$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer File: 3923a777-f0da-4edf-8bcc-42b47f48310a.cer (raw, json) Hash identifier: kL9bANWpXlFq9aUQAsogN4gydgYitFC89qXqdnFjF+g= Subject key identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A66B8D4581A54E8E39369EE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Jul 2025 00:45:37 +0000 Certificate not after: Thu 07 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 64.45.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:b8:d4:58:1a:54:e8:e3:93:69:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 4 00:45:37 2025 GMT Not After : Oct 7 00:45:37 2027 GMT Subject: CN=3923a777-f0da-4edf-8bcc-42b47f48310a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:25:82:d1:fa:79:2e:a9:d2:3d:18:d8:ca: b4:97:56:25:ac:23:aa:3b:ee:8f:25:b7:66:d3:e5: f1:a9:c9:20:18:3e:aa:ec:30:3f:90:50:c4:67:43: ec:ea:90:f2:12:e3:85:19:df:4d:c5:57:f6:4d:ab: 75:0e:ee:f2:aa:ea:0e:3d:0f:3f:5c:55:5b:4a:01: e0:c3:07:be:14:7f:6f:1f:a9:49:7c:c9:f2:56:f0: 5d:ab:9d:d5:17:53:33:21:65:4e:d0:27:b8:98:1a: 6f:22:6c:71:2e:c5:a3:39:24:a2:1e:36:1c:9a:b4: f9:70:56:f9:04:b2:cf:2c:1e:b0:9e:65:6f:c3:0a: e5:7a:1c:53:fd:44:07:8a:e4:b9:af:67:00:c2:26: 87:32:c8:05:aa:f3:fd:41:87:d2:b2:24:6e:b7:80: e2:ae:a5:dd:24:a6:aa:95:79:35:40:bc:fc:82:04: 22:39:07:07:4d:53:d2:67:10:c7:29:05:57:3d:0a: bf:82:71:b1:2d:a7:0a:d5:6f:2d:9b:4a:ec:38:6a: 99:ef:9e:54:6f:d0:f5:bb:cc:ea:16:25:6f:3d:91: db:41:fc:1f:4f:e9:6d:08:de:48:d6:41:b8:a6:6f: ec:e1:f5:69:ed:90:40:86:a1:58:3b:78:65:20:d6: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.45.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fd:4b:35:97:9e:6d:f5:0a:cc:7a:a4:dd:a1:95:97:77:0a: 6b:9b:30:4e:48:01:88:00:fd:3f:e5:01:80:24:82:92:a6:31: 7c:e7:4d:c5:6d:ba:a9:8f:3e:c6:e2:d1:86:6c:47:31:d3:a8: 89:ca:da:6f:eb:50:e2:f7:c4:b3:b5:55:14:be:fa:c0:73:96: 9d:3c:79:ac:02:78:85:73:d9:df:2e:a9:10:d2:ea:14:1c:5d: a1:40:79:94:61:14:84:2e:e7:b5:e7:41:0c:c9:0c:75:a5:6b: 2e:59:f2:9f:39:81:09:4c:79:7e:40:29:09:ef:b1:58:8d:ee: c5:92:c3:59:ab:13:5f:77:0c:f9:16:28:f7:ce:78:56:f4:d8: 6a:0a:d3:4a:5e:60:ec:a2:c4:25:f9:a8:64:9c:27:93:ef:52: 3b:4f:77:12:b3:14:88:7f:de:32:18:03:66:74:4e:15:19:54: de:31:ef:e6:65:7d:cf:0a:9e:b6:bc:73:d8:e4:1f:7d:1c:2d: e8:a0:29:9e:37:01:00:6a:81:e7:59:c9:c7:2a:4d:80:05:f3: f8:3a:73:d8:eb:ab:c8:9b:55:04:99:67:ed:db:88:d1:fe:48: 4a:9e:9b:f0:98:83:30:96:5a:0c:da:d8:7c:ba:0b:a9:7a:73: 41:86:e0:6f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEpmuNRYGlTo45Np7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDcwNDAwNDUzN1oXDTI3MTAwNzAwNDUzN1owLzEtMCsGA1UEAxMk MzkyM2E3NzctZjBkYS00ZWRmLThiY2MtNDJiNDdmNDgzMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSwlgtH6eS6p0j0Y2Mq0l1YlrCOqO+6PJbdm 0+XxqckgGD6q7DA/kFDEZ0Ps6pDyEuOFGd9NxVf2Tat1Du7yquoOPQ8/XFVbSgHg wwe+FH9vH6lJfMnyVvBdq53VF1MzIWVO0Ce4mBpvImxxLsWjOSSiHjYcmrT5cFb5 BLLPLB6wnmVvwwrlehxT/UQHiuS5r2cAwiaHMsgFqvP9QYfSsiRut4DirqXdJKaq lXk1QLz8ggQiOQcHTVPSZxDHKQVXPQq/gnGxLacK1W8tm0rsOGqZ755Ub9D1u8zq FiVvPZHbQfwfT+ltCN5I1kG4pm/s4fVp7ZBAhqFYO3hlINavHQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOKpohkcAJAaHX3O9/JALT5niSDZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z OTIzYTc3Ny1mMGRhLTRlZGYtOGJjYy00MmI0N2Y0ODMxMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM5MjNhNzc3LWYwZGEtNGVkZi04 YmNjLTQyYjQ3ZjQ4MzEwYS8zOTIzYTc3Ny1mMGRhLTRlZGYtOGJjYy00MmI0N2Y0 ODMxMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVALYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMP1LNZeebfUKzHqk3aGV l3cKa5swTkgBiAD9P+UBgCSCkqYxfOdNxW26qY8+xuLRhmxHMdOoicrab+tQ4vfE s7VVFL76wHOWnTx5rAJ4hXPZ3y6pENLqFBxdoUB5lGEUhC7ntedBDMkMdaVrLlny nzmBCUx5fkApCe+xWI3uxZLDWasTX3cM+RYo9854VvTYagrTSl5g7KLEJfmoZJwn k+9SO093ErMUiH/eMhgDZnROFRlU3jHv5mV9zwqetrxz2OQffRwt6KApnjcBAGqB 51nJxypNgAXz+Dpz2OuryJtVBJln7duI0f5ISp6b8JiDMJZaDNrYfLoLqXpzQYbg bw== -----END CERTIFICATE-----Generated at Wed Jul 9 20:17:04 2025 by rpki-client