$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer File: 084cdd3f-c178-4428-8992-9e1b2922de98.cer (raw, json) Hash identifier: Rr7/ouvhEOQRADl/xILOq/NuT2+HomvrtTW3f+wLhrw= Subject key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849E64D55BD81243CB012841C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 May 2025 00:45:33 +0000 Certificate not after: Sun 22 Aug 2027 00:45:33 +0000 Subordinate resources: IP: 72.1.32.0 -- 72.1.45.255 IP: 209.240.128.0/19 IP: 216.104.160.0/19 IP: 2606:1400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:4d:55:bd:81:24:3c:b0:12:84:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 19 00:45:33 2025 GMT Not After : Aug 22 00:45:33 2027 GMT Subject: CN=084cdd3f-c178-4428-8992-9e1b2922de98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:11:f6:04:81:9f:ac:a1:81:1d:38:ce:20: a5:bd:04:c3:e8:47:03:c9:3c:00:a0:a6:7f:27:e8: a3:39:d5:e7:ad:12:f2:aa:78:70:87:a9:eb:ce:60: dc:d4:ad:45:c3:bf:ee:bd:ea:42:99:9e:7c:59:f9: cc:fa:4a:97:00:b6:84:68:77:95:d0:36:a5:d5:24: ea:41:4a:3b:ad:aa:9e:10:63:39:2e:8b:79:d0:cb: 93:c6:54:81:b4:7b:17:1a:57:60:f6:99:dd:34:3d: e9:cc:dd:87:dd:b3:34:1a:83:a4:3e:48:26:78:23: 54:25:6e:13:46:86:86:8f:1b:98:50:f6:f9:83:dc: b8:7e:41:3b:e5:35:5d:53:68:0c:4d:7b:d8:49:fe: 80:93:c4:d8:14:99:5e:32:ea:84:22:63:fd:24:d1: 5f:2b:0c:13:06:38:57:7c:23:78:3a:35:63:87:2b: d3:73:3d:fc:04:da:f7:c4:49:04:69:fc:ca:a1:e9: bf:f3:86:93:0a:44:ef:1e:b5:3b:c6:50:23:11:81: 6e:b4:cf:cc:6b:da:e0:89:af:2c:5d:96:f4:18:e6: a3:15:94:15:2b:f9:73:fc:c0:19:83:56:4a:84:e1: 6e:7b:43:17:d5:a0:dc:63:31:e1:67:43:2e:11:41: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 72.1.32.0-72.1.45.255 209.240.128.0/19 216.104.160.0/19 IPv6: 2606:1400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:db:dc:fe:3b:67:4f:96:d8:45:19:bf:bb:04:ed:ef:31:cd: c3:f6:1f:83:b0:3b:8f:0c:64:c6:be:64:bb:81:34:ed:e6:69: e4:d6:11:9c:74:9c:f1:55:a5:34:cd:2e:4d:27:05:3e:55:78: f7:a5:38:51:7b:29:1e:16:a3:70:d2:29:60:94:d5:d1:c3:fd: e8:57:e1:e2:43:58:8a:d8:70:c4:7b:3b:7e:cb:04:cb:a9:41: 30:3e:f6:c2:b2:b1:9d:20:dc:6a:bf:b2:27:1b:ea:d6:5d:c8: aa:9a:9c:f3:2f:9f:59:b9:00:10:e1:36:7a:6c:01:f6:4e:c6: d9:42:ef:b8:12:e6:d7:6d:e0:c5:c6:44:5c:d0:7e:82:15:b9: 7d:22:ab:0f:51:01:ac:46:e3:1e:e1:6d:4a:1f:b0:c6:08:20: 2b:7c:0e:69:c7:5f:cb:f4:30:f7:5f:28:f6:de:66:ca:f6:5d: 5b:31:bb:13:89:2a:58:ee:26:de:25:6f:9f:d1:c2:a2:b5:e2: 71:5e:a1:40:ca:ca:6c:00:1e:db:4c:2b:aa:d1:37:d8:2d:c8: 64:43:19:8c:ea:21:37:6e:19:ef:79:fd:1e:7e:cc:0f:f7:7c: 73:5a:f9:c9:60:36:6d:91:44:2b:91:41:eb:0b:42:aa:05:54: 75:bf:e0:f7 -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEnmTVW9gSQ8sBKEHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUxOTAwNDUzM1oXDTI3MDgyMjAwNDUzM1owLzEtMCsGA1UEAxMk MDg0Y2RkM2YtYzE3OC00NDI4LTg5OTItOWUxYjI5MjJkZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYMR9gSBn6yhgR04ziClvQTD6EcDyTwAoKZ/ J+ijOdXnrRLyqnhwh6nrzmDc1K1Fw7/uvepCmZ58WfnM+kqXALaEaHeV0Dal1STq QUo7raqeEGM5Lot50MuTxlSBtHsXGldg9pndND3pzN2H3bM0GoOkPkgmeCNUJW4T RoaGjxuYUPb5g9y4fkE75TVdU2gMTXvYSf6Ak8TYFJleMuqEImP9JNFfKwwTBjhX fCN4OjVjhyvTcz38BNr3xEkEafzKoem/84aTCkTvHrU7xlAjEYFutM/Ma9rgia8s XZb0GOajFZQVK/lz/MAZg1ZKhOFue0MX1aDcYzHhZ0MuEUEsqwIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFGu6kmlqHbmMC/Hi2AHJt6GF7H5lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w ODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjkyMmRlOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzA4NGNkZDNmLWMxNzgtNDQyOC04 OTkyLTllMWIyOTIyZGU5OC8wODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjky MmRlOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMCAEAgABMBowDAMEBUgBIAMEAUgBLAMEBdHwgAMEBdhooDANBAIA AjAHAwUAJgYUADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBo29z+O2dPlthFGb+7BO3vMc3D9h+DsDuPDGTG vmS7gTTt5mnk1hGcdJzxVaU0zS5NJwU+VXj3pThReykeFqNw0ilglNXRw/3oV+Hi Q1iK2HDEezt+ywTLqUEwPvbCsrGdINxqv7InG+rWXciqmpzzL59ZuQAQ4TZ6bAH2 TsbZQu+4EubXbeDFxkRc0H6CFbl9IqsPUQGsRuMe4W1KH7DGCCArfA5px1/L9DD3 Xyj23mbK9l1bMbsTiSpY7ibeJW+f0cKiteJxXqFAyspsAB7bTCuq0TfYLchkQxmM 6iE3bhnvef0efswP93xzWvnJYDZtkUQrkUHrC0KqBVR1v+D3 -----END CERTIFICATE-----Generated at Sat Jun 14 18:44:26 2025 by rpki-client