$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer File: a3049800-ff17-49a6-b029-ec908e1c7cb3.cer (raw, json) Hash identifier: 6pg+Ok2YN+WA1zXvMmIGj3uGZMqkROLz+fxt/pKzoa0= Subject key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848C413F8C40718AC3300593680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Feb 2025 01:45:34 +0000 Certificate not after: Mon 10 May 2027 00:45:34 +0000 Subordinate resources: AS: 20150 IP: 45.59.112.0/20 IP: 66.23.192.0/21 IP: 104.36.80.0/21 IP: 130.51.40.0/22 IP: 216.126.224.0/20 IP: 2604:4ac0::/32 IP: 2604:4cc0::/32 IP: 2604:4d40::/32 IP: 2604:4fc0::/32 IP: 2604:5040::/32 IP: 2604:50c0::/32 IP: 2604:6a40::/32 IP: 2605:7980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:13:f8:c4:07:18:ac:33:00:59:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 4 01:45:34 2025 GMT Not After : May 10 00:45:34 2027 GMT Subject: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:44:0e:b5:8d:9c:c7:1e:cb:7a:27:9d:31: 73:2b:bf:8e:98:26:dd:23:ca:ce:98:00:12:07:c9: 67:7e:88:a2:76:96:c6:66:a9:8e:09:e3:91:69:4e: 76:88:74:01:0f:3b:49:a4:f4:e4:87:5a:6a:52:da: fd:79:04:89:67:1c:19:30:81:ac:20:da:88:64:9c: 0c:86:d5:2f:d7:d2:d0:0d:24:02:03:35:55:08:b3: 57:d5:51:d7:26:ea:eb:12:72:00:23:af:26:99:9a: b0:7a:26:3e:ab:e6:c0:1b:26:b8:b8:76:00:68:40: 47:0f:e1:5b:ae:28:9f:0e:e4:fe:04:38:62:af:1e: d2:a9:02:f5:32:9e:99:51:21:34:e6:73:cb:52:13: fe:ea:61:7f:80:ac:6c:cf:c5:30:7a:ea:27:e4:cd: 13:e0:58:3d:80:5c:26:c2:65:6b:e2:6b:2d:71:05: b3:00:d3:d8:c3:09:90:79:2e:e5:a3:77:c8:f1:14: 45:79:dc:7d:ce:52:69:c0:a9:2a:e0:d6:56:13:6e: f2:be:02:93:f5:97:f0:5b:74:32:d7:ae:54:77:2d: 47:e2:ca:f5:ba:14:71:df:8c:8e:6d:50:bd:11:17: 41:dc:a8:7f:71:eb:9a:e4:f4:23:25:a5:c5:f0:d7: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 45.59.112.0/20 66.23.192.0/21 104.36.80.0/21 130.51.40.0/22 216.126.224.0/20 IPv6: 2604:4ac0::/32 2604:4cc0::/32 2604:4d40::/32 2604:4fc0::/32 2604:5040::/32 2604:50c0::/32 2604:6a40::/32 2605:7980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20150 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5a:f9:d6:c8:6a:b4:cd:c8:f0:84:14:fb:c6:9f:67:b4:bf: ec:f6:39:28:1b:83:b8:8d:de:d4:a9:55:98:9b:bc:b5:ab:30: 1d:a5:ff:20:ea:e7:b8:fc:6a:25:93:90:56:f4:7b:76:9c:2f: e6:98:12:ea:a7:a0:13:62:ae:b9:47:5f:56:bb:d1:13:49:53: ba:99:7c:e9:5c:b7:e3:c8:44:07:45:fe:3e:20:a0:df:6a:4b: 6d:93:b7:2c:3c:33:b8:5a:9f:30:7b:40:2c:90:e8:12:33:4b: 1c:e2:fb:1b:f3:bb:45:58:fe:30:ec:ca:90:cb:88:1e:c4:65: d7:02:ce:10:33:26:d2:e7:36:ac:2f:34:29:73:d2:75:32:3a: 4d:5d:af:d9:5a:73:cd:9f:7e:01:05:66:aa:2e:ef:d3:5c:0c: 16:da:65:ed:a7:95:a3:db:a6:ba:1b:12:94:a1:c4:4b:d1:67: 4c:50:3a:0e:de:20:7f:f8:c1:e6:51:03:a0:80:fa:ba:57:d8: 16:87:32:91:79:5e:55:f7:64:d6:22:93:af:f9:e7:64:57:ed: cb:b0:ee:31:6a:55:de:35:0a:33:4c:bc:2c:d4:c0:89:c8:e4: 4e:d9:ea:b4:b5:1c:82:de:68:d1:02:48:43:5a:a7:cc:33:fa: 2b:2c:4e:53 -----BEGIN CERTIFICATE----- MIIHYDCCBkigAwIBAgIUAQ0Mn0MoWEjEE/jEBxisMwBZNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIwNDAxNDUzNFoXDTI3MDUxMDAwNDUzNFowLzEtMCsGA1UEAxMk YTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eFEDrWNnMcey3onnTFzK7+OmCbdI8rOmAAS B8lnfoiidpbGZqmOCeORaU52iHQBDztJpPTkh1pqUtr9eQSJZxwZMIGsINqIZJwM htUv19LQDSQCAzVVCLNX1VHXJurrEnIAI68mmZqweiY+q+bAGya4uHYAaEBHD+Fb riifDuT+BDhirx7SqQL1Mp6ZUSE05nPLUhP+6mF/gKxsz8Uweuon5M0T4Fg9gFwm wmVr4mstcQWzANPYwwmQeS7lo3fI8RRFedx9zlJpwKkq4NZWE27yvgKT9ZfwW3Qy 165Udy1H4sr1uhRx34yObVC9ERdB3Kh/ceua5PQjJaXF8NffRwIDAQABo4IEcjCC BG4wHQYDVR0OBBYEFGgjyim9kaFJzpXmWrEPZrOFZ2zwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EzMDQ5ODAwLWZmMTctNDlhNi1i MDI5LWVjOTA4ZTFjN2NiMy9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUx YzdjYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwdwYIKwYBBQUH AQcBAf8EaDBmMCQEAgABMB4DBAQtO3ADBANCF8ADBANoJFADBAKCMygDBATYfuAw PgQCAAIwOAMFACYESsADBQAmBEzAAwUAJgRNQAMFACYET8ADBQAmBFBAAwUAJgRQ wAMFACYEakADBQAmBXmAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAk62MFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAE9a+dbIarTNyPCEFPvGn2e0v+z2OSgbg7iN3tSpVZibvLWrMB2l/yDq57j8 aiWTkFb0e3acL+aYEuqnoBNirrlHX1a70RNJU7qZfOlct+PIRAdF/j4goN9qS22T tyw8M7hanzB7QCyQ6BIzSxzi+xvzu0VY/jDsypDLiB7EZdcCzhAzJtLnNqwvNClz 0nUyOk1dr9lac82ffgEFZqou79NcDBbaZe2nlaPbprobEpShxEvRZ0xQOg7eIH/4 weZRA6CA+rpX2BaHMpF5XlX3ZNYik6/552RX7cuw7jFqVd41CjNMvCzUwInI5E7Z 6rS1HILeaNECSENap8wz+issTlM= -----END CERTIFICATE-----Generated at Fri Jun 13 13:02:40 2025 by rpki-client