$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer File: a1a8e018-88f4-4067-935e-ef8e20a553c5.cer (raw, json) Hash identifier: aRkJ3gtfH5xuuzbSviq2y4CWyfDRATz1OVSDCOgdle8= Subject key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849EEAD6B686D6F3B39D5A979C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 00:45:37 +0000 Certificate not after: Wed 25 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 14432 IP: 206.126.244.0/24 IP: 2001:504:35::/48 IP: 2602:f965::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:ad:6b:68:6d:6f:3b:39:d5:a9:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 22 00:45:37 2025 GMT Not After : Aug 25 00:45:37 2027 GMT Subject: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:4c:d0:c1:df:32:ca:d9:38:5f:6f:a6:7a: c8:5a:57:38:b1:0c:a5:09:b3:80:a0:29:85:ee:26: c4:22:c7:9f:72:76:5c:55:c5:05:2b:e6:3f:f9:da: cd:5d:42:d5:cb:bf:80:26:9a:5b:ee:79:a8:1a:4d: 65:5a:02:64:aa:53:0e:f6:aa:78:be:f9:df:11:ec: f7:17:51:4a:5e:cd:6e:4b:39:1e:52:04:c6:41:19: 22:16:0d:c5:1c:ec:9f:55:0f:81:dd:6f:4a:32:5e: 75:73:21:c2:8a:d5:c0:24:75:27:23:1f:a6:7c:c8: ee:9e:61:88:12:88:ee:c1:83:5b:a8:eb:32:0a:bb: 8a:5a:53:9e:30:24:f2:6f:29:c7:98:69:15:3c:20: 43:ff:53:5e:05:14:28:58:84:08:e6:2b:fa:6b:1f: cb:27:cc:89:14:2f:e6:12:f5:cd:b9:88:71:57:64: 5d:dd:bf:77:92:86:06:20:18:32:9f:f5:57:e6:c6: 27:8a:39:36:ab:de:57:59:da:25:48:30:49:49:be: 88:26:3c:41:31:42:b2:c2:ef:cf:5c:0b:d9:f3:f5: fb:f5:c8:97:5d:4f:49:4e:4e:90:6a:98:c6:b7:5f: e5:94:b9:cf:ee:38:c9:23:29:28:3d:d9:b1:05:1c: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 206.126.244.0/24 IPv6: 2001:504:35::/48 2602:f965::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14432 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:63:73:ae:fd:bc:5f:a8:3f:ad:3b:97:65:7d:09:43:41:f4: 15:35:15:49:d2:36:0a:63:bf:72:54:9c:47:7e:0a:41:83:34: fb:c6:8f:0f:a4:de:42:49:ac:db:b4:07:c7:e7:6a:0b:02:be: 0f:85:cc:07:93:9f:f9:b4:3d:9e:9e:21:aa:6c:b0:c5:42:2e: 8e:f8:75:a3:95:e1:6f:b6:d0:ad:e5:48:68:32:aa:5f:9f:79: 39:da:ae:06:d7:1a:63:b9:17:13:68:89:94:31:9b:ed:1e:c8: 3c:0b:2b:2a:61:ed:e5:31:ea:dc:ab:52:13:2c:2d:ec:78:fb: b6:a6:f7:e6:98:d3:5a:58:c2:7c:27:e8:fc:b4:55:3d:30:ca: ac:29:0c:3c:aa:65:1f:cd:fc:af:7d:92:57:05:db:c1:5d:4b: a0:eb:26:4a:a0:37:5f:62:33:90:79:74:bf:56:3b:fc:f7:36: 8c:23:21:8d:7b:b3:71:3c:f7:3a:c6:e8:c9:57:6c:dd:2f:f1: 01:aa:9c:ab:b7:50:a0:b2:9e:bf:00:ff:2e:2c:1a:9d:46:d1: 53:2f:09:5a:04:f1:c0:06:e4:69:ab:35:20:72:38:82:43:eb: cc:4b:c5:45:30:36:8c:7b:79:97:a4:27:55:d1:60:1a:40:26: a0:b8:61:87 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEnurWtobW87OdWpecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUyMjAwNDUzN1oXDTI3MDgyNTAwNDUzN1owLzEtMCsGA1UEAxMk YTFhOGUwMTgtODhmNC00MDY3LTkzNWUtZWY4ZTIwYTU1M2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA649M0MHfMsrZOF9vpnrIWlc4sQylCbOAoCmF 7ibEIsefcnZcVcUFK+Y/+drNXULVy7+AJppb7nmoGk1lWgJkqlMO9qp4vvnfEez3 F1FKXs1uSzkeUgTGQRkiFg3FHOyfVQ+B3W9KMl51cyHCitXAJHUnIx+mfMjunmGI EojuwYNbqOsyCruKWlOeMCTybynHmGkVPCBD/1NeBRQoWIQI5iv6ax/LJ8yJFC/m EvXNuYhxV2Rd3b93koYGIBgyn/VX5sYnijk2q95XWdolSDBJSb6IJjxBMUKywu/P XAvZ8/X79ciXXU9JTk6QapjGt1/llLnP7jjJIykoPdmxBRzl0wIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFHXs8HGX5HUlkejZG568q2ftWnUjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MWE4ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhlMjBhNTUzYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ExYThlMDE4LTg4ZjQtNDA2Ny05 MzVlLWVmOGUyMGE1NTNjNS9hMWE4ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhlMjBh NTUzYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMAwEAgABMAYDBADOfvQwFwQCAAIwEQMHACABBQQANQMGACYC+WUA MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjhgMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACtjc679vF+oP607 l2V9CUNB9BU1FUnSNgpjv3JUnEd+CkGDNPvGjw+k3kJJrNu0B8fnagsCvg+FzAeT n/m0PZ6eIapssMVCLo74daOV4W+20K3lSGgyql+feTnargbXGmO5FxNoiZQxm+0e yDwLKyph7eUx6tyrUhMsLex4+7am9+aY01pYwnwn6Py0VT0wyqwpDDyqZR/N/K99 klcF28FdS6DrJkqgN19iM5B5dL9WO/z3NowjIY17s3E89zrG6MlXbN0v8QGqnKu3 UKCynr8A/y4sGp1G0VMvCVoE8cAG5GmrNSByOIJD68xLxUUwNox7eZekJ1XRYBpA JqC4YYc= -----END CERTIFICATE-----Generated at Sun Jun 15 11:55:38 2025 by rpki-client