$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer File: 5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer (raw, json) Hash identifier: z4KLSAVW0RRMiUZnnSMGGwHIW/duTO8J0Nu9ByMYXUA= Subject key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584968AC8E1343B5B7B6A30B86C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Apr 2025 00:45:34 +0000 Certificate not after: Thu 08 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 62490 IP: 136.175.16.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:ac:8e:13:43:b5:b7:b6:a3:0b:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 4 00:45:34 2025 GMT Not After : Jul 8 00:45:34 2027 GMT Subject: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:b5:6e:80:16:64:d2:67:7c:d3:2c:4b:c6: 73:66:bd:4c:e5:13:82:f0:e9:0b:d1:21:ff:ea:25: 63:83:c2:fd:dd:84:25:84:c6:9c:11:44:7a:85:4c: 92:49:6c:f0:ec:a1:c4:fa:56:b4:b2:36:47:e7:f0: 62:e1:35:f1:5c:bb:44:2c:b1:fb:ab:e7:31:4a:03: 41:11:8b:45:1c:e8:fc:7b:ee:a3:98:29:6e:ab:b2: 3b:cc:bd:d7:75:e7:bd:cc:0e:1c:2b:12:89:73:fd: 2d:7b:a3:0e:80:1a:c8:03:ba:58:95:87:68:60:8b: fa:3a:50:6f:ff:95:13:45:16:90:cd:08:0a:91:80: cb:55:34:3a:4c:78:e6:a5:46:58:68:2f:7e:b6:7e: ea:d2:3e:e2:e9:c4:52:d0:26:6b:d1:c3:5e:d6:5c: 65:f5:5e:2b:4f:d3:e4:89:b1:cb:bf:2b:bd:bb:c7: 9d:fd:bf:2e:3d:45:ee:85:9e:06:be:79:08:84:bf: ec:55:2f:1e:d3:bd:71:f0:e2:e9:41:dd:d7:41:03: b6:4f:35:51:ee:da:1e:59:20:a7:dc:1c:43:3b:e1: bc:03:18:bf:fb:c7:19:df:19:d3:43:f7:03:c6:25: 71:16:dd:07:b6:56:99:9b:33:a4:b5:1c:64:b6:66: 7e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 136.175.16.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62490 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:48:aa:3b:73:4d:93:29:ba:12:ff:9c:e7:82:db:f5:ce:83: f8:94:a8:b3:ea:8b:ac:8a:e8:2c:f4:74:a2:1c:8a:db:f1:8e: 38:1b:00:2d:c2:ca:83:6c:ad:b5:ef:ff:58:fb:94:4e:0b:1e: c2:a2:cb:eb:d3:41:f0:cf:6b:13:58:d8:2f:2c:7f:ca:83:d0: cd:34:e6:da:2c:42:39:fe:c6:b5:e3:cf:0d:ef:e6:41:5d:68: 46:2e:73:7a:21:3c:95:74:f8:8c:ba:63:80:79:49:2e:7a:1a: 08:01:29:3e:5f:c5:d2:d8:17:24:d4:57:47:69:b1:71:bf:5b: 9c:67:38:cf:80:31:24:c3:b8:a8:a6:f9:e5:6f:b7:d4:46:f7: dd:18:f8:c8:0c:80:5a:a1:03:19:43:85:d7:d1:16:04:28:21: 1c:93:93:73:a7:09:39:e8:35:6f:10:4c:41:4b:64:8c:7f:98: 0c:46:0a:bb:e5:16:cb:39:3a:f3:7f:34:4b:34:32:c8:11:6a: 12:72:35:ac:23:46:95:d9:1d:3f:04:34:b5:3f:12:a0:74:4d: c0:1e:2f:ea:37:0e:4d:c9:8b:75:ed:49:69:07:f3:4d:fc:88: c4:0f:3a:a1:0e:d4:32:d7:3c:6f:ac:07:78:e6:d0:8f:2d:7b: 91:b6:ee:75 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWElorI4TQ7W3tqMLhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQwNDAwNDUzNFoXDTI3MDcwODAwNDUzNFowLzEtMCsGA1UEAxMk NTc1NGE4OWYtMzdlZS00OGJiLThhM2MtMTM5ZWUwNmZlMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8C1boAWZNJnfNMsS8ZzZr1M5ROC8OkL0SH/ 6iVjg8L93YQlhMacEUR6hUySSWzw7KHE+la0sjZH5/Bi4TXxXLtELLH7q+cxSgNB EYtFHOj8e+6jmCluq7I7zL3Xdee9zA4cKxKJc/0te6MOgBrIA7pYlYdoYIv6OlBv /5UTRRaQzQgKkYDLVTQ6THjmpUZYaC9+tn7q0j7i6cRS0CZr0cNe1lxl9V4rT9Pk ibHLvyu9u8ed/b8uPUXuhZ4GvnkIhL/sVS8e071x8OLpQd3XQQO2TzVR7toeWSCn 3BxDO+G8Axi/+8cZ3xnTQ/cDxiVxFt0HtlaZmzOktRxktmZ+VwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEpbfGIrcNmGufR+aVz3W7PFTep4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 NzU0YTg5Zi0zN2VlLTQ4YmItOGEzYy0xMzllZTA2ZmUwZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU3NTRhODlmLTM3ZWUtNDhiYi04 YTNjLTEzOWVlMDZmZTBmYy81NzU0YTg5Zi0zN2VlLTQ4YmItOGEzYy0xMzllZTA2 ZmUwZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKIrxAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID APQaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABxIqjtzTZMpuhL/nOeC2/XOg/iUqLPqi6yK6Cz0dKIcitvx jjgbAC3CyoNsrbXv/1j7lE4LHsKiy+vTQfDPaxNY2C8sf8qD0M005tosQjn+xrXj zw3v5kFdaEYuc3ohPJV0+Iy6Y4B5SS56GggBKT5fxdLYFyTUV0dpsXG/W5xnOM+A MSTDuKim+eVvt9RG990Y+MgMgFqhAxlDhdfRFgQoIRyTk3OnCTnoNW8QTEFLZIx/ mAxGCrvlFss5OvN/NEs0MsgRahJyNawjRpXZHT8ENLU/EqB0TcAeL+o3Dk3Ji3Xt SWkH8038iMQPOqEO1DLXPG+sB3jm0I8te5G27nU= -----END CERTIFICATE-----Generated at Mon Apr 28 00:57:46 2025 by rpki-client