$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer File: 04b45e42-c2e7-4254-9ecb-472a7693a730.cer (raw, json) Hash identifier: 4qX/V4H5rSYIPt6nNAjWo/8IoZqnmaNOLaP4dBdIWXg= Subject key identifier: DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849A6179AC145517124A5D4A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Apr 2025 00:45:34 +0000 Certificate not after: Fri 30 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 397377 IP: 63.246.143.0/24 IP: 161.199.88.0/24 IP: 207.229.66.0/24 IP: 208.74.67.0/24 IP: 2605:51c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:17:9a:c1:45:51:71:24:a5:d4:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 26 00:45:34 2025 GMT Not After : Jul 30 00:45:34 2027 GMT Subject: CN=04b45e42-c2e7-4254-9ecb-472a7693a730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:0e:37:7d:06:85:fc:49:54:7c:c9:24:85: d5:67:5b:1a:0d:37:82:8d:12:4b:79:66:ac:9c:0d: 6f:f7:81:88:0d:75:88:53:ed:5c:f9:49:cb:86:4b: 46:0c:61:97:45:55:95:11:ba:b9:86:30:95:9e:a2: 4d:ff:4b:94:9f:24:2a:6b:25:d8:35:8f:7f:53:13: f3:09:57:6f:df:a4:3b:34:8c:a5:d6:be:cf:50:84: 6f:23:44:05:e7:a5:a6:ce:6b:8d:77:ed:09:e8:27: d2:d7:50:f2:45:34:0a:91:12:8f:f5:3d:ff:1a:6d: 2e:e0:4c:90:5a:44:cb:81:6a:59:8e:60:b6:60:ea: 76:ce:6c:ba:2e:94:37:48:80:1e:bc:d8:6c:dd:79: b2:1c:66:8a:30:4d:b4:29:3b:ec:73:a7:2b:89:e5: 30:60:1f:5b:a2:2f:ba:c0:9d:ab:57:3c:8a:81:62: e3:32:6c:45:cd:a1:0f:a1:60:10:2e:c6:16:f6:b4: 72:e7:ec:bc:61:e8:f4:bc:c1:38:ee:cc:a4:f0:cf: e9:d0:27:fb:f8:28:02:7e:f4:c1:ac:11:84:c1:14: 3d:6b:8b:c7:ea:d6:e3:6c:32:3a:61:42:bf:16:51: 22:d9:f8:db:25:f6:4c:f4:df:21:47:1d:58:f6:cc: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 63.246.143.0/24 161.199.88.0/24 207.229.66.0/24 208.74.67.0/24 IPv6: 2605:51c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397377 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:6a:51:bc:e0:d1:57:ff:5a:1e:fd:72:71:cb:08:8e:b5:01: 2b:33:c2:3b:35:ae:eb:bc:d9:eb:fc:24:23:3b:d2:cb:b2:e4: 38:a6:5a:d2:22:25:97:14:d4:ce:5e:36:e2:20:d4:fd:23:ca: 37:d8:fc:a2:16:50:66:40:28:9f:36:49:7c:a2:34:1a:e4:70: 25:79:46:65:82:41:d6:d7:58:cc:3e:e0:14:b6:30:ad:ab:34: 99:80:b7:65:34:79:62:16:02:06:55:80:e6:c3:56:c6:36:9b: e6:86:bc:76:d8:5e:3d:35:48:20:ef:79:7a:ef:5d:e6:34:de: 21:48:84:1b:39:39:19:26:6b:88:73:84:01:81:6b:2d:c8:51: 39:40:dd:1b:c8:23:10:4f:14:c1:70:22:32:3c:52:70:9b:61: 04:34:44:ef:6e:81:f1:35:12:5e:52:1e:2b:75:a4:8d:75:c9: f0:f7:5d:62:8c:47:12:bc:63:dd:c4:b1:fa:a3:69:ac:7f:df: aa:3d:76:75:28:1b:c8:b9:30:a6:f8:32:5e:2c:80:c0:df:cd: 80:5d:1d:81:e7:c6:9b:69:cd:1d:81:48:3f:31:7e:57:bb:99: b4:60:72:b4:c2:6c:83:37:e3:39:08:3c:9c:d3:48:50:e7:9b: ab:05:3b:3e -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEmmF5rBRVFxJKXUpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQyNjAwNDUzNFoXDTI3MDczMDAwNDUzNFowLzEtMCsGA1UEAxMk MDRiNDVlNDItYzJlNy00MjU0LTllY2ItNDcyYTc2OTNhNzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx94ON30GhfxJVHzJJIXVZ1saDTeCjRJLeWas nA1v94GIDXWIU+1c+UnLhktGDGGXRVWVEbq5hjCVnqJN/0uUnyQqayXYNY9/UxPz CVdv36Q7NIyl1r7PUIRvI0QF56WmzmuNd+0J6CfS11DyRTQKkRKP9T3/Gm0u4EyQ WkTLgWpZjmC2YOp2zmy6LpQ3SIAevNhs3XmyHGaKME20KTvsc6crieUwYB9boi+6 wJ2rVzyKgWLjMmxFzaEPoWAQLsYW9rRy5+y8Yej0vME47syk8M/p0Cf7+CgCfvTB rBGEwRQ9a4vH6tbjbDI6YUK/FlEi2fjbJfZM9N8hRx1Y9swxfQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFN9Qs5h5vjfAg1SPy9380kRqUcjOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w NGI0NWU0Mi1jMmU3LTQyNTQtOWVjYi00NzJhNzY5M2E3MzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzA0YjQ1ZTQyLWMyZTctNDI1NC05 ZWNiLTQ3MmE3NjkzYTczMC8wNGI0NWU0Mi1jMmU3LTQyNTQtOWVjYi00NzJhNzY5 M2E3MzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAA/9o8DBAChx1gDBADP5UIDBADQSkMwDQQCAAIw BwMFACYFUcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhBBMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJZq Ubzg0Vf/Wh79cnHLCI61ASszwjs1ruu82ev8JCM70suy5DimWtIiJZcU1M5eNuIg 1P0jyjfY/KIWUGZAKJ82SXyiNBrkcCV5RmWCQdbXWMw+4BS2MK2rNJmAt2U0eWIW AgZVgObDVsY2m+aGvHbYXj01SCDveXrvXeY03iFIhBs5ORkma4hzhAGBay3IUTlA 3RvIIxBPFMFwIjI8UnCbYQQ0RO9ugfE1El5SHit1pI11yfD3XWKMRxK8Y93Esfqj aax/36o9dnUoG8i5MKb4Ml4sgMDfzYBdHYHnxptpzR2BSD8xfle7mbRgcrTCbIM3 4zkIPJzTSFDnm6sFOz4= -----END CERTIFICATE-----Generated at Mon Apr 28 07:52:24 2025 by rpki-client