$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer File: 9997fd34-06bd-4758-a8a8-358043eb8cfd.cer (raw, json) Hash identifier: o59OfyM5XwqlCvS2iXxVIXlnGhYaJ1XpsF89VCgxDnM= Subject key identifier: 5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848F4EA22D58E6D658840A6F080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Feb 2025 13:35:53 +0000 Certificate not after: Thu 27 May 2027 12:35:53 +0000 Subordinate resources: IP: 132.212.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:ea:22:d5:8e:6d:65:88:40:a6:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 21 13:35:53 2025 GMT Not After : May 27 12:35:53 2027 GMT Subject: CN=9997fd34-06bd-4758-a8a8-358043eb8cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:75:a9:7a:d0:62:d2:28:88:f2:0a:ae:5e: ce:03:c0:b4:07:cc:44:97:0f:64:76:48:9d:53:7d: 7d:7e:0c:f0:a7:95:0f:a4:18:a1:2e:0a:d5:35:aa: e4:30:c4:c1:05:19:be:34:11:c5:c4:8a:55:bd:43: 31:4c:01:cf:b8:81:e5:8c:8b:00:03:55:b5:0e:d4: d6:3a:96:28:45:34:13:86:63:bf:70:53:6f:8b:3d: 7b:f0:3f:2b:97:54:30:54:70:3f:a0:53:5a:05:04: 64:86:4f:c6:73:77:24:df:69:b7:d5:99:10:5f:f4: d7:99:60:2b:4c:25:b6:0c:96:94:c9:76:aa:7b:0b: 6e:80:d6:c0:f2:66:91:6e:98:87:6e:9b:0c:5f:38: 60:d7:e3:4d:ad:2a:62:f3:35:f9:5e:63:a4:64:7b: 0e:3f:ef:1c:ec:65:66:29:34:87:0f:00:da:b7:b1: d4:0b:81:39:55:c0:5b:28:d2:3e:42:42:3a:42:d2: 53:cf:a0:3b:8f:5d:71:4e:1a:2a:db:91:bc:ea:49: 7e:40:c8:4b:d5:8a:35:24:20:ee:f5:fb:3e:1e:36: 58:5e:ca:ba:4f:ea:44:10:58:19:4b:6a:71:1c:2e: 2f:db:e9:b4:de:9c:53:d8:c6:54:ae:f5:62:03:97: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 132.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:52:93:66:f4:f9:82:eb:9d:6e:0b:f7:3e:2d:42:15:7c:99: e4:cc:d6:6b:18:c9:86:3e:f1:f3:81:07:31:6b:08:99:a9:64: 95:bf:4e:c5:1d:30:b3:c0:11:4a:ce:3f:5a:48:ee:03:2c:9d: 97:ed:6a:64:5d:bb:93:d2:8d:7a:44:af:6d:42:21:57:56:8f: d1:f8:5e:85:86:c8:7c:2c:6c:38:02:b5:7c:e5:d8:84:94:09: f3:32:42:fe:8a:75:32:bc:76:53:40:58:10:4e:de:44:a2:c4: 51:7a:ad:d6:c7:c2:02:88:4c:cb:c3:be:49:e1:9d:1c:9e:fd: 1d:cb:15:a5:92:8c:94:05:93:b7:4f:cc:75:a9:9e:6d:93:b1: 60:d1:92:64:8d:f9:ed:cd:32:cd:f1:22:ec:b9:57:6a:5e:5d: 64:7d:3a:70:db:a2:ec:84:84:fc:86:22:b9:70:06:60:8b:8b: ce:4c:1c:c4:5e:c9:6f:e2:e4:e3:72:7a:d1:9e:b1:a1:ea:32: 28:2e:aa:eb:96:e2:89:fe:a3:9d:c4:77:df:9e:aa:d9:19:79: f6:f9:1a:56:25:45:29:da:a3:c6:6a:dc:14:d0:5d:22:42:f4: f0:4a:90:be:cf:ff:fb:88:d7:c2:b0:33:4f:e8:63:72:2d:40: 94:13:1e:6b -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEj06iLVjm1liECm8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyMTEzMzU1M1oXDTI3MDUyNzEyMzU1M1owLzEtMCsGA1UEAxMk OTk5N2ZkMzQtMDZiZC00NzU4LWE4YTgtMzU4MDQzZWI4Y2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRZ1qXrQYtIoiPIKrl7OA8C0B8xElw9kdkid U319fgzwp5UPpBihLgrVNarkMMTBBRm+NBHFxIpVvUMxTAHPuIHljIsAA1W1DtTW OpYoRTQThmO/cFNviz178D8rl1QwVHA/oFNaBQRkhk/Gc3ck32m31ZkQX/TXmWAr TCW2DJaUyXaqewtugNbA8maRbpiHbpsMXzhg1+NNrSpi8zX5XmOkZHsOP+8c7GVm KTSHDwDat7HUC4E5VcBbKNI+QkI6QtJTz6A7j11xThoq25G86kl+QMhL1Yo1JCDu 9fs+HjZYXsq6T+pEEFgZS2pxHC4v2+m03pxT2MZUrvViA5ciMwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFFymSlEuFBMKuwBmvCGgo4O3/OrZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 OTk3ZmQzNC0wNmJkLTQ3NTgtYThhOC0zNTgwNDNlYjhjZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk5OTdmZDM0LTA2YmQtNDc1OC1h OGE4LTM1ODA0M2ViOGNmZC85OTk3ZmQzNC0wNmJkLTQ3NTgtYThhOC0zNTgwNDNl YjhjZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCE1DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHUpNm9PmC651uC/c+LUIV fJnkzNZrGMmGPvHzgQcxawiZqWSVv07FHTCzwBFKzj9aSO4DLJ2X7WpkXbuT0o16 RK9tQiFXVo/R+F6Fhsh8LGw4ArV85diElAnzMkL+inUyvHZTQFgQTt5EosRReq3W x8ICiEzLw75J4Z0cnv0dyxWlkoyUBZO3T8x1qZ5tk7Fg0ZJkjfntzTLN8SLsuVdq Xl1kfTpw26LshIT8hiK5cAZgi4vOTBzEXslv4uTjcnrRnrGh6jIoLqrrluKJ/qOd xHffnqrZGXn2+RpWJUUp2qPGatwU0F0iQvTwSpC+z//7iNfCsDNP6GNyLUCUEx5r -----END CERTIFICATE-----Generated at Fri Apr 4 19:21:00 2025 by rpki-client