$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer File: 3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer (raw, json) Hash identifier: 4nBNDBDgslN5aKXzx0/irgLHR0zzSjdgcZi3IhkZPL8= Subject key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849D58D3CE0EBCFCA0EDFD94C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 May 2025 00:45:34 +0000 Certificate not after: Mon 16 Aug 2027 00:45:34 +0000 Subordinate resources: IP: 64.33.224.0/19 IP: 66.115.192.0/18 IP: 66.128.160.0/19 IP: 66.231.0.0/19 IP: 208.53.192.0/18 IP: 209.151.176.0/20 IP: 216.106.192.0/18 IP: 216.249.192.0/18 IP: 2607:fc00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:8d:3c:e0:eb:cf:ca:0e:df:d9:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 13 00:45:34 2025 GMT Not After : Aug 16 00:45:34 2027 GMT Subject: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:3c:92:20:c2:8e:df:7e:99:83:8c:c0:7c: db:17:a3:2d:00:0f:4b:09:02:b7:0c:aa:e8:20:c3: 31:6d:e4:b4:28:a4:3a:89:8f:29:ec:7f:9e:8a:8c: 63:3c:a3:3d:8e:3a:4a:9b:ce:0c:4f:25:45:27:fd: 30:4f:d3:2f:57:e0:7e:3f:44:92:8a:e6:18:31:09: 46:5f:21:8f:be:b6:50:4f:d2:62:c7:ee:cb:24:43: 46:c4:46:c2:46:65:f5:0f:43:d1:76:8b:6f:0c:a6: 40:53:36:51:54:46:81:8e:6d:e1:fe:9a:65:37:79: e9:d2:15:64:60:d3:15:13:a3:f0:92:21:dc:53:ca: e5:0a:01:aa:7c:97:62:a0:ac:62:98:31:e0:74:a2: 27:ae:66:c6:d9:29:84:98:74:5e:b8:45:51:c1:28: fd:8d:e0:90:74:1a:11:71:1a:ea:48:b5:dd:a5:79: 7f:04:8f:51:b2:d7:a7:36:4d:86:f8:cc:9d:c6:96: 18:ee:6c:f5:d0:68:d0:63:d6:ff:14:e2:ad:0a:87: 81:e1:ec:7c:7b:a9:06:51:d2:a4:5b:13:61:95:c7: 89:a3:fb:d7:d6:aa:ed:3f:18:29:1e:3b:9f:5e:11: db:b3:4f:e5:02:f5:e8:43:a1:8f:6d:12:5c:9a:26: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/19 66.115.192.0/18 66.128.160.0/19 66.231.0.0/19 208.53.192.0/18 209.151.176.0/20 216.106.192.0/18 216.249.192.0/18 IPv6: 2607:fc00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:99:3f:5b:34:a2:07:a5:03:a5:13:7a:ef:9d:37:30:42:d4: 42:a5:71:69:9d:61:fe:8e:d1:90:e6:70:3a:3a:0e:e6:f0:94: 84:5f:3e:b5:1f:fa:bb:dd:7f:f5:b6:69:a5:1f:d0:44:e0:63: eb:be:cf:a1:9b:5a:b7:96:3a:f8:bd:f1:d3:aa:9b:02:3e:81: 53:40:85:8c:39:59:bc:2c:82:d1:4e:3d:44:fc:f2:a6:90:bc: 09:e3:48:bc:01:64:e9:9a:98:93:bd:7d:6f:a5:95:a2:16:c5: c5:fe:e4:4a:34:97:28:54:86:ec:2c:e4:82:15:ae:39:53:ea: bd:45:f0:5b:6a:0b:4f:e2:0d:22:51:39:51:d1:4d:55:fb:0c: 6b:92:25:b8:bb:36:64:a1:f3:89:41:1c:b4:99:c0:f4:03:8f: f9:b0:a5:02:e9:61:b5:77:43:21:d2:f9:1a:27:be:0b:4e:82: 7d:de:f4:e1:ca:b0:d7:d6:7a:a5:9b:42:b3:4d:87:67:c1:57: 85:59:57:f3:e9:bf:d4:e3:0b:b9:6e:e7:5c:87:57:0a:52:f1: 64:6a:6c:bb:37:ea:22:0d:9a:a9:4a:6e:5e:8c:2c:dc:91:45: 0d:b6:39:50:47:94:70:89:09:d0:bc:84:a1:be:c7:66:2b:8a: e9:7b:52:0f -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWEnVjTzg68/KDt/ZTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUxMzAwNDUzNFoXDTI3MDgxNjAwNDUzNFowLzEtMCsGA1UEAxMk M2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GE8kiDCjt9+mYOMwHzbF6MtAA9LCQK3DKro IMMxbeS0KKQ6iY8p7H+eioxjPKM9jjpKm84MTyVFJ/0wT9MvV+B+P0SSiuYYMQlG XyGPvrZQT9Jix+7LJENGxEbCRmX1D0PRdotvDKZAUzZRVEaBjm3h/pplN3np0hVk YNMVE6PwkiHcU8rlCgGqfJdioKximDHgdKInrmbG2SmEmHReuEVRwSj9jeCQdBoR cRrqSLXdpXl/BI9RstenNk2G+MydxpYY7mz10GjQY9b/FOKtCoeB4ex8e6kGUdKk WxNhlceJo/vX1qrtPxgpHjufXhHbs0/lAvXoQ6GPbRJcmiYMlwIDAQABo4IEODCC BDQwHQYDVR0OBBYEFNzJCDZV525bpbBnoeZg0yOpYUQgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z ZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzNkN2ZiMWMyLWYzODctNDgyZC1h NmZlLWRjNWE4NDRmODVlZi8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0 Zjg1ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAVAIeADBAZCc8ADBAVCgKADBAVC5wADBAbQNcAD BATRl7ADBAbYasADBAbY+cAwDQQCAAIwBwMFACYH/AAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVpk/WzSi B6UDpRN67503MELUQqVxaZ1h/o7RkOZwOjoO5vCUhF8+tR/6u91/9bZppR/QROBj 677PoZtat5Y6+L3x06qbAj6BU0CFjDlZvCyC0U49RPzyppC8CeNIvAFk6ZqYk719 b6WVohbFxf7kSjSXKFSG7CzkghWuOVPqvUXwW2oLT+INIlE5UdFNVfsMa5IluLs2 ZKHziUEctJnA9AOP+bClAulhtXdDIdL5Gie+C06Cfd704cqw19Z6pZtCs02HZ8FX hVlX8+m/1OMLuW7nXIdXClLxZGpsuzfqIg2aqUpuXows3JFFDbY5UEeUcIkJ0LyE ob7HZiuK6XtSDw== -----END CERTIFICATE-----Generated at Sun Jun 15 11:56:24 2025 by rpki-client