$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer File: 2059c963-068e-4fba-a7d6-639c3f36a91b.cer (raw, json) Hash identifier: CpIoJj/jNZwbsQeez5tYu5w34+j4JL5Q01GloL8NXqg= Subject key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848F0BEEB1F65C6A554599B8900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Feb 2025 01:45:34 +0000 Certificate not after: Wed 26 May 2027 00:45:34 +0000 Subordinate resources: AS: 397424 IP: 204.10.191.0/24 IP: 209.126.64.0/22 IP: 216.247.236.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:be:eb:1f:65:c6:a5:54:59:9b:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 20 01:45:34 2025 GMT Not After : May 26 00:45:34 2027 GMT Subject: CN=2059c963-068e-4fba-a7d6-639c3f36a91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:84:cc:13:12:03:f0:4f:7e:86:f5:9f:ce:73: b4:5d:21:72:99:bf:e9:66:66:ef:d9:9b:03:aa:db: 89:bf:96:64:b7:a1:b3:bd:4e:a4:b5:50:41:a5:8d: e8:9b:e3:b7:a1:74:e1:36:f3:43:60:c3:17:4e:78: ab:ed:82:5c:1a:ec:1c:da:f5:e7:5e:07:30:1d:ee: 55:c0:26:1f:bb:e0:f2:cc:26:18:da:24:9a:e8:2d: e4:6e:40:3f:2a:42:5c:db:4d:71:a5:08:83:70:98: cb:20:b0:21:56:ea:b6:ff:1e:d8:cf:db:0e:eb:9e: 37:26:11:c1:dd:aa:b2:ed:58:37:be:34:a2:b0:3b: 15:b9:17:ad:d6:44:46:bf:cf:eb:76:7b:e9:d3:56: e0:c3:ea:d8:55:25:fc:30:cf:3d:27:1e:ca:a2:9f: 11:2e:f9:26:02:f1:ff:6c:3a:e9:79:47:9c:6e:e2: 8c:83:47:1f:89:10:25:ef:5a:a7:ae:09:05:32:86: da:0b:b9:c5:22:e2:3c:63:8e:9c:c8:d7:7f:e9:65: 9f:22:22:d7:0f:3d:23:1f:0d:fb:fb:42:1e:9c:b5: 80:ca:0b:5e:2b:3d:35:4a:b8:62:ec:f2:28:f2:92: 34:fe:d4:c1:d8:3e:22:a2:96:5e:75:0d:92:1b:ac: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.10.191.0/24 209.126.64.0/22 216.247.236.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397424 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a0:d8:cb:88:2c:6d:03:21:a4:b4:8e:41:e6:59:a3:23:e7: fa:ac:de:73:03:13:1e:75:62:14:3f:68:98:9e:2e:73:fd:c3: 93:18:76:06:df:ff:8f:0c:0d:e4:18:e7:01:08:f3:d5:d3:7e: ae:fa:1a:4c:93:8a:94:88:e2:6b:bd:67:c2:32:4c:57:46:b7: 0b:a5:0c:5b:85:ec:46:6c:a9:b2:93:70:cf:06:e8:53:27:23: 5b:4b:39:9d:9e:96:5d:62:48:f1:7c:b7:26:7c:bb:09:91:05: 82:67:d5:84:07:d7:ad:b5:97:11:1c:38:b3:d6:77:45:d5:d3: 24:69:26:93:e6:df:81:0e:75:ed:ff:4d:83:c0:28:ad:37:8c: 71:3b:67:4d:e6:90:97:5f:30:60:4e:09:a9:c9:d1:0a:93:6e: b6:ec:23:35:9c:e4:d8:46:54:e9:12:83:5e:86:94:d1:1e:71: 3c:9a:15:0c:04:fa:fb:62:6a:ed:36:ad:03:06:4a:a4:ba:8d: 4d:ff:ed:51:5e:03:89:49:da:b4:29:4d:6f:c2:32:c6:8f:39: 27:1b:5b:64:45:eb:14:bf:d2:5c:03:92:38:ec:c7:a0:24:73: 65:c1:3f:75:c8:c6:d6:bd:fd:19:c4:c2:50:68:49:d3:5e:7a: 0f:81:1b:da -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEjwvusfZcalVFmbiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIyMDAxNDUzNFoXDTI3MDUyNjAwNDUzNFowLzEtMCsGA1UEAxMk MjA1OWM5NjMtMDY4ZS00ZmJhLWE3ZDYtNjM5YzNmMzZhOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoTMExID8E9+hvWfznO0XSFymb/pZmbv2ZsD qtuJv5Zkt6GzvU6ktVBBpY3om+O3oXThNvNDYMMXTnir7YJcGuwc2vXnXgcwHe5V wCYfu+DyzCYY2iSa6C3kbkA/KkJc201xpQiDcJjLILAhVuq2/x7Yz9sO6543JhHB 3aqy7Vg3vjSisDsVuRet1kRGv8/rdnvp01bgw+rYVSX8MM89Jx7Kop8RLvkmAvH/ bDrpeUecbuKMg0cfiRAl71qnrgkFMobaC7nFIuI8Y46cyNd/6WWfIiLXDz0jHw37 +0IenLWAygteKz01Srhi7PIo8pI0/tTB2D4iopZedQ2SG6y6OwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFFjWWAsHLGFevd7/9SFctHT+ktstMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y MDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2YzNmE5MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIwNTljOTYzLTA2OGUtNGZiYS1h N2Q2LTYzOWMzZjM2YTkxYi8yMDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2Yz NmE5MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADMCr8DBALRfkADBADY9+wwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhBwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC+g2MuILG0DIaS0jkHmWaMj5/qs3nMD Ex51YhQ/aJieLnP9w5MYdgbf/48MDeQY5wEI89XTfq76GkyTipSI4mu9Z8IyTFdG twulDFuF7EZsqbKTcM8G6FMnI1tLOZ2ell1iSPF8tyZ8uwmRBYJn1YQH1621lxEc OLPWd0XV0yRpJpPm34EOde3/TYPAKK03jHE7Z03mkJdfMGBOCanJ0QqTbrbsIzWc 5NhGVOkSg16GlNEecTyaFQwE+vtiau02rQMGSqS6jU3/7VFeA4lJ2rQpTW/CMsaP OScbW2RF6xS/0lwDkjjsx6Akc2XBP3XIxta9/RnEwlBoSdNeeg+BG9o= -----END CERTIFICATE-----Generated at Fri Apr 4 15:57:45 2025 by rpki-client