$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer File: f0657a3e-0c20-4004-9a6b-e66cf7940583.cer (raw, json) Hash identifier: MAxTEeVYV4awJT4pIGoagv/Jyyh1BPOBAnAQeJEQePM= Subject key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B46FB03C99A61BB608BF8380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 11:17:26 +0000 Certificate not after: Tue 04 May 2027 10:17:26 +0000 Subordinate resources: IP: 160.32.8.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:6f:b0:3c:99:a6:1b:b6:08:bf:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 29 11:17:26 2025 GMT Not After : May 4 10:17:26 2027 GMT Subject: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:df:d6:9b:06:14:d3:30:16:eb:57:27:44: ad:c4:32:6a:57:35:1c:45:44:b2:9e:2b:89:35:f8: 64:a6:2d:fd:31:a5:2d:23:a0:df:5e:4e:71:4b:5f: 83:65:6e:7b:b1:17:6e:76:e4:13:d1:7e:36:b3:02: 48:b6:c6:5c:b0:b3:66:9b:6c:18:e8:44:b8:82:0b: 29:93:66:16:7e:68:c8:11:de:64:9a:5f:df:b4:2e: bf:ae:f1:44:2a:89:92:20:cc:fc:9f:e4:da:b8:17: 4f:0d:87:5b:35:92:7b:ef:f7:f3:71:91:e3:08:f7: cb:b0:50:71:d8:0b:ad:e7:c1:a7:1c:70:84:71:11: ec:3b:8b:c0:b8:bb:c7:b2:d1:17:ce:f0:c6:e9:6d: b3:48:2e:f8:db:9c:fd:b3:c6:f3:a3:35:2d:d3:ed: 03:7f:95:45:30:42:e2:ad:3e:24:92:cc:cb:20:f0: d4:ef:a7:7f:fd:42:a0:da:e9:2b:d9:18:e1:85:ab: e1:87:2c:2d:d7:df:1d:ad:fc:42:e1:a7:29:be:cb: 33:9b:70:66:76:8b:b7:16:6b:df:08:58:19:0d:6f: 30:7d:8a:61:2e:68:22:a0:6b:87:10:1a:49:1a:6e: e7:a7:d3:dd:c0:3a:59:57:6b:ad:61:06:8c:45:06: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 160.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:08:7a:32:e1:2f:de:32:39:fa:bb:f7:46:32:b4:13:88:2b: 52:71:20:ac:2f:17:18:59:46:09:6d:c9:f9:79:64:02:2e:b5: 4f:45:ef:fa:14:56:60:cf:16:6b:d6:e6:57:48:75:c3:3b:66: 8c:3f:f1:d2:83:ed:3c:0e:fa:63:84:cd:08:69:88:ef:0e:38: 64:17:85:1a:60:71:cf:07:3e:6e:c1:19:06:1e:58:c8:28:0d: ed:6d:c7:80:c9:8e:f9:da:93:99:e6:41:56:a9:25:6b:10:70: 3a:1f:9e:25:b4:71:18:be:36:6d:ee:0f:4e:23:0a:e0:b8:88: 7f:25:2d:8e:75:1a:d3:ae:37:3d:87:20:36:76:b8:77:de:1d: 95:83:9c:ae:74:22:09:f8:ca:b6:3a:12:67:35:8b:98:5a:2e: ca:84:f4:28:e4:8b:34:86:b8:58:e6:ec:46:12:3f:2b:1c:db: 83:22:0e:12:5d:db:90:02:76:74:33:37:c7:fc:90:80:e8:57: d9:4c:58:d5:e6:65:1f:5f:8b:8e:3f:49:de:7a:fb:f8:f5:ce: cd:d3:3b:3f:7c:f6:ab:d9:e5:97:e9:88:ee:bc:db:85:b7:b9: 4a:65:1f:6a:dd:09:0f:b5:c3:02:40:63:c5:f0:90:6e:36:0c: 99:f9:b9:96 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEi0b7A8maYbtgi/g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyOTExMTcyNloXDTI3MDUwNDEwMTcyNlowLzEtMCsGA1UEAxMk ZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQwNTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA/f1psGFNMwFutXJ0StxDJqVzUcRUSyniuJ Nfhkpi39MaUtI6DfXk5xS1+DZW57sRduduQT0X42swJItsZcsLNmm2wY6ES4ggsp k2YWfmjIEd5kml/ftC6/rvFEKomSIMz8n+TauBdPDYdbNZJ77/fzcZHjCPfLsFBx 2Aut58GnHHCEcRHsO4vAuLvHstEXzvDG6W2zSC7425z9s8bzozUt0+0Df5VFMELi rT4kkszLIPDU76d//UKg2ukr2Rjhhavhhywt198drfxC4acpvsszm3Bmdou3Fmvf CFgZDW8wfYphLmgioGuHEBpJGm7np9PdwDpZV2utYQaMRQbXGQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK7S9n25+5k8/T78CA1anK3uYs0WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m MDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2YwNjU3YTNlLTBjMjAtNDAwNC05 YTZiLWU2NmNmNzk0MDU4My9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5 NDA1ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOgIAgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVQh6MuEv3jI5+rv3RjK0 E4grUnEgrC8XGFlGCW3J+XlkAi61T0Xv+hRWYM8Wa9bmV0h1wztmjD/x0oPtPA76 Y4TNCGmI7w44ZBeFGmBxzwc+bsEZBh5YyCgN7W3HgMmO+dqTmeZBVqklaxBwOh+e JbRxGL42be4PTiMK4LiIfyUtjnUa0643PYcgNna4d94dlYOcrnQiCfjKtjoSZzWL mFouyoT0KOSLNIa4WObsRhI/KxzbgyIOEl3bkAJ2dDM3x/yQgOhX2UxY1eZlH1+L jj9J3nr7+PXOzdM7P3z2q9nll+mI7rzbhbe5SmUfat0JD7XDAkBjxfCQbjYMmfm5 lg== -----END CERTIFICATE-----Generated at Fri Apr 4 15:59:43 2025 by rpki-client