c:84:ea:77:2a:a0:80:b3:55:70:46:24:5b: 6f:3d:26:6c:34:64:f3:4a:48:3e:50:bb:6b:e3:33: 12:7d:6e:db:be:b6:cf:03:7b:e7:8f:75:d6:64:1f: 41:8c:d6:c7:c8:6f:23:3c:3a:01:85:3d:b3:e7:aa: cb:7a:88:e7:61:9f:3e:e7:55:c3:a2:dc:ff:a9:c2: bd:72:b6:cc:02:e8:c8:14:8b:63:33:b6:9a:da:15: b7:e7:41:1b:ad:54:9a:3c:3f:59:63:cd:11:a8:42: 50:0c:4a:d4:85:76:ef:30:4d:59:87:9c:b0:d4:3d: 50:d8:32:1f:1e:62:be:0e:bc:16:09:3b:bc:07:b0: 74:40:4c:94:36:9d:d0:a6:0d:49:57:da:83:e9:29: 58:5e:c8:55:55:22:0c:45:bd:0a:ad:4e:a6:07:55: 98:e8:9b:3c:77:b0:b4:b7:6e:ca:ca:27:18:fe:a5: d3:3c:e6:7d:1d:d5:8a:f8:11:ce:48:b9:f2:c7:e9: ea:a4:e0:62:cf:32:5b:7f:91:bf:b0:31:63:9d:92: 19:42:61:1d:8d:5a:6e:cb:6d:a0:15:a5:00:0e:ab: 23:ee:13:6a:b1:8e:91:b7:16:42:a8:41:bf:6d:79: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.170.0.0/19 162.218.0.0/22 198.27.60.0/22 199.91.248.0/22 IPv6: 2607:f4e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:71:3e:7e:d0:87:98:5d:75:6b:32:07:de:30:09:ef:d8:80: b0:4c:ed:ea:e4:aa:da:04:ab:3d:7d:a3:96:57:64:fd:a3:4d: 3c:69:16:5d:bd:53:02:b1:6d:42:bd:e5:58:0d:d4:17:0b:b3: 66:e0:e0:cb:e0:92:85:ec:e3:a4:e2:53:5b:e0:30:6f:5d:08: 5f:a2:fa:c0:9b:80:b2:a3:4e:31:f0:64:3a:8b:ae:9f:6f:67: 0b:20:d5:a4:a5:63:57:9f:be:d0:6c:53:2f:02:1e:21:df:a5: ea:7a:de:bd:b5:be:5d:e9:63:67:19:6d:70:b3:c1:4c:26:7b: f3:0e:28:a2:ab:97:67:c6:8f:4d:42:af:f5:d1:f3:89:ed:93: 8a:e9:42:64:fa:bd:af:62:aa:7d:ab:d9:19:76:5e:8b:aa:ef: 53:52:fa:55:4d:c4:d8:18:d2:d0:6d:0d:07:c7:6a:39:e8:64: 47:04:92:1c:e9:05:df:fe:95:89:1a:3d:e6:be:bd:00:ca:6c: 21:9c:9e:50:f1:e4:09:2a:4a:8a:3b:71:2b:09:a0:8b:6a:5a: 9f:60:37:29:5b:b3:dd:81:81:2b:da:18:d5:79:d8:a7:e6:44: bf:18:4a:95:53:05:ef:e0:73:ae:73:2a:61:8c:de:0e:32:8c: 07:40:10:52 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEkXgX3VpnWae0EI+SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNTIyNTgyMFoXDTI3MDYwODIxNTgyMFowLzEtMCsGA1UEAxMk MWY0NzllMTMtNTVhMS00YTVkLWEwMDItMTE3MGEwZmY1ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZHzr+VjPYUcVCAh+QtOU5yE6ncqoICzVXBG JFtvPSZsNGTzSkg+ULtr4zMSfW7bvrbPA3vnj3XWZB9BjNbHyG8jPDoBhT2z56rL eojnYZ8+51XDotz/qcK9crbMAujIFItjM7aa2hW350EbrVSaPD9ZY80RqEJQDErU hXbvME1Zh5yw1D1Q2DIfHmK+DrwWCTu8B7B0QEyUNp3Qpg1JV9qD6SlYXshVVSIM Rb0KrU6mB1WY6Js8d7C0t27KyicY/qXTPOZ9HdWK+BHOSLnyx+nqpOBizzJbf5G/ sDFjnZIZQmEdjVpuy22gFaUADqsj7hNqsY6RtxZCqEG/bXnIiQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFKi10jq1T7NALzIuLCxEeGP6VliwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x ZjQ3OWUxMy01NWExLTRhNWQtYTAwMi0xMTcwYTBmZjVmZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzFmNDc5ZTEzLTU1YTEtNGE1ZC1h MDAyLTExNzBhMGZmNWZkMi8xZjQ3OWUxMy01NWExLTRhNWQtYTAwMi0xMTcwYTBm ZjVmZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAVCqgADBAKi2gADBALGGzwDBALHW/gwDQQCAAIw BwMFACYH9OAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAK3E+ftCHmF11azIH3jAJ79iAsEzt6uSq2gSrPX2j lldk/aNNPGkWXb1TArFtQr3lWA3UFwuzZuDgy+CShezjpOJTW+Awb10IX6L6wJuA sqNOMfBkOouun29nCyDVpKVjV5++0GxTLwIeId+l6nrevbW+XeljZxltcLPBTCZ7 8w4ooquXZ8aPTUKv9dHzie2TiulCZPq9r2KqfavZGXZei6rvU1L6VU3E2BjS0G0N B8dqOehkRwSSHOkF3/6ViRo95r69AMpsIZyeUPHkCSpKijtxKwmgi2pan2A3KVuz 3YGBK9oY1XnYp+ZEvxhKlVMF7+BzrnMqYYzeDjKMB0AQUg== -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:48 2025 by rpki-client