$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer File: acc14dc4-6768-43c1-9d95-c89a552020c1.cer (raw, json) Hash identifier: STQQIH2HC53RbJdQmZeGGTE5gstMh7IkUhUa/2FkPjI= Subject key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B20C3BEBD5A64B05EC3EAB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jan 2025 14:45:25 +0000 Certificate not after: Sun 21 Mar 2027 19:39:08 +0000 Subordinate resources: IP: 45.132.80.0/22 IP: 45.150.52.0/22 IP: 80.91.218.0/24 IP: 91.238.92.0/23 IP: 91.239.148.0/23 IP: 91.244.196.0/22 IP: 95.214.176.0/22 IP: 176.105.228.0/22 IP: 185.177.24.0/22 IP: 194.179.146.0/23 IP: 212.115.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:0c:3b:eb:d5:a6:4b:05:ec:3e:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 28 14:45:25 2025 GMT Not After : Mar 21 19:39:08 2027 GMT Subject: CN=acc14dc4-6768-43c1-9d95-c89a552020c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:45:f9:2e:e0:d0:a5:88:01:25:a5:7c:23: d4:b0:cb:a3:e2:0f:ba:1e:be:89:8a:f0:5d:d8:c8: ea:b0:a4:2d:ce:6c:01:6a:87:83:3e:af:02:0e:10: ee:16:8a:f0:a3:34:af:f7:b5:f7:26:ba:73:91:4c: 65:71:ba:72:62:da:22:26:56:ae:15:59:86:2d:66: 3c:72:7a:91:9c:70:6d:f6:53:2d:8d:30:30:63:a1: b5:98:aa:5b:e9:83:cb:71:8a:4a:d3:e5:f0:d9:56: 5d:9e:0a:e7:5f:9f:3a:10:b3:bb:85:7b:2e:e1:ba: b7:f5:a7:66:12:af:06:a0:45:55:f2:09:66:12:81: e1:e8:1b:6d:75:53:60:5a:58:4e:eb:44:e1:4a:ee: 30:73:38:41:c9:78:57:61:cf:94:d4:88:94:68:6b: 67:7c:85:95:1e:20:4b:0a:2c:9f:9e:6f:b9:7c:ed: 40:21:42:c1:24:f1:81:9f:7b:ba:ac:c9:06:f1:68: 22:03:27:61:46:ce:e7:64:28:21:83:3a:37:99:6c: c6:4d:8a:18:4f:c6:be:d6:a0:ab:b9:bb:59:b3:7a: 1d:6d:6d:8d:38:5d:30:ee:09:a3:29:ef:d5:7e:e8: 6c:b3:5f:6d:48:94:3e:27:0e:e5:54:eb:8c:51:9d: da:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 45.132.80.0/22 45.150.52.0/22 80.91.218.0/24 91.238.92.0/23 91.239.148.0/23 91.244.196.0/22 95.214.176.0/22 176.105.228.0/22 185.177.24.0/22 194.179.146.0/23 212.115.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:54:4b:ea:b4:d3:33:5b:cb:48:a0:22:48:c5:c2:2e:17:2c: 3d:48:0e:da:f9:5a:0a:f6:81:a8:d8:7d:1a:53:68:9d:6b:8a: a4:5f:d8:27:2a:d4:54:a6:65:a6:67:72:5c:ef:99:e2:a2:68: 59:2d:29:43:c6:28:5f:58:8b:d4:a3:ae:c0:2a:be:5f:ae:82: ea:d1:66:7a:d3:fe:b2:59:50:73:54:51:9b:59:65:df:2c:8b: df:18:e2:81:85:6e:1f:83:24:c5:86:ba:c6:ae:67:92:36:15: 95:42:e7:a4:70:f7:29:b7:49:0c:05:7d:ff:90:71:69:25:ab: d7:dc:b3:ef:67:a1:40:a7:df:0d:07:6d:53:e8:65:df:7b:1d: b9:ef:f3:29:79:b0:6a:3e:06:6b:78:c5:bd:b4:ac:b1:33:6e: 3d:d4:4e:37:c5:7c:e8:9e:3d:bc:22:3a:90:0e:58:a7:51:67: 6e:15:4b:72:b3:7f:94:aa:04:f1:aa:36:8b:1a:82:4f:35:cb: e7:04:6b:67:5e:4b:54:54:6f:cc:36:dc:01:8e:1d:57:66:5e: 2a:30:1c:4c:c4:b2:07:c2:3b:a0:0c:4c:04:da:b0:79:25:9c: 3f:7e:8e:ae:d0:82:79:5c:fd:12:b3:fc:15:95:25:5f:0f:8b: ba:ed:ed:0b -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEiyDDvr1aZLBew+q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyODE0NDUyNVoXDTI3MDMyMTE5MzkwOFowLzEtMCsGA1UEAxMk YWNjMTRkYzQtNjc2OC00M2MxLTlkOTUtYzg5YTU1MjAyMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GpF+S7g0KWIASWlfCPUsMuj4g+6Hr6JivBd 2MjqsKQtzmwBaoeDPq8CDhDuForwozSv97X3JrpzkUxlcbpyYtoiJlauFVmGLWY8 cnqRnHBt9lMtjTAwY6G1mKpb6YPLcYpK0+Xw2VZdngrnX586ELO7hXsu4bq39adm Eq8GoEVV8glmEoHh6BttdVNgWlhO60ThSu4wczhByXhXYc+U1IiUaGtnfIWVHiBL Ciyfnm+5fO1AIULBJPGBn3u6rMkG8WgiAydhRs7nZCghgzo3mWzGTYoYT8a+1qCr ubtZs3odbW2NOF0w7gmjKe/Vfuhss19tSJQ+Jw7lVOuMUZ3aoQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFCLgvdFtd0W8ZTfyQMJF3D+qo4YlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h Y2MxNGRjNC02NzY4LTQzYzEtOWQ5NS1jODlhNTUyMDIwYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FjYzE0ZGM0LTY3NjgtNDNjMS05 ZDk1LWM4OWE1NTIwMjBjMS9hY2MxNGRjNC02NzY4LTQzYzEtOWQ5NS1jODlhNTUy MDIwYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwWwYIKwYBBQUH AQcBAf8ETDBKMEgEAgABMEIDBAIthFADBAItljQDBABQW9oDBAFb7lwDBAFb75QD BAJb9MQDBAJf1rADBAKwaeQDBAK5sRgDBAHCs5IDBALUc3wwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALFRL 6rTTM1vLSKAiSMXCLhcsPUgO2vlaCvaBqNh9GlNonWuKpF/YJyrUVKZlpmdyXO+Z 4qJoWS0pQ8YoX1iL1KOuwCq+X66C6tFmetP+sllQc1RRm1ll3yyL3xjigYVuH4Mk xYa6xq5nkjYVlULnpHD3KbdJDAV9/5BxaSWr19yz72ehQKffDQdtU+hl33sdue/z KXmwaj4Ga3jFvbSssTNuPdRON8V86J49vCI6kA5Yp1FnbhVLcrN/lKoE8ao2ixqC TzXL5wRrZ15LVFRvzDbcAY4dV2ZeKjAcTMSyB8I7oAxMBNqweSWcP36OrtCCeVz9 ErP8FZUlXw+Luu3tCw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:17 2025 by rpki-client