$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96.cer File: b81fd917-6002-4314-85ac-1016672b3f96.cer (raw, json) Hash identifier: UxBK27qZn0EGWqzQQ8wZk5OEGmY7zyHC8h3Dt8W/VnA= Subject key identifier: E9:D3:A7:B6:75:C6:7E:97:9C:6B:B6:8D:6A:0A:01:74:AC:F6:48:EF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848EB298CE662E63D5C067BEA60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/b81fd917-6002-4314-85ac-1016672b3f96.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 01:45:34 +0000 Certificate not after: Mon 24 May 2027 00:45:34 +0000 Subordinate resources: IP: 162.208.17.0/24 IP: 206.130.43.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:29:8c:e6:62:e6:3d:5c:06:7b:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 18 01:45:34 2025 GMT Not After : May 24 00:45:34 2027 GMT Subject: CN=b81fd917-6002-4314-85ac-1016672b3f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:94:33:5f:6a:00:75:c0:ce:8a:f3:1e:8a: d8:99:3b:ff:fe:59:0c:e3:f3:c4:61:2b:ee:92:e2: 1c:a2:48:ab:8f:d8:39:9b:91:0b:75:27:e4:32:98: de:37:20:d8:fd:d9:cf:1e:89:d8:bb:ee:06:42:4b: 6c:8e:bd:78:be:4f:05:e2:64:2d:77:a6:37:ff:98: 67:ea:58:90:78:64:67:a8:d4:52:a5:20:d9:df:ef: 9e:62:01:a0:e0:b2:2c:6b:93:7d:24:4c:f1:f6:63: b6:68:2b:0b:0e:a3:08:17:55:7e:23:08:ce:96:48: 01:1b:5e:f0:b6:fd:9e:ff:ea:dc:ef:bc:87:ad:c4: 68:a5:f4:c7:cd:7a:9c:5e:d9:04:da:d9:e5:78:2c: 82:dd:86:a3:22:41:b4:16:6f:68:b8:d2:87:ac:71: fa:52:aa:fb:66:a1:2a:1a:b0:f3:b3:2b:24:79:e3: 3f:d2:82:b5:68:16:98:35:bd:76:e3:f6:67:e4:92: 71:12:60:42:7d:c9:ad:f2:ae:ba:04:8e:d8:c4:f1: 8d:c4:52:15:9f:cf:d0:82:88:17:c4:99:3a:5b:4b: 2d:c7:80:28:6c:a8:8e:e2:dd:33:06:91:08:f8:ca: b1:7a:f7:75:a5:51:3b:e0:b0:14:f8:9d:25:45:ed: 3f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D3:A7:B6:75:C6:7E:97:9C:6B:B6:8D:6A:0A:01:74:AC:F6:48:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b81fd917-6002-4314-85ac-1016672b3f96/b81fd917-6002-4314-85ac-1016672b3f96.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 162.208.17.0/24 206.130.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8a:f1:1e:c4:23:23:37:b3:04:fe:7d:6c:fd:59:7c:ed:5a: 2c:60:03:74:8f:0d:80:fd:ec:b7:25:83:18:d2:08:0e:a5:05: fb:09:73:4f:c9:a6:fe:2c:f0:c9:07:b0:ac:7e:01:83:bf:39: 0f:3f:50:e4:59:a1:02:14:f4:fa:f8:de:34:8a:38:5c:dc:0a: 4e:47:a1:ec:24:7f:08:27:e0:fb:a9:86:aa:81:ce:c3:27:b2: 5e:e7:a2:14:1c:f1:fa:80:6c:6c:35:0a:59:2a:5b:78:5e:2a: 37:de:46:b2:48:a4:12:eb:09:ef:31:6e:8c:42:e2:b0:4a:eb: 39:49:8d:7a:2a:98:db:61:63:3e:11:14:db:33:f1:20:c7:45: 31:46:21:8d:0b:4e:f5:97:02:d4:d7:05:7b:48:a5:58:6a:bd: f4:75:25:09:cf:60:0b:c8:27:24:81:b8:40:16:22:e7:3d:e0: b1:00:bd:00:40:6d:f2:f0:ff:b8:98:70:c3:86:75:86:de:85: 55:79:c0:70:19:ca:5c:fa:c3:cf:6d:2e:73:ab:7f:bc:4e:73: 84:e4:22:ee:0a:69:2c:33:c1:0f:8a:79:12:49:3e:f6:57:38: 81:2d:82:7c:a2:de:8f:b4:64:2f:5b:6e:4c:55:52:eb:6b:ab: c5:a6:1d:1b -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEjrKYzmYuY9XAZ76mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIxODAxNDUzNFoXDTI3MDUyNDAwNDUzNFowLzEtMCsGA1UEAxMk YjgxZmQ5MTctNjAwMi00MzE0LTg1YWMtMTAxNjY3MmIzZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7+UM19qAHXAzorzHorYmTv//lkM4/PEYSvu kuIcokirj9g5m5ELdSfkMpjeNyDY/dnPHonYu+4GQktsjr14vk8F4mQtd6Y3/5hn 6liQeGRnqNRSpSDZ3++eYgGg4LIsa5N9JEzx9mO2aCsLDqMIF1V+IwjOlkgBG17w tv2e/+rc77yHrcRopfTHzXqcXtkE2tnleCyC3YajIkG0Fm9ouNKHrHH6Uqr7ZqEq GrDzsyskeeM/0oK1aBaYNb124/Zn5JJxEmBCfcmt8q66BI7YxPGNxFIVn8/QgogX xJk6W0stx4AobKiO4t0zBpEI+Mqxevd1pVE74LAU+J0lRe0/6wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFOnTp7Z1xn6XnGu2jWoKAXSs9kjvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i ODFmZDkxNy02MDAyLTQzMTQtODVhYy0xMDE2NjcyYjNmOTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2I4MWZkOTE3LTYwMDItNDMxNC04 NWFjLTEwMTY2NzJiM2Y5Ni9iODFmZDkxNy02MDAyLTQzMTQtODVhYy0xMDE2Njcy YjNmOTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACi0BEDBADOgiswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFIrxHsQjIzez BP59bP1ZfO1aLGADdI8NgP3styWDGNIIDqUF+wlzT8mm/izwyQewrH4Bg785Dz9Q 5FmhAhT0+vjeNIo4XNwKTkeh7CR/CCfg+6mGqoHOwyeyXueiFBzx+oBsbDUKWSpb eF4qN95GskikEusJ7zFujELisErrOUmNeiqY22FjPhEU2zPxIMdFMUYhjQtO9ZcC 1NcFe0ilWGq99HUlCc9gC8gnJIG4QBYi5z3gsQC9AEBt8vD/uJhww4Z1ht6FVXnA cBnKXPrDz20uc6t/vE5zhOQi7gppLDPBD4p5Ekk+9lc4gS2CfKLej7RkL1tuTFVS 62urxaYdGw== -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:17 2025 by rpki-client