$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer File: d51196d1-75e6-431b-8514-1f946ae21089.cer (raw, json) Hash identifier: t5Rjl1++vgAI0cFdSd3Sf7oMEwe0hs8uiTo9ubnszjg= Subject key identifier: B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848CC74061B5EB235A1593CD000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Feb 2025 01:45:33 +0000 Certificate not after: Thu 13 May 2027 00:45:33 +0000 Subordinate resources: AS: 6140 IP: 107.161.208.0/20 IP: 2602:ffd3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:74:06:1b:5e:b2:35:a1:59:3c:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 7 01:45:33 2025 GMT Not After : May 13 00:45:33 2027 GMT Subject: CN=d51196d1-75e6-431b-8514-1f946ae21089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:dc:60:1d:48:48:01:24:33:06:79:46:40: 94:85:1b:ab:5f:cb:28:c7:15:67:cb:50:ae:f0:1a: 73:32:e3:cf:cb:4c:bb:5b:17:d3:fb:bf:9a:2f:a1: f1:cb:86:1f:a1:00:0b:a2:c5:eb:df:08:fb:6e:fd: f3:b9:b8:b8:d8:9d:58:f9:16:8a:f7:ac:d1:d4:88: f4:5d:7c:6b:a5:85:50:22:36:50:20:c3:02:42:db: fa:b0:ba:08:1b:d8:51:f8:57:83:05:87:40:46:16: bc:f8:73:e2:c4:9f:33:e0:34:a9:0f:f3:27:9a:a1: 48:52:70:b6:1b:48:3f:cd:d7:a3:c1:62:a8:04:7f: 91:b0:65:f6:b4:0e:05:fe:f9:64:5e:68:bc:ed:e2: 2e:7d:89:74:5e:a8:70:b2:82:77:17:ab:f0:d3:b4: 2c:40:ed:d2:32:2b:61:14:81:e8:2b:39:29:9e:af: 92:9f:7e:dc:bb:47:8b:ee:ad:11:6e:a0:e1:db:eb: 91:31:65:56:f4:09:0a:e4:68:d8:1b:dc:b5:db:79: d5:84:46:cb:84:25:6d:65:4c:a1:2b:8f:eb:86:a8: c6:92:1c:4c:ed:79:5c:a5:c4:70:bd:ba:f5:ad:10: f1:ad:f1:d2:e1:f4:cb:c3:21:16:30:24:75:c3:0e: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 107.161.208.0/20 IPv6: 2602:ffd3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6140 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:13:eb:f1:08:07:de:30:df:14:e8:c3:41:7a:5c:e1:c2:9d: a9:6b:bf:79:85:4d:2e:02:5a:c7:5a:9d:47:3f:f4:99:87:20: 7a:b0:d6:e9:bf:1b:f9:72:e6:e4:ff:bd:b0:8e:e1:dc:13:20: 2d:38:b9:2c:2e:87:8d:40:25:49:a3:99:e2:6f:8c:9b:c8:04: 31:36:15:12:b6:87:11:e1:52:ee:8c:a8:f6:44:81:c3:95:87: ef:0c:d0:b5:7e:78:74:f0:76:c9:ed:67:72:8d:1c:cc:95:03: 71:5e:5b:be:d7:a5:cf:98:ff:8f:b3:12:76:35:f7:28:e1:d9: bb:06:30:83:f6:e2:89:1d:9f:89:51:37:1c:73:d6:cf:7b:3a: af:77:8c:f8:1b:1a:65:1a:ea:18:66:3e:53:ba:90:a8:c7:86: 52:0f:d5:ce:39:ab:61:2c:85:ac:17:8e:a5:77:fa:a3:c7:e3: 68:3c:19:eb:1e:a2:d7:08:12:e2:da:fd:be:e3:24:e9:c8:39: f6:f8:c6:09:36:47:b0:4e:77:09:a0:14:59:7d:91:04:26:3a: 19:eb:50:5b:f9:18:b0:17:c2:ee:f9:dd:34:81:11:1f:78:35: c9:90:f3:31:29:dc:21:38:a9:d3:64:bc:e1:c5:0b:27:61:39: 0c:93:ce:72 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjMdAYbXrI1oVk80AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIwNzAxNDUzM1oXDTI3MDUxMzAwNDUzM1owLzEtMCsGA1UEAxMk ZDUxMTk2ZDEtNzVlNi00MzFiLTg1MTQtMWY5NDZhZTIxMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+zcYB1ISAEkMwZ5RkCUhRurX8soxxVny1Cu 8BpzMuPPy0y7WxfT+7+aL6Hxy4YfoQALosXr3wj7bv3zubi42J1Y+RaK96zR1Ij0 XXxrpYVQIjZQIMMCQtv6sLoIG9hR+FeDBYdARha8+HPixJ8z4DSpD/MnmqFIUnC2 G0g/zdejwWKoBH+RsGX2tA4F/vlkXmi87eIufYl0XqhwsoJ3F6vw07QsQO3SMith FIHoKzkpnq+Sn37cu0eL7q0RbqDh2+uRMWVW9AkK5GjYG9y123nVhEbLhCVtZUyh K4/rhqjGkhxM7XlcpcRwvbr1rRDxrfHS4fTLwyEWMCR1ww6XwwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLQSZp9mCZfX30Og9vOWXfij3g2yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k NTExOTZkMS03NWU2LTQzMWItODUxNC0xZjk0NmFlMjEwODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Q1MTE5NmQxLTc1ZTYtNDMxYi04 NTE0LTFmOTQ2YWUyMTA4OS9kNTExOTZkMS03NWU2LTQzMWItODUxNC0xZjk0NmFl MjEwODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBARrodAwDgQCAAIwCAMGBCYC/9MAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAhf8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB8T6/EIB94w3xTow0F6XOHCnalr v3mFTS4CWsdanUc/9JmHIHqw1um/G/ly5uT/vbCO4dwTIC04uSwuh41AJUmjmeJv jJvIBDE2FRK2hxHhUu6MqPZEgcOVh+8M0LV+eHTwdsntZ3KNHMyVA3FeW77Xpc+Y /4+zEnY19yjh2bsGMIP24okdn4lRNxxz1s97Oq93jPgbGmUa6hhmPlO6kKjHhlIP 1c45q2EshawXjqV3+qPH42g8GeseotcIEuLa/b7jJOnIOfb4xgk2R7BOdwmgFFl9 kQQmOhnrUFv5GLAXwu753TSBER94NcmQ8zEp3CE4qdNkvOHFCydhOQyTznI= -----END CERTIFICATE-----Generated at Fri Apr 4 19:22:20 2025 by rpki-client