$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer File: e7a6341b-5a5e-4ac0-a760-5a54190af913.cer (raw, json) Hash identifier: OMzgM7Vqk0+Jt8vi0imYnutMT/5PmRrNezHDTy4jqgQ= Subject key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858488B0885F37BC850259D22FBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jan 2025 15:21:25 +0000 Certificate not after: Wed 16 Sep 2026 00:45:20 +0000 Subordinate resources: IP: 64.112.124.0/22 IP: 206.168.212.0/22 IP: 207.2.120.0/22 IP: 2602:fbdf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8b:08:85:f3:7b:c8:50:25:9d:22:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 14 15:21:25 2025 GMT Not After : Sep 16 00:45:20 2026 GMT Subject: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9d:da:8f:00:7f:9f:55:ca:2b:a3:8a:a1:6c: 27:80:dc:4a:84:1d:ba:4f:24:28:e8:ce:40:9f:87: d6:9f:29:a5:4c:33:4c:c8:57:46:8b:48:d5:6a:b5: cd:31:40:ce:21:bf:18:f9:aa:88:11:60:9a:8f:a8: 1d:65:c3:31:32:02:6a:c6:fd:ad:01:87:55:92:99: af:41:b9:ea:ba:f3:12:ce:3d:a6:f1:c0:23:33:a8: ea:99:fa:be:71:56:83:96:1e:05:1e:95:61:80:3b: e3:91:37:89:b3:76:a6:a1:cc:81:2d:01:e4:6c:4d: 07:f9:ad:be:9b:f0:b7:e3:9f:22:85:f5:c7:0f:83: f9:ac:df:b0:e6:0f:97:f6:95:d6:7a:20:0a:4f:24: 6c:3b:54:74:05:6e:d7:1c:71:8a:c1:cc:ee:46:1e: 6b:b1:19:2f:99:3e:27:53:4f:aa:fb:98:32:88:96: 58:ce:3c:5e:e3:b1:4b:09:5c:64:e8:48:06:5c:1c: cd:aa:1e:1e:e3:c9:e0:ce:d0:24:bc:f2:4a:34:ea: 1d:85:64:96:4c:a4:ec:2f:b8:26:23:5b:9e:50:f2: 85:9e:c9:c3:10:25:32:e2:7a:b1:d6:94:d8:6a:22: 87:4c:dc:6b:d5:9a:59:95:27:af:29:a0:f3:4c:85: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.112.124.0/22 206.168.212.0/22 207.2.120.0/22 IPv6: 2602:fbdf::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:68:48:a7:56:c4:9b:2e:c6:80:9e:44:ba:7f:36:31:ed:7c: df:2e:a9:15:1c:40:35:fd:b8:e3:54:4d:53:4f:07:3d:8f:94: fc:62:60:3d:01:a8:6e:5d:71:1b:43:c6:dc:fa:54:ce:1d:90: 80:b2:b9:7e:73:d9:a2:97:07:26:aa:3c:5f:38:f6:80:a1:6f: 11:6f:95:2b:c9:f1:e2:e9:ec:01:9b:88:a4:25:91:0f:03:fb: 38:dd:6f:f5:26:4c:7f:df:87:55:56:1b:7a:2b:41:a8:8b:8c: fd:e1:67:c9:8b:b4:94:14:04:b9:68:42:12:2c:f9:72:5f:73: 07:3d:e8:a4:06:72:6b:e3:d6:18:1b:06:e5:64:dc:b9:fe:d3: 24:53:6e:1a:58:f4:13:b5:14:81:06:e9:a8:f1:bf:01:d2:2d: 98:37:80:d7:5d:3f:30:28:56:9e:d1:06:32:34:14:79:f8:53: 49:51:ac:8c:3f:09:da:8f:23:f7:b5:51:b4:45:33:bd:f1:42: 23:a3:64:90:73:90:30:60:c8:ab:6e:1d:68:87:a0:fc:4f:79: 11:b1:36:3f:48:2e:9c:42:c8:50:6f:78:a5:12:35:93:0b:05: 07:f6:5e:97:d5:c4:77:18:2a:23:cc:8f:16:d0:71:80:a4:ad: f1:2c:05:5b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEiLCIXze8hQJZ0i+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDExNDE1MjEyNVoXDTI2MDkxNjAwNDUyMFowLzEtMCsGA1UEAxMk ZTdhNjM0MWItNWE1ZS00YWMwLWE3NjAtNWE1NDE5MGFmOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ3ajwB/n1XKK6OKoWwngNxKhB26TyQo6M5A n4fWnymlTDNMyFdGi0jVarXNMUDOIb8Y+aqIEWCaj6gdZcMxMgJqxv2tAYdVkpmv QbnquvMSzj2m8cAjM6jqmfq+cVaDlh4FHpVhgDvjkTeJs3amocyBLQHkbE0H+a2+ m/C3458ihfXHD4P5rN+w5g+X9pXWeiAKTyRsO1R0BW7XHHGKwczuRh5rsRkvmT4n U0+q+5gyiJZYzjxe47FLCVxk6EgGXBzNqh4e48ngztAkvPJKNOodhWSWTKTsL7gm I1ueUPKFnsnDECUy4nqx1pTYaiKHTNxr1ZpZlSevKaDzTIUm8QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDGirePDlQ3Gl0EeL4yx/Gu3gyXCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l N2E2MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0MTkwYWY5MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2U3YTYzNDFiLTVhNWUtNGFjMC1h NzYwLTVhNTQxOTBhZjkxMy9lN2E2MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0MTkw YWY5MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAJAcHwDBALOqNQDBALPAngwDgQCAAIwCAMGBCYC +98AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHNoSKdWxJsuxoCeRLp/NjHtfN8uqRUcQDX9uONUTVNPBz2P lPxiYD0BqG5dcRtDxtz6VM4dkICyuX5z2aKXByaqPF849oChbxFvlSvJ8eLp7AGb iKQlkQ8D+zjdb/UmTH/fh1VWG3orQaiLjP3hZ8mLtJQUBLloQhIs+XJfcwc96KQG cmvj1hgbBuVk3Ln+0yRTbhpY9BO1FIEG6ajxvwHSLZg3gNddPzAoVp7RBjI0FHn4 U0lRrIw/CdqPI/e1UbRFM73xQiOjZJBzkDBgyKtuHWiHoPxPeRGxNj9ILpxCyFBv eKUSNZMLBQf2XpfVxHcYKiPMjxbQcYCkrfEsBVs= -----END CERTIFICATE-----Generated at Fri Apr 4 16:03:49 2025 by rpki-client