$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523.cer File: 1b7151e5-64cf-4efa-968e-47796f2f7523.cer (raw, json) Hash identifier: 13Z31nEcuBrDxKJzVFbkNh7nwVyLMY2ETjhipWmDlFo= Subject key identifier: CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858499AECDD2043D64662CA385B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Apr 2025 00:45:33 +0000 Certificate not after: Mon 26 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 16995 IP: 104.218.84.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:ec:dd:20:43:d6:46:62:ca:38:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 22 00:45:33 2025 GMT Not After : Jul 26 00:45:33 2027 GMT Subject: CN=1b7151e5-64cf-4efa-968e-47796f2f7523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:c9:d8:bd:4d:11:89:74:f8:ad:cc:c2:87: 9a:cc:33:8b:61:94:fb:6e:71:40:d0:f1:25:0a:9c: c6:0a:5c:e0:65:49:18:7a:95:e4:39:c0:b2:c5:5d: 47:be:aa:53:ad:5d:d5:a6:a3:50:e4:41:74:31:84: f2:75:a6:f8:b8:7a:f8:4f:fe:48:02:49:0f:fe:17: a9:e5:96:8e:5e:bb:41:24:04:ea:ce:3d:a3:ba:a0: 5d:59:00:1d:a3:1a:a2:21:42:16:c1:8f:84:b3:71: cc:53:b1:f6:c4:cc:db:a0:3c:12:02:0c:11:55:a6: 8c:9c:b0:ce:13:00:72:7c:30:a1:a9:a4:6e:50:fa: e2:9d:20:c9:89:75:40:3f:d6:ad:40:61:51:76:95: 0b:0b:2d:cb:a4:87:89:72:ef:82:1f:eb:31:95:b5: ed:8a:8d:67:7d:44:92:ba:83:2f:f7:45:d9:8d:fe: bc:24:cb:19:f0:c3:5d:ce:19:75:8f:1a:c7:11:23: 37:15:f5:ff:ca:32:e4:1b:2b:84:46:ab:7e:3e:df: 72:29:d3:77:54:ea:b5:1b:51:56:a7:83:03:d9:5a: 2b:32:32:3b:c4:55:54:29:5c:2d:49:bd:48:fc:95: 36:8b:50:c3:fa:61:93:03:20:ef:e5:20:06:41:d2: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:18:2C:24:A5:DF:87:16:2C:E1:A2:FD:5E:B0:55:E0:7A:CE:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b7151e5-64cf-4efa-968e-47796f2f7523/1b7151e5-64cf-4efa-968e-47796f2f7523.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 104.218.84.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16995 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:30:08:d1:3e:f9:56:1a:84:96:48:2e:80:c6:d2:a5:3c:b9: a5:ab:30:dc:ce:91:c3:e9:97:12:e2:48:87:0f:bd:fc:13:e9: 0b:ba:b8:99:f8:d1:99:ab:31:66:24:c6:e4:84:3e:a6:fa:3f: 00:6a:77:8a:b8:f4:5a:c3:16:6c:ff:28:a0:19:77:bf:7c:75: 8f:e7:9e:90:e0:0f:19:a3:2c:c2:9c:6f:79:49:81:67:d4:d7: 10:11:e0:87:cc:6a:10:7c:80:d0:a4:cc:05:d9:cf:42:e9:2b: 27:f0:2e:30:65:2f:a7:4c:63:ca:d7:16:5b:17:9f:97:d9:0a: 3d:40:0c:f2:e4:f3:e4:d7:49:3d:b9:6c:db:a0:ae:33:69:40: 0c:bc:24:f2:3b:4b:62:84:d0:d6:98:0d:9f:7a:96:b8:77:fa: 4b:2f:aa:99:c0:27:c7:81:47:61:c9:33:64:39:d4:de:8a:7c: 1c:62:43:58:7c:fa:46:11:5e:1d:f1:ff:3b:3c:2d:3a:3f:de: 6c:67:0d:3b:87:c7:e7:24:6e:9b:a0:a0:cb:07:f9:79:8d:e1: 7f:b7:0b:bf:48:04:42:7f:37:a7:c8:7b:07:0a:5d:f7:88:ef: 4c:f8:5d:05:ce:47:6a:b0:4c:bd:7c:b5:b1:84:4a:03:69:49: d4:41:c0:56 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEma7N0gQ9ZGYso4W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQyMjAwNDUzM1oXDTI3MDcyNjAwNDUzM1owLzEtMCsGA1UEAxMk MWI3MTUxZTUtNjRjZi00ZWZhLTk2OGUtNDc3OTZmMmY3NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWjJ2L1NEYl0+K3MwoeazDOLYZT7bnFA0PEl CpzGClzgZUkYepXkOcCyxV1HvqpTrV3VpqNQ5EF0MYTydab4uHr4T/5IAkkP/hep 5ZaOXrtBJATqzj2juqBdWQAdoxqiIUIWwY+Es3HMU7H2xMzboDwSAgwRVaaMnLDO EwByfDChqaRuUPrinSDJiXVAP9atQGFRdpULCy3LpIeJcu+CH+sxlbXtio1nfUSS uoMv90XZjf68JMsZ8MNdzhl1jxrHESM3FfX/yjLkGyuERqt+Pt9yKdN3VOq1G1FW p4MD2VorMjI7xFVUKVwtSb1I/JU2i1DD+mGTAyDv5SAGQdKSHQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFM7KGCwkpd+HFizhov1esFXges64MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x YjcxNTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5NmYyZjc1MjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFiNzE1MWU1LTY0Y2YtNGVmYS05 NjhlLTQ3Nzk2ZjJmNzUyMy8xYjcxNTFlNS02NGNmLTRlZmEtOTY4ZS00Nzc5NmYy Zjc1MjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJo2lQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC QmMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAcTAI0T75VhqElkgugMbSpTy5pasw3M6Rw+mXEuJIhw+9/BPp C7q4mfjRmasxZiTG5IQ+pvo/AGp3irj0WsMWbP8ooBl3v3x1j+eekOAPGaMswpxv eUmBZ9TXEBHgh8xqEHyA0KTMBdnPQukrJ/AuMGUvp0xjytcWWxefl9kKPUAM8uTz 5NdJPbls26CuM2lADLwk8jtLYoTQ1pgNn3qWuHf6Sy+qmcAnx4FHYckzZDnU3op8 HGJDWHz6RhFeHfH/OzwtOj/ebGcNO4fH5yRum6Cgywf5eY3hf7cLv0gEQn83p8h7 Bwpd94jvTPhdBc5HarBMvXy1sYRKA2lJ1EHAVg== -----END CERTIFICATE-----Generated at Sun Apr 27 10:04:33 2025 by rpki-client