$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer File: d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer (raw, json) Hash identifier: 3C6UQVztZeZA449G1tNaAt8f3YS6NriQXylk+QYbtm4= Subject key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848C9A955D471601FC29F16D410 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Feb 2025 01:45:33 +0000 Certificate not after: Wed 12 May 2027 00:45:33 +0000 Subordinate resources: AS: 13917 IP: 66.206.160.0/20 IP: 2606:f000::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:a9:55:d4:71:60:1f:c2:9f:16:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 6 01:45:33 2025 GMT Not After : May 12 00:45:33 2027 GMT Subject: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:84:19:9a:95:dc:0e:70:6e:7d:bc:33:5f: e8:b8:e5:63:0c:7a:19:fd:36:76:17:c0:84:b1:98: 1f:64:e6:86:ff:9c:f2:4f:53:63:bd:d2:98:d9:3d: 13:ee:f2:9c:f6:62:4c:11:30:9d:7d:4c:46:18:2c: 70:b8:31:87:bc:81:a5:b4:47:fd:56:27:49:ed:dc: 9e:67:6f:7f:5f:7e:5a:1b:3e:37:e4:57:6e:02:d7: 8b:d1:41:17:41:9a:0a:1f:ee:6e:08:9a:f7:5b:4d: 16:73:e4:fe:a2:9e:77:54:54:c8:e7:e7:ca:d4:4c: ef:e1:12:7b:d9:e8:b7:6f:37:11:66:57:51:8a:34: 07:d2:bb:2b:8b:54:c1:f9:a6:c9:e0:32:de:4a:7c: c8:cf:51:49:39:a7:d2:d0:52:24:07:5a:8c:1b:fd: 1b:ec:77:cc:d1:7d:7c:54:ca:f4:98:b9:e9:91:d2: 2a:b4:4d:d3:f2:c9:66:8a:b5:8f:60:6c:07:7e:b1: fa:6d:f1:b0:1f:04:3b:ba:60:fc:6e:06:b6:bf:1b: fb:59:50:79:23:4e:49:25:98:15:4a:fd:ff:50:d8: 39:c6:e2:50:cd:0a:61:7f:1f:9a:08:ea:16:2f:73: 69:8a:2f:d0:d2:52:4f:44:1b:35:b6:f2:a2:f4:57: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.206.160.0/20 IPv6: 2606:f000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13917 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6e:07:01:59:e3:04:e0:84:10:24:eb:1c:8d:70:e8:f3:b8: 9b:cc:21:6f:5b:e3:f4:6a:ad:d5:77:b1:6b:70:e7:5d:d2:14: 47:6b:c3:5e:1a:59:6a:bf:bd:d3:09:f3:ec:2f:af:f9:0e:a8: c8:9b:4e:1c:e1:61:bf:b4:90:df:cd:9c:6f:68:4d:f0:4a:73: 62:e4:cd:87:a0:0e:f8:40:b6:dc:c8:7c:d1:ea:e5:0a:35:8b: 64:b9:1e:0f:64:2a:84:69:5b:b6:6c:ac:52:e7:63:fe:36:6a: fd:39:d2:ea:f5:ff:a7:c8:ae:ef:57:35:e4:0e:08:84:71:eb: c6:76:46:88:25:ca:9a:f5:be:06:f9:a4:69:88:76:c9:00:ef: 30:e3:b8:92:17:1b:8e:4b:91:a7:09:9f:6c:f7:2b:21:42:a5: de:25:ac:75:bb:39:55:a1:41:4a:08:f9:14:26:86:c6:9b:12: 34:b5:75:13:9c:78:db:37:b1:fc:04:09:9c:9c:20:3e:d0:2a: de:74:72:72:8a:f5:5f:7b:1b:6d:47:b2:6f:fd:9f:69:35:94: a2:6f:68:26:6f:e1:7b:9d:ac:b7:03:27:73:7c:5b:ce:2c:c8: 43:73:d3:39:ad:d3:fb:14:74:bc:8c:99:96:bf:a5:73:84:7a: 2f:00:c8:4a -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEjJqVXUcWAfwp8W1BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIwNjAxNDUzM1oXDTI3MDUxMjAwNDUzM1owLzEtMCsGA1UEAxMk ZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1YjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjmEGZqV3A5wbn28M1/ouOVjDHoZ/TZ2F8CE sZgfZOaG/5zyT1NjvdKY2T0T7vKc9mJMETCdfUxGGCxwuDGHvIGltEf9VidJ7dye Z29/X35aGz435FduAteL0UEXQZoKH+5uCJr3W00Wc+T+op53VFTI5+fK1Ezv4RJ7 2ei3bzcRZldRijQH0rsri1TB+abJ4DLeSnzIz1FJOafS0FIkB1qMG/0b7HfM0X18 VMr0mLnpkdIqtE3T8slmirWPYGwHfrH6bfGwHwQ7umD8bga2vxv7WVB5I05JJZgV Sv3/UNg5xuJQzQphfx+aCOoWL3Npii/Q0lJPRBs1tvKi9FdFKwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFJ8XPsT0W8VnIKbNgRUNwktjKU71MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k MTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QxMzFmZmFhLTg1ZjItNGJkNS04 OTYxLTlkYzhhZGYxNWI4Yi9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRm MTViOGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARCzqAwDQQCAAIwBwMFACYG8AAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICNl0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdm4HAVnjBOCEECTrHI1w6PO4m8wh b1vj9Gqt1Xexa3DnXdIUR2vDXhpZar+90wnz7C+v+Q6oyJtOHOFhv7SQ382cb2hN 8EpzYuTNh6AO+EC23Mh80erlCjWLZLkeD2QqhGlbtmysUudj/jZq/TnS6vX/p8iu 71c15A4IhHHrxnZGiCXKmvW+BvmkaYh2yQDvMOO4khcbjkuRpwmfbPcrIUKl3iWs dbs5VaFBSgj5FCaGxpsSNLV1E5x42zex/AQJnJwgPtAq3nRycor1X3sbbUeyb/2f aTWUom9oJm/he52stwMnc3xbzizIQ3PTOa3T+xR0vIyZlr+lc4R6LwDISg== -----END CERTIFICATE-----Generated at Sun May 4 18:28:14 2025 by rpki-client