$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer File: 560b4c54-bd35-46e1-8698-aff50195e1b4.cer (raw, json) Hash identifier: 9G3kNebUlmBUDjkIQ1AcSw4jEYymbYK6B9uDuf0T6mY= Subject key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849F0C6D31BE9DD9B6731791780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 18:48:26 +0000 Certificate not after: Sun 07 Feb 2027 01:45:30 +0000 Subordinate resources: IP: 64.58.96.0/20 IP: 149.248.72.0/22 IP: 204.16.120.0/22 IP: 205.142.242.0/23 IP: 2607:6440::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:c6:d3:1b:e9:dd:9b:67:31:79:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 22 18:48:26 2025 GMT Not After : Feb 7 01:45:30 2027 GMT Subject: CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:45:33:a9:a2:d0:fa:1d:9b:e7:fe:c7:bc: 36:d6:61:25:b4:f8:7a:11:c5:e4:f8:a4:22:2e:c6: 24:b9:f2:27:ac:95:a8:18:bf:a5:16:98:14:6d:0c: 4f:b5:8c:55:d5:8b:68:5f:7e:3a:81:73:e6:3d:7a: ad:a5:96:7f:00:e0:00:b2:31:de:31:19:88:85:ba: ef:dd:d8:ca:98:91:60:38:69:97:4e:ba:61:47:f5: 30:98:a1:5b:e1:45:ed:ab:9c:00:6b:54:e9:56:ad: 78:7f:a9:52:67:e5:56:b1:44:0a:aa:2e:30:cc:3b: 7f:73:8e:68:fd:35:67:8c:de:bf:0a:dc:ef:fc:67: 2a:35:23:58:3c:03:34:12:23:39:d8:72:ac:90:a5: 70:7f:3b:d8:f3:1a:44:94:c6:bd:7f:1c:82:2d:f6: 86:51:6c:6d:b0:a0:cc:2d:d9:fa:ff:71:20:1a:cc: 5d:f7:39:47:5a:7b:17:4e:b1:00:5f:23:20:45:41: dd:18:b7:b8:4f:a2:d6:c3:56:54:c4:91:65:c1:c0: 7a:f4:83:26:f5:1d:ca:40:c3:a1:bf:4b:b8:2e:76: f8:9f:f4:55:c6:09:f5:7d:34:ff:a5:d5:27:01:6c: 42:75:e0:44:eb:f7:f9:6d:b5:8c:40:52:c9:7a:99: a4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 64.58.96.0/20 149.248.72.0/22 204.16.120.0/22 205.142.242.0/23 IPv6: 2607:6440::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:66:34:fc:0a:de:2e:72:6d:69:4d:8e:ca:25:4b:e5:12:09: 52:0a:ff:53:a5:c2:4b:f6:84:08:b3:03:b9:bd:81:d7:5f:d8: 65:b3:91:50:7b:2f:2d:e8:7f:87:69:94:c2:7d:60:b7:3b:66: 9a:41:d8:61:7b:be:14:85:b8:a9:4d:9c:10:72:65:74:f2:8f: 65:aa:1e:ab:a0:72:22:40:4b:12:dd:5f:a0:35:e8:85:17:bd: b6:e5:02:a8:22:73:6f:2e:bc:49:e4:98:06:10:41:19:e4:68: bb:d8:9a:29:87:17:bb:49:17:c8:1e:48:14:14:fa:13:14:53: d5:3e:f1:fd:af:3c:b2:5d:55:1a:79:31:bd:64:26:1a:78:0b: 13:a7:36:e5:4a:03:36:57:0c:de:6a:35:a6:e9:3a:c5:29:38: ae:ba:85:68:05:54:2d:7b:5f:c2:a8:95:d0:92:24:ec:76:1d: 48:9a:63:1b:1b:a5:a7:c9:62:7f:b4:20:0d:3e:04:87:00:ef: 3c:a6:6f:b5:8b:f4:ed:39:b3:27:ba:26:2d:b6:a3:73:dd:b7: 2a:88:55:40:4c:c6:68:c4:fe:4e:8d:04:26:79:53:28:2d:54: 21:45:16:85:e8:8e:20:05:c5:71:d8:18:2c:78:9d:09:8c:d1: 85:cc:62:62 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEnwxtMb6d2bZzF5F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDUyMjE4NDgyNloXDTI3MDIwNzAxNDUzMFowLzEtMCsGA1UEAxMk NTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVlMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6JFM6mi0Podm+f+x7w21mEltPh6EcXk+KQi LsYkufInrJWoGL+lFpgUbQxPtYxV1YtoX346gXPmPXqtpZZ/AOAAsjHeMRmIhbrv 3djKmJFgOGmXTrphR/UwmKFb4UXtq5wAa1TpVq14f6lSZ+VWsUQKqi4wzDt/c45o /TVnjN6/Ctzv/GcqNSNYPAM0EiM52HKskKVwfzvY8xpElMa9fxyCLfaGUWxtsKDM Ldn6/3EgGsxd9zlHWnsXTrEAXyMgRUHdGLe4T6LWw1ZUxJFlwcB69IMm9R3KQMOh v0u4Lnb4n/RVxgn1fTT/pdUnAWxCdeBE6/f5bbWMQFLJepmkWwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFOHzLN4cX+1MlZp4Dd76aXPelS/IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzU2MGI0YzU0LWJkMzUtNDZlMS04 Njk4LWFmZjUwMTk1ZTFiNC81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5 NWUxYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARAOmADBAKV+EgDBALMEHgDBAHNjvIwDQQCAAIw BwMFBCYHZEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAD2Y0/AreLnJtaU2OyiVL5RIJUgr/U6XCS/aECLMD ub2B11/YZbORUHsvLeh/h2mUwn1gtztmmkHYYXu+FIW4qU2cEHJldPKPZaoeq6By IkBLEt1foDXohRe9tuUCqCJzby68SeSYBhBBGeRou9iaKYcXu0kXyB5IFBT6ExRT 1T7x/a88sl1VGnkxvWQmGngLE6c25UoDNlcM3mo1puk6xSk4rrqFaAVULXtfwqiV 0JIk7HYdSJpjGxulp8lif7QgDT4EhwDvPKZvtYv07TmzJ7omLbajc923KohVQEzG aMT+To0EJnlTKC1UIUUWheiOIAXFcdgYLHidCYzRhcxiYg== -----END CERTIFICATE-----Generated at Sun Jun 15 10:12:02 2025 by rpki-client