$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer File: cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer (raw, json) Hash identifier: e+LxbhKLXUwXPImfB99odd/tiY04Gx2q0yzT0gNqVu0= Subject key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849C20273D6E654DC7F691B051A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 May 2025 00:45:35 +0000 Certificate not after: Mon 09 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 26279 IP: 208.71.16.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:02:73:d6:e6:54:dc:7f:69:1b:05:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 6 00:45:35 2025 GMT Not After : Aug 9 00:45:35 2027 GMT Subject: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:76:88:b0:62:d4:ee:76:73:9e:05:cb:d7: ab:f5:c1:f0:dd:04:1f:82:7d:16:2e:83:02:5a:3e: ea:2e:2f:d7:18:55:82:2e:61:5b:f5:ce:48:4a:4f: 32:fb:02:26:b1:73:98:d1:ea:12:a3:23:73:9f:98: e2:20:62:3e:d8:bd:01:34:f2:53:2b:1e:08:c6:a5: b4:4b:5e:f8:6f:a2:4a:59:3c:3a:27:e6:0a:18:62: fc:82:15:92:5e:33:72:40:ea:22:a2:9a:5f:02:ff: e6:7e:4a:b4:3f:f6:f9:68:df:d7:8d:c3:fc:9e:75: 81:e9:38:46:93:cb:f9:a6:e4:94:ac:c8:73:90:38: f1:c9:da:48:11:24:0f:32:0b:5d:0b:f8:6d:d2:ab: 1f:48:1d:1e:77:fa:d7:87:c7:5a:54:11:9b:b9:74: ee:eb:b6:1d:dc:30:ea:55:fe:26:d4:7c:e1:9e:0a: 4c:18:8e:b9:ab:e8:63:58:b7:f8:00:d6:42:f1:56: ab:5b:de:30:60:6b:d3:d1:63:a1:5d:0a:5f:6b:0c: 4d:89:e4:a1:ec:a8:82:02:a3:f5:c4:88:15:fa:3a: f1:f0:ad:85:c3:fc:42:8c:46:98:f1:b2:69:e6:6d: 53:cb:7d:62:0a:8e:a8:d6:af:15:5d:37:2c:6b:73: 88:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.71.16.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7b:ab:0d:ed:f3:ff:fb:5a:e5:fd:8d:57:da:47:4c:3d:2e: 1c:18:2d:02:20:1b:56:38:1b:c6:17:06:9b:27:ea:7d:f0:05: 65:63:71:87:fe:86:c9:87:d6:a4:24:68:a1:dc:a3:a1:13:cd: 44:06:d8:f4:7b:00:3f:a0:7b:ed:16:18:c8:c9:fd:5f:8d:71: 09:1b:e7:07:7f:42:e3:ac:73:c5:c2:34:b7:75:71:9f:7c:da: 53:54:fb:8d:6f:02:e8:df:4d:5f:fe:53:09:f5:10:1d:e4:9b: c9:1e:1f:22:e2:a7:23:ce:8f:93:ed:f1:15:a1:b7:d1:0b:ff: 63:21:af:bd:8f:ff:4d:d5:8c:51:23:a7:14:6f:37:5b:f8:c9: 5d:b5:2a:da:6f:18:d9:92:73:12:b4:c8:84:cd:7b:70:e7:f8: 5c:e4:20:a4:43:fb:94:2b:a6:92:d4:e4:f5:22:44:84:07:3e: ee:07:01:1e:b0:9a:db:4c:66:1b:84:7d:e9:d6:87:82:18:3a: b9:09:41:47:46:e7:0b:87:ba:d8:c9:3d:b7:a4:2f:46:40:c9: e7:82:e6:ef:32:f4:83:75:e7:bf:bb:41:e4:ff:c5:9a:f8:cb: 35:64:91:6d:2a:e1:dd:78:c5:50:f1:5f:a1:d2:d3:74:fb:b1: 32:3c:ea:fa -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEnCAnPW5lTcf2kbBRowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUwNjAwNDUzNVoXDTI3MDgwOTAwNDUzNVowLzEtMCsGA1UEAxMk Y2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYwNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nJ2iLBi1O52c54Fy9er9cHw3QQfgn0WLoMC Wj7qLi/XGFWCLmFb9c5ISk8y+wImsXOY0eoSoyNzn5jiIGI+2L0BNPJTKx4IxqW0 S174b6JKWTw6J+YKGGL8ghWSXjNyQOoioppfAv/mfkq0P/b5aN/XjcP8nnWB6ThG k8v5puSUrMhzkDjxydpIESQPMgtdC/ht0qsfSB0ed/rXh8daVBGbuXTu67Yd3DDq Vf4m1HzhngpMGI65q+hjWLf4ANZC8VarW94wYGvT0WOhXQpfawxNieSh7KiCAqP1 xIgV+jrx8K2Fw/xCjEaY8bJp5m1Ty31iCo6o1q8VXTcsa3OIGQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAY/+o+zYL8OggsyF6fL029aRBOqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j YmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NiZmUzM2E4LTYxYjgtNGUzZC1h Yzc1LTZhM2NkZTJmMDU3YS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUy ZjA1N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQRxAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ZqcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJ3urDe3z//ta5f2NV9pHTD0uHBgtAiAbVjgbxhcGmyfqffAF ZWNxh/6GyYfWpCRoodyjoRPNRAbY9HsAP6B77RYYyMn9X41xCRvnB39C46xzxcI0 t3Vxn3zaU1T7jW8C6N9NX/5TCfUQHeSbyR4fIuKnI86Pk+3xFaG30Qv/YyGvvY// TdWMUSOnFG83W/jJXbUq2m8Y2ZJzErTIhM17cOf4XOQgpEP7lCumktTk9SJEhAc+ 7gcBHrCa20xmG4R96daHghg6uQlBR0bnC4e62Mk9t6QvRkDJ54Lm7zL0g3Xnv7tB 5P/FmvjLNWSRbSrh3XjFUPFfodLTdPuxMjzq+g== -----END CERTIFICATE-----Generated at Sat Jun 14 18:35:10 2025 by rpki-client