$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer File: 60a936c7-4a19-44a9-b75d-cc22c274db26.cer (raw, json) Hash identifier: 8kHiV1PyqjPqAVWEMMNg2TLPQp1avX3cORf/hRRmtPs= Subject key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848E2C97E09C5B7C316724A7820 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Feb 2025 01:45:33 +0000 Certificate not after: Fri 21 May 2027 00:45:33 +0000 Subordinate resources: AS: 18875 IP: 64.66.16.0/20 IP: 66.97.180.0/22 IP: 66.234.16.0/20 IP: 162.211.116.0/22 IP: 192.153.186.0/24 IP: 216.20.208.0/20 IP: 2607:d880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:c9:7e:09:c5:b7:c3:16:72:4a:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 15 01:45:33 2025 GMT Not After : May 21 00:45:33 2027 GMT Subject: CN=60a936c7-4a19-44a9-b75d-cc22c274db26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bf:32:92:0e:7d:ce:5d:f7:c3:84:a6:3a:8e: 2c:ff:42:9b:ac:5a:1e:00:56:03:1e:a4:23:dc:f1: 4e:16:73:2e:5d:39:fa:15:99:8c:d7:02:7d:e4:9d: db:96:9e:b3:fc:21:15:e1:a6:28:43:98:11:ac:52: 1d:bc:fe:60:f0:96:9b:01:bc:de:b3:44:81:04:5a: a0:cf:ff:2b:d9:21:1d:0a:86:90:09:9e:b1:86:b6: 67:5b:af:51:0d:6c:f3:ea:98:c9:2e:b2:ca:c8:a5: 8a:a7:50:3d:c3:61:11:c4:39:84:50:6c:3f:17:a4: 05:cd:ea:f4:6e:a7:0f:da:35:0d:a6:9e:6e:d2:c5: 58:89:85:2e:56:56:c8:79:a1:47:7d:85:f3:04:d0: fc:b1:d0:23:bc:3b:01:86:99:70:59:5d:e1:48:1f: 5b:61:34:05:1f:73:a1:a7:cb:79:fe:83:e6:53:e2: 2e:4b:09:6a:16:18:a5:58:4e:eb:83:fe:9e:84:1a: 81:5e:41:39:82:31:6c:86:d4:e7:12:8f:8d:3d:6a: 5f:11:9e:f4:fb:e3:fe:ba:ea:ef:cd:be:24:7e:47: 9b:72:bd:da:6b:09:ee:ab:82:df:64:54:c7:02:07: c9:61:39:c4:af:f2:b4:25:29:94:cb:c8:0b:96:6f: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.66.16.0/20 66.97.180.0/22 66.234.16.0/20 162.211.116.0/22 192.153.186.0/24 216.20.208.0/20 IPv6: 2607:d880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18875 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:12:aa:af:fc:6f:c0:2f:54:b4:7c:93:4a:d5:fd:2c:18:33: ad:fe:b1:29:25:7d:67:93:e3:71:6a:b8:e2:6e:2c:8d:98:18: 6e:ad:60:06:87:81:47:df:35:63:8e:61:b7:95:59:4d:a9:ef: 14:be:1b:25:6e:ae:65:c7:ae:b5:7c:1f:69:1d:95:f0:65:12: dc:e0:32:77:eb:5d:c3:df:69:b8:ce:10:74:37:8f:c5:bd:9e: aa:57:6b:7d:24:db:05:b9:17:69:be:82:75:e7:3f:94:17:8e: 4e:e1:b6:cc:c2:af:35:8c:8a:f6:6e:30:0a:b8:95:53:af:2d: a4:0b:e1:88:36:dc:a5:87:57:9f:e7:2b:83:95:cf:0e:a1:e8: 04:3f:6c:2c:dd:35:c6:61:3f:d9:37:07:de:2b:c4:13:1e:04: 8d:54:72:a4:63:d6:41:78:36:bd:50:40:15:31:e7:0f:b6:29: 36:c0:0c:9f:d4:17:b8:ee:fb:a7:85:9c:6c:07:af:fb:04:cd: f5:93:9d:69:06:d5:6c:ce:b7:b5:41:c0:53:ba:78:47:86:69: b6:4a:28:6f:7d:57:a7:1b:77:2f:f6:1d:a8:ad:78:c1:d7:51: 2f:e7:7a:b5:8a:6c:8e:0d:ab:83:d5:39:9e:51:16:b1:c4:46: a3:29:0a:62 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEjiyX4JxbfDFnJKeCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIxNTAxNDUzM1oXDTI3MDUyMTAwNDUzM1owLzEtMCsGA1UEAxMk NjBhOTM2YzctNGExOS00NGE5LWI3NWQtY2MyMmMyNzRkYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL8ykg59zl33w4SmOo4s/0KbrFoeAFYDHqQj 3PFOFnMuXTn6FZmM1wJ95J3blp6z/CEV4aYoQ5gRrFIdvP5g8JabAbzes0SBBFqg z/8r2SEdCoaQCZ6xhrZnW69RDWzz6pjJLrLKyKWKp1A9w2ERxDmEUGw/F6QFzer0 bqcP2jUNpp5u0sVYiYUuVlbIeaFHfYXzBND8sdAjvDsBhplwWV3hSB9bYTQFH3Oh p8t5/oPmU+IuSwlqFhilWE7rg/6ehBqBXkE5gjFshtTnEo+NPWpfEZ70++P+uurv zb4kfkebcr3aawnuq4LfZFTHAgfJYTnEr/K0JSmUy8gLlm+fMQIDAQABo4IERzCC BEMwHQYDVR0OBBYEFF7BsfpJzr+62FoM3iphLDvucjPhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82 MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3NGRiMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzYwYTkzNmM3LTRhMTktNDRhOS1i NzVkLWNjMjJjMjc0ZGIyNi82MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3 NGRiMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARAQhADBAJCYbQDBARC6hADBAKi03QDBADAmboD BATYFNAwDQQCAAIwBwMFACYH2IAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICSbsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqRKqr/xvwC9UtHyTStX9LBgzrf6xKSV9Z5PjcWq44m4sjZgYbq1g BoeBR981Y45ht5VZTanvFL4bJW6uZceutXwfaR2V8GUS3OAyd+tdw99puM4QdDeP xb2eqldrfSTbBbkXab6Cdec/lBeOTuG2zMKvNYyK9m4wCriVU68tpAvhiDbcpYdX n+crg5XPDqHoBD9sLN01xmE/2TcH3ivEEx4EjVRypGPWQXg2vVBAFTHnD7YpNsAM n9QXuO77p4WcbAev+wTN9ZOdaQbVbM63tUHAU7p4R4Zptkoob31Xpxt3L/YdqK14 wddRL+d6tYpsjg2rg9U5nlEWscRGoykKYg== -----END CERTIFICATE-----Generated at Mon Apr 28 10:04:23 2025 by rpki-client