$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer File: 4a6ba250-5086-4d58-8336-494a05894bf9.cer (raw, json) Hash identifier: VRQ6pVTfyXxDG3gke4VdIpNXqTvef4axc3m35opcYW8= Subject key identifier: CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848DA6971021ADF347383C03680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 01:45:33 +0000 Certificate not after: Tue 18 May 2027 00:45:33 +0000 Subordinate resources: AS: 62809 IP: 23.128.144.0/22 IP: 104.152.136.0/22 IP: 104.244.20.0/22 IP: 130.51.4.0/22 IP: 162.222.28.0/22 IP: 162.251.124.0/22 IP: 199.184.14.0/23 IP: 199.202.232.0/23 IP: 2605:2a40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:69:71:02:1a:df:34:73:83:c0:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 12 01:45:33 2025 GMT Not After : May 18 00:45:33 2027 GMT Subject: CN=4a6ba250-5086-4d58-8336-494a05894bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:38:a2:e3:99:ef:40:d1:57:22:93:16:72: ef:f4:4c:f0:00:55:25:66:db:3c:7d:74:d4:18:b5: f5:0b:3d:45:c6:b2:5c:4e:b5:ec:a7:ef:f2:cf:9f: 9d:88:9a:a8:f8:ab:36:bc:8f:0f:66:dd:fa:d0:cb: b5:f3:f7:20:5b:5b:73:c4:5c:46:72:d1:1e:fa:ff: 9e:86:9c:b2:e1:36:47:49:3f:db:22:7a:c8:34:10: 2b:f1:d8:3b:65:ed:a8:5f:1a:a7:ca:d2:8c:4e:d4: 64:05:58:f9:96:e7:13:03:e0:4a:8d:25:ea:63:7d: 52:3a:3c:7b:f6:9d:4c:ae:91:6e:c8:ff:e5:6d:c0: 9b:ef:1f:e5:fa:46:c1:b6:4d:3d:d3:4d:32:0c:bc: be:37:e3:5e:e4:6a:e6:75:be:f3:ce:a8:f8:0a:ff: fe:44:7f:6f:e6:f5:c4:8c:9c:d6:91:e3:cd:c6:44: a0:a8:49:df:ed:ae:72:d6:17:46:f0:9b:a6:b1:e0: c1:95:57:75:f4:a8:86:29:39:84:0c:d5:ac:db:35: d0:fc:1b:0a:1b:ed:ee:10:67:98:b3:6f:11:ad:df: 5d:3d:4e:5b:52:df:86:af:68:f7:e0:7d:a9:72:b8: a9:da:95:31:ef:9a:7b:b4:e9:45:7f:6a:80:58:8f: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.128.144.0/22 104.152.136.0/22 104.244.20.0/22 130.51.4.0/22 162.222.28.0/22 162.251.124.0/22 199.184.14.0/23 199.202.232.0/23 IPv6: 2605:2a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62809 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:58:8c:7a:26:d4:1f:69:53:d0:3f:08:34:a1:bb:04:b2:4e: e7:26:5b:54:10:c0:62:a8:66:d8:be:87:22:46:d3:a1:d7:69: e4:3f:6b:a5:70:0c:67:2a:b8:d0:8d:61:a1:af:b7:c5:aa:ce: f0:93:33:c8:ba:5c:6d:d6:e3:37:c7:37:9d:16:3f:e2:b6:c8: 93:a9:44:11:94:87:41:ff:da:71:5e:a5:d6:a6:f0:ef:13:e7: 2d:9e:75:56:71:de:45:22:08:7e:3c:61:78:f0:94:d9:c8:00: a3:b3:e3:9d:ad:36:e7:b4:97:3e:b1:00:e6:d6:b7:aa:a6:6c: e5:bd:a3:70:e9:54:a4:f7:92:f9:c7:d7:3f:d6:c6:d5:9c:ea: 0c:e9:d6:39:90:8f:b7:18:a8:b4:98:4c:5d:c7:b3:3a:25:cf: ae:81:ac:7d:d2:c8:df:e9:d5:78:23:9a:5b:51:51:90:79:5b: 45:38:3c:e2:e3:d6:f6:2c:4c:c3:0d:45:04:2b:5a:b0:d2:fd: 1c:d2:79:06:ba:e4:21:24:e0:93:9f:72:c5:b7:97:29:ee:3e: b8:0d:c5:5b:3b:37:5a:9f:c3:fb:23:54:dc:37:5c:81:0b:0e: a4:c4:0e:88:11:bf:67:65:76:50:64:d9:fb:47:4e:e7:48:a2: a0:97:6e:5b -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUAQ0Mn0MoWEjaaXECGt80c4PANoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIxMjAxNDUzM1oXDTI3MDUxODAwNDUzM1owLzEtMCsGA1UEAxMk NGE2YmEyNTAtNTA4Ni00ZDU4LTgzMzYtNDk0YTA1ODk0YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVk4ouOZ70DRVyKTFnLv9EzwAFUlZts8fXTU GLX1Cz1FxrJcTrXsp+/yz5+diJqo+Ks2vI8PZt360Mu18/cgW1tzxFxGctEe+v+e hpyy4TZHST/bInrINBAr8dg7Ze2oXxqnytKMTtRkBVj5lucTA+BKjSXqY31SOjx7 9p1MrpFuyP/lbcCb7x/l+kbBtk09000yDLy+N+Ne5Grmdb7zzqj4Cv/+RH9v5vXE jJzWkePNxkSgqEnf7a5y1hdG8JumseDBlVd19KiGKTmEDNWs2zXQ/BsKG+3uEGeY s28Rrd9dPU5bUt+Gr2j34H2pcrip2pUx75p7tOlFf2qAWI+afQIDAQABo4IEVDCC BFAwHQYDVR0OBBYEFM0yC2t4OhSEV3mkzcvse79RlpKgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 YTZiYTI1MC01MDg2LTRkNTgtODMzNi00OTRhMDU4OTRiZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzRhNmJhMjUwLTUwODYtNGQ1OC04 MzM2LTQ5NGEwNTg5NGJmOS80YTZiYTI1MC01MDg2LTRkNTgtODMzNi00OTRhMDU4 OTRiZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAIXgJADBAJomIgDBAJo9BQDBAKCMwQDBAKi3hwD BAKi+3wDBAHHuA4DBAHHyugwDQQCAAIwBwMFACYFKkAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAPVZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAG5YjHom1B9pU9A/CDShuwSyTucmW1QQwGKo Zti+hyJG06HXaeQ/a6VwDGcquNCNYaGvt8WqzvCTM8i6XG3W4zfHN50WP+K2yJOp RBGUh0H/2nFepdam8O8T5y2edVZx3kUiCH48YXjwlNnIAKOz452tNue0lz6xAObW t6qmbOW9o3DpVKT3kvnH1z/WxtWc6gzp1jmQj7cYqLSYTF3Hszolz66BrH3SyN/p 1XgjmltRUZB5W0U4POLj1vYsTMMNRQQrWrDS/RzSeQa65CEk4JOfcsW3lynuPrgN xVs7N1qfw/sjVNw3XIELDqTEDogRv2dldlBk2ftHTudIoqCXbls= -----END CERTIFICATE-----Generated at Wed Apr 30 13:40:03 2025 by rpki-client