$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer File: 945a7f76-bce3-4d85-a81e-c84df8d5197a.cer (raw, json) Hash identifier: JhhBlTsWI631RgZqF4dGgBm8lJQ309mCJ/V+JgIFAqU= Subject key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849ABACFA8829F61E4E51412100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 00:45:35 +0000 Certificate not after: Sun 01 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 21803 IP: 67.223.160.0/20 IP: 69.39.0.0/19 IP: 209.140.0.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:ac:fa:88:29:f6:1e:4e:51:41:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 28 00:45:35 2025 GMT Not After : Aug 1 00:45:35 2027 GMT Subject: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:58:dd:a4:2e:f9:43:1c:d7:b8:28:25:f2: 75:8a:45:fa:eb:e2:66:1c:d4:c0:f4:42:f0:01:2a: 85:5b:b8:4f:18:99:0f:3f:c5:df:c2:6c:f5:06:21: af:b3:65:c9:74:98:05:33:74:f7:25:28:b0:68:5c: 04:b1:7e:2d:65:85:38:17:89:cd:5d:4a:ac:50:ba: 68:f9:61:9e:3a:e2:13:2f:b2:e5:21:26:1c:9d:c6: 20:27:47:ff:d2:da:f8:d0:92:21:03:ca:06:07:35: c6:e2:dc:88:02:3b:a3:82:2c:4f:2c:c4:ab:0e:52: 23:a2:13:8d:d6:ef:d0:0a:43:fa:a5:62:82:34:f9: cc:ac:b3:93:47:e1:ef:f6:54:08:50:73:1d:46:09: 82:a1:b5:ac:ce:71:da:86:a3:34:00:22:57:72:78: 38:cd:0f:f9:43:92:d3:9b:84:d4:39:d3:87:4e:b3: 5b:29:4a:13:33:40:45:da:25:eb:38:15:74:41:26: c2:a3:47:93:55:ce:57:58:39:90:92:d6:30:63:ee: 9e:bd:01:5f:54:84:b4:c8:43:96:ca:60:dc:19:7d: 14:8e:c5:1c:3d:9e:ce:47:bd:cc:5e:02:5c:e6:90: 1c:e7:f1:4d:df:48:d7:c3:84:32:37:2a:79:16:9d: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 67.223.160.0/20 69.39.0.0/19 209.140.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21803 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9b:72:b9:12:0c:79:24:41:e5:d0:dd:7b:e0:45:a8:7a:4e: 81:c6:aa:7f:3e:2b:3f:53:05:a0:4f:62:16:1d:fe:d7:d5:ec: c7:43:aa:3a:bf:a0:65:bd:62:33:76:ab:1d:7c:90:2b:c2:db: 4e:c8:3b:f2:f7:3c:0c:bc:ad:95:08:d3:e9:56:fe:5f:a2:07: eb:80:3b:8c:0f:0f:6e:40:72:e5:ef:19:ee:7d:26:e0:af:9b: 35:1e:e7:97:7d:45:c6:ef:18:d9:01:13:2a:27:ef:14:d4:69: 66:5c:c7:cd:7b:19:03:3a:de:c8:68:48:7d:15:1b:e7:5e:6b: fa:27:39:be:1e:b8:4e:a8:60:5e:9e:cf:9b:31:62:9f:54:ef: b5:9c:a1:04:6e:4e:21:9d:de:74:56:5a:2a:ec:53:97:02:21: a1:08:1d:c7:f4:fd:d6:00:b2:cc:4d:39:2f:19:d4:1b:43:54: 7a:cd:c2:c5:2b:0e:4d:89:bc:ee:04:43:50:5b:42:ce:d4:9a: 8c:38:5a:83:c5:ca:97:a4:f8:8b:b9:67:ee:11:10:cb:55:e1: 9a:81:53:36:0e:b6:96:87:15:7e:30:52:96:12:8e:cc:ed:87: 87:c9:5e:df:2c:a4:dd:a4:69:46:a0:fb:c7:43:5e:f2:19:39: 4f:7f:59:e0 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEmrrPqIKfYeTlFBIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQyODAwNDUzNVoXDTI3MDgwMTAwNDUzNVowLzEtMCsGA1UEAxMk OTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUxOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshlY3aQu+UMc17goJfJ1ikX66+JmHNTA9ELw ASqFW7hPGJkPP8Xfwmz1BiGvs2XJdJgFM3T3JSiwaFwEsX4tZYU4F4nNXUqsULpo +WGeOuITL7LlISYcncYgJ0f/0tr40JIhA8oGBzXG4tyIAjujgixPLMSrDlIjohON 1u/QCkP6pWKCNPnMrLOTR+Hv9lQIUHMdRgmCobWsznHahqM0ACJXcng4zQ/5Q5LT m4TUOdOHTrNbKUoTM0BF2iXrOBV0QSbCo0eTVc5XWDmQktYwY+6evQFfVIS0yEOW ymDcGX0UjsUcPZ7OR73MXgJc5pAc5/FN30jXw4QyNyp5Fp1ucwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFMnG3pB/tzIxwZpnpU1pHBUgfXXwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk0NWE3Zjc2LWJjZTMtNGQ4NS1h ODFlLWM4NGRmOGQ1MTk3YS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhk NTE5N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARD36ADBAVFJwADBATRjAAwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICVSswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAptyuRIMeSRB5dDde+BFqHpOgcaqfz4r P1MFoE9iFh3+19Xsx0OqOr+gZb1iM3arHXyQK8LbTsg78vc8DLytlQjT6Vb+X6IH 64A7jA8PbkBy5e8Z7n0m4K+bNR7nl31Fxu8Y2QETKifvFNRpZlzHzXsZAzreyGhI fRUb515r+ic5vh64TqhgXp7PmzFin1TvtZyhBG5OIZ3edFZaKuxTlwIhoQgdx/T9 1gCyzE05LxnUG0NUes3CxSsOTYm87gRDUFtCztSajDhag8XKl6T4i7ln7hEQy1Xh moFTNg62locVfjBSlhKOzO2Hh8le3yyk3aRpRqD7x0Ne8hk5T39Z4A== -----END CERTIFICATE-----Generated at Sun May 4 18:21:24 2025 by rpki-client