$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer File: 9bfe0eb0-0689-4c02-9a46-078ee028d631.cer (raw, json) Hash identifier: pPcC83qrcvkXPRgXZ+/yYp3w/9KYvC2rwRzrAyuHPz4= Subject key identifier: 17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858489E63BA0C76FE1F918C4C03C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Jan 2025 13:45:32 +0000 Certificate not after: Mon 26 Apr 2027 12:45:32 +0000 Subordinate resources: IP: 2607:fe78::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:63:ba:0c:76:fe:1f:91:8c:4c:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 21 13:45:32 2025 GMT Not After : Apr 26 12:45:32 2027 GMT Subject: CN=9bfe0eb0-0689-4c02-9a46-078ee028d631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:25:a8:e9:d7:5e:26:a1:2e:cf:50:5f:c5:e0: 03:f6:52:f8:59:80:c2:89:43:18:dc:ad:1b:d7:d0: a2:31:9e:3f:82:66:51:21:2c:2c:72:c6:43:2e:87: ef:ca:1a:6b:78:bd:34:fc:42:cd:12:6b:3f:79:16: e1:f4:fe:74:bc:ef:6e:53:ed:2c:0f:f2:58:1a:6c: d7:dd:c9:a5:50:07:2f:6d:df:11:c9:1e:77:88:24: 82:41:3a:61:0f:e4:97:6b:5a:c5:fe:07:52:e7:36: 38:a8:d3:81:f2:7c:be:54:83:71:7f:b3:e5:31:35: 91:ab:0f:bc:15:2c:59:34:53:ff:7f:37:71:c1:48: 92:d1:bc:c2:1f:7e:72:9f:c4:57:e5:c7:4c:5e:90: 4e:89:ea:47:15:28:fe:18:98:dd:42:57:82:47:ac: 67:40:97:97:56:5e:47:5d:ae:80:05:aa:c9:01:15: e0:9b:27:a1:43:d5:2e:3e:9a:b7:6d:1b:40:44:d9: dd:d2:c2:2b:b5:69:1b:8b:1e:3e:be:98:2d:e7:29: 99:86:a6:25:b3:ff:33:31:b1:cc:35:cb:dd:f5:29: 14:52:ab:07:40:de:3e:9e:e5:95:de:9d:23:1b:d0: 0c:16:7e:ad:72:8b:83:5e:bf:f1:7c:66:63:fe:34: 22:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv6: 2607:fe78::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:6c:45:a9:fc:7f:a9:4d:25:bc:5e:2d:ba:c6:e2:79:f2:6f: d1:f7:be:e7:14:d6:99:6b:16:26:47:c8:19:4e:a9:a4:d0:b7: b3:a0:65:4a:85:9d:0f:71:87:9a:41:c1:7a:4d:e8:c2:5a:e4: c0:0d:ce:ee:06:a7:89:11:f6:99:c2:b8:88:81:9b:66:b5:09: 83:40:ba:b5:b6:15:2e:39:a2:6d:ca:bf:4f:53:54:99:da:69: ac:ac:5f:57:80:67:77:ee:1d:7e:3a:d4:d4:f8:3c:07:a2:44: f2:df:3d:b9:2d:fa:7b:1c:99:03:ed:e7:27:25:a4:2c:0a:21: 3e:88:b3:a6:b2:e9:9c:a9:a0:62:0f:41:76:e2:65:f0:c7:5b: 4f:d2:78:88:da:70:f0:ca:38:f7:43:f4:96:2a:87:7b:87:e5: a6:a1:0e:af:fd:82:ea:3a:30:a6:cd:c9:52:31:f3:ab:c9:4e: 00:77:a7:60:65:d7:06:7d:79:c1:85:3c:bf:2c:0d:08:c8:55: af:be:2f:92:d9:ee:ae:5f:4b:db:f4:b5:7c:b3:b4:6b:5a:79: a7:02:94:56:18:6a:d8:28:d3:a3:e3:e9:cc:9c:c9:46:a0:7b: 40:36:19:74:4a:20:a3:ab:07:1a:6c:a2:a5:cb:b5:5c:ad:96: 5b:98:83:bf -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEieY7oMdv4fkYxMA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDEyMTEzNDUzMloXDTI3MDQyNjEyNDUzMlowLzEtMCsGA1UEAxMk OWJmZTBlYjAtMDY4OS00YzAyLTlhNDYtMDc4ZWUwMjhkNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyWo6ddeJqEuz1BfxeAD9lL4WYDCiUMY3K0b 19CiMZ4/gmZRISwscsZDLofvyhpreL00/ELNEms/eRbh9P50vO9uU+0sD/JYGmzX 3cmlUAcvbd8RyR53iCSCQTphD+SXa1rF/gdS5zY4qNOB8ny+VINxf7PlMTWRqw+8 FSxZNFP/fzdxwUiS0bzCH35yn8RX5cdMXpBOiepHFSj+GJjdQleCR6xnQJeXVl5H Xa6ABarJARXgmyehQ9UuPpq3bRtARNnd0sIrtWkbix4+vpgt5ymZhqYls/8zMbHM Ncvd9SkUUqsHQN4+nuWV3p0jG9AMFn6tcouDXr/xfGZj/jQi3wIDAQABo4IEADCC A/wwHQYDVR0OBBYEFBdi+wRoCZLf8a8Dj4HZI5ixKyWtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 YmZlMGViMC0wNjg5LTRjMDItOWE0Ni0wNzhlZTAyOGQ2MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzliZmUwZWIwLTA2ODktNGMwMi05 YTQ2LTA3OGVlMDI4ZDYzMS85YmZlMGViMC0wNjg5LTRjMDItOWE0Ni0wNzhlZTAy OGQ2MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB/54MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEFsRan8f6lNJbxeLbrG 4nnyb9H3vucU1plrFiZHyBlOqaTQt7OgZUqFnQ9xh5pBwXpN6MJa5MANzu4Gp4kR 9pnCuIiBm2a1CYNAurW2FS45om3Kv09TVJnaaaysX1eAZ3fuHX461NT4PAeiRPLf Pbkt+nscmQPt5yclpCwKIT6Is6ay6ZypoGIPQXbiZfDHW0/SeIjacPDKOPdD9JYq h3uH5aahDq/9guo6MKbNyVIx86vJTgB3p2Bl1wZ9ecGFPL8sDQjIVa++L5LZ7q5f S9v0tXyztGtaeacClFYYatgo06Pj6cycyUage0A2GXRKIKOrBxpsoqXLtVytlluY g78= -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:13 2025 by rpki-client