$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer File: 2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer (raw, json) Hash identifier: S+fZEBGIQiLeaqMXadx0B7PkNW9kKpKHtaGj61uz0v4= Subject key identifier: DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584891D3A616626FE5263B90C340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Jan 2025 01:45:32 +0000 Certificate not after: Thu 22 Apr 2027 00:45:32 +0000 Subordinate resources: AS: 177 -- 180 IP: 141.211.0.0 -- 141.213.255.255 IP: 141.216.0.0/16 IP: 192.12.80.0/24 IP: 192.231.253.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:d3:a6:16:62:6f:e5:26:3b:90:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 17 01:45:32 2025 GMT Not After : Apr 22 00:45:32 2027 GMT Subject: CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:25:35:94:b3:b1:a5:e1:23:d5:cc:49:69: 5a:bc:66:65:90:36:85:6e:77:a1:f0:65:d1:78:70: f0:f7:09:55:f2:31:9c:84:81:37:27:01:c4:ee:0b: 3f:c1:3a:44:9c:cf:3c:0c:11:50:7a:b4:dd:18:3d: 60:e4:11:3b:f0:80:32:47:83:56:04:23:09:db:fd: 8b:56:d8:5b:d8:ce:14:3f:7f:84:b8:2d:dd:a6:12: 51:f5:94:88:41:77:20:8d:39:40:4f:e8:7e:5b:02: 40:09:aa:d0:f0:68:cb:55:a0:38:4a:78:26:9f:40: 6f:c7:d9:88:89:80:36:6d:79:56:7e:5a:01:82:c4: 39:ad:98:25:6a:8e:6a:fd:5e:eb:77:54:38:b4:00: b0:5e:68:83:09:b4:72:e5:5e:48:60:a8:63:89:3c: 49:28:e4:04:68:a6:1d:40:e3:6e:c0:28:55:32:be: a2:cb:00:ec:d4:c4:67:53:55:f7:a5:59:59:c0:1a: 75:23:37:39:18:63:ce:1b:ae:25:5f:3a:65:7f:6c: 49:15:1d:c7:3c:c6:12:46:be:93:ee:a6:26:77:d9: 6c:18:bb:d3:95:8d:5c:08:8f:7e:59:49:b3:30:19: 2a:4a:c2:83:e3:22:94:4d:ec:f4:fc:67:81:24:01: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 141.211.0.0-141.213.255.255 141.216.0.0/16 192.12.80.0/24 192.231.253.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 177-180 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:36:80:1f:cd:5a:14:2d:a1:61:5d:85:03:8f:93:a6:8f:11: ab:8f:e2:50:72:ac:32:b8:a1:84:70:82:73:40:5a:c5:07:1b: da:f0:0d:73:5a:e6:d3:7c:ed:6e:c3:5f:2a:72:8e:6c:88:6c: 59:2d:37:6d:91:48:82:e6:36:2b:42:dd:c1:74:03:2a:66:57: 5a:f8:cc:2c:c3:e9:18:f7:4b:ad:50:dc:d1:23:c5:d2:6b:ed: 42:01:3d:dc:90:dc:1a:94:b0:6b:94:17:b4:65:92:8f:72:f8: 06:83:12:60:4c:b4:52:77:57:9d:d3:af:49:91:10:a9:d2:09: 7b:a3:27:99:7b:12:33:cd:60:32:18:58:73:fb:95:5c:7e:84: d9:fb:95:f7:ba:e7:9e:40:55:28:03:99:88:2d:7b:6a:91:b3: a8:a9:f8:76:40:69:66:ec:5c:fc:a1:da:97:6f:52:5b:4e:c2: b2:3f:26:24:0d:14:e8:29:b1:70:aa:ae:8d:ab:39:6d:d2:a2: 31:cf:ce:c8:13:41:53:5f:d2:41:7c:74:69:50:8c:27:30:0b: e3:a6:30:ac:0b:06:4f:8a:e7:aa:b7:06:43:1c:7e:67:48:28: e9:4b:bc:3b:08:f4:56:ed:89:42:db:87:74:1a:9e:1a:2f:bb: 42:4f:46:e8 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEiR06YWYm/lJjuQw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDExNzAxNDUzMloXDTI3MDQyMjAwNDUzMlowLzEtMCsGA1UEAxMk MmQ5YzhjNDktMzVmZS00MmZiLWE5MDgtYzA3Yjk3MjU1YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuslNZSzsaXhI9XMSWlavGZlkDaFbneh8GXR eHDw9wlV8jGchIE3JwHE7gs/wTpEnM88DBFQerTdGD1g5BE78IAyR4NWBCMJ2/2L Vthb2M4UP3+EuC3dphJR9ZSIQXcgjTlAT+h+WwJACarQ8GjLVaA4Sngmn0Bvx9mI iYA2bXlWfloBgsQ5rZglao5q/V7rd1Q4tACwXmiDCbRy5V5IYKhjiTxJKOQEaKYd QONuwChVMr6iywDs1MRnU1X3pVlZwBp1Izc5GGPOG64lXzplf2xJFR3HPMYSRr6T 7qYmd9lsGLvTlY1cCI9+WUmzMBkqSsKD4yKUTez0/GeBJAEHwQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFN69qnU4WpDGNgvtynL09BdKDpM+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y ZDljOGM0OS0zNWZlLTQyZmItYTkwOC1jMDdiOTcyNTViNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzJkOWM4YzQ5LTM1ZmUtNDJmYi1h OTA4LWMwN2I5NzI1NWI0YS8yZDljOGM0OS0zNWZlLTQyZmItYTkwOC1jMDdiOTcy NTViNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMCMEAgABMB0wCgMDAI3TAwMBjdQDAwCN2AMEAMAMUAMEAMDn/TAf BggrBgEFBQcBCAEB/wQQMA6gDDAKMAgCAgCxAgIAtDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbNoAfzVoU LaFhXYUDj5OmjxGrj+JQcqwyuKGEcIJzQFrFBxva8A1zWubTfO1uw18qco5siGxZ LTdtkUiC5jYrQt3BdAMqZlda+Mwsw+kY90utUNzRI8XSa+1CAT3ckNwalLBrlBe0 ZZKPcvgGgxJgTLRSd1ed069JkRCp0gl7oyeZexIzzWAyGFhz+5VcfoTZ+5X3uuee QFUoA5mILXtqkbOoqfh2QGlm7Fz8odqXb1JbTsKyPyYkDRToKbFwqq6Nqzlt0qIx z87IE0FTX9JBfHRpUIwnMAvjpjCsCwZPiueqtwZDHH5nSCjpS7w7CPRW7YlC24d0 Gp4aL7tCT0bo -----END CERTIFICATE-----Generated at Fri Apr 4 18:49:38 2025 by rpki-client