$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer File: 3923a777-f0da-4edf-8bcc-42b47f48310a.cer (raw, json) Hash identifier: oAYDt+Xtyug6ZSNSOJaasA+0aHO3t4Bpqyd8c+zllDw= Subject key identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858494380C2DD458BC9ACE6B374C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 17:12:25 +0000 Certificate not after: Sat 04 Jul 2026 00:45:21 +0000 Subordinate resources: IP: 64.45.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:80:c2:dd:45:8b:c9:ac:e6:b3:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 21 17:12:25 2025 GMT Not After : Jul 4 00:45:21 2026 GMT Subject: CN=3923a777-f0da-4edf-8bcc-42b47f48310a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:25:82:d1:fa:79:2e:a9:d2:3d:18:d8:ca: b4:97:56:25:ac:23:aa:3b:ee:8f:25:b7:66:d3:e5: f1:a9:c9:20:18:3e:aa:ec:30:3f:90:50:c4:67:43: ec:ea:90:f2:12:e3:85:19:df:4d:c5:57:f6:4d:ab: 75:0e:ee:f2:aa:ea:0e:3d:0f:3f:5c:55:5b:4a:01: e0:c3:07:be:14:7f:6f:1f:a9:49:7c:c9:f2:56:f0: 5d:ab:9d:d5:17:53:33:21:65:4e:d0:27:b8:98:1a: 6f:22:6c:71:2e:c5:a3:39:24:a2:1e:36:1c:9a:b4: f9:70:56:f9:04:b2:cf:2c:1e:b0:9e:65:6f:c3:0a: e5:7a:1c:53:fd:44:07:8a:e4:b9:af:67:00:c2:26: 87:32:c8:05:aa:f3:fd:41:87:d2:b2:24:6e:b7:80: e2:ae:a5:dd:24:a6:aa:95:79:35:40:bc:fc:82:04: 22:39:07:07:4d:53:d2:67:10:c7:29:05:57:3d:0a: bf:82:71:b1:2d:a7:0a:d5:6f:2d:9b:4a:ec:38:6a: 99:ef:9e:54:6f:d0:f5:bb:cc:ea:16:25:6f:3d:91: db:41:fc:1f:4f:e9:6d:08:de:48:d6:41:b8:a6:6f: ec:e1:f5:69:ed:90:40:86:a1:58:3b:78:65:20:d6: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.45.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d0:ad:30:83:83:94:0a:3f:1f:2d:57:ee:02:69:c6:24:db: 34:89:d4:83:13:b3:27:75:a5:33:f6:ab:89:8d:cd:77:d4:5d: d8:9d:10:66:de:ff:ad:ee:8d:42:6a:1a:d4:9d:2d:f0:08:3d: 52:63:74:32:f8:10:63:f8:d2:0e:a1:49:17:a7:66:fd:2c:9a: 0b:8b:d7:f8:a9:d1:99:34:d5:ef:77:b7:9a:d1:29:d6:69:31: 26:41:10:1a:48:88:86:ee:cc:a3:85:78:75:0a:79:34:c0:e3: 16:d1:79:a3:91:47:42:34:9c:e0:5b:45:42:a1:9e:f6:fb:a8: a5:98:76:d1:8b:c1:17:2d:95:a2:f5:29:66:e8:30:23:48:a9: 8b:2b:45:b2:a0:5c:44:b1:a1:9f:18:06:0f:db:bc:88:83:ee: 27:2c:00:36:e7:00:e8:d8:75:79:1c:a1:a1:97:eb:fc:81:4e: d5:82:29:44:1c:96:bc:a0:c6:8b:7c:1f:9a:42:08:f2:69:74: 20:bf:cf:f5:3f:87:48:84:61:55:e5:87:29:08:ad:11:c5:73: 41:f7:8d:12:35:4f:31:fe:4d:d2:5f:0d:f8:b9:77:d9:6b:f6: 45:04:3f:55:d2:15:51:57:39:9c:d0:b3:af:82:e0:90:c8:63: cf:cd:76:db -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElDgMLdRYvJrOazdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDMyMTE3MTIyNVoXDTI2MDcwNDAwNDUyMVowLzEtMCsGA1UEAxMk MzkyM2E3NzctZjBkYS00ZWRmLThiY2MtNDJiNDdmNDgzMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSwlgtH6eS6p0j0Y2Mq0l1YlrCOqO+6PJbdm 0+XxqckgGD6q7DA/kFDEZ0Ps6pDyEuOFGd9NxVf2Tat1Du7yquoOPQ8/XFVbSgHg wwe+FH9vH6lJfMnyVvBdq53VF1MzIWVO0Ce4mBpvImxxLsWjOSSiHjYcmrT5cFb5 BLLPLB6wnmVvwwrlehxT/UQHiuS5r2cAwiaHMsgFqvP9QYfSsiRut4DirqXdJKaq lXk1QLz8ggQiOQcHTVPSZxDHKQVXPQq/gnGxLacK1W8tm0rsOGqZ755Ub9D1u8zq FiVvPZHbQfwfT+ltCN5I1kG4pm/s4fVp7ZBAhqFYO3hlINavHQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOKpohkcAJAaHX3O9/JALT5niSDZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z OTIzYTc3Ny1mMGRhLTRlZGYtOGJjYy00MmI0N2Y0ODMxMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM5MjNhNzc3LWYwZGEtNGVkZi04 YmNjLTQyYjQ3ZjQ4MzEwYS8zOTIzYTc3Ny1mMGRhLTRlZGYtOGJjYy00MmI0N2Y0 ODMxMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVALYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAENCtMIODlAo/Hy1X7gJp xiTbNInUgxOzJ3WlM/ariY3Nd9Rd2J0QZt7/re6NQmoa1J0t8Ag9UmN0MvgQY/jS DqFJF6dm/SyaC4vX+KnRmTTV73e3mtEp1mkxJkEQGkiIhu7Mo4V4dQp5NMDjFtF5 o5FHQjSc4FtFQqGe9vuopZh20YvBFy2VovUpZugwI0ipiytFsqBcRLGhnxgGD9u8 iIPuJywANucA6Nh1eRyhoZfr/IFO1YIpRByWvKDGi3wfmkII8ml0IL/P9T+HSIRh VeWHKQitEcVzQfeNEjVPMf5N0l8N+Ll32Wv2RQQ/VdIVUVc5nNCzr4LgkMhjz812 2w== -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:46 2025 by rpki-client