$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer File: aad22c3d-3c14-42b7-a324-b1bb21649378.cer (raw, json) Hash identifier: O2JQlQzs/V766j2ZBJ2V14iBw6iM3Npj8MjD/u3S1PI= Subject key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849AE77AA02300B717A74534500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Apr 2025 00:45:35 +0000 Certificate not after: Mon 02 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 27281 IP: 192.184.64.0/20 IP: 2620:116:8000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:77:aa:02:30:0b:71:7a:74:53:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 29 00:45:35 2025 GMT Not After : Aug 2 00:45:35 2027 GMT Subject: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:93:62:66:0f:80:95:a2:81:c1:80:53:19:61: 4a:a0:2a:ea:ed:45:7d:fa:26:a6:cc:29:9d:43:3e: 31:cc:16:03:3c:b5:5c:97:7e:f1:95:64:4f:23:17: 44:4d:7c:fd:35:75:93:3f:fd:32:cd:25:d4:d3:68: ca:c9:38:08:9a:d9:be:7a:fc:32:36:92:1d:b7:70: 32:b0:3a:39:99:ed:ef:a4:49:50:e2:6e:a6:5f:6e: c5:66:cc:ba:22:df:ee:97:1e:6c:ad:fa:6a:66:56: 0c:4b:c7:4e:8c:a2:a4:d3:f1:21:9d:72:39:ac:4b: b6:92:8d:06:53:73:85:09:0b:cb:9d:16:17:e2:08: 45:e4:01:2a:0b:88:69:e1:a7:7a:e9:c9:cd:5e:6a: e9:8d:4f:45:b3:04:14:56:c4:52:47:45:8b:af:c8: 84:f4:6a:57:fd:10:1b:4e:91:d3:75:41:31:f1:49: f9:1b:6e:25:e7:8d:4b:b8:55:f0:7e:be:54:4c:4a: b0:86:77:b3:25:c5:93:ad:63:91:17:87:31:cf:f2: 43:7a:ce:56:36:aa:24:ce:71:8e:d3:59:12:4f:b9: 89:a5:28:36:f1:a7:3a:6f:b9:e0:5d:be:2e:80:a2: 68:02:e5:15:f5:c3:2b:e1:e6:a8:8a:56:23:f9:5e: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.184.64.0/20 IPv6: 2620:116:8000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27281 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:04:b8:df:27:6d:32:ac:34:91:7e:ef:1b:50:9b:af:7c:d2: ad:fb:9e:ed:ff:1b:1e:bf:40:ea:e4:80:17:6b:e3:3a:f3:56: 38:fe:fb:af:6d:f2:28:7b:63:43:95:9b:c6:e0:40:91:10:f5: 81:4d:81:a8:48:45:75:05:d2:f6:9a:97:ff:01:3f:a4:3e:f6: d6:b4:a0:14:c8:d9:fe:f4:d6:b8:2d:fa:c0:2a:f8:15:de:58: 8f:b0:56:91:2f:99:62:6d:d4:77:7d:da:fd:08:2f:79:b0:4e: f8:ab:e0:ff:42:f3:48:25:7f:fc:bc:94:10:40:f8:10:cc:26: fa:b0:8d:57:b4:76:c0:8f:fb:76:ee:af:52:fc:84:20:30:fe: cd:9e:a9:43:1c:a7:15:6b:bc:12:6c:85:5e:61:d7:b6:ef:8e: ea:0b:2e:10:c5:cf:07:e1:50:b9:48:f8:68:24:ef:da:16:03: 4b:29:11:ea:5c:77:88:af:5b:87:12:93:f7:be:92:a4:26:46: af:bb:26:f9:2d:15:85:2d:32:77:b3:a9:f6:ac:5c:64:2f:b7: ab:36:a2:3a:ca:47:4a:fc:ff:7f:12:e4:f6:e6:75:f0:37:57: 76:d9:f5:99:da:df:dd:38:aa:e3:d3:81:17:48:d9:79:43:02: 79:cd:08:dd -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEmud6oCMAtxenRTRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQyOTAwNDUzNVoXDTI3MDgwMjAwNDUzNVowLzEtMCsGA1UEAxMk YWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpNiZg+AlaKBwYBTGWFKoCrq7UV9+iamzCmd Qz4xzBYDPLVcl37xlWRPIxdETXz9NXWTP/0yzSXU02jKyTgImtm+evwyNpIdt3Ay sDo5me3vpElQ4m6mX27FZsy6It/ulx5srfpqZlYMS8dOjKKk0/EhnXI5rEu2ko0G U3OFCQvLnRYX4ghF5AEqC4hp4ad66cnNXmrpjU9FswQUVsRSR0WLr8iE9GpX/RAb TpHTdUEx8Un5G24l541LuFXwfr5UTEqwhnezJcWTrWORF4cxz/JDes5WNqokznGO 01kST7mJpSg28ac6b7ngXb4ugKJoAuUV9cMr4eaoilYj+V59rQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGeulz+SsGbENhHUetIkem+sVbFDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h YWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FhZDIyYzNkLTNjMTQtNDJiNy1h MzI0LWIxYmIyMTY0OTM3OC9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2 NDkzNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBATAuEAwDgQCAAIwCAMGACYgARaAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmqRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB0EuN8nbTKsNJF+7xtQm6980q37 nu3/Gx6/QOrkgBdr4zrzVjj++69t8ih7Y0OVm8bgQJEQ9YFNgahIRXUF0vaal/8B P6Q+9ta0oBTI2f701rgt+sAq+BXeWI+wVpEvmWJt1Hd92v0IL3mwTvir4P9C80gl f/y8lBBA+BDMJvqwjVe0dsCP+3bur1L8hCAw/s2eqUMcpxVrvBJshV5h17bvjuoL LhDFzwfhULlI+Ggk79oWA0spEepcd4ivW4cSk/e+kqQmRq+7JvktFYUtMnezqfas XGQvt6s2ojrKR0r8/38S5PbmdfA3V3bZ9Zna3904quPTgRdI2XlDAnnNCN0= -----END CERTIFICATE-----Generated at Sun May 4 18:41:34 2025 by rpki-client