$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer File: 028c0596-c3dd-44df-9761-677e68794c69.cer (raw, json) Hash identifier: kE0lvcuNILRXZmd8suZoE+NMB33s/ZQ94dT2LkD2qWU= Subject key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584922E1744BB15164AED4CA8080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Mar 2025 00:45:33 +0000 Certificate not after: Sun 13 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 14371 AS: 26145 IP: 65.18.204.0/22 IP: 66.171.40.0/21 IP: 68.235.64.0/18 IP: 104.219.196.0/22 IP: 162.254.64.0/22 IP: 205.149.144.0/20 IP: 206.223.125.0/24 IP: 208.77.24.0/22 IP: 209.191.192.0/19 IP: 2001:504:29::/48 IP: 2600:6400::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:22:e1:74:4b:b1:51:64:ae:d4:ca:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 10 00:45:33 2025 GMT Not After : Jun 13 00:45:33 2027 GMT Subject: CN=028c0596-c3dd-44df-9761-677e68794c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:67:d2:35:50:54:9b:cf:20:5e:56:63:a4:22: 3c:22:a1:ed:c0:0d:00:46:c9:77:45:40:bb:ec:6b: 65:00:aa:06:69:fe:20:2f:bc:43:f2:62:31:58:cc: 06:f8:22:c5:2e:ca:0e:32:2d:52:75:6d:47:7e:9e: 0e:5f:dc:9d:94:ea:72:31:7d:1e:a4:9b:f8:43:26: 90:ed:e9:fe:7a:70:8e:74:8c:10:aa:ad:05:66:7c: 22:fa:07:ff:aa:82:44:12:2a:6d:79:0c:e5:fc:1d: a2:d9:7c:e8:cb:6d:9c:36:6e:05:e7:02:19:3b:64: ae:c2:6e:a9:99:6c:49:e3:6d:83:b1:19:f6:4d:dd: 70:00:8c:5c:df:13:a3:0a:b6:62:f3:ea:85:5c:04: ed:c7:f4:9c:e2:d0:c1:c4:e8:59:85:ba:11:ec:60: 28:1d:fa:96:61:6e:fd:45:32:2c:a8:8a:96:51:f8: 3a:b3:02:d4:3a:7f:31:e9:42:f8:43:1f:c6:9d:74: 45:34:84:a9:0c:56:b4:e3:c1:51:28:8c:48:25:71: a8:86:0d:eb:1e:4b:15:0d:5b:72:7d:b3:36:8a:37: db:e6:d1:d3:f2:33:7b:d1:09:a3:38:ee:01:ee:d4: 5e:2e:24:41:a5:39:a2:77:66:b8:d7:f2:68:07:55: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14371 26145 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c9:8a:e3:ba:60:ce:c7:25:ef:c9:5d:4a:9f:43:ce:dc:04: 74:52:9f:53:c4:e2:0b:00:62:83:ff:a9:44:12:41:5f:97:9f: 49:ce:6f:d4:79:74:63:61:e8:5a:76:28:bb:d1:4e:c5:5c:28: bf:34:56:63:6b:54:d8:d3:78:e9:52:23:f0:96:a1:d7:5f:0c: 4d:88:12:d2:e1:83:53:ae:46:8d:e8:1e:f7:52:c7:e7:d8:f2: 96:61:f6:a2:8c:c6:71:22:9a:cb:64:fa:52:12:86:9b:c5:8f: b2:6f:c6:09:95:d2:1a:6d:6c:8c:90:5a:7e:2b:aa:9b:bb:fc: 4a:65:11:be:79:2c:3f:d8:ff:b4:b1:f9:fd:00:07:b6:02:9d: a2:18:0e:ed:d5:5b:4a:08:e8:1f:fc:6f:49:a4:53:03:63:41: cb:60:fd:f6:17:93:4b:43:72:6a:26:4b:d3:fe:72:4e:90:9f: 14:bc:1e:8a:bd:ca:2d:89:d5:bd:c4:df:8e:8a:93:39:16:e0: 7e:3b:f6:64:4e:ac:0b:dc:cb:4c:90:37:3b:80:98:c7:1e:cc: 9e:ba:cf:2e:a4:d4:a4:88:ae:ff:21:e0:2d:ab:85:82:a9:cd: 73:17:40:a7:8c:9f:05:68:57:21:55:04:af:e0:26:2a:a1:b6: b3:3f:81:09 -----BEGIN CERTIFICATE----- MIIHVDCCBjygAwIBAgIUAQ0Mn0MoWEki4XRLsVFkrtTKgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDMxMDAwNDUzM1oXDTI3MDYxMzAwNDUzM1owLzEtMCsGA1UEAxMk MDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22fSNVBUm88gXlZjpCI8IqHtwA0ARsl3RUC7 7GtlAKoGaf4gL7xD8mIxWMwG+CLFLsoOMi1SdW1Hfp4OX9ydlOpyMX0epJv4QyaQ 7en+enCOdIwQqq0FZnwi+gf/qoJEEipteQzl/B2i2Xzoy22cNm4F5wIZO2Suwm6p mWxJ422DsRn2Td1wAIxc3xOjCrZi8+qFXATtx/Sc4tDBxOhZhboR7GAoHfqWYW79 RTIsqIqWUfg6swLUOn8x6UL4Qx/GnXRFNISpDFa048FRKIxIJXGohg3rHksVDVty fbM2ijfb5tHT8jN70QmjOO4B7tReLiRBpTmid2a41/JoB1WG2QIDAQABo4IEZjCC BGIwHQYDVR0OBBYEFNd7zQBwK8mKEnqNDug6jg3SCIu7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w MjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzAyOGMwNTk2LWMzZGQtNDRkZi05 NzYxLTY3N2U2ODc5NGM2OS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3 OTRjNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwZwYIKwYBBQUH AQcBAf8EWDBWMDwEAgABMDYDBAJBEswDBANCqygDBAZE60ADBAJo28QDBAKi/kAD BATNlZADBADO330DBALQTRgDBAXRv8AwFgQCAAIwEAMHACABBQQAKQMFBCYAZAAw HQYIKwYBBQUHAQgBAf8EDjAMoAowCAICOCMCAmYhMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGzJiuO6YM7H Je/JXUqfQ87cBHRSn1PE4gsAYoP/qUQSQV+Xn0nOb9R5dGNh6Fp2KLvRTsVcKL80 VmNrVNjTeOlSI/CWoddfDE2IEtLhg1OuRo3oHvdSx+fY8pZh9qKMxnEimstk+lIS hpvFj7JvxgmV0hptbIyQWn4rqpu7/EplEb55LD/Y/7Sx+f0AB7YCnaIYDu3VW0oI 6B/8b0mkUwNjQctg/fYXk0tDcmomS9P+ck6QnxS8Hoq9yi2J1b3E346KkzkW4H47 9mROrAvcy0yQNzuAmMcezJ66zy6k1KSIrv8h4C2rhYKpzXMXQKeMnwVoVyFVBK/g JiqhtrM/gQk= -----END CERTIFICATE-----Generated at Fri Apr 4 16:10:27 2025 by rpki-client