$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer File: 51ca7155-bca1-46e1-9945-f2519df32314.cer (raw, json) Hash identifier: jK0tG0U9TwuxocglvNrF3H8esuAKcc8uTbqIAMvSD94= Subject key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848D79EC318B84B4902965FF580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 01:45:34 +0000 Certificate not after: Mon 17 May 2027 00:45:34 +0000 Subordinate resources: AS: 11251 AS: 22604 AS: 398849 AS: 400805 IP: 2620:138:3000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:9e:c3:18:b8:4b:49:02:96:5f:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 11 01:45:34 2025 GMT Not After : May 17 00:45:34 2027 GMT Subject: CN=51ca7155-bca1-46e1-9945-f2519df32314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:42:bf:14:09:e7:fa:b0:00:db:41:de:da: e4:a0:5f:13:68:dc:71:e0:6c:1e:cd:5b:15:5a:c1: 34:7b:41:10:64:8c:0c:ad:a4:db:3c:18:22:f2:6b: 45:78:e9:7e:af:5b:df:79:7d:a8:bf:19:01:e8:0c: e2:c6:84:9f:82:1a:31:78:4d:2d:88:d8:f7:2d:e0: 78:7f:b8:d0:af:fb:6c:41:1b:3b:33:cd:4a:83:b7: ef:0f:00:22:4e:0d:38:ac:8c:32:c3:c8:b3:94:ec: c1:90:a5:98:f3:e6:30:93:4f:46:f2:68:19:7d:78: eb:cb:f8:68:60:27:aa:9b:7c:48:f1:8c:57:b3:65: 2f:20:92:b1:3f:98:3c:4d:6f:5c:69:29:7b:e5:0a: ba:4a:15:24:38:30:6b:7b:9a:2f:7c:b4:10:8d:2d: 09:5a:ff:d4:b1:b6:a2:53:0c:0a:8e:76:9b:81:79: 5e:fb:c2:d6:3c:40:10:c4:d7:20:39:16:b8:62:37: 7b:b5:8f:f8:a6:85:f9:1a:50:9c:8e:b7:e8:38:7b: 90:d0:8b:01:65:eb:75:4a:a5:c5:ee:b6:65:23:1f: a2:61:86:e5:d7:31:0c:e9:3c:87:79:5c:71:a6:de: e0:fc:33:df:66:53:7d:0b:c9:95:9d:e6:ad:ee:77: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv6: 2620:138:3000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11251 22604 398849 400805 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:61:90:b3:82:79:1a:d5:26:c9:0e:ee:dc:53:68:f5:f4:14: 53:29:41:e4:49:ea:8c:68:e1:3e:7d:5c:bd:50:eb:2e:65:de: ea:20:7e:34:08:eb:62:b0:4c:cf:88:d7:9e:fc:92:a1:b2:70: a6:5e:e2:18:d5:3f:fe:e8:d4:c3:0a:79:c5:87:2f:93:d5:96: 43:57:63:c3:fb:56:1a:e0:c5:cf:fa:f1:47:e5:96:61:8e:ca: 46:82:f7:fc:b1:f6:b8:ad:a7:15:78:fc:10:e3:ea:ed:21:b7: 81:b9:2a:19:73:c6:85:a4:70:49:34:ff:59:28:2f:b7:2b:10: ab:50:2b:79:99:70:d9:84:49:2d:48:22:28:d2:1e:8f:3b:c3: ac:46:aa:a3:39:b9:28:f5:a0:d1:4b:ee:58:21:87:b7:fe:fe: f7:b1:71:78:04:fa:ad:32:e6:01:c6:84:22:0d:e1:78:2a:27: 7b:b7:04:56:19:a5:cd:ac:21:f3:d5:cc:b7:df:55:0d:e3:36: 11:86:df:d7:88:00:30:30:eb:de:bb:c0:c7:0a:61:c2:33:a0: 13:12:32:ee:1b:3a:96:6d:63:4c:eb:0e:a0:6f:e6:92:c1:d6: 67:c4:4f:bd:7e:d5:dc:35:bc:db:b2:63:14:3d:76:a7:5a:22: 62:1e:0d:48 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjXnsMYuEtJApZf9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIxMTAxNDUzNFoXDTI3MDUxNzAwNDUzNFowLzEtMCsGA1UEAxMk NTFjYTcxNTUtYmNhMS00NmUxLTk5NDUtZjI1MTlkZjMyMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JRCvxQJ5/qwANtB3trkoF8TaNxx4GwezVsV WsE0e0EQZIwMraTbPBgi8mtFeOl+r1vfeX2ovxkB6AzixoSfghoxeE0tiNj3LeB4 f7jQr/tsQRs7M81Kg7fvDwAiTg04rIwyw8izlOzBkKWY8+Ywk09G8mgZfXjry/ho YCeqm3xI8YxXs2UvIJKxP5g8TW9caSl75Qq6ShUkODBre5ovfLQQjS0JWv/Usbai UwwKjnabgXle+8LWPEAQxNcgORa4Yjd7tY/4poX5GlCcjrfoOHuQ0IsBZet1SqXF 7rZlIx+iYYbl1zEM6TyHeVxxpt7g/DPfZlN9C8mVneat7neDqwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPMIxoyEnNIdSh3SMAppnI2PgqsEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 MWNhNzE1NS1iY2ExLTQ2ZTEtOTk0NS1mMjUxOWRmMzIzMTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzUxY2E3MTU1LWJjYTEtNDZlMS05 OTQ1LWYyNTE5ZGYzMjMxNC81MWNhNzE1NS1iY2ExLTQ2ZTEtOTk0NS1mMjUxOWRm MzIzMTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAE4MDAnBggrBgEFBQcBCAEB/wQYMBagFDAS AgIr8wICWEwCAwYWAQIDBh2lMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE5hkLOCeRrVJskO7txTaPX0FFMp QeRJ6oxo4T59XL1Q6y5l3uogfjQI62KwTM+I1578kqGycKZe4hjVP/7o1MMKecWH L5PVlkNXY8P7Vhrgxc/68UfllmGOykaC9/yx9ritpxV4/BDj6u0ht4G5KhlzxoWk cEk0/1koL7crEKtQK3mZcNmESS1IIijSHo87w6xGqqM5uSj1oNFL7lghh7f+/vex cXgE+q0y5gHGhCIN4XgqJ3u3BFYZpc2sIfPVzLffVQ3jNhGG39eIADAw6967wMcK YcIzoBMSMu4bOpZtY0zrDqBv5pLB1mfET71+1dw1vNuyYxQ9dqdaImIeDUg= -----END CERTIFICATE-----Generated at Fri Apr 4 19:33:54 2025 by rpki-client