$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer File: df28494f-1d3f-4a45-8a74-bde41c2502a2.cer (raw, json) Hash identifier: zj6XGnlOGGxxA12eydwze3diRDqMIkRUpAV+i00IEhE= Subject key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584998222F7305D2F19B985C1DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Apr 2025 00:45:34 +0000 Certificate not after: Sun 25 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 64236 IP: 66.181.32.0/19 IP: 2604:abc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:22:2f:73:05:d2:f1:9b:98:5c:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 21 00:45:34 2025 GMT Not After : Jul 25 00:45:34 2027 GMT Subject: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6b:18:02:96:5f:a0:13:a2:81:bf:10:03:24: bf:f5:26:4f:9f:5e:8d:eb:5e:d6:ab:b0:8f:21:ed: ae:29:74:4a:dd:a2:da:9c:3a:54:fb:b3:f1:22:9d: fe:c0:89:5f:a2:e9:ee:84:d5:d8:49:4e:1f:10:bc: 12:3e:81:82:b9:4e:31:21:26:8a:b2:79:2c:39:69: 01:56:01:8e:19:96:df:95:1f:e6:f3:36:1e:73:4f: b1:64:eb:7c:8d:38:61:c5:2b:28:4c:2c:ae:71:86: 56:a1:22:e6:c3:f1:72:32:cf:f2:97:21:ee:1b:0b: 59:af:c7:4c:83:6d:33:99:7d:29:b0:83:10:26:a6: c2:f5:56:a4:2c:e3:49:ad:3c:67:51:2d:6b:41:1d: 76:2d:4c:cf:7e:d9:83:71:b5:ed:74:01:70:21:a4: ae:9d:0e:d8:66:47:9b:8a:7c:be:f2:9f:6b:f3:48: 04:16:59:de:72:d0:d5:5d:27:e1:b8:21:d9:6f:bc: 65:6e:b1:95:5b:04:5e:e4:2d:37:16:c9:df:cd:40: 4d:01:1e:df:7c:ac:23:b4:d5:35:66:62:93:c9:14: 3c:7c:9a:1d:8d:3a:7f:6f:2d:74:44:ed:78:10:91: a4:06:77:ba:4c:01:12:34:48:a6:e9:4e:1c:78:df: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.181.32.0/19 IPv6: 2604:abc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64236 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b3:14:65:3a:d8:0d:71:3b:54:c1:f2:20:bf:3b:a4:1a:2a: b2:4f:cd:21:b1:22:9f:1a:13:b3:67:c1:bd:95:00:f5:63:b6: 62:c6:ba:15:65:c9:c0:55:80:90:01:a6:25:da:34:2b:16:34: 9f:8e:e3:e4:a3:45:9a:9f:43:c9:43:5d:a5:db:66:66:9d:b3: f0:21:13:52:11:12:76:b7:a9:c5:bf:a0:cb:a2:0f:0d:c1:f3: bd:28:1f:ff:07:6b:70:42:fe:0e:fe:57:fb:e1:8a:36:3a:d4: 82:7b:29:26:cd:7c:87:f6:6b:14:6b:80:77:38:96:d8:0e:9f: 11:f1:88:fc:4b:6d:1d:e9:9f:b9:95:6b:35:fd:00:7e:71:7d: 9b:89:2d:ca:22:bd:84:29:56:7a:a3:f9:e9:31:4d:98:b0:1c: 99:49:ef:ab:14:ca:d8:8f:c7:6a:e6:04:9f:12:bd:3d:c3:d4: d0:e7:1a:3b:dc:13:a2:01:9e:4b:b9:0e:bb:4a:c6:82:5c:f8: ab:04:24:04:40:b3:e2:95:ce:08:74:b2:78:50:0b:f9:26:d7: 05:6f:26:09:cd:7a:f7:8f:72:c4:d0:3f:63:4c:79:28:1b:86: 9b:48:8a:da:1a:f3:3f:34:54:3e:b4:bc:6c:e1:fb:0b:81:ff: c6:82:1e:61 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEmYIi9zBdLxm5hcHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQyMTAwNDUzNFoXDTI3MDcyNTAwNDUzNFowLzEtMCsGA1UEAxMk ZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUwMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GsYApZfoBOigb8QAyS/9SZPn16N617Wq7CP Ie2uKXRK3aLanDpU+7PxIp3+wIlfounuhNXYSU4fELwSPoGCuU4xISaKsnksOWkB VgGOGZbflR/m8zYec0+xZOt8jThhxSsoTCyucYZWoSLmw/FyMs/ylyHuGwtZr8dM g20zmX0psIMQJqbC9VakLONJrTxnUS1rQR12LUzPftmDcbXtdAFwIaSunQ7YZkeb iny+8p9r80gEFlnectDVXSfhuCHZb7xlbrGVWwRe5C03FsnfzUBNAR7ffKwjtNU1 ZmKTyRQ8fJodjTp/by10RO14EJGkBne6TAESNEim6U4ceN+gkwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKigZY2wrzc633a7UL2gzCSxFUuaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k ZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2RmMjg0OTRmLTFkM2YtNGE0NS04 YTc0LWJkZTQxYzI1MDJhMi9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMy NTAyYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAVCtSAwDQQCAAIwBwMFACYEq8AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPrsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIyzFGU62A1xO1TB8iC/O6QaKrJP zSGxIp8aE7Nnwb2VAPVjtmLGuhVlycBVgJABpiXaNCsWNJ+O4+SjRZqfQ8lDXaXb Zmads/AhE1IREna3qcW/oMuiDw3B870oH/8Ha3BC/g7+V/vhijY61IJ7KSbNfIf2 axRrgHc4ltgOnxHxiPxLbR3pn7mVazX9AH5xfZuJLcoivYQpVnqj+ekxTZiwHJlJ 76sUytiPx2rmBJ8SvT3D1NDnGjvcE6IBnku5DrtKxoJc+KsEJARAs+KVzgh0snhQ C/km1wVvJgnNevePcsTQP2NMeSgbhptIitoa8z80VD60vGzh+wuB/8aCHmE= -----END CERTIFICATE-----Generated at Sun Apr 27 19:29:04 2025 by rpki-client