$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer File: a01c464d-9d20-46a1-858b-c36c8c1a3776.cer (raw, json) Hash identifier: a47eDGdW3c8trqEu+Ue4z+brp6P4kNPHuoFxDW1wZP0= Subject key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A4D98AAD9310AB84557FF7B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 00:45:36 +0000 Certificate not after: Tue 28 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 6360 IP: 128.171.0.0/16 IP: 132.160.0.0/16 IP: 166.122.0.0/16 IP: 168.105.0.0/16 IP: 192.35.145.0/24 IP: 192.48.34.0/24 IP: 205.166.204.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:98:aa:d9:31:0a:b8:45:57:ff:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 25 00:45:36 2025 GMT Not After : Sep 28 00:45:36 2027 GMT Subject: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:ed:40:63:10:ce:9e:fb:bd:b4:07:79:2b: ae:62:f0:56:87:e5:9c:87:89:21:b1:22:7b:15:0d: b2:a5:7c:9e:41:1a:04:f7:44:07:32:b7:eb:0a:cd: 8c:5c:58:6f:b4:96:ca:68:6d:82:39:f4:c0:59:c4: 38:e4:78:29:79:6a:c6:d7:62:36:64:43:9f:a1:5e: 09:51:43:fd:65:16:73:69:d9:aa:78:32:36:c5:42: 88:2a:25:7e:7d:61:fe:b0:43:10:c2:72:62:56:f1: 29:4d:47:36:cf:77:4c:8f:53:2f:74:f4:ac:ca:04: 28:91:d5:b7:76:2f:61:8c:69:f2:7a:dc:fd:0b:b7: 14:69:a5:0c:34:30:f9:e5:e0:c2:87:58:aa:af:5a: dc:21:0d:1a:4d:ce:f5:5f:4d:1c:d5:95:c4:c1:2f: c4:4f:45:7a:0e:df:f2:0c:82:49:17:9b:84:f6:6b: 45:79:a3:4f:06:be:8d:90:62:05:d6:25:91:dc:b6: ca:e5:c7:14:91:9b:c6:0e:25:6e:3b:bd:df:98:d8: e1:b9:94:37:d2:a9:be:59:a1:fd:ce:63:0a:9f:6b: 73:7e:96:70:54:cd:23:67:81:7c:41:7e:d6:65:fb: 4c:fd:09:cc:2f:7d:3e:b5:7f:7f:f8:19:09:e1:8e: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 128.171.0.0/16 132.160.0.0/16 166.122.0.0/16 168.105.0.0/16 192.35.145.0/24 192.48.34.0/24 205.166.204.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6360 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:34:a8:77:64:98:c3:71:f5:ce:76:1f:ee:3e:b0:da:3d:d2: 39:99:85:88:08:ca:38:bb:ba:ef:21:4a:8e:e1:4c:53:60:20: a7:97:fa:32:91:e1:38:09:f4:2b:59:ce:9f:1c:af:d6:62:2c: b6:8f:8a:28:98:a8:82:07:48:f3:c5:8c:96:c0:b3:23:a0:b7: 06:7d:87:f3:da:4d:0b:83:db:60:9a:39:b8:04:c8:a7:eb:4a: bb:91:35:2a:f6:b9:ca:90:a3:ab:01:45:d7:50:22:a7:e1:97: bf:9c:8b:12:95:3d:3e:51:3a:d1:5b:86:6b:5b:b6:ca:12:02: e1:f3:d3:0c:f4:5f:e8:96:4a:d3:2f:47:5f:1e:9a:11:45:fc: 6c:e5:06:d9:3a:50:9f:62:fa:30:3d:12:02:c5:4d:7b:1a:ec: 88:e8:df:3f:02:c9:ea:b7:9b:bc:66:13:76:a0:3d:4c:08:50: a1:8a:93:af:86:4d:eb:1f:14:3c:75:f6:54:ff:c5:fc:37:10: e4:2d:ce:9f:42:49:c0:76:f0:ee:d6:81:6d:57:17:01:62:34: e0:35:16:57:68:bb:3d:5b:bb:4f:49:3a:cb:99:6e:cb:45:f9: 29:1a:3c:26:a9:2d:8f:cf:27:e0:31:b1:c4:c0:4b:b4:07:59: e9:09:56:b0 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEpNmKrZMQq4RVf/ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYyNTAwNDUzNloXDTI3MDkyODAwNDUzNlowLzEtMCsGA1UEAxMk YTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEzNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw63tQGMQzp77vbQHeSuuYvBWh+Wch4khsSJ7 FQ2ypXyeQRoE90QHMrfrCs2MXFhvtJbKaG2COfTAWcQ45HgpeWrG12I2ZEOfoV4J UUP9ZRZzadmqeDI2xUKIKiV+fWH+sEMQwnJiVvEpTUc2z3dMj1MvdPSsygQokdW3 di9hjGnyetz9C7cUaaUMNDD55eDCh1iqr1rcIQ0aTc71X00c1ZXEwS/ET0V6Dt/y DIJJF5uE9mtFeaNPBr6NkGIF1iWR3LbK5ccUkZvGDiVuO73fmNjhuZQ30qm+WaH9 zmMKn2tzfpZwVM0jZ4F8QX7WZftM/QnML30+tX9/+BkJ4Y6RxwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFEKNhjUu1SF2VnSjj+K3ivwD3p9eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwMWM0NjRkLTlkMjAtNDZhMS04 NThiLWMzNmM4YzFhMzc3Ni9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMx YTM3NzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMCwEAgABMCYDAwCAqwMDAISgAwMApnoDAwCoaQMEAMAjkQMEAMAw IgMEAc2mzDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIY2DBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMNKh3 ZJjDcfXOdh/uPrDaPdI5mYWICMo4u7rvIUqO4UxTYCCnl/oykeE4CfQrWc6fHK/W Yiy2j4oomKiCB0jzxYyWwLMjoLcGfYfz2k0Lg9tgmjm4BMin60q7kTUq9rnKkKOr AUXXUCKn4Ze/nIsSlT0+UTrRW4ZrW7bKEgLh89MM9F/olkrTL0dfHpoRRfxs5QbZ OlCfYvowPRICxU17GuyI6N8/Asnqt5u8ZhN2oD1MCFChipOvhk3rHxQ8dfZU/8X8 NxDkLc6fQknAdvDu1oFtVxcBYjTgNRZXaLs9W7tPSTrLmW7LRfkpGjwmqS2Pzyfg MbHEwEu0B1npCVaw -----END CERTIFICATE-----Generated at Sun Jun 29 15:51:33 2025 by rpki-client