$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781.cer File: 3feec52d-ec77-4869-a96c-bed4aa519781.cer (raw, json) Hash identifier: f8+YggPAMOgMxUzrOMqWvHSHlICb68b4NioDNbE5n0c= Subject key identifier: DA:6F:E9:A2:F5:75:58:68:74:D1:A7:22:FB:3C:06:33:80:E6:0A:70 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584917D47D2FA19CAEF4B61C1780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Mar 2025 01:45:33 +0000 Certificate not after: Wed 09 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 36710 IP: 23.132.32.0/23 IP: 2620:138:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:d4:7d:2f:a1:9c:ae:f4:b6:1c:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 6 01:45:33 2025 GMT Not After : Jun 9 00:45:33 2027 GMT Subject: CN=3feec52d-ec77-4869-a96c-bed4aa519781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:38:23:46:9e:0f:e1:ed:63:2d:52:6f:e3:2a: 03:5f:dd:db:d9:45:d6:45:42:28:7e:d6:eb:e5:9f: 8f:b3:e5:98:54:9c:6b:4b:fc:64:04:cd:88:bf:32: 9c:2b:e4:1c:a8:50:e0:5b:1f:99:56:8c:52:94:40: 69:e3:6a:2a:1c:a9:72:64:50:bc:08:98:67:65:b8: b9:94:45:ff:19:0f:9f:42:06:50:4b:38:2e:f5:42: db:ac:6a:47:ae:3b:ab:2e:71:b5:b4:91:65:33:29: 04:08:95:91:ea:78:f9:c2:ad:ec:8d:fc:a9:80:4b: ff:2e:cc:03:b6:c2:1e:39:b6:61:38:8c:9a:6c:ba: c7:8e:ff:1a:ff:bd:22:f8:7d:41:f5:aa:26:16:70: 80:cf:31:10:57:e5:4c:78:27:4f:94:89:89:d5:22: 73:47:c9:fc:fb:fe:63:b4:0c:ff:cc:94:df:ca:0b: c4:d1:46:a1:14:c4:4e:3e:0e:15:bf:bd:5b:6f:f8: 5d:cf:f0:15:c0:82:0a:13:89:dc:26:77:49:b0:e8: 4d:c1:d6:a1:3c:07:48:5f:77:d0:08:d1:b6:0f:4a: 64:3b:f1:71:2a:98:d6:1d:18:f6:13:f2:a2:60:64: 23:fc:67:a9:41:fc:a6:9e:89:db:3c:5a:66:86:9c: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6F:E9:A2:F5:75:58:68:74:D1:A7:22:FB:3C:06:33:80:E6:0A:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.132.32.0/23 IPv6: 2620:138:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36710 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e5:19:13:fc:9d:06:a6:bc:93:25:3c:55:fb:2a:4c:61:a5: 57:2c:73:3c:d5:42:b3:d7:6e:69:91:14:0d:c6:7e:e5:f0:6c: 66:4f:b5:26:ab:23:0f:ae:2e:f3:3b:a1:db:71:26:8e:61:1b: 61:e4:f6:1c:d4:8f:ce:ee:d2:37:54:1d:b4:58:94:99:e0:3c: 83:6e:cf:05:03:eb:00:8d:4f:37:f3:89:b7:db:84:59:85:f0: 7c:cc:e8:ee:05:d4:2c:45:11:92:ba:c2:78:d6:9d:fc:39:49: 56:5c:5f:d1:46:43:d6:0e:7b:b5:35:df:6a:11:49:8f:65:90: 67:4f:72:54:e6:09:81:f1:4b:a1:ff:d1:35:26:37:91:15:c3: 54:ef:b4:56:bf:98:d6:a5:60:1c:fe:56:85:80:c1:f5:39:cb: ab:4e:08:b1:b8:05:8c:fb:92:3e:c6:21:00:3f:db:50:9c:38: 2b:18:69:29:17:10:31:05:06:5e:72:d1:e1:01:79:d9:db:98: 16:a1:3e:81:44:65:f6:36:2f:74:0b:06:5f:60:94:03:c2:76: 78:7a:5f:01:38:3b:ad:be:46:9c:03:3e:30:26:4e:8e:29:e7: 40:02:bf:e3:21:90:9a:a3:97:ed:12:50:64:3d:2e:77:5d:92: ba:ce:ec:21 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEkX1H0voZyu9LYcF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDMwNjAxNDUzM1oXDTI3MDYwOTAwNDUzM1owLzEtMCsGA1UEAxMk M2ZlZWM1MmQtZWM3Ny00ODY5LWE5NmMtYmVkNGFhNTE5NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DgjRp4P4e1jLVJv4yoDX93b2UXWRUIoftbr 5Z+Ps+WYVJxrS/xkBM2IvzKcK+QcqFDgWx+ZVoxSlEBp42oqHKlyZFC8CJhnZbi5 lEX/GQ+fQgZQSzgu9ULbrGpHrjurLnG1tJFlMykECJWR6nj5wq3sjfypgEv/LswD tsIeObZhOIyabLrHjv8a/70i+H1B9aomFnCAzzEQV+VMeCdPlImJ1SJzR8n8+/5j tAz/zJTfygvE0UahFMROPg4Vv71bb/hdz/AVwIIKE4ncJndJsOhNwdahPAdIX3fQ CNG2D0pkO/FxKpjWHRj2E/KiYGQj/GepQfymnonbPFpmhpwNYwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNpv6aL1dVhodNGnIvs8BjOA5gpwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z ZmVlYzUyZC1lYzc3LTQ4NjktYTk2Yy1iZWQ0YWE1MTk3ODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzNmZWVjNTJkLWVjNzctNDg2OS1h OTZjLWJlZDRhYTUxOTc4MS8zZmVlYzUyZC1lYzc3LTQ4NjktYTk2Yy1iZWQ0YWE1 MTk3ODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAEXhCAwDwQCAAIwCQMHBCYgAThgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAj2YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdOUZE/ydBqa8kyU8VfsqTGGl VyxzPNVCs9duaZEUDcZ+5fBsZk+1JqsjD64u8zuh23EmjmEbYeT2HNSPzu7SN1Qd tFiUmeA8g27PBQPrAI1PN/OJt9uEWYXwfMzo7gXULEURkrrCeNad/DlJVlxf0UZD 1g57tTXfahFJj2WQZ09yVOYJgfFLof/RNSY3kRXDVO+0Vr+Y1qVgHP5WhYDB9TnL q04IsbgFjPuSPsYhAD/bUJw4KxhpKRcQMQUGXnLR4QF52duYFqE+gURl9jYvdAsG X2CUA8J2eHpfATg7rb5GnAM+MCZOjinnQAK/4yGQmqOX7RJQZD0ud12Sus7sIQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:35 2025 by rpki-client