$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer File: 161143c9-c030-4270-91a4-41e54bbb2357.cer (raw, json) Hash identifier: SKn7IrivlDRAyjP/ayCD1kpqrDYfZbxkbyUxylcbrH0= Subject key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848F38998F28BDC37D282087FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Feb 2025 01:45:33 +0000 Certificate not after: Thu 27 May 2027 00:45:33 +0000 Subordinate resources: IP: 198.245.245.0 -- 198.245.246.255 IP: 199.230.0.0 -- 199.230.9.255 IP: 205.174.0.0/20 IP: 206.209.64.0 -- 206.209.75.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f3:89:98:f2:8b:dc:37:d2:82:08:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 21 01:45:33 2025 GMT Not After : May 27 00:45:33 2027 GMT Subject: CN=161143c9-c030-4270-91a4-41e54bbb2357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:a5:4e:25:2e:29:ab:b1:5d:7d:c1:76:0c: 7c:e3:27:9e:67:d1:c0:a6:0b:62:1b:a1:c6:c6:bd: a6:ac:9a:39:73:fa:17:74:11:89:d6:3a:f8:11:bb: 7f:81:b9:c3:81:a0:ba:bf:1f:6e:47:36:78:2d:e4: 20:c0:11:88:12:f6:4f:c0:5a:9f:3d:a4:2a:e6:7a: 6f:0b:c1:2a:a5:57:f5:11:29:ae:e4:e2:82:18:f7: 71:db:8e:6f:ba:fe:e9:ac:f7:3b:34:82:77:ff:d2: d3:f6:78:2a:72:2d:e4:a0:e6:56:9f:60:6f:0f:1e: 05:a7:7d:62:a8:9b:f4:0a:05:1b:99:fc:7d:a0:da: 3e:b7:28:f5:dd:45:f4:0c:10:b8:ca:68:e4:b0:cc: 85:57:50:81:f8:38:0c:28:56:6e:b2:8a:b7:57:0f: 1b:1c:f1:f9:30:ae:fb:01:1f:31:6b:44:84:cb:ad: 7c:ad:6b:d0:e8:3d:ad:1d:0d:f5:b4:47:a3:c2:67: 1f:89:a4:5c:a5:10:08:d4:be:3c:58:0e:d4:4b:fc: eb:b1:71:c6:13:33:f7:5e:c2:6c:db:dc:b0:f8:1e: f4:72:a4:45:4b:94:10:95:4d:2c:23:32:65:2b:14: 7a:07:30:4b:6c:6b:fa:27:1d:44:9a:d6:a6:c3:04: 44:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.245.245.0-198.245.246.255 199.230.0.0-199.230.9.255 205.174.0.0/20 206.209.64.0-206.209.75.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:11:36:db:04:c2:c6:b8:1d:9e:8a:2e:37:84:67:c9:e3:fe: 1f:23:99:6e:eb:51:b3:b8:12:6c:4a:f1:70:14:c5:65:f4:90: f5:a3:5c:ee:89:ef:62:61:f7:73:82:c7:76:1a:19:94:0e:11: 0d:6a:64:ca:35:b7:a9:b5:1a:d2:39:81:ab:0e:56:b6:dc:83: 29:b8:e4:1e:ec:6e:18:b4:e5:7e:6a:7e:1f:07:b1:31:a3:00: 8f:1a:c4:f5:bb:59:9d:a3:f3:3b:1d:1c:e8:29:34:9c:a7:62: 51:52:4d:01:3c:e2:e2:cf:b3:67:e8:de:1f:1a:40:91:6b:d9: ba:0a:18:4a:61:44:72:73:8c:31:d2:d1:6b:f3:0e:79:41:f2: 92:f5:81:31:9a:a3:db:92:b5:57:cb:50:41:bd:ff:38:0e:35: ae:db:1b:29:e9:3c:f9:ee:cf:0f:5e:55:51:3b:45:da:bb:08: 00:4d:03:a3:65:bd:7a:94:e6:e3:4d:7e:45:ee:38:88:e5:0d: c1:94:09:8a:25:a0:49:86:a4:05:68:80:f5:d1:5c:89:f0:82: 5b:85:65:a5:aa:4b:54:c9:44:08:6c:5d:84:7a:53:87:6a:ae: 82:37:bc:34:d4:ad:fc:ad:61:29:fa:2b:3e:62:83:6b:40:1e: e6:e8:27:b8 -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWEjziZjyi9w30oIIf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIyMTAxNDUzM1oXDTI3MDUyNzAwNDUzM1owLzEtMCsGA1UEAxMk MTYxMTQzYzktYzAzMC00MjcwLTkxYTQtNDFlNTRiYmIyMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSilTiUuKauxXX3Bdgx84yeeZ9HApgtiG6HG xr2mrJo5c/oXdBGJ1jr4Ebt/gbnDgaC6vx9uRzZ4LeQgwBGIEvZPwFqfPaQq5npv C8EqpVf1ESmu5OKCGPdx245vuv7prPc7NIJ3/9LT9ngqci3koOZWn2BvDx4Fp31i qJv0CgUbmfx9oNo+tyj13UX0DBC4ymjksMyFV1CB+DgMKFZusoq3Vw8bHPH5MK77 AR8xa0SEy618rWvQ6D2tHQ31tEejwmcfiaRcpRAI1L48WA7US/zrsXHGEzP3XsJs 29yw+B70cqRFS5QQlU0sIzJlKxR6BzBLbGv6Jx1EmtamwwREgwIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFD8fke5RR5QEDmgCVcdrwip02c5sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x NjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJiYjIzNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE2MTE0M2M5LWMwMzAtNDI3MC05 MWE0LTQxZTU0YmJiMjM1Ny8xNjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJi YjIzNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MDUEAgABMC8wDAMEAMb19QMEAMb19jALAwMBx+YDBAHH5ggDBATN rgAwDAMEBs7RQAMEAs7RSDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLETbbBMLGuB2eii43hGfJ4/4fI5lu 61GzuBJsSvFwFMVl9JD1o1zuie9iYfdzgsd2GhmUDhENamTKNbeptRrSOYGrDla2 3IMpuOQe7G4YtOV+an4fB7ExowCPGsT1u1mdo/M7HRzoKTScp2JRUk0BPOLiz7Nn 6N4fGkCRa9m6ChhKYURyc4wx0tFr8w55QfKS9YExmqPbkrVXy1BBvf84DjWu2xsp 6Tz57s8PXlVRO0XauwgATQOjZb16lObjTX5F7jiI5Q3BlAmKJaBJhqQFaID10VyJ 8IJbhWWlqktUyUQIbF2EelOHaq6CN7w01K38rWEp+is+YoNrQB7m6Ce4 -----END CERTIFICATE-----Generated at Sun Apr 27 23:02:47 2025 by rpki-client