$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer File: a062a219-9ee8-48a3-897a-8410b6da94a1.cer (raw, json) Hash identifier: 9b3NiOxjRi/gz03Z/jI13HbY1aTQ2kQtOENrzPuetSQ= Subject key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858494E78ED761F1A230D75D04980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Mar 2025 15:30:32 +0000 Certificate not after: Fri 29 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 803 AS: 26501 AS: 399844 IP: 64.110.192.0/18 IP: 64.201.192.0/19 IP: 67.225.0.0/17 IP: 68.69.192.0/19 IP: 69.11.0.0/17 IP: 71.17.0.0/16 IP: 74.113.12.0/22 IP: 96.125.240.0/20 IP: 104.152.28.0/22 IP: 104.219.8.0/22 IP: 104.255.48.0/22 IP: 108.60.160.0/19 IP: 108.160.16.0/20 IP: 108.174.160.0/20 IP: 142.164.0.0/16 IP: 162.253.8.0/22 IP: 192.34.224.0/21 IP: 198.228.86.0 -- 198.228.89.255 IP: 198.230.96.0/19 IP: 198.245.112.0/20 IP: 199.26.190.0/23 IP: 199.189.88.0/21 IP: 206.163.224.0/19 IP: 207.47.128.0/17 IP: 216.126.200.0/22 IP: 216.174.128.0/19 IP: 216.197.128.0/17 IP: 2604:1e80::/32 IP: 2607:f4a8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:78:ed:76:1f:1a:23:0d:75:d0:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 25 15:30:32 2025 GMT Not After : Jan 29 01:45:26 2027 GMT Subject: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:8b:ad:81:8d:6b:79:98:f6:db:03:6e:6f: b1:64:8a:1d:d7:f9:cb:56:75:2d:e1:9a:e4:12:d2: 70:02:bb:98:1a:93:61:74:f7:3d:73:21:f8:17:d1: 66:9b:0c:7b:16:79:06:ea:dc:8d:99:d9:f8:8e:e9: 2b:a4:1b:ad:07:ba:53:c0:c3:cd:e2:4b:39:38:fc: d6:bd:1e:b4:19:52:de:c3:ee:58:bd:f6:5d:78:61: f7:e3:86:bf:84:d3:8a:9c:09:88:8f:dd:5c:60:77: 53:ca:31:67:ef:11:68:0a:a3:50:7b:80:4d:39:77: 96:da:d8:b3:f8:1c:1d:a5:e1:6d:5f:52:7a:6c:9f: 18:11:19:8b:4d:0d:3a:7c:64:cc:b2:ce:43:f1:b3: 0a:21:13:ca:97:e6:c1:c1:01:45:6b:e2:04:0c:7a: 49:dd:d7:66:ce:73:42:19:40:0c:d7:1f:6e:36:38: cf:d0:c8:fd:2b:21:a9:98:8c:33:b6:5f:92:58:1c: b2:b0:5a:f8:44:6c:55:aa:d0:1a:fa:f4:75:e2:7f: 73:10:23:e4:00:92:f2:fe:22:ca:34:a0:82:6c:2d: 4e:0f:14:b8:c3:eb:82:7c:80:51:52:c6:88:4d:81: 7c:dd:19:d5:a6:a9:fa:9e:ec:49:6a:9d:92:89:6a: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.110.192.0/18 64.201.192.0/19 67.225.0.0/17 68.69.192.0/19 69.11.0.0/17 71.17.0.0/16 74.113.12.0/22 96.125.240.0/20 104.152.28.0/22 104.219.8.0/22 104.255.48.0/22 108.60.160.0/19 108.160.16.0/20 108.174.160.0/20 142.164.0.0/16 162.253.8.0/22 192.34.224.0/21 198.228.86.0-198.228.89.255 198.230.96.0/19 198.245.112.0/20 199.26.190.0/23 199.189.88.0/21 206.163.224.0/19 207.47.128.0/17 216.126.200.0/22 216.174.128.0/19 216.197.128.0/17 IPv6: 2604:1e80::/32 2607:f4a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 803 26501 399844 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f6:84:f2:20:ab:b6:bc:1c:75:7d:cf:e4:1d:45:3e:34:38: 92:28:fa:44:4c:77:98:bc:3d:55:e7:fa:08:f3:e1:08:85:98: eb:3e:8b:47:aa:da:2a:09:42:b7:4e:7d:ca:24:21:24:c3:67: bc:3a:28:82:85:9e:a8:b9:31:8b:6b:7d:9d:10:7b:5f:c6:1f: 8c:32:33:cc:a1:ff:c9:bc:8f:67:45:98:fd:6f:02:41:86:67: 9b:ad:8f:f3:51:9d:d8:19:51:21:0e:9f:1a:48:3f:2a:65:1e: af:fa:26:10:7a:cb:5b:a3:65:cf:43:46:c3:c9:dc:fb:c8:c0: 58:e9:2a:ce:ba:22:b8:ac:3f:bd:c6:28:ba:a8:4f:b8:e9:c9: 8c:9e:3b:5d:e7:37:b1:75:ca:9f:81:e9:3f:19:fa:97:a8:68: a8:f0:b1:b5:e3:22:97:02:35:7d:b0:d1:ab:15:58:19:eb:43: ae:7b:95:69:6c:55:dd:fd:92:d6:b0:69:f4:ea:19:0b:6e:36: e5:dc:56:3a:e1:0f:bf:42:86:d1:6d:3f:d8:ff:c5:15:42:65: f7:2d:12:95:39:8a:99:dd:a0:0a:91:74:6c:f0:7e:71:9c:41: e3:5b:86:65:70:fb:fa:17:9a:ad:47:80:c6:6d:8a:c3:77:3c: 96:69:c1:7d -----BEGIN CERTIFICATE----- MIIHzjCCBragAwIBAgIUAQ0Mn0MoWElOeO12HxojDXXQSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDMyNTE1MzAzMloXDTI3MDEyOTAxNDUyNlowLzEtMCsGA1UEAxMk YTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssKLrYGNa3mY9tsDbm+xZIod1/nLVnUt4Zrk EtJwAruYGpNhdPc9cyH4F9Fmmwx7FnkG6tyNmdn4jukrpButB7pTwMPN4ks5OPzW vR60GVLew+5YvfZdeGH344a/hNOKnAmIj91cYHdTyjFn7xFoCqNQe4BNOXeW2tiz +BwdpeFtX1J6bJ8YERmLTQ06fGTMss5D8bMKIRPKl+bBwQFFa+IEDHpJ3ddmznNC GUAM1x9uNjjP0Mj9KyGpmIwztl+SWByysFr4RGxVqtAa+vR14n9zECPkAJLy/iLK NKCCbC1ODxS4w+uCfIBRUsaITYF83RnVpqn6nuxJap2SiWovaQIDAQABo4IE4DCC BNwwHQYDVR0OBBYEFBQoJ2YFnSSgtPKID++p7ODpboYYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwNjJhMjE5LTllZTgtNDhhMy04 OTdhLTg0MTBiNmRhOTRhMS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZk YTk0YTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgdsGCCsGAQUF BwEHAQH/BIHLMIHIMIGvBAIAATCBqAMEBkBuwAMEBUDJwAMEB0PhAAMEBURFwAME B0ULAAMDAEcRAwQCSnEMAwQEYH3wAwQCaJgcAwQCaNsIAwQCaP8wAwQFbDygAwQE bKAQAwQEbK6gAwMAjqQDBAKi/QgDBAPAIuAwDAMEAcbkVgMEAcbkWAMEBcbmYAME BMb1cAMEAccavgMEA8e9WAMEBc6j4AMEB88vgAMEAth+yAMEBdiugAMEB9jFgDAU BAIAAjAOAwUAJgQegAMFACYH9KgwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICAyMC AmeFAgMGGeQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAcvaE8iCrtrwcdX3P5B1FPjQ4kij6REx3mLw9Vef6 CPPhCIWY6z6LR6raKglCt059yiQhJMNnvDoogoWeqLkxi2t9nRB7X8YfjDIzzKH/ ybyPZ0WY/W8CQYZnm62P81Gd2BlRIQ6fGkg/KmUer/omEHrLW6Nlz0NGw8nc+8jA WOkqzroiuKw/vcYouqhPuOnJjJ47Xec3sXXKn4HpPxn6l6hoqPCxteMilwI1fbDR qxVYGetDrnuVaWxV3f2S1rBp9OoZC2425dxWOuEPv0KG0W0/2P/FFUJl9y0SlTmK md2gCpF0bPB+cZxB41uGZXD7+hearUeAxm2Kw3c8lmnBfQ== -----END CERTIFICATE-----Generated at Sun May 4 17:06:00 2025 by rpki-client