$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer File: fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer (raw, json) Hash identifier: Lx6Jb65P5kdt+BiZogENhwW80ro0xefrhdSyfp4GOIk= Subject key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A0D62EC71FF7A0ACD0C392A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Jun 2025 00:45:35 +0000 Certificate not after: Sun 05 Sep 2027 00:45:35 +0000 Subordinate resources: IP: 131.253.1.0/24 IP: 131.253.3.0/24 IP: 131.253.5.0 -- 131.253.6.255 IP: 131.253.8.0/24 IP: 131.253.12.0 -- 131.253.18.255 IP: 131.253.21.0 -- 131.253.47.255 IP: 131.253.61.0 -- 131.253.255.255 IP: 132.245.0.0/16 IP: 134.170.0.0/16 IP: 134.177.0.0/16 IP: 137.116.0.0/15 IP: 137.135.0.0/16 IP: 138.91.0.0/16 IP: 141.251.0.0/16 IP: 168.61.0.0 -- 168.63.255.255 IP: 192.32.0.0/16 IP: 192.48.225.0/24 IP: 192.84.159.0 -- 192.84.161.255 IP: 198.49.8.0/24 IP: 198.200.130.0/24 IP: 198.206.164.0/24 IP: 199.30.16.0/20 IP: 199.74.210.0/24 IP: 199.242.32.0 -- 199.242.55.255 IP: 204.152.140.0/23 IP: 205.174.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:62:ec:71:ff:7a:0a:cd:0c:39:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 2 00:45:35 2025 GMT Not After : Sep 5 00:45:35 2027 GMT Subject: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:20:da:e2:91:3d:c9:8a:13:ee:fd:f0:14: c0:25:3e:2c:93:87:2c:04:31:c1:cf:88:39:90:d4: 31:2e:e8:cf:81:af:06:53:c8:70:6b:cf:3c:ed:a0: 89:13:85:2d:51:51:13:b9:26:46:7b:3c:bd:2c:98: 5c:ae:c3:6e:e9:26:14:25:3f:e5:c6:6d:00:ec:6e: 0b:8b:3b:17:a7:f1:a8:a5:80:c8:a3:7c:52:d1:30: 5e:8f:aa:2e:67:64:2c:b5:fa:83:36:f0:9b:8b:f0: fa:9c:0d:ee:f9:35:e4:fa:5d:e4:9c:cc:44:31:1e: 92:9b:92:0f:74:4a:7f:40:8e:14:c4:e4:d9:64:06: e5:51:db:c7:ce:33:b7:99:ce:f1:66:f9:1e:e2:67: 6b:9a:0e:b8:b6:c6:dc:bc:93:d5:35:1e:81:c4:90: 5e:d2:52:ef:6d:e4:66:df:93:d2:5f:37:eb:69:b2: 06:1a:0a:ca:3a:c3:26:42:2c:59:9c:8a:fa:ba:4d: 75:64:89:78:69:26:ce:18:e9:3f:36:9a:32:47:66: 69:13:1b:87:62:dc:a7:d7:5e:98:83:17:aa:4e:b2: 33:b9:05:a3:67:70:d4:81:75:4a:f2:07:61:d1:ae: ce:15:01:49:43:a9:c8:33:bb:7f:87:9a:0f:9d:bd: c4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 131.253.1.0/24 131.253.3.0/24 131.253.5.0-131.253.6.255 131.253.8.0/24 131.253.12.0-131.253.18.255 131.253.21.0-131.253.47.255 131.253.61.0-131.253.255.255 132.245.0.0/16 134.170.0.0/16 134.177.0.0/16 137.116.0.0/15 137.135.0.0/16 138.91.0.0/16 141.251.0.0/16 168.61.0.0-168.63.255.255 192.32.0.0/16 192.48.225.0/24 192.84.159.0-192.84.161.255 198.49.8.0/24 198.200.130.0/24 198.206.164.0/24 199.30.16.0/20 199.74.210.0/24 199.242.32.0-199.242.55.255 204.152.140.0/23 205.174.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:cf:1a:49:8e:e1:06:5f:0e:1c:2b:58:ad:96:b3:cd:68:2b: 84:3e:6f:a4:d8:65:b3:b8:90:75:14:b7:c3:42:f4:f7:c3:2d: 4b:20:af:31:0a:2e:16:e2:31:97:e9:7e:8d:40:f1:53:7e:c9: f9:7f:11:ea:cb:26:5b:9a:0a:bc:2e:12:e2:95:5e:97:f7:7e: e9:bf:5c:bd:78:7e:f4:2d:05:40:b1:ed:9f:9c:ce:b3:e2:2e: c2:41:98:f0:4b:ff:6b:c5:cc:05:ca:d2:68:db:a8:e2:97:b4: 84:da:3f:d7:c8:73:84:85:18:06:0d:75:db:b2:fb:8a:db:4e: c8:87:a6:78:ab:f8:ac:8d:73:48:5d:6a:a1:51:75:37:fc:01: fb:f6:c7:d5:51:e9:50:32:3c:a9:ad:8b:59:aa:99:71:a3:e2: 5b:3d:7b:50:4a:84:82:08:09:db:d4:7c:f7:f7:d8:a6:13:a7: d4:00:3b:10:f6:17:1c:9e:60:33:e9:0b:33:3e:2b:7e:2a:43: af:b1:04:16:39:c8:91:e2:db:18:f0:62:65:56:4d:49:59:6f: 79:7d:cc:6f:83:c5:42:da:e7:8f:a0:69:8c:82:6e:dd:b2:58: db:0e:74:38:46:57:98:ff:2a:10:10:0f:f8:b2:e1:b4:86:8b: 7d:86:2c:8c -----BEGIN CERTIFICATE----- MIIHtTCCBp2gAwIBAgIUAQ0Mn0MoWEoNYuxx/3oKzQw5KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYwMjAwNDUzNVoXDTI3MDkwNTAwNDUzNVowLzEtMCsGA1UEAxMk ZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS0g2uKRPcmKE+798BTAJT4sk4csBDHBz4g5 kNQxLujPga8GU8hwa8887aCJE4UtUVETuSZGezy9LJhcrsNu6SYUJT/lxm0A7G4L izsXp/GopYDIo3xS0TBej6ouZ2QstfqDNvCbi/D6nA3u+TXk+l3knMxEMR6Sm5IP dEp/QI4UxOTZZAblUdvHzjO3mc7xZvke4mdrmg64tsbcvJPVNR6BxJBe0lLvbeRm 35PSXzfrabIGGgrKOsMmQixZnIr6uk11ZIl4aSbOGOk/NpoyR2ZpExuHYtyn116Y gxeqTrIzuQWjZ3DUgXVK8gdh0a7OFQFJQ6nIM7t/h5oPnb3EDwIDAQABo4IExzCC BMMwHQYDVR0OBBYEFLmj0JFWAovB8vJ3QS2CG87Sv9tDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m ZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZkZTFlM2QxLWQ4ZGEtNGZhOS04 MDY4LTFiNjQxY2FiNzQzZC9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNh Yjc0M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgeYGCCsGAQUF BwEHAQH/BIHWMIHTMIHQBAIAATCByQMEAIP9AQMEAIP9AzAMAwQAg/0FAwQAg/0G AwQAg/0IMAwDBAKD/QwDBACD/RIwDAMEAIP9FQMEBIP9IDALAwQAg/09AwMBg/wD AwCE9QMDAIaqAwMAhrEDAwGJdAMDAImHAwMAilsDAwCN+zAKAwMAqD0DAwaoAAMD AMAgAwQAwDDhMAwDBADAVJ8DBAHAVKADBADGMQgDBADGyIIDBADGzqQDBATHHhAD BADHStIwDAMEBcfyIAMEA8fyMAMEAcyYjAMEBM2u4DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARzxpJjuEG Xw4cK1itlrPNaCuEPm+k2GWzuJB1FLfDQvT3wy1LIK8xCi4W4jGX6X6NQPFTfsn5 fxHqyyZbmgq8LhLilV6X937pv1y9eH70LQVAse2fnM6z4i7CQZjwS/9rxcwFytJo 26jil7SE2j/XyHOEhRgGDXXbsvuK207Ih6Z4q/isjXNIXWqhUXU3/AH79sfVUelQ MjyprYtZqplxo+JbPXtQSoSCCAnb1Hz399imE6fUADsQ9hccnmAz6QszPit+KkOv sQQWOciR4tsY8GJlVk1JWW95fcxvg8VC2uePoGmMgm7dsljbDnQ4RleY/yoQEA/4 suG0hot9hiyM -----END CERTIFICATE-----Generated at Sun Jun 15 11:58:07 2025 by rpki-client