$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a.cer File: 750824e4-669c-4a78-911c-087bf64a7f4a.cer (raw, json) Hash identifier: x1vG51ZTQx4ICodE4to7Plc/2FsGU8cOn8oi8gFVqgk= Subject key identifier: 38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858495521C38E4FF5EBFAB90FB060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/750824e4-669c-4a78-911c-087bf64a7f4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Mar 2025 00:45:34 +0000 Certificate not after: Thu 01 Jul 2027 00:45:34 +0000 Subordinate resources: IP: 23.148.176.0/23 IP: 104.250.224.0/22 IP: 136.175.232.0/22 IP: 139.64.128.0/22 IP: 206.28.180.0/22 IP: 207.174.44.0/22 IP: 2605:8c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:21:c3:8e:4f:f5:eb:fa:b9:0f:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 28 00:45:34 2025 GMT Not After : Jul 1 00:45:34 2027 GMT Subject: CN=750824e4-669c-4a78-911c-087bf64a7f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:11:42:73:7f:47:f8:d4:13:7e:52:fe:45: 1b:13:ce:23:93:75:18:fb:a4:e6:64:03:33:26:37: 8c:e9:98:cc:0f:aa:98:cd:97:0a:3c:b7:b9:34:a4: 4b:dc:e5:aa:2c:ba:14:cb:09:90:ca:46:2e:99:9d: 27:29:1a:d3:dd:b3:59:07:bf:91:47:66:ac:b7:2d: 37:ba:bf:b0:a9:48:4f:bb:05:3f:7c:3c:d4:f8:0b: 24:be:9b:40:71:41:16:9d:be:af:3e:64:bf:18:12: 6c:aa:f4:f0:6e:c6:87:3d:54:b9:3c:7f:13:3c:87: 4c:d1:97:2d:8d:6e:a1:ac:e1:c9:d7:dd:dd:a1:df: 27:2e:93:3e:91:ba:9e:e4:bb:ca:aa:89:6e:d1:91: 1a:76:74:ae:8a:c2:da:06:26:b6:3a:21:65:5e:fb: 8c:ab:bc:ba:6e:9f:d9:ce:2a:d0:44:e2:8d:14:e3: b9:a5:7b:aa:a3:e2:9a:60:0e:a0:6a:5a:ba:45:e9: 3c:9f:0b:2c:2e:bc:bc:17:8b:15:ac:bb:ea:de:91: f3:7d:66:70:88:34:3c:9c:a6:fc:2e:ef:e3:7a:9b: 70:35:0a:e4:7c:b2:f2:62:ec:35:b4:5f:2b:8d:c8: 6a:60:7a:ba:f2:81:41:fe:d4:5d:be:71:04:b0:29: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/750824e4-669c-4a78-911c-087bf64a7f4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.148.176.0/23 104.250.224.0/22 136.175.232.0/22 139.64.128.0/22 206.28.180.0/22 207.174.44.0/22 IPv6: 2605:8c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a0:fd:b2:09:47:c4:dd:a2:1b:1e:bb:b4:e7:dd:18:10:3d: aa:82:e7:04:7d:6c:98:8b:25:0b:d0:ba:a7:fb:a6:83:b9:be: b2:1a:3f:ec:8e:68:05:62:fb:ce:c8:17:ac:55:56:9c:b8:36: 9c:44:10:c5:76:aa:de:ae:b8:bc:e9:18:32:2f:89:b7:cf:17: 29:04:00:28:b6:3c:4b:01:3c:c3:c1:e5:c7:9a:93:fa:59:48: 98:51:b3:b8:b4:d0:f7:3b:c1:2a:84:ca:bf:14:19:a8:59:39: 2c:e7:ff:11:46:0d:f7:ed:0e:19:6e:43:67:6d:72:e7:5c:4b: a3:22:f4:f4:64:81:13:86:68:f9:30:1a:d7:51:b2:fc:84:04: a5:0f:fd:6f:5e:7a:42:a8:1c:d7:2a:5c:58:5e:9a:05:52:fd: f9:d0:b3:d3:1c:4a:57:65:26:f2:58:b3:a6:71:70:ee:5d:5e: d9:b7:b1:88:cd:2d:83:f7:81:3f:4e:49:ff:6c:e3:0f:e0:f7: 29:e4:e2:46:8a:ad:ca:a2:ae:50:35:d9:77:fb:b7:b6:cf:10: c7:50:01:c8:75:9a:22:3b:c4:8f:fb:75:04:d5:2b:ec:82:51: cd:39:c0:7f:76:59:70:1f:06:fa:7f:94:8b:15:0f:76:f8:67: c7:7b:15:da -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWElVIcOOT/Xr+rkPsGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDMyODAwNDUzNFoXDTI3MDcwMTAwNDUzNFowLzEtMCsGA1UEAxMk NzUwODI0ZTQtNjY5Yy00YTc4LTkxMWMtMDg3YmY2NGE3ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSMRQnN/R/jUE35S/kUbE84jk3UY+6TmZAMz JjeM6ZjMD6qYzZcKPLe5NKRL3OWqLLoUywmQykYumZ0nKRrT3bNZB7+RR2asty03 ur+wqUhPuwU/fDzU+AskvptAcUEWnb6vPmS/GBJsqvTwbsaHPVS5PH8TPIdM0Zct jW6hrOHJ193dod8nLpM+kbqe5LvKqolu0ZEadnSuisLaBia2OiFlXvuMq7y6bp/Z zirQROKNFOO5pXuqo+KaYA6galq6Rek8nwssLry8F4sVrLvq3pHzfWZwiDQ8nKb8 Lu/jeptwNQrkfLLyYuw1tF8rjchqYHq68oFB/tRdvnEEsClCcQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFDhUWYiH2dZtpaUXS6sPEUblHE2YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 NTA4MjRlNC02NjljLTRhNzgtOTExYy0wODdiZjY0YTdmNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzc1MDgyNGU0LTY2OWMtNGE3OC05 MTFjLTA4N2JmNjRhN2Y0YS83NTA4MjRlNC02NjljLTRhNzgtOTExYy0wODdiZjY0 YTdmNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAEXlLADBAJo+uADBAKIr+gDBAKLQIADBALOHLQD BALPriwwDQQCAAIwBwMFACYFjEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACKD9sglHxN2iGx67tOfdGBA9 qoLnBH1smIslC9C6p/umg7m+sho/7I5oBWL7zsgXrFVWnLg2nEQQxXaq3q64vOkY Mi+Jt88XKQQAKLY8SwE8w8Hlx5qT+llImFGzuLTQ9zvBKoTKvxQZqFk5LOf/EUYN 9+0OGW5DZ21y51xLoyL09GSBE4Zo+TAa11Gy/IQEpQ/9b156Qqgc1ypcWF6aBVL9 +dCz0xxKV2Um8lizpnFw7l1e2bexiM0tg/eBP05J/2zjD+D3KeTiRoqtyqKuUDXZ d/u3ts8Qx1AByHWaIjvEj/t1BNUr7IJRzTnAf3ZZcB8G+n+UixUPdvhnx3sV2g== -----END CERTIFICATE-----Generated at Fri Apr 4 15:57:46 2025 by rpki-client