$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer File: 222fc882-68d7-4892-a04a-f0d1836061c4.cer (raw, json) Hash identifier: theQvNwuf1hiVVSjpguvCNwJuymwVEewk128Ui+kjt8= Subject key identifier: 86:5E:DB:71:43:A9:13:B8:39:3F:53:0F:3C:9C:26:E6:79:BC:D2:9D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858488AE4CC8EB95F2ED8F15A7140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jan 2025 14:09:26 +0000 Certificate not after: Sat 26 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 64241 IP: 209.251.245.0/24 IP: 2620:fc:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e4:cc:8e:b9:5f:2e:d8:f1:5a:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 14 14:09:26 2025 GMT Not After : Dec 26 01:45:26 2026 GMT Subject: CN=222fc882-68d7-4892-a04a-f0d1836061c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:85:f1:8c:c3:d6:2f:cd:6f:7c:77:e8:24: ed:15:6f:32:cc:d9:bd:c6:60:a9:8f:35:85:a2:93: 47:1a:b1:05:c4:d1:70:f6:8e:af:b1:08:15:9d:83: 66:a7:1b:16:87:dc:e9:25:3c:86:82:1c:03:02:0a: 3c:2f:9b:91:a9:b4:5c:07:ad:62:2f:28:5b:87:0c: 0a:77:e5:9c:12:f3:f4:50:9e:58:01:b3:d5:ad:58: 92:e3:98:cf:87:63:c6:b9:46:18:f2:aa:13:40:83: 0e:92:1f:70:db:75:f4:40:3d:d4:e1:f7:da:9f:e5: 84:43:02:87:3a:33:ed:56:39:fb:d4:9c:66:52:eb: 58:e5:bb:0d:30:32:d7:52:ad:40:b1:36:81:1b:82: 30:32:59:97:04:58:0c:1e:90:43:41:db:6a:03:1d: 81:09:fd:89:2d:da:07:05:ea:65:95:f0:b4:39:e3: f4:b8:b3:54:ca:1a:7d:68:1b:92:25:7b:bc:3b:6e: 6e:e3:02:6c:40:63:1f:27:9f:02:7e:05:59:28:27: 9b:12:ce:57:04:fb:07:6c:e0:cc:ea:57:6d:f8:01: 87:65:3b:e5:11:9c:71:c3:70:2b:90:2a:3a:67:20: 2c:b6:1e:67:76:97:d6:5c:f8:f0:88:4e:42:6b:7e: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5E:DB:71:43:A9:13:B8:39:3F:53:0F:3C:9C:26:E6:79:BC:D2:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 209.251.245.0/24 IPv6: 2620:fc:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64241 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0c:d6:fc:a9:12:29:fe:da:52:27:eb:6c:65:87:c0:43:3b: 18:a7:18:30:51:ec:88:7e:1a:d6:41:da:a9:b0:b2:11:48:01: e7:07:98:ef:2f:5e:76:c3:38:2b:07:cb:f4:76:ef:90:f3:4c: b4:56:0b:88:d4:b6:60:c8:58:09:bd:4c:d7:27:08:44:45:50: f1:5e:00:91:e1:3f:0c:a9:6b:7c:af:7c:a7:99:e8:68:14:d5: 3c:1d:2f:95:c2:0e:08:3a:e1:c2:b8:6b:3c:68:3b:71:4c:38: 02:3d:aa:a0:6b:cb:32:81:1d:15:8d:b0:fe:b0:18:6f:fa:c3: 54:30:df:16:7c:8c:52:d9:2a:03:51:8b:64:b6:e2:2e:00:53: 0a:e7:55:a0:66:69:81:e9:34:49:a8:4c:99:71:7d:b3:3f:29: 16:b1:ef:ce:6a:2f:d6:d9:2a:1e:02:d3:4b:6c:43:31:a5:22: c7:9e:72:87:57:1d:85:41:27:07:44:11:64:c4:d6:5f:a6:a7: 82:18:b2:ed:84:45:f0:f0:27:59:b7:51:f2:58:aa:73:48:c0: d6:08:30:87:6a:5d:d7:42:52:19:9c:ee:4e:cb:76:48:f0:4c: 9d:04:e8:96:9c:8a:b8:3e:54:38:4e:e8:0e:8b:8c:89:65:fb: ad:68:a3:ec -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEiK5MyOuV8u2PFacUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDExNDE0MDkyNloXDTI2MTIyNjAxNDUyNlowLzEtMCsGA1UEAxMk MjIyZmM4ODItNjhkNy00ODkyLWEwNGEtZjBkMTgzNjA2MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHmF8YzD1i/Nb3x36CTtFW8yzNm9xmCpjzWF opNHGrEFxNFw9o6vsQgVnYNmpxsWh9zpJTyGghwDAgo8L5uRqbRcB61iLyhbhwwK d+WcEvP0UJ5YAbPVrViS45jPh2PGuUYY8qoTQIMOkh9w23X0QD3U4ffan+WEQwKH OjPtVjn71JxmUutY5bsNMDLXUq1AsTaBG4IwMlmXBFgMHpBDQdtqAx2BCf2JLdoH BepllfC0OeP0uLNUyhp9aBuSJXu8O25u4wJsQGMfJ58CfgVZKCebEs5XBPsHbODM 6ldt+AGHZTvlEZxxw3ArkCo6ZyAsth5ndpfWXPjwiE5Ca35sSQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIZe23FDqRO4OT9TDzycJuZ5vNKdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y MjJmYzg4Mi02OGQ3LTQ4OTItYTA0YS1mMGQxODM2MDYxYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIyMmZjODgyLTY4ZDctNDg5Mi1h MDRhLWYwZDE4MzYwNjFjNC8yMjJmYzg4Mi02OGQ3LTQ4OTItYTA0YS1mMGQxODM2 MDYxYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADR+/UwDgQCAAIwCAMGACYgAPzAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD68TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUDNb8qRIp/tpSJ+tsZYfAQzsY pxgwUeyIfhrWQdqpsLIRSAHnB5jvL152wzgrB8v0du+Q80y0VguI1LZgyFgJvUzX JwhERVDxXgCR4T8MqWt8r3ynmehoFNU8HS+Vwg4IOuHCuGs8aDtxTDgCPaqga8sy gR0VjbD+sBhv+sNUMN8WfIxS2SoDUYtktuIuAFMK51WgZmmB6TRJqEyZcX2zPykW se/Oai/W2SoeAtNLbEMxpSLHnnKHVx2FQScHRBFkxNZfpqeCGLLthEXw8CdZt1Hy WKpzSMDWCDCHal3XQlIZnO5Oy3ZI8EydBOiWnIq4PlQ4TugOi4yJZfutaKPs -----END CERTIFICATE-----Generated at Mon Jan 20 06:41:18 2025 by rpki-client on console-ams.rpki-client.org