$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer File: 78ffdd14-7e7a-46d4-993a-4b51f8031030.cer (raw, json) Hash identifier: UM/3Pw6HFs/whSiA9MTIDeHIJlmxAgPMmssmiym/ESY= Subject key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848D95F60B11DC6DC80BECFEE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 16:49:28 +0000 Certificate not after: Mon 17 May 2027 15:49:28 +0000 Subordinate resources: IP: 165.140.58.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:5f:60:b1:1d:c6:dc:80:be:cf:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 11 16:49:28 2025 GMT Not After : May 17 15:49:28 2027 GMT Subject: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:0c:33:ae:78:47:01:7c:9c:1b:32:4c:8a: 2b:3e:20:ec:14:c5:f1:c9:4f:10:f3:bb:4e:e6:2f: d9:b4:52:29:37:c2:26:27:d3:55:12:32:ca:9c:82: ba:c3:55:8a:b3:82:88:a4:f1:2f:b4:1a:e0:22:a8: ed:78:86:6f:ec:9d:57:94:35:28:9b:6a:03:1c:f4: 87:c4:f4:83:ff:5c:7e:af:d4:5d:42:95:bd:fd:90: 99:95:5e:70:30:2e:97:5b:47:44:0e:a9:af:a0:5e: 6a:51:6d:7a:58:9c:28:52:a1:11:4d:28:1e:20:4d: d4:1c:2a:52:b6:1c:df:38:95:f4:59:fb:b4:cb:f8: 47:80:04:f4:a0:d3:5a:f5:1f:d8:57:63:8c:45:22: 75:cd:da:2b:b3:ea:70:77:94:63:38:93:fd:2e:e8: a6:65:28:0a:52:ce:15:45:35:6c:6b:c1:1f:08:27: ba:95:8e:9e:cd:2f:93:c2:0a:8f:67:e3:b9:de:c9: fc:75:06:d5:45:81:e2:02:22:d4:4d:77:26:7c:67: 85:6e:b8:ed:73:02:5c:be:1e:25:cb:1b:cd:c6:75: e3:f0:db:04:93:1d:12:82:8a:25:70:f1:1d:12:a8: 67:0b:9f:2f:f9:d8:5c:23:03:e5:2b:19:96:44:8d: 8a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 165.140.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:51:71:2f:77:fd:9a:d9:7a:c0:af:53:85:e1:d2:9c:79:d7: 2b:08:64:66:77:c1:9c:9c:a0:6e:af:f9:e2:40:98:b5:a3:c0: 7b:b4:5d:f8:04:50:b7:15:6b:02:00:42:38:28:88:35:34:8b: f9:d9:33:2e:28:9f:18:36:e3:3d:35:fd:9d:ca:44:21:d4:3e: 50:af:7e:b0:c8:df:e3:89:9f:5f:a4:a0:22:f6:7b:62:79:60: 62:3b:cc:87:69:2f:77:0c:a9:dc:56:07:84:11:f4:cd:42:6e: fe:9d:5f:0d:b7:47:1d:38:90:2c:d7:f9:38:b2:4f:eb:75:fe: 7f:fc:9f:88:a4:ad:28:2f:ca:6f:02:91:98:37:f9:e8:57:f9: 3e:7c:e4:da:da:1c:a0:86:0b:93:ef:24:1f:74:53:a9:f6:63: 21:ec:e6:3f:19:80:c1:02:e5:88:e1:55:b4:33:54:51:1e:54: ac:22:5c:f3:19:a7:17:56:c5:54:51:0e:9c:91:97:fb:a1:2f: 09:fd:60:6f:24:b6:5c:3f:67:7f:a3:ef:7a:b4:4f:1c:fc:84: c1:6f:bc:f1:4f:2a:9c:fc:8a:9d:0b:6f:54:ba:51:f4:5f:b6: 13:26:89:13:72:a3:93:14:e8:5d:84:f5:94:45:41:71:3f:be: e8:05:f8:52 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjZX2CxHcbcgL7P7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMTE2NDkyOFoXDTI3MDUxNzE1NDkyOFowLzEtMCsGA1UEAxMk NzhmZmRkMTQtN2U3YS00NmQ0LTk5M2EtNGI1MWY4MDMxMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwYMM654RwF8nBsyTIorPiDsFMXxyU8Q87tO 5i/ZtFIpN8ImJ9NVEjLKnIK6w1WKs4KIpPEvtBrgIqjteIZv7J1XlDUom2oDHPSH xPSD/1x+r9RdQpW9/ZCZlV5wMC6XW0dEDqmvoF5qUW16WJwoUqERTSgeIE3UHCpS thzfOJX0Wfu0y/hHgAT0oNNa9R/YV2OMRSJ1zdors+pwd5RjOJP9LuimZSgKUs4V RTVsa8EfCCe6lY6ezS+TwgqPZ+O53sn8dQbVRYHiAiLUTXcmfGeFbrjtcwJcvh4l yxvNxnXj8NsEkx0SgoolcPEdEqhnC58v+dhcIwPlKxmWRI2KEQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFP0Ls4YAFYYNfQovG1szl5e5lU67MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 OGZmZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUxZjgwMzEwMzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc4ZmZkZDE0LTdlN2EtNDZkNC05 OTNhLTRiNTFmODAzMTAzMC83OGZmZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUxZjgw MzEwMzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGljDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASlFxL3f9mtl6wK9TheHS nHnXKwhkZnfBnJygbq/54kCYtaPAe7Rd+ARQtxVrAgBCOCiINTSL+dkzLiifGDbj PTX9ncpEIdQ+UK9+sMjf44mfX6SgIvZ7YnlgYjvMh2kvdwyp3FYHhBH0zUJu/p1f DbdHHTiQLNf5OLJP63X+f/yfiKStKC/KbwKRmDf56Ff5Pnzk2tocoIYLk+8kH3RT qfZjIezmPxmAwQLliOFVtDNUUR5UrCJc8xmnF1bFVFEOnJGX+6EvCf1gbyS2XD9n f6PverRPHPyEwW+88U8qnPyKnQtvVLpR9F+2EyaJE3KjkxToXYT1lEVBcT++6AX4 Ug== -----END CERTIFICATE-----Generated at Fri Apr 4 15:59:32 2025 by rpki-client