$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer File: 14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer (raw, json) Hash identifier: oHF1rMqYzV46pXKga+zuAjbkm7wFT2OenyTYwxEN+kg= Subject key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584976A1FA3091DB4DA6F0B7BC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 00:45:34 +0000 Certificate not after: Tue 13 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 11368 AS: 12276 AS: 40271 AS: 63055 IP: 149.112.5.0/24 IP: 149.112.115.0/24 IP: 192.33.255.0/24 IP: 206.197.187.0/24 IP: 2001:504:30::/48 IP: 2620:8b:e000::/48 IP: 2620:11a:b000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a1:fa:30:91:db:4d:a6:f0:b7:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 9 00:45:34 2025 GMT Not After : Jul 13 00:45:34 2027 GMT Subject: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:77:cf:be:19:37:5b:29:4d:42:7e:e5:64: bc:21:0a:74:8e:1a:be:a7:e2:66:d5:30:f9:c8:c9: 2a:74:cd:2a:92:13:3f:fa:8e:44:02:c5:c8:10:30: 84:ce:c0:46:6e:74:b6:52:20:18:44:59:0b:89:15: 3a:df:87:5a:4d:33:17:8f:27:e3:41:64:cc:76:11: 44:ff:37:dd:b7:fa:4b:a2:71:55:03:c3:ab:87:81: d9:1e:88:a6:4f:76:f8:5d:59:96:50:ec:10:cd:e1: 82:a1:5f:ab:8e:97:4d:8d:e2:9e:d5:93:39:14:94: 6c:99:10:0e:b6:ea:ed:38:6f:77:c2:ec:a9:29:36: 2d:9f:13:b5:ce:12:b3:28:09:a9:9d:7a:3d:f7:01: 55:56:a2:0c:d4:6a:a7:e5:5d:10:4a:fd:c2:95:4d: d9:f3:07:ed:ed:13:df:d8:66:ff:cf:a9:be:7e:60: 6d:71:01:a4:f1:d7:c3:11:88:4b:df:9f:0a:73:81: c0:f1:54:7d:c8:62:ba:70:a5:94:d6:a6:cf:1b:ca: 3f:89:5e:68:88:88:36:1e:cb:d2:66:8b:70:ed:82: 00:96:c7:7d:ca:8d:b7:7f:d8:b6:3f:02:20:74:43: d6:06:ac:a9:47:bf:b2:9a:e6:71:50:55:dc:f6:8c: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 149.112.5.0/24 149.112.115.0/24 192.33.255.0/24 206.197.187.0/24 IPv6: 2001:504:30::/48 2620:8b:e000::/48 2620:11a:b000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11368 12276 40271 63055 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:17:7f:e2:98:4b:c9:32:80:19:08:dd:75:b3:f6:81:e6:95: e8:ad:ec:3d:14:33:04:17:fb:26:38:c7:a1:36:d9:e7:32:45: 91:72:55:dd:57:45:6c:36:ca:bb:dc:06:b5:04:47:8c:56:30: de:67:a2:bb:a5:77:0c:dd:d8:cf:96:ed:6e:62:64:86:48:4d: 1e:85:f0:4d:2d:31:58:26:81:77:4b:c9:c8:af:60:5b:de:97: 95:8d:8d:74:68:33:d6:1b:90:dd:87:fe:b1:eb:23:f6:08:80: 64:a6:8d:0b:b9:c7:4b:f8:70:1c:c6:05:d3:82:50:53:91:21: d7:af:e2:6f:02:1f:10:97:86:c1:70:24:26:0f:aa:74:50:55: 8e:5a:fb:ae:c6:4c:08:62:7e:43:17:9e:f9:19:0f:2a:01:69: 98:30:2e:5f:05:75:83:0b:96:26:1d:64:31:b5:cc:c1:4b:0a: da:23:04:6a:c7:8e:ef:fa:c6:43:74:6e:47:79:4e:50:e2:6b: 44:9a:85:b1:43:d4:cd:8b:34:5d:c0:0e:98:c7:5c:70:c7:1d: 93:7a:82:c1:81:be:be:01:17:6b:88:aa:a0:92:28:d3:e6:ef: 44:a7:b5:c2:8a:c4:36:c7:81:13:28:97:75:5f:ae:93:b6:05: de:bd:d8:b7 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUAQ0Mn0MoWEl2ofowkdtNpvC3vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQwOTAwNDUzNFoXDTI3MDcxMzAwNDUzNFowLzEtMCsGA1UEAxMk MTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2NmNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtF3z74ZN1spTUJ+5WS8IQp0jhq+p+Jm1TD5 yMkqdM0qkhM/+o5EAsXIEDCEzsBGbnS2UiAYRFkLiRU634daTTMXjyfjQWTMdhFE /zfdt/pLonFVA8Orh4HZHoimT3b4XVmWUOwQzeGCoV+rjpdNjeKe1ZM5FJRsmRAO turtOG93wuypKTYtnxO1zhKzKAmpnXo99wFVVqIM1Gqn5V0QSv3ClU3Z8wft7RPf 2Gb/z6m+fmBtcQGk8dfDEYhL358Kc4HA8VR9yGK6cKWU1qbPG8o/iV5oiIg2HsvS Zotw7YIAlsd9yo23f9i2PwIgdEPWBqypR7+ymuZxUFXc9owXbQIDAQABo4IEXTCC BFkwHQYDVR0OBBYEFP36X9OCyVrHgeaysFS0ydHwHLU8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x NGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE0YzllMGNlLTBmMTItNGJjOC05 ODljLTVkMzMyYTdjZjUyMi8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3 Y2Y1MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMB4EAgABMBgDBACVcAUDBACVcHMDBADAIf8DBADOxbswIQQCAAIw GwMHACABBQQAMAMHACYgAIvgAAMHBCYgARqwADAnBggrBgEFBQcBCAEB/wQYMBag FDASAgIsaAICL/QCAwCdTwIDAPZPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABIXf+KYS8kygBkI3XWz9oHm leit7D0UMwQX+yY4x6E22ecyRZFyVd1XRWw2yrvcBrUER4xWMN5noruldwzd2M+W 7W5iZIZITR6F8E0tMVgmgXdLycivYFvel5WNjXRoM9YbkN2H/rHrI/YIgGSmjQu5 x0v4cBzGBdOCUFORIdev4m8CHxCXhsFwJCYPqnRQVY5a+67GTAhifkMXnvkZDyoB aZgwLl8FdYMLliYdZDG1zMFLCtojBGrHju/6xkN0bkd5TlDia0SahbFD1M2LNF3A DpjHXHDHHZN6gsGBvr4BF2uIqqCSKNPm70SntcKKxDbHgRMol3VfrpO2Bd692Lc= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:19 2025 by rpki-client