$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer File: 22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer (raw, json) Hash identifier: wJ1QddjugbnivIzRYco3CKNOhE7shkxxqIAQn7wT0UA= Subject key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848DD341E8849690A7A073DDB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Feb 2025 01:45:32 +0000 Certificate not after: Wed 19 May 2027 00:45:32 +0000 Subordinate resources: AS: 54632 AS: 397131 IP: 23.159.112.0/24 IP: 23.160.176.0/24 IP: 23.170.32.0/23 IP: 2602:fe6a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:34:1e:88:49:69:0a:7a:07:3d:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 13 01:45:32 2025 GMT Not After : May 19 00:45:32 2027 GMT Subject: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:2e:38:b6:f8:64:50:55:12:1a:4e:99:3b: a2:0b:95:43:aa:d5:3c:86:42:7b:6c:f9:0e:03:f4: 21:3b:50:53:cd:cd:b2:0f:65:9a:0a:f5:8b:e3:be: 4d:9b:9f:25:69:b3:6d:aa:a8:dc:b2:c3:08:1c:44: ba:54:e1:14:d3:f2:33:1a:ec:7c:30:65:bd:1f:af: b4:06:f3:7f:8f:d7:d4:14:5c:73:3e:ab:34:ec:44: ae:60:94:f0:c0:5d:84:e2:2a:67:cc:d3:86:87:c1: fe:76:94:0f:b8:0e:2c:62:51:80:29:5a:f6:be:95: 85:01:33:e2:86:39:3b:db:9f:f4:92:cd:d9:48:6f: aa:58:02:81:76:da:0e:21:87:15:9c:65:21:58:eb: 15:08:34:67:41:27:dd:41:7f:ea:c6:40:61:1d:88: 11:5e:47:bf:30:ca:df:a6:e4:59:41:64:aa:48:88: 6b:7d:6a:42:b9:bf:e4:2c:54:81:a3:0a:52:64:42: f6:7f:ab:56:f5:30:fd:3f:a7:be:c2:ca:5f:9f:73: 38:28:08:d1:f9:51:cd:c2:d4:23:c1:7d:4f:f6:1e: c8:5f:1a:a1:51:ab:cb:6e:88:8a:95:05:64:11:54: eb:53:cb:b2:e6:8b:f0:f2:82:65:42:99:78:56:6e: 7f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.159.112.0/24 23.160.176.0/24 23.170.32.0/23 IPv6: 2602:fe6a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54632 397131 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:85:ef:f0:38:b5:5f:b4:73:59:51:05:bd:92:3b:8a:59:98: 6b:50:2e:25:98:34:e3:9c:ca:a6:82:22:53:63:b9:9c:11:8f: 25:8b:1a:31:44:c3:f9:a9:32:3b:40:2f:e7:98:cc:e5:03:d9: 0f:16:d0:f8:3f:be:97:e7:f9:a4:c6:8b:65:18:38:88:bf:22: d2:c1:26:0b:cd:2b:61:fc:31:7c:9d:8c:62:00:b6:e0:2b:ed: b2:59:ce:76:76:80:be:54:c9:9f:3a:a2:69:1e:8e:44:d7:4c: 79:3f:56:d4:cf:48:98:c6:65:0f:c8:37:73:b3:87:fd:70:95: 28:e9:dd:6b:1e:38:ec:53:54:af:32:c7:5a:cc:68:8e:20:f8: 36:12:06:6e:50:8e:bb:b8:c8:48:1e:0d:ae:3a:db:70:8a:11: 52:ae:ff:fb:95:ba:df:4b:fb:73:b6:5c:0f:16:24:25:f0:69: 68:ca:18:56:0a:29:87:91:85:28:f3:32:64:a3:40:a6:a5:ee: 43:f2:aa:52:7d:fc:21:2f:ac:23:28:8a:21:6e:b1:9d:84:8b: e0:7c:09:a1:b0:74:5d:1c:10:24:1f:78:db:7a:3b:5e:20:db: ff:23:10:0c:ee:cd:38:fb:f3:e9:3c:ef:f2:0d:af:50:1e:25: 76:6d:f0:9f -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEjdNB6ISWkKegc92wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIxMzAxNDUzMloXDTI3MDUxOTAwNDUzMlowLzEtMCsGA1UEAxMk MjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEzZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrkuOLb4ZFBVEhpOmTuiC5VDqtU8hkJ7bPkO A/QhO1BTzc2yD2WaCvWL475Nm58labNtqqjcssMIHES6VOEU0/IzGux8MGW9H6+0 BvN/j9fUFFxzPqs07ESuYJTwwF2E4ipnzNOGh8H+dpQPuA4sYlGAKVr2vpWFATPi hjk725/0ks3ZSG+qWAKBdtoOIYcVnGUhWOsVCDRnQSfdQX/qxkBhHYgRXke/MMrf puRZQWSqSIhrfWpCub/kLFSBowpSZEL2f6tW9TD9P6e+wspfn3M4KAjR+VHNwtQj wX1P9h7IXxqhUavLboiKlQVkEVTrU8uy5ovw8oJlQpl4Vm5/xQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFEK28b/P4sVlzmVlaByt4eP4o6dXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y MjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIyMTEyY2UwLWM5MWMtNDQ5ZS04 YmJiLTEyZTQ0ZjVhM2U0MS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1 YTNlNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXn3ADBAAXoLADBAEXqiAwDgQCAAIwCAMGBCYC /moAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDVaAIDBg9LMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFuF 7/A4tV+0c1lRBb2SO4pZmGtQLiWYNOOcyqaCIlNjuZwRjyWLGjFEw/mpMjtAL+eY zOUD2Q8W0Pg/vpfn+aTGi2UYOIi/ItLBJgvNK2H8MXydjGIAtuAr7bJZznZ2gL5U yZ86omkejkTXTHk/VtTPSJjGZQ/IN3Ozh/1wlSjp3WseOOxTVK8yx1rMaI4g+DYS Bm5Qjru4yEgeDa4623CKEVKu//uVut9L+3O2XA8WJCXwaWjKGFYKKYeRhSjzMmSj QKal7kPyqlJ9/CEvrCMoiiFusZ2Ei+B8CaGwdF0cECQfeNt6O14g2/8jEAzuzTj7 8+k87/INr1AeJXZt8J8= -----END CERTIFICATE-----Generated at Fri Apr 4 18:57:07 2025 by rpki-client