$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer File: a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer (raw, json) Hash identifier: 9javJa29qXso9eHskDt8ECjvqPjq3/hN+QJl4Lq65Tk= Subject key identifier: BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848C989C355E929E369D4845B18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Feb 2025 00:41:56 +0000 Certificate not after: Tue 11 May 2027 23:41:56 +0000 Subordinate resources: AS: 398992 IP: 169.197.182.0/24 IP: 2602:fced::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:89:c3:55:e9:29:e3:69:d4:84:5b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 6 00:41:56 2025 GMT Not After : May 11 23:41:56 2027 GMT Subject: CN=a06ab81f-a6c8-462a-b3e0-52f829f8f687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:3e:c9:fc:8d:25:e3:58:b9:d2:3c:09:ac: 75:f8:a5:6c:ae:6a:c7:81:50:fa:57:c8:70:5d:53: 21:d7:b0:ce:6c:27:dd:27:1e:17:bf:f2:91:92:48: 7d:6a:e5:71:32:bc:89:f8:2b:a4:35:44:3c:73:f7: 55:da:55:94:db:f5:fb:59:db:b6:26:d4:b4:c8:da: b8:f1:57:07:f1:6a:b9:ae:7d:58:83:86:ec:42:34: 93:2f:67:17:d2:57:90:cb:1b:e2:15:5d:56:0f:69: a5:11:df:38:7e:27:1e:b3:47:a8:eb:85:6b:73:fe: a8:e6:58:7b:6c:6c:ee:4a:ba:17:25:1a:b8:d4:21: 6f:04:8a:64:97:47:37:d0:6c:f2:59:bb:5c:06:a3: 19:03:dc:7b:84:c8:a2:05:83:73:33:df:9e:e5:01: f5:6e:0d:e5:48:f4:88:c1:76:32:fa:65:62:bf:1b: d5:3b:29:8a:86:36:e6:1b:f8:3a:10:71:aa:42:a7: ad:c2:d8:77:85:ce:c0:fa:7d:29:ff:2a:ff:27:59: 81:f3:35:14:21:9f:12:a4:74:5d:9c:2e:52:c6:6d: 8d:99:f5:b5:21:23:96:48:14:f5:65:95:65:40:3c: b7:fc:31:7e:c1:3b:0c:03:7d:d6:3e:b5:0d:94:70: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 169.197.182.0/24 IPv6: 2602:fced::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398992 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6c:3d:08:58:9c:d1:69:a2:97:e1:72:45:da:52:e5:b3:0e: df:6f:17:71:f9:2d:b3:b3:f6:7d:4c:2e:f6:d9:47:0a:b3:c7: e5:fa:22:d5:42:aa:c9:07:d3:3f:bd:62:34:1e:70:0f:48:42: 69:d2:07:24:44:57:0c:5a:c3:fc:40:8b:ab:56:bf:1c:db:6e: 9b:e6:64:6e:e3:c2:ec:b2:c1:4c:d6:6c:f3:39:1c:4e:ba:a1: fa:ee:f3:28:49:c5:fa:e9:15:e9:ea:a1:d7:aa:82:e0:57:24: 60:e8:58:21:36:56:3e:35:05:60:e3:28:6c:d8:67:61:2b:20: 15:3e:ac:8d:11:ec:f1:29:3a:a9:a5:b5:62:37:81:8c:35:24: 47:77:88:2a:af:6d:9a:ef:78:1a:bf:32:33:14:01:0e:c1:c7: 6c:97:dd:cc:dd:53:61:ba:5f:40:c2:58:d0:e1:78:45:3f:39: 91:96:14:e5:31:29:83:16:e0:e1:d9:44:60:f8:5c:cc:df:78: 12:48:7b:b3:a6:65:0a:d4:5e:4c:6e:5c:c3:03:8d:75:a6:3f: b2:b8:f7:7a:9c:03:7c:d8:5a:c8:b2:3e:4e:c2:e6:b1:d0:2e: 55:f5:ca:05:67:ff:57:08:9b:86:f6:4f:62:49:d6:2a:26:0d: 0e:ff:47:5b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjJicNV6SnjadSEWxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIwNjAwNDE1NloXDTI3MDUxMTIzNDE1NlowLzEtMCsGA1UEAxMk YTA2YWI4MWYtYTZjOC00NjJhLWIzZTAtNTJmODI5ZjhmNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0w+yfyNJeNYudI8Cax1+KVsrmrHgVD6V8hw XVMh17DObCfdJx4Xv/KRkkh9auVxMryJ+CukNUQ8c/dV2lWU2/X7Wdu2JtS0yNq4 8VcH8Wq5rn1Yg4bsQjSTL2cX0leQyxviFV1WD2mlEd84fices0eo64Vrc/6o5lh7 bGzuSroXJRq41CFvBIpkl0c30GzyWbtcBqMZA9x7hMiiBYNzM9+e5QH1bg3lSPSI wXYy+mVivxvVOymKhjbmG/g6EHGqQqetwth3hc7A+n0p/yr/J1mB8zUUIZ8SpHRd nC5Sxm2NmfW1ISOWSBT1ZZVlQDy3/DF+wTsMA33WPrUNlHAT/wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLvk+Nkg3cIjdfu0oP00L2UEvNBrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MDZhYjgxZi1hNmM4LTQ2MmEtYjNlMC01MmY4MjlmOGY2ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwNmFiODFmLWE2YzgtNDYyYS1i M2UwLTUyZjgyOWY4ZjY4Ny9hMDZhYjgxZi1hNmM4LTQ2MmEtYjNlMC01MmY4Mjlm OGY2ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACpxbYwDgQCAAIwCAMGBCYC/O0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYWkDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWbD0IWJzRaaKX4XJF2lLlsw7f bxdx+S2zs/Z9TC722UcKs8fl+iLVQqrJB9M/vWI0HnAPSEJp0gckRFcMWsP8QIur Vr8c226b5mRu48LsssFM1mzzORxOuqH67vMoScX66RXp6qHXqoLgVyRg6FghNlY+ NQVg4yhs2GdhKyAVPqyNEezxKTqppbViN4GMNSRHd4gqr22a73gavzIzFAEOwcds l93M3VNhul9AwljQ4XhFPzmRlhTlMSmDFuDh2URg+FzM33gSSHuzpmUK1F5MblzD A411pj+yuPd6nAN82FrIsj5Owuax0C5V9coFZ/9XCJuG9k9iSdYqJg0O/0db -----END CERTIFICATE-----Generated at Sun May 4 16:25:11 2025 by rpki-client