$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer File: b2f0a061-78dd-4d61-988a-266b192d9caa.cer (raw, json) Hash identifier: CJrNJiBy8ugrr5OIcwuqTJl8PWYGK2l3kkauKhkZfa0= Subject key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849B40D073440691C4A9E91C700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 May 2025 00:45:34 +0000 Certificate not after: Wed 04 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 6427 AS: 6939 AS: 393338 IP: 64.62.128.0/17 IP: 64.71.128.0/18 IP: 65.19.128.0/18 IP: 65.49.0.0/17 IP: 66.160.128.0 -- 66.160.207.255 IP: 66.220.0.0/19 IP: 72.52.64.0/18 IP: 74.82.0.0/18 IP: 184.104.0.0/15 IP: 209.51.160.0/19 IP: 216.66.0.0 -- 216.66.95.255 IP: 216.218.128.0/17 IP: 2001:470::/32 IP: 2600:7000::/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:0d:07:34:40:69:1c:4a:9e:91:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 1 00:45:34 2025 GMT Not After : Aug 4 00:45:34 2027 GMT Subject: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:2d:4b:15:ce:ad:1b:61:4e:39:0e:4e:b1: 5b:13:ab:ad:a6:cc:48:9b:b7:73:bb:d8:d8:26:62: 5b:11:fe:ae:cd:d5:27:b3:90:c5:b5:1e:ae:7b:3b: 94:4e:89:05:f1:2a:68:fd:47:20:83:20:e0:78:02: ef:a7:ae:f0:83:62:a9:47:ec:a5:62:a3:f4:9e:7b: 8c:d8:61:97:bf:fa:9e:d0:bb:1e:6d:a5:56:ed:54: 4d:7f:46:0d:66:37:93:c5:a2:3f:0d:b2:3f:be:57: 26:90:02:ca:d9:2c:7a:30:84:35:cf:6c:75:12:44: eb:1e:77:81:33:6c:f0:72:3a:c9:93:79:8f:97:52: 9d:04:67:c4:16:b7:dc:88:7e:13:31:0e:ec:63:73: 04:e7:eb:a3:2e:fe:de:f6:c3:f2:9a:c7:cd:85:ba: f9:c5:cb:11:7a:0b:2c:5e:a7:f7:7a:53:fd:29:26: 22:68:45:45:92:16:bc:00:7e:2f:b8:41:00:8f:21: bd:4f:84:f6:82:e4:1c:b7:35:4f:0c:c9:09:f6:83: 01:c9:e1:46:51:68:bf:c3:89:cf:95:4c:36:5f:c9: 8a:de:f3:90:28:c9:e9:d8:70:a6:f1:fd:ed:d5:d1: 85:da:66:37:76:ed:2c:6f:ce:0d:af:36:33:61:c9: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.62.128.0/17 64.71.128.0/18 65.19.128.0/18 65.49.0.0/17 66.160.128.0-66.160.207.255 66.220.0.0/19 72.52.64.0/18 74.82.0.0/18 184.104.0.0/15 209.51.160.0/19 216.66.0.0-216.66.95.255 216.218.128.0/17 IPv6: 2001:470::/32 2600:7000::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6427 6939 393338 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6f:f7:91:64:d6:55:04:11:37:48:5a:d6:1c:cd:a1:1e:ba: 4e:a0:06:b1:7d:00:44:d1:73:57:3b:c7:3c:fe:95:05:d5:a2: 60:e5:e5:98:4a:20:a0:fc:a4:2c:df:33:4e:c1:ca:35:46:a7: 07:ee:56:81:7c:c1:da:ca:8a:7f:bf:ec:1d:64:69:97:da:6e: 21:cc:6b:1e:5d:d5:ec:df:7e:c5:34:1b:5d:85:49:6d:9d:1d: b0:94:f2:ec:c6:4a:a8:b8:03:09:88:7b:ca:7a:85:11:07:e6: aa:34:2f:8e:9f:35:18:de:0f:2f:a0:6d:90:79:43:de:ee:b5: cd:fb:d3:05:68:da:44:1a:73:e3:55:3f:12:6e:36:0a:35:cd: 34:12:d8:3a:f0:b4:1d:b4:e0:6f:f3:85:05:65:2f:0d:e9:0f: 6c:a9:0c:06:bf:17:14:5f:c4:38:94:10:a7:eb:82:70:60:1c: a5:56:fb:12:0d:5f:09:6f:83:e1:d8:14:2b:9b:b0:81:91:6a: b4:61:49:83:7d:84:67:f4:1c:59:fd:20:f4:62:03:d2:61:a5: 87:39:e6:71:d1:a4:99:2b:52:c3:c1:62:30:0b:cd:21:fb:d8: 86:b6:ca:ac:45:af:69:ee:7b:5a:83:9b:f5:4a:70:da:da:c9: 7e:30:b7:50 -----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIUAQ0Mn0MoWEm0DQc0QGkcSp6RxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUwMTAwNDUzNFoXDTI3MDgwNDAwNDUzNFowLzEtMCsGA1UEAxMk YjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5Y2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0QtSxXOrRthTjkOTrFbE6utpsxIm7dzu9jY JmJbEf6uzdUns5DFtR6uezuUTokF8Spo/UcggyDgeALvp67wg2KpR+ylYqP0nnuM 2GGXv/qe0LsebaVW7VRNf0YNZjeTxaI/DbI/vlcmkALK2Sx6MIQ1z2x1EkTrHneB M2zwcjrJk3mPl1KdBGfEFrfciH4TMQ7sY3ME5+ujLv7e9sPymsfNhbr5xcsRegss Xqf3elP9KSYiaEVFkha8AH4vuEEAjyG9T4T2guQctzVPDMkJ9oMByeFGUWi/w4nP lUw2X8mK3vOQKMnp2HCm8f3t1dGF2mY3du0sb84NrzYzYcmYTQIDAQABo4IEiTCC BIUwHQYDVR0OBBYEFGWnQoaur+LJ4+m5BivGRgWcmG/PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IyZjBhMDYxLTc4ZGQtNGQ2MS05 ODhhLTI2NmIxOTJkOWNhYS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTky ZDljYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgYQGCCsGAQUF BwEHAQH/BHUwczBcBAIAATBWAwQHQD6AAwQGQEeAAwQGQROAAwQHQTEAMAwDBAdC oIADBARCoMADBAVC3AADBAZINEADBAZKUgADAwG4aAMEBdEzoDALAwMB2EIDBAXY QkADBAfY2oAwEwQCAAIwDQMFACABBHADBAAmAHAwIgYIKwYBBQUHAQgBAf8EEzAR oA8wDQICGRsCAhsbAgMGAHowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWG/3kWTWVQQRN0ha1hzNoR66TqAG sX0ARNFzVzvHPP6VBdWiYOXlmEogoPykLN8zTsHKNUanB+5WgXzB2sqKf7/sHWRp l9puIcxrHl3V7N9+xTQbXYVJbZ0dsJTy7MZKqLgDCYh7ynqFEQfmqjQvjp81GN4P L6BtkHlD3u61zfvTBWjaRBpz41U/Em42CjXNNBLYOvC0HbTgb/OFBWUvDekPbKkM Br8XFF/EOJQQp+uCcGAcpVb7Eg1fCW+D4dgUK5uwgZFqtGFJg32EZ/QcWf0g9GID 0mGlhznmcdGkmStSw8FiMAvNIfvYhrbKrEWvae57WoOb9Upw2trJfjC3UA== -----END CERTIFICATE-----Generated at Sun May 4 16:57:57 2025 by rpki-client