$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer File: 1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer (raw, json) Hash identifier: HoTPskrWlmyVG+EiRlS4TQwePm5hdJsfHFNWDmx7G6U= Subject key identifier: AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848A293C55FB7B32238249E6780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Jan 2025 01:45:34 +0000 Certificate not after: Wed 28 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 397451 IP: 64.43.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:93:c5:5f:b7:b3:22:38:24:9e:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 23 01:45:34 2025 GMT Not After : Apr 28 00:45:34 2027 GMT Subject: CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:bd:ef:dc:4b:2f:d3:ff:de:e0:85:87:16: 22:36:b8:8c:be:b2:17:6c:75:0b:45:ad:86:06:41: 0a:1a:e5:89:ca:1d:74:37:20:16:3a:49:96:d4:25: 68:7f:2c:c1:da:fa:06:16:8e:80:f5:f7:10:70:02: 5f:cf:5f:e3:99:26:45:65:37:d7:94:77:ec:35:8e: da:22:20:ee:a2:30:b9:17:ff:b9:20:76:17:e7:99: 46:fe:3a:99:ef:77:11:d3:aa:6f:04:83:39:7a:54: a3:31:07:7e:fa:62:9a:73:66:79:3b:aa:b2:85:d5: 53:f4:f5:ec:2c:4d:40:c7:da:8f:db:8a:7f:d0:72: bd:be:bc:f0:3f:53:ba:5a:52:65:1d:d6:1c:e5:dc: 02:e8:48:8f:c8:ba:cc:f6:d3:61:83:87:8e:d7:b0: 7b:91:ea:23:a6:1e:10:68:fc:94:28:ee:ba:04:7e: 5b:f1:d9:c2:54:6d:2a:55:47:56:11:85:a7:d6:91: 1d:ba:13:55:b5:88:ad:97:71:01:13:7f:51:7f:b4: fb:eb:e0:b6:54:4c:64:7c:44:a4:b3:37:29:15:2e: 2b:04:0b:af:a3:44:f2:51:b0:bd:4c:d6:3a:96:e2: db:77:6f:54:35:e4:b9:99:ef:c0:0f:92:c2:29:3b: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.43.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397451 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:17:11:19:1a:6e:fe:5c:76:61:f2:79:4e:b6:ee:09:05:74: 8a:6e:8b:c2:53:c5:ce:de:dc:d1:61:2b:90:0d:4e:8f:e5:d6: f9:b0:84:96:51:c4:15:36:74:68:27:f4:cf:65:57:2f:8e:2d: 7f:4b:bc:b2:1f:79:c2:af:26:04:bc:eb:e2:a3:69:af:fa:c1: 7b:0d:2e:88:85:ce:5e:f7:ab:0d:5e:ad:99:06:5e:cf:af:56: bb:19:2d:1a:ec:4d:d6:49:83:2a:32:09:ce:0e:82:34:e3:f7: 76:12:35:c2:5d:87:09:56:97:c9:cb:2a:5f:44:1f:d5:78:07: 32:e8:25:bf:ff:5a:e2:4b:14:b6:78:3c:9f:37:ef:82:d5:74: bb:14:5b:31:87:39:ae:c7:82:16:1c:a5:d5:43:7a:8a:98:ea: b9:12:ec:00:52:67:29:3a:be:2f:36:72:5e:60:e1:49:99:87: 4c:97:c9:d5:02:43:a2:66:92:e0:d0:7c:eb:66:c7:95:17:56: cb:36:aa:ac:8d:cc:d5:2b:88:27:c6:58:cf:36:ee:e0:09:57: fb:58:f6:40:43:6e:d9:6d:32:a3:c5:90:f0:49:2b:56:ee:bc: 46:25:30:d3:b0:2a:58:55:f6:45:43:d5:af:14:b7:74:fe:55: ca:d7:48:d5 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEiik8Vft7MiOCSeZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDEyMzAxNDUzNFoXDTI3MDQyODAwNDUzNFowLzEtMCsGA1UEAxMk MWM1NGUzNWMtYTZjOS00N2UwLWI3ODgtODY2YmQzMzNkOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtna979xLL9P/3uCFhxYiNriMvrIXbHULRa2G BkEKGuWJyh10NyAWOkmW1CVofyzB2voGFo6A9fcQcAJfz1/jmSZFZTfXlHfsNY7a IiDuojC5F/+5IHYX55lG/jqZ73cR06pvBIM5elSjMQd++mKac2Z5O6qyhdVT9PXs LE1Ax9qP24p/0HK9vrzwP1O6WlJlHdYc5dwC6EiPyLrM9tNhg4eO17B7keojph4Q aPyUKO66BH5b8dnCVG0qVUdWEYWn1pEduhNVtYitl3EBE39Rf7T76+C2VExkfESk szcpFS4rBAuvo0TyUbC9TNY6luLbd29UNeS5me/AD5LCKTvpoQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKwDW1x6vHgniBDyXVIqWlAkprKgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x YzU0ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZiZDMzM2Q4ZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFjNTRlMzVjLWE2YzktNDdlMC1i Nzg4LTg2NmJkMzMzZDhlMC8xYzU0ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZiZDMz M2Q4ZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVAK8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhCLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABoXERkabv5cdmHyeU627gkFdIpui8JTxc7e3NFhK5ANTo/l 1vmwhJZRxBU2dGgn9M9lVy+OLX9LvLIfecKvJgS86+Kjaa/6wXsNLoiFzl73qw1e rZkGXs+vVrsZLRrsTdZJgyoyCc4OgjTj93YSNcJdhwlWl8nLKl9EH9V4BzLoJb// WuJLFLZ4PJ8374LVdLsUWzGHOa7HghYcpdVDeoqY6rkS7ABSZyk6vi82cl5g4UmZ h0yXydUCQ6JmkuDQfOtmx5UXVss2qqyNzNUriCfGWM827uAJV/tY9kBDbtltMqPF kPBJK1buvEYlMNOwKlhV9kVD1a8Ut3T+VcrXSNU= -----END CERTIFICATE-----Generated at Fri Apr 4 19:00:42 2025 by rpki-client