$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer File: 45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer (raw, json) Hash identifier: qBCWFM9ccQxeI9mRFZJWFJp07n5Cq+FKC3MzfbJ+opA= Subject key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849D2C28C9265FEBEF53F3A4D88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 May 2025 00:45:34 +0000 Certificate not after: Sun 15 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 3737 IP: 204.186.0.0/16 IP: 209.50.128.0/19 IP: 209.173.0.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:c2:8c:92:65:fe:be:f5:3f:3a:4d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 12 00:45:34 2025 GMT Not After : Aug 15 00:45:34 2027 GMT Subject: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:a2:03:91:ed:9e:3d:ee:04:1e:c0:4a:88: e5:7e:a4:20:3a:a0:dc:14:af:3e:25:94:84:65:c5: f4:1a:11:31:60:f1:19:9c:4c:a9:16:a9:7a:12:60: 3e:4f:d5:d7:58:54:1b:65:c6:90:a4:73:c4:da:10: 2d:05:cd:53:56:fc:72:5a:82:1b:eb:17:2a:77:f7: b5:b0:7e:32:48:a3:bd:a7:1e:83:00:0d:7d:c1:0b: 2d:59:5d:1a:b2:db:98:be:75:18:77:94:d5:e4:d9: a8:ff:44:5a:b7:b4:82:32:8b:4c:28:d2:94:cd:02: 91:46:fb:78:89:3f:80:1d:f5:ef:92:17:30:89:cb: b8:1d:3f:e0:e9:a8:91:7d:a5:51:bc:3a:08:11:ac: 92:71:2d:d7:89:48:ad:12:2d:28:df:fc:eb:ce:80: 31:33:a4:15:00:e2:38:1a:c1:d0:18:3c:1e:86:23: 42:63:e9:00:3a:e7:90:3e:8a:01:94:78:46:84:d9: c8:9a:73:85:c8:3c:82:35:c1:ef:6b:85:1f:23:8e: 21:f2:41:85:21:65:ec:16:3e:6b:2f:96:ad:74:15: d2:ac:ac:a8:69:a0:dc:5d:8b:42:16:37:be:35:21: f0:4f:82:77:73:ea:c9:be:be:67:72:cf:85:f1:d5: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.186.0.0/16 209.50.128.0/19 209.173.0.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3737 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d4:1b:85:12:1d:15:83:50:99:d7:d0:59:03:93:34:96:df: 5d:03:b0:d3:e5:e1:24:56:b1:a9:63:f1:7d:11:90:a3:3f:fe: d2:14:72:df:e1:0d:13:a9:46:7e:c0:5b:26:8b:fb:a4:61:1b: 60:aa:39:35:92:9e:2e:42:b2:79:69:3f:c4:e0:e4:c3:36:6e: b8:21:44:28:a1:44:0e:ef:83:35:a2:23:b6:22:78:4c:5d:1e: 16:56:c7:ca:f4:ac:c0:fd:16:4b:61:dd:4f:67:d4:3f:60:44: d8:9c:b0:64:88:d9:ee:42:e9:24:cc:1c:d5:15:f8:6c:8a:c2: 03:85:34:a8:35:ec:44:5c:ef:61:6c:72:6c:db:3d:f0:26:99: 25:d8:6d:3a:42:89:77:62:2e:61:fb:af:f8:a0:03:b7:41:a5: 0d:9e:68:d7:f4:b6:bd:b1:5b:08:e7:bf:83:5b:51:23:d3:2b: 5f:4b:ea:53:e4:a3:a1:8e:89:2d:dd:da:72:bb:08:76:ca:7f: 03:42:66:c2:fe:67:a2:5d:5c:3c:ce:7c:95:a9:6a:a4:5d:8a: 11:f3:13:ce:7c:ce:dc:fd:52:f5:fa:10:5d:32:7f:4a:84:a0: dc:c5:55:18:b1:2b:eb:f6:27:70:19:99:ab:72:6d:2b:8a:b0: 73:c1:53:bb -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEnSwoySZf6+9T86TYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUxMjAwNDUzNFoXDTI3MDgxNTAwNDUzNFowLzEtMCsGA1UEAxMk NDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTViYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCOiA5Htnj3uBB7ASojlfqQgOqDcFK8+JZSE ZcX0GhExYPEZnEypFql6EmA+T9XXWFQbZcaQpHPE2hAtBc1TVvxyWoIb6xcqd/e1 sH4ySKO9px6DAA19wQstWV0astuYvnUYd5TV5Nmo/0Rat7SCMotMKNKUzQKRRvt4 iT+AHfXvkhcwicu4HT/g6aiRfaVRvDoIEayScS3XiUitEi0o3/zrzoAxM6QVAOI4 GsHQGDwehiNCY+kAOueQPooBlHhGhNnImnOFyDyCNcHva4UfI44h8kGFIWXsFj5r L5atdBXSrKyoaaDcXYtCFje+NSHwT4J3c+rJvr5ncs+F8dWISwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFNiGp+RB4lrtXPoL+hkih3voYWL+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1i NGY1LWJiZWNjNjk1YmFmZi80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5 NWJhZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwDMugMEBdEygAMEBdGtADAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgIOmTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk1BuFEh0Vg1CZ19BZA5M0lt9dA7DT5eEk VrGpY/F9EZCjP/7SFHLf4Q0TqUZ+wFsmi/ukYRtgqjk1kp4uQrJ5aT/E4OTDNm64 IUQooUQO74M1oiO2InhMXR4WVsfK9KzA/RZLYd1PZ9Q/YETYnLBkiNnuQukkzBzV FfhsisIDhTSoNexEXO9hbHJs2z3wJpkl2G06Qol3Yi5h+6/4oAO3QaUNnmjX9La9 sVsI57+DW1Ej0ytfS+pT5KOhjokt3dpyuwh2yn8DQmbC/meiXVw8znyVqWqkXYoR 8xPOfM7c/VL1+hBdMn9KhKDcxVUYsSvr9idwGZmrcm0rirBzwVO7 -----END CERTIFICATE-----Generated at Sun Jun 15 11:56:10 2025 by rpki-client