$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer File: a7e64b66-84df-4665-a4fb-eb3b8add365e.cer (raw, json) Hash identifier: DIwEcyBp4qeIaBYmobvFYaEKp9fn5Y/1TrzxUP6KR9U= Subject key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858489CFE66FD7CD7115A5DEB5120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Jan 2025 01:45:34 +0000 Certificate not after: Mon 26 Apr 2027 00:45:34 +0000 Subordinate resources: IP: 131.232.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9c:fe:66:fd:7c:d7:11:5a:5d:eb:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 21 01:45:34 2025 GMT Not After : Apr 26 00:45:34 2027 GMT Subject: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:3a:ec:cf:53:78:97:01:92:3a:67:b0:55: 11:31:c6:9d:f1:87:d2:ec:e1:a2:c3:1f:e0:43:61: ba:aa:5e:e9:b1:e6:e4:7e:78:52:36:1e:0c:6d:55: 03:89:20:61:f0:44:0c:e7:f4:14:77:87:c7:e3:ee: 84:63:8b:f3:b9:e5:41:8d:d3:86:39:03:97:21:b4: 78:22:05:09:d8:e2:2e:f2:f9:03:1f:0e:79:34:ab: 95:2a:ff:ec:fd:96:07:96:d3:68:0c:b6:90:66:db: 21:10:68:30:a9:bf:09:27:06:cd:3b:87:7c:5e:40: e8:81:ad:0d:aa:1c:9a:39:c4:69:30:25:b3:c2:10: 27:b4:7c:df:61:75:5b:f1:fe:f6:c1:43:0b:ba:4d: 22:5f:bc:47:66:bb:a2:35:b0:19:a2:38:6f:1e:e8: ca:51:16:2e:57:be:d7:b4:a1:7a:59:55:86:b1:59: 88:aa:15:c1:bd:8b:6f:36:ab:30:53:d4:bd:a3:82: 1e:99:39:66:66:d0:3f:42:62:9b:5f:3e:83:e1:d4: 1d:9b:2e:50:3e:5f:e8:68:89:e9:9c:52:52:b3:8f: 72:4d:c6:51:20:3f:3d:18:7a:1e:70:5c:3c:68:62: 66:c2:b1:a6:96:6d:d8:8f:d4:46:c9:53:43:3c:29: 9d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 131.232.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ea:e3:e8:5e:6c:b6:08:cf:de:47:a9:5e:f2:68:b5:47:39: 2d:a7:7d:ba:78:d1:4e:a4:00:4a:bd:95:33:0c:6c:d9:a3:8b: 58:33:76:7d:da:5f:4f:a6:78:47:5e:fd:52:18:f2:33:cd:c6: dc:63:8c:55:bf:c9:aa:42:24:e0:34:2a:f1:d0:d9:51:f3:44: 0b:08:ff:2b:51:62:d7:dd:b6:f1:e9:5e:3b:fc:37:f9:4e:fb: 3a:7a:0d:ee:ad:72:38:06:71:f1:91:2a:69:5e:5e:da:0b:04: 4e:56:29:8b:6d:6c:6f:2f:16:79:00:4e:bd:f8:db:76:2e:aa: 7c:e4:61:e6:4d:f3:bd:d5:a5:3e:51:7e:2f:68:36:d1:41:f2: 9f:4d:5d:60:e3:8e:84:12:79:68:47:15:a5:e1:6a:60:06:d6: e7:2d:04:d3:36:1f:ea:a1:62:00:c3:17:e3:ce:45:25:09:9c: e2:2e:23:8f:ce:07:d0:93:e0:71:48:96:94:e7:3f:bc:fe:f0: 3c:e0:f0:ff:4d:31:95:0f:7b:31:b9:d3:9d:7c:bb:40:ed:bd: 96:b9:f3:25:6d:31:70:fb:f7:45:f8:5d:10:d1:dc:87:ca:8e: 11:aa:ef:22:2b:17:d4:19:6a:62:8e:e3:1d:58:5d:20:62:b0: 55:d8:f0:7a -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEic/mb9fNcRWl3rUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDEyMTAxNDUzNFoXDTI3MDQyNjAwNDUzNFowLzEtMCsGA1UEAxMk YTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQzNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxo67M9TeJcBkjpnsFURMcad8YfS7OGiwx/g Q2G6ql7psebkfnhSNh4MbVUDiSBh8EQM5/QUd4fH4+6EY4vzueVBjdOGOQOXIbR4 IgUJ2OIu8vkDHw55NKuVKv/s/ZYHltNoDLaQZtshEGgwqb8JJwbNO4d8XkDoga0N qhyaOcRpMCWzwhAntHzfYXVb8f72wUMLuk0iX7xHZruiNbAZojhvHujKURYuV77X tKF6WVWGsVmIqhXBvYtvNqswU9S9o4IemTlmZtA/QmKbXz6D4dQdmy5QPl/oaInp nFJSs49yTcZRID89GHoecFw8aGJmwrGmlm3Yj9RGyVNDPCmdewIDAQABo4ID/jCC A/owHQYDVR0OBBYEFEQ/fCoC44Fm3SlDgM9zIIm/wxhAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h N2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2E3ZTY0YjY2LTg0ZGYtNDY2NS1h NGZiLWViM2I4YWRkMzY1ZS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFk ZDM2NWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCD6DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj6uPoXmy2CM/eR6le8mi1 Rzktp326eNFOpABKvZUzDGzZo4tYM3Z92l9PpnhHXv1SGPIzzcbcY4xVv8mqQiTg NCrx0NlR80QLCP8rUWLX3bbx6V47/Df5Tvs6eg3urXI4BnHxkSppXl7aCwROVimL bWxvLxZ5AE69+Nt2Lqp85GHmTfO91aU+UX4vaDbRQfKfTV1g446EEnloRxWl4Wpg BtbnLQTTNh/qoWIAwxfjzkUlCZziLiOPzgfQk+BxSJaU5z+8/vA84PD/TTGVD3sx udOdfLtA7b2WufMlbTFw+/dF+F0Q0dyHyo4Rqu8iKxfUGWpijuMdWF0gYrBV2PB6 -----END CERTIFICATE-----Generated at Sat Apr 26 19:04:01 2025 by rpki-client