$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer File: 8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer (raw, json) Hash identifier: Vx/y7foAdpKU5Uvc3aC40nMd/p3uBCGyYHS0LumksoA= Subject key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848EDF43AA3DE45F18636A59020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 01:45:33 +0000 Certificate not after: Tue 25 May 2027 00:45:33 +0000 Subordinate resources: AS: 204 AS: 574 AS: 1206 -- 1207 AS: 5050 IP: 128.182.0.0/16 IP: 147.72.0.0/15 IP: 192.70.221.0 -- 192.70.223.255 IP: 192.88.114.0/23 IP: 192.101.139.0 -- 192.101.140.255 IP: 192.231.242.0 -- 192.231.244.255 IP: 198.206.16.0/20 IP: 204.194.24.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:f4:3a:a3:de:45:f1:86:36:a5:90:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 19 01:45:33 2025 GMT Not After : May 25 00:45:33 2027 GMT Subject: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:79:c4:c2:1d:36:95:b1:ca:ee:57:09:e9: 89:83:dc:7d:cc:1e:46:db:80:2a:f5:14:4d:62:5f: aa:0f:47:58:0a:f8:fe:92:32:c2:d3:59:ce:d7:7b: f0:79:9a:72:d5:3c:e7:26:e6:61:23:34:48:8b:c7: 99:86:91:be:32:78:b0:d8:96:26:5e:39:1d:8f:57: d3:91:9e:14:70:7f:f3:b1:ff:54:69:03:76:f3:ee: 09:cb:a8:4d:99:e5:ea:78:b8:11:29:8f:1c:93:5c: 26:d9:ce:23:47:93:95:31:12:78:35:c8:44:d7:3e: b8:c9:bc:3a:6c:f5:c1:73:20:45:05:72:55:cb:bd: 32:b5:45:a1:85:f0:f1:60:0f:81:f1:fa:4a:17:f8: f7:65:b5:21:8a:db:95:14:81:9c:05:b0:dd:ab:98: 5f:ca:8b:d0:4b:c1:b6:75:b8:07:75:3d:51:80:86: 51:fd:25:44:3a:2c:53:1a:1d:65:c8:08:9b:58:e8: d3:85:22:dc:17:70:ba:f4:7f:39:6a:d0:4b:52:0d: 6c:d3:46:b1:91:0c:cd:a4:45:25:8e:14:c3:fb:f5: 9e:38:79:5e:94:5c:39:4c:e7:f1:47:5b:c8:68:e6: d1:37:b7:19:54:e9:88:6f:ae:f4:1a:09:2e:84:e4: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 128.182.0.0/16 147.72.0.0/15 192.70.221.0-192.70.223.255 192.88.114.0/23 192.101.139.0-192.101.140.255 192.231.242.0-192.231.244.255 198.206.16.0/20 204.194.24.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204 574 1206-1207 5050 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2d:9d:65:91:32:ff:fd:ef:51:36:5f:3b:5c:f6:0b:94:37: b0:ff:32:4e:5f:bd:68:53:58:ac:7c:e0:ab:db:b8:cc:56:e8: a2:c7:1d:32:81:58:41:4f:08:59:c4:fc:a3:ff:c9:32:a7:ff: 8d:4d:bf:cc:cf:09:f0:77:1d:d8:6a:db:08:8c:23:f1:1e:48: ea:a9:63:dc:e1:d4:7a:09:a3:88:66:30:a8:35:13:94:0b:f6: 1a:9a:98:07:55:e2:24:bc:d4:23:f1:a7:c5:81:5e:0e:28:bc: 95:93:4f:cc:4b:d3:43:05:d5:5a:04:0b:74:e8:dc:ed:d3:a9: 60:36:9f:5d:2f:6d:de:83:8e:66:62:8c:6c:6d:51:77:64:a7: 73:b5:c1:0b:f7:8f:c0:47:7b:84:7d:19:6c:90:2a:a1:86:d0: a5:1d:4c:c1:20:1f:d9:af:1d:57:99:cd:c0:82:05:62:f5:60: 79:72:3c:72:3e:99:ad:98:ec:e2:25:9f:3d:b1:6f:63:1d:2a: 64:8e:cb:ad:4a:40:46:67:e9:ef:bc:26:4e:43:cf:3e:21:2f: 5b:17:9c:39:b6:3d:cd:46:7d:7f:0f:9e:eb:aa:3f:a7:04:f5: 4b:14:c9:26:73:cb:fb:ae:78:c4:18:45:22:cc:24:4d:42:40: d1:0d:82:13 -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWEjt9Dqj3kXxhjalkCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIxOTAxNDUzM1oXDTI3MDUyNTAwNDUzM1owLzEtMCsGA1UEAxMk OGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMzMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvt5xMIdNpWxyu5XCemJg9x9zB5G24Aq9RRN Yl+qD0dYCvj+kjLC01nO13vweZpy1TznJuZhIzRIi8eZhpG+Mniw2JYmXjkdj1fT kZ4UcH/zsf9UaQN28+4Jy6hNmeXqeLgRKY8ck1wm2c4jR5OVMRJ4NchE1z64ybw6 bPXBcyBFBXJVy70ytUWhhfDxYA+B8fpKF/j3ZbUhituVFIGcBbDdq5hfyovQS8G2 dbgHdT1RgIZR/SVEOixTGh1lyAibWOjThSLcF3C69H85atBLUg1s00axkQzNpEUl jhTD+/WeOHlelFw5TOfxR1vIaObRN7cZVOmIb670GgkuhORg7QIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFMXQvtiz8RZsiJEbIAf8ha52uR4pMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzhhZDhhYjNlLTQ5NWItNDllMi1i NDlkLWRlZDAwZjIzMzBkMi84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYy MzMwZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwXwYIKwYBBQUH AQcBAf8EUDBOMEwEAgABMEYDAwCAtgMDAZNIMAwDBADARt0DBAXARsADBAHAWHIw DAMEAMBliwMEAMBljDAMAwQBwOfyAwQAwOf0AwQExs4QAwQCzMIYMCsGCCsGAQUF BwEIAQH/BBwwGqAYMBYCAgDMAgICPjAIAgIEtgICBLcCAhO6MFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAEt nWWRMv/971E2Xztc9guUN7D/Mk5fvWhTWKx84KvbuMxW6KLHHTKBWEFPCFnE/KP/ yTKn/41Nv8zPCfB3Hdhq2wiMI/EeSOqpY9zh1HoJo4hmMKg1E5QL9hqamAdV4iS8 1CPxp8WBXg4ovJWTT8xL00MF1VoEC3To3O3TqWA2n10vbd6DjmZijGxtUXdkp3O1 wQv3j8BHe4R9GWyQKqGG0KUdTMEgH9mvHVeZzcCCBWL1YHlyPHI+ma2Y7OIlnz2x b2MdKmSOy61KQEZn6e+8Jk5Dzz4hL1sXnDm2Pc1GfX8PnuuqP6cE9UsUySZzy/uu eMQYRSLMJE1CQNENghM= -----END CERTIFICATE-----Generated at Fri Apr 4 15:59:26 2025 by rpki-client