$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer File: 498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer (raw, json) Hash identifier: d41zVlpARSFKPyrkuqCdQHUoYu2kcMObqYq+FG3jIq8= Subject key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A07CD9199A84AE9D6DCBBA840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 31 May 2025 00:45:37 +0000 Certificate not after: Fri 03 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 63233 AS: 393641 AS: 393655 IP: 192.152.132.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:cd:91:99:a8:4a:e9:d6:dc:bb:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 31 00:45:37 2025 GMT Not After : Sep 3 00:45:37 2027 GMT Subject: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:d9:3d:19:ad:74:98:fa:c7:51:32:7c:d6: a7:88:fd:ea:08:23:ae:58:a3:b6:ae:cc:53:c5:7b: 2d:2e:f9:89:2b:3b:2e:cc:39:90:2f:72:7b:87:ac: 26:f3:6d:a5:a0:eb:79:3f:71:5b:91:28:77:10:12: c0:57:a2:57:81:ef:cf:8d:bb:58:1c:50:1f:16:df: 0a:4d:49:b5:60:55:f7:66:c7:f8:24:6a:63:bf:8d: 1b:35:df:1a:22:d6:b9:47:17:7b:ac:49:d0:4f:11: a7:bc:6e:f5:60:6f:48:53:9c:31:c4:8e:1a:66:62: dd:4f:b8:d2:a9:4e:fc:8d:4b:7d:7e:6b:14:1b:cc: 52:e0:f1:1f:17:3c:5f:a9:f4:a7:c3:dc:23:72:22: 8b:05:cb:0f:e4:db:74:91:50:2e:c5:a3:da:b4:cf: 8e:ef:8a:21:fc:e8:01:45:cb:3a:75:0f:be:a7:15: bb:cd:e5:4a:1b:32:ce:9b:e5:e9:51:50:00:88:2a: 9e:44:2b:af:c0:04:f2:89:81:af:8b:09:19:ce:83: 4a:c5:21:97:f8:e4:c9:18:d3:52:1f:ca:d2:f8:51: ed:a9:5b:ff:ff:0e:97:6a:72:0e:ae:c6:9f:8e:6f: b9:82:f6:1a:45:aa:ad:f0:ec:e1:3c:81:67:2a:9f: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.152.132.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63233 393641 393655 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d3:08:38:2c:35:0b:33:9b:b2:19:3f:16:b9:77:21:97:c4: bd:59:4e:77:bb:9c:4a:ed:e6:a0:a4:52:55:c7:5f:c3:b4:ee: 34:82:71:35:04:15:32:5c:a1:7c:39:60:cf:27:27:ef:d7:cf: 31:6d:64:20:f7:f6:31:62:24:7b:05:30:05:ff:4b:a9:9a:8c: 24:a5:8f:43:f3:4a:62:9c:ff:6f:5a:f4:54:2b:54:d1:e4:e1: 02:62:c9:ec:72:6e:ee:dd:a4:e2:94:b3:bc:f6:31:a9:3e:8c: 17:70:ad:29:ea:6c:55:ee:c5:b2:f7:ce:89:9f:7d:14:55:ea: 64:65:74:f7:1a:a7:6f:3f:28:9b:b5:9c:94:0b:b6:08:f2:f8: e7:64:49:61:1d:33:3a:64:6d:85:92:d2:ef:4b:3d:ad:40:fe: 96:00:c9:4f:dc:01:4a:3d:8c:7f:ee:1d:e8:89:3b:aa:b5:4e: 51:b2:fa:26:11:94:fd:f9:16:02:04:19:78:23:0e:b7:c3:91: 3d:99:2e:c0:5e:b5:12:e6:56:11:0c:c6:19:23:b6:09:f1:21: af:45:03:54:25:b3:3b:aa:4b:6e:27:4f:95:06:ca:09:4b:06: 10:f6:1e:1a:81:8f:f9:e3:52:32:5e:98:59:25:51:0e:04:56: ad:15:05:7f -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEoHzZGZqErp1ty7qEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUzMTAwNDUzN1oXDTI3MDkwMzAwNDUzN1owLzEtMCsGA1UEAxMk NDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJlYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rPZPRmtdJj6x1EyfNaniP3qCCOuWKO2rsxT xXstLvmJKzsuzDmQL3J7h6wm822loOt5P3FbkSh3EBLAV6JXge/PjbtYHFAfFt8K TUm1YFX3Zsf4JGpjv40bNd8aIta5Rxd7rEnQTxGnvG71YG9IU5wxxI4aZmLdT7jS qU78jUt9fmsUG8xS4PEfFzxfqfSnw9wjciKLBcsP5Nt0kVAuxaPatM+O74oh/OgB Rcs6dQ++pxW7zeVKGzLOm+XpUVAAiCqeRCuvwATyiYGviwkZzoNKxSGX+OTJGNNS H8rS+FHtqVv//w6XanIOrsafjm+5gvYaRaqt8OzhPIFnKp9i0QIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFFlzchcHr8HuwcCxMKkoB+w5nBRbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQ5OGMzZjA3LTliOGUtNDRhMC05 MmY0LTUzOGMwZDcyZWE0ZS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3 MmVhNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAmIQwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwID APcBAgMGAakCAwYBtzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBs0wg4LDULM5uyGT8WuXchl8S9WU53u5xK 7eagpFJVx1/DtO40gnE1BBUyXKF8OWDPJyfv188xbWQg9/YxYiR7BTAF/0upmowk pY9D80pinP9vWvRUK1TR5OECYsnscm7u3aTilLO89jGpPowXcK0p6mxV7sWy986J n30UVepkZXT3GqdvPyibtZyUC7YI8vjnZElhHTM6ZG2FktLvSz2tQP6WAMlP3AFK PYx/7h3oiTuqtU5RsvomEZT9+RYCBBl4Iw63w5E9mS7AXrUS5lYRDMYZI7YJ8SGv RQNUJbM7qktuJ0+VBsoJSwYQ9h4agY/541IyXphZJVEOBFatFQV/ -----END CERTIFICATE-----Generated at Sat Jun 14 18:37:34 2025 by rpki-client