$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4.cer File: b399aa50-a75c-4ef1-9fa7-5278b22697c4.cer (raw, json) Hash identifier: XRu9TTcK0xNg5WEldgkEqYwPxbZFRdQdTzS2E6eSSrQ= Subject key identifier: 9C:9F:7B:67:BB:B6:A0:09:C0:58:57:BB:E6:25:7A:7B:9D:50:65:2E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858486123C011BD53CE6E33965900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4/b399aa50-a75c-4ef1-9fa7-5278b22697c4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Dec 2024 15:12:20 +0000 Certificate not after: Sun 04 Apr 2027 14:12:20 +0000 Subordinate resources: IP: 198.135.180.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:61:23:c0:11:bd:53:ce:6e:33:96:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 30 15:12:20 2024 GMT Not After : Apr 4 14:12:20 2027 GMT Subject: CN=b399aa50-a75c-4ef1-9fa7-5278b22697c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:ad:4a:95:51:88:d3:b4:10:34:dc:65:5b: 6d:44:f3:78:5e:35:b4:e7:0f:1e:c8:b0:81:0f:2d: b1:5e:b7:bc:d7:ae:5a:ce:3c:c2:95:13:ea:c5:91: 99:3c:32:5e:48:de:3c:10:8e:e5:eb:da:8c:6f:ce: 43:e8:93:d9:36:68:2a:9c:85:68:7a:eb:24:53:b8: b6:2f:d4:7c:c6:3e:12:69:f6:de:fc:92:9a:57:5a: ec:13:89:e5:4f:63:1c:28:b7:b3:8f:65:bc:f4:cb: 11:0b:92:7f:c9:b7:ca:95:b2:16:5e:76:11:ec:2c: bb:cc:97:b3:bd:e1:42:28:16:cc:68:40:21:a9:da: b0:5c:e4:ae:3c:32:1e:5c:fc:2a:a9:ba:34:02:a9: 2d:79:63:27:a7:fc:20:56:7d:3b:5f:cd:37:05:d1: b9:e8:da:98:d3:bb:07:f1:c3:4f:45:bf:ca:7a:b9: a4:7b:15:87:66:06:4d:39:38:14:79:4b:e3:f2:36: 55:23:f0:6e:8c:0a:a7:44:d4:9f:b2:6b:c6:d1:7a: 21:6a:f8:29:ab:f4:ec:81:08:99:9b:ff:fa:54:23: 3f:9d:78:7a:a0:01:d6:50:b7:03:49:1b:1d:d7:18: 06:f2:d7:f1:95:6b:0b:3f:b0:e4:2c:ce:23:f8:42: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9F:7B:67:BB:B6:A0:09:C0:58:57:BB:E6:25:7A:7B:9D:50:65:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b399aa50-a75c-4ef1-9fa7-5278b22697c4/b399aa50-a75c-4ef1-9fa7-5278b22697c4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 198.135.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:42:d1:42:18:9e:a8:4c:23:a5:2f:02:ab:15:10:22:3e:37: 07:57:b7:22:28:9d:e1:d3:a5:ff:3a:e5:ef:8e:0f:a9:ab:b8: 6f:c1:65:ae:62:99:b5:a5:10:23:b7:08:02:23:35:ea:4c:b3: 74:65:7a:eb:97:77:0d:0c:8d:80:09:54:86:18:3c:93:3c:9d: 9b:24:7f:c0:75:45:89:d5:74:01:af:13:c5:65:3d:25:87:08: 95:69:3d:09:13:c7:33:65:78:db:10:ed:b8:1c:5a:8a:43:f9: 99:ef:79:cc:18:6d:84:13:61:2b:f5:65:5d:59:e8:de:c1:89: c6:0d:9c:07:95:7f:4b:b5:17:34:67:6d:b0:85:7a:13:a9:81: 7a:33:46:4e:ad:fe:89:2c:c1:33:bc:b4:d2:e2:54:1f:9c:c4: 60:ad:85:c5:b7:71:b7:ff:a9:2f:e8:9c:97:dd:a2:37:43:09: 1b:51:e6:8e:4b:60:78:ab:f0:68:8c:a9:28:a8:04:f5:39:c3: 25:a4:8e:b4:7f:28:e3:3a:14:ce:a1:bf:f1:c7:ee:a8:2a:4e: 3a:35:59:a7:09:f1:07:f1:8b:1b:3d:d1:a6:f5:28:b5:65:f4: da:ff:a4:89:11:6a:06:0d:f8:a5:43:da:1e:49:0f:c8:39:55: ec:2e:b7:3f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEhhI8ARvVPObjOWWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIzMDE1MTIyMFoXDTI3MDQwNDE0MTIyMFowLzEtMCsGA1UEAxMk YjM5OWFhNTAtYTc1Yy00ZWYxLTlmYTctNTI3OGIyMjY5N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOatSpVRiNO0EDTcZVttRPN4XjW05w8eyLCB Dy2xXre8165azjzClRPqxZGZPDJeSN48EI7l69qMb85D6JPZNmgqnIVoeuskU7i2 L9R8xj4Safbe/JKaV1rsE4nlT2McKLezj2W89MsRC5J/ybfKlbIWXnYR7Cy7zJez veFCKBbMaEAhqdqwXOSuPDIeXPwqqbo0AqkteWMnp/wgVn07X803BdG56NqY07sH 8cNPRb/KermkexWHZgZNOTgUeUvj8jZVI/BujAqnRNSfsmvG0Xohavgpq/TsgQiZ m//6VCM/nXh6oAHWULcDSRsd1xgG8tfxlWsLP7DkLM4j+EK7GwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJyfe2e7tqAJwFhXu+YlenudUGUuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Mzk5YWE1MC1hNzVjLTRlZjEtOWZhNy01Mjc4YjIyNjk3YzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2IzOTlhYTUwLWE3NWMtNGVmMS05 ZmE3LTUyNzhiMjI2OTdjNC9iMzk5YWE1MC1hNzVjLTRlZjEtOWZhNy01Mjc4YjIy Njk3YzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGh7QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAckLRQhieqEwjpS8CqxUQ Ij43B1e3Iiid4dOl/zrl744Pqau4b8FlrmKZtaUQI7cIAiM16kyzdGV665d3DQyN gAlUhhg8kzydmyR/wHVFidV0Aa8TxWU9JYcIlWk9CRPHM2V42xDtuBxaikP5me95 zBhthBNhK/VlXVno3sGJxg2cB5V/S7UXNGdtsIV6E6mBejNGTq3+iSzBM7y00uJU H5zEYK2Fxbdxt/+pL+icl92iN0MJG1HmjktgeKvwaIypKKgE9TnDJaSOtH8o4zoU zqG/8cfuqCpOOjVZpwnxB/GLGz3RpvUotWX02v+kiRFqBg34pUPaHkkPyDlV7C63 Pw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:31 2025 by rpki-client