$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer File: 8a8a1a2d-c949-4896-93b9-71f917048e79.cer (raw, json) Hash identifier: tGpO38d/8lq47NdZoCiMu6Hy1jpo27UqZ+SoFEGRRhY= Subject key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584949F7051EC5AA8E9A112FB740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 00:45:33 +0000 Certificate not after: Sun 27 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 399804 IP: 66.187.4.0/22 IP: 158.51.124.0/22 IP: 2606:65c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:f7:05:1e:c5:aa:8e:9a:11:2f:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 24 00:45:33 2025 GMT Not After : Jun 27 00:45:33 2027 GMT Subject: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:e9:02:fd:d5:ad:72:fb:cf:14:a3:09:60: 70:f1:d6:fe:47:4f:0e:52:cb:87:6a:8f:6c:e9:ae: c0:4b:2b:a8:9a:06:d9:1e:8b:be:f4:4e:ed:f8:18: e1:7f:f7:2c:99:d2:c3:6f:8d:1c:72:11:3d:eb:89: 92:4f:6e:00:91:8d:cb:07:00:2c:cd:cd:ca:ab:52: 96:7e:5c:da:82:39:22:ee:be:97:5b:27:b8:53:a1: 06:a8:ce:72:e0:89:39:a2:12:63:67:b4:db:bf:d8: 7e:ed:55:e5:48:ed:81:00:01:86:be:3c:a0:24:fe: aa:ea:5e:b8:a9:11:b7:ab:71:fa:10:6c:49:8c:82: 06:42:4d:d9:f2:ed:72:5f:6d:fc:d8:a3:44:8d:ac: 5f:5c:1c:f0:0e:42:a9:7a:a3:36:55:53:93:2b:78: a6:2e:1d:ab:09:e7:08:c2:0d:b7:35:1b:38:c7:87: 4c:2f:5c:31:98:d3:7a:e5:0b:f0:a2:ed:86:de:43: ee:48:67:d3:e4:b0:66:8a:2d:0d:a8:02:ed:09:39: 84:0e:b7:bf:4d:a7:41:d6:11:59:1c:65:e2:72:02: 44:1e:7c:49:5d:c4:34:49:27:41:0e:a5:c0:c5:e8: 1b:e3:6c:9e:fe:93:ff:16:79:22:18:2c:67:7b:86: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.187.4.0/22 158.51.124.0/22 IPv6: 2606:65c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399804 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2c:74:c7:60:0a:d3:77:ec:a9:3b:f0:b0:fb:07:f1:22:f1: d4:a4:7e:20:49:c0:d3:65:ca:a9:df:8a:5e:de:fa:c6:42:9e: b2:0c:99:18:d8:48:99:c5:fd:4b:82:a7:16:f6:7e:e4:54:5a: c7:54:c6:dc:82:4f:10:b8:01:b8:69:74:b9:8c:36:78:54:f4: 53:96:ca:38:bd:65:5b:b8:40:f4:7e:49:a4:1b:6f:d0:02:f5: 4b:3e:c5:6b:3a:78:45:9a:b5:43:a0:3d:17:5f:33:03:58:37: 5c:6a:21:da:52:f4:63:cf:a4:e7:03:b8:74:a8:8a:36:03:5b: f1:50:26:92:b8:93:d6:d3:40:3e:4a:45:de:b1:fb:70:aa:a8: 69:79:c1:c7:b6:ec:73:b3:5d:8a:b5:90:58:2d:1d:e6:41:45: 63:16:ce:ef:57:58:e8:13:68:9e:d2:25:25:c2:69:72:1f:78: a1:64:71:c2:23:11:6e:bc:1d:20:c3:86:7e:b5:02:47:f7:7c: 00:4d:ab:73:93:94:de:ba:76:e1:84:6d:4b:5d:e9:e6:c8:f9: 2a:1b:bf:04:9c:67:0c:81:9d:0e:20:1d:39:22:6e:a3:07:58: 49:a0:96:bc:b4:59:6b:15:18:43:0e:a0:9d:23:1f:13:7a:b3: 3a:79:74:2a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWElJ9wUexaqOmhEvt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDMyNDAwNDUzM1oXDTI3MDYyNzAwNDUzM1owLzEtMCsGA1UEAxMk OGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZbpAv3VrXL7zxSjCWBw8db+R08OUsuHao9s 6a7ASyuomgbZHou+9E7t+Bjhf/csmdLDb40cchE964mST24AkY3LBwAszc3Kq1KW flzagjki7r6XWye4U6EGqM5y4Ik5ohJjZ7Tbv9h+7VXlSO2BAAGGvjygJP6q6l64 qRG3q3H6EGxJjIIGQk3Z8u1yX2382KNEjaxfXBzwDkKpeqM2VVOTK3imLh2rCecI wg23NRs4x4dML1wxmNN65Qvwou2G3kPuSGfT5LBmii0NqALtCTmEDre/TadB1hFZ HGXicgJEHnxJXcQ0SSdBDqXAxegb42ye/pP/FnkiGCxne4ZCmwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFMpl4nlEpZzKbxvGZbw3C41vuM/rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzhhOGExYTJkLWM5NDktNDg5Ni05 M2I5LTcxZjkxNzA0OGU3OS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcw NDhlNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJCuwQDBAKeM3wwDQQCAAIwBwMFACYGZcAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhm8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABQsdMdgCtN37Kk78LD7 B/Ei8dSkfiBJwNNlyqnfil7e+sZCnrIMmRjYSJnF/UuCpxb2fuRUWsdUxtyCTxC4 AbhpdLmMNnhU9FOWyji9ZVu4QPR+SaQbb9AC9Us+xWs6eEWatUOgPRdfMwNYN1xq IdpS9GPPpOcDuHSoijYDW/FQJpK4k9bTQD5KRd6x+3CqqGl5wce27HOzXYq1kFgt HeZBRWMWzu9XWOgTaJ7SJSXCaXIfeKFkccIjEW68HSDDhn61Akf3fABNq3OTlN66 duGEbUtd6ebI+SobvwScZwyBnQ4gHTkibqMHWEmglry0WWsVGEMOoJ0jHxN6szp5 dCo= -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:14 2025 by rpki-client