$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer File: bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer (raw, json) Hash identifier: u+a43aKmVKbQqDPYZTaqnalmn5nVGd/Eamk1Mt5e19k= Subject key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849B2B208819E83640B30BA4F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 13:06:26 +0000 Certificate not after: Wed 03 Jun 2026 00:45:20 +0000 Subordinate resources: AS: 393437 IP: 23.186.64.0/24 IP: 2600:b400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:b2:08:81:9e:83:64:0b:30:ba:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 30 13:06:26 2025 GMT Not After : Jun 3 00:45:20 2026 GMT Subject: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:69:56:1d:d8:61:de:c6:a8:3d:91:c5:a7: cf:02:6a:48:46:8e:f2:bc:9c:c4:33:51:37:83:02: 77:a2:33:37:6e:e2:e5:dd:6d:2b:28:c6:16:4d:21: 0a:cb:9d:e8:47:d0:1b:02:5d:ca:80:47:22:75:52: 69:d4:47:ed:f9:e7:76:bc:ea:dc:2e:39:e5:a0:ca: b7:bd:fc:9d:29:ec:23:06:aa:37:ac:de:d2:bc:10: 3d:a7:da:40:6d:47:fa:9f:94:d7:a6:80:88:c7:39: e6:76:b5:56:25:e9:c1:c8:27:6f:63:a2:d6:bb:3d: 1a:86:ed:71:29:79:e0:7d:7d:2e:fc:d0:0e:8a:2d: 57:b7:5d:5c:5c:62:45:f3:e1:de:18:c6:5b:72:18: 62:25:0c:aa:59:22:ed:54:c5:9f:75:01:0f:3d:ef: 12:2c:d7:d3:b7:71:d1:13:15:a6:73:5c:20:7d:32: fe:a9:6e:18:9a:62:3a:c1:d2:7c:69:c1:0f:c0:47: bb:2c:17:7c:91:64:17:96:43:c3:aa:7c:88:f2:ce: fb:fa:66:d6:dd:73:7b:bc:e5:8d:2b:d6:18:51:b7: 19:67:84:df:f4:62:d3:e3:c0:af:49:6f:0c:92:a8: 1d:a3:77:7f:3a:b0:ef:8f:15:61:c6:0f:11:1f:dc: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.186.64.0/24 IPv6: 2600:b400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393437 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b8:c9:d8:64:27:57:b5:7c:14:0c:cf:8f:7a:83:71:92:47: 88:c5:19:82:c3:d3:6c:b7:8d:ac:b1:a2:30:5c:4d:88:90:23: 10:db:05:f9:3a:80:cf:65:bf:99:13:52:78:de:3e:c0:b5:94: 4a:43:d6:65:a8:32:24:af:74:3b:67:a4:76:8f:0b:cf:8a:7e: 53:33:9a:4e:b8:ab:83:ec:d5:fc:45:fc:5e:58:12:30:55:09: 26:c6:81:0a:de:df:4d:09:2a:84:70:ca:9b:5b:a5:c7:36:51: 8b:78:d6:87:4b:c3:e8:f7:6f:de:d3:fb:5b:dd:62:b3:8f:01: 33:a5:e1:69:db:51:09:61:7a:2f:98:ba:d1:87:6c:6d:07:d1: e7:1c:12:58:23:d3:7c:21:a2:e3:15:eb:63:20:32:bc:72:0b: df:78:0f:72:ba:05:2b:48:4a:ec:62:23:80:51:54:54:f7:74: 0f:3b:e7:db:36:66:99:ec:79:1b:b8:b9:69:52:7e:4b:78:3c: 6c:6a:ea:a0:c9:3f:c8:c5:db:66:e7:2c:f0:f4:de:86:6a:b2: 85:9e:90:d1:d2:10:d8:c2:95:b8:16:58:53:ef:1c:7e:cd:b0: 07:79:30:e1:b1:62:80:1b:ab:ff:8c:25:35:93:ed:46:61:4e: 18:88:b0:61 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEmysgiBnoNkCzC6T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQzMDEzMDYyNloXDTI2MDYwMzAwNDUyMFowLzEtMCsGA1UEAxMk YmM4MzFmNmItNzFhNi00NmJiLTlmNjQtMmRhODBjY2MyNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1tpVh3YYd7GqD2RxafPAmpIRo7yvJzEM1E3 gwJ3ojM3buLl3W0rKMYWTSEKy53oR9AbAl3KgEcidVJp1Eft+ed2vOrcLjnloMq3 vfydKewjBqo3rN7SvBA9p9pAbUf6n5TXpoCIxznmdrVWJenByCdvY6LWuz0ahu1x KXngfX0u/NAOii1Xt11cXGJF8+HeGMZbchhiJQyqWSLtVMWfdQEPPe8SLNfTt3HR ExWmc1wgfTL+qW4YmmI6wdJ8acEPwEe7LBd8kWQXlkPDqnyI8s77+mbW3XN7vOWN K9YYUbcZZ4Tf9GLT48CvSW8Mkqgdo3d/OrDvjxVhxg8RH9yWTwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKlQRqVafrsPzgYiuqSvEVnyPs0kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i YzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNjYzI0NGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2JjODMxZjZiLTcxYTYtNDZiYi05 ZjY0LTJkYTgwY2NjMjQ0Yy9iYzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNj YzI0NGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXukAwDQQCAAIwBwMFACYAtAAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgDdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABC4ydhkJ1e1fBQMz496g3GSR4jF GYLD02y3jayxojBcTYiQIxDbBfk6gM9lv5kTUnjePsC1lEpD1mWoMiSvdDtnpHaP C8+KflMzmk64q4Ps1fxF/F5YEjBVCSbGgQre300JKoRwyptbpcc2UYt41odLw+j3 b97T+1vdYrOPATOl4WnbUQlhei+YutGHbG0H0eccElgj03whouMV62MgMrxyC994 D3K6BStISuxiI4BRVFT3dA8759s2ZpnseRu4uWlSfkt4PGxq6qDJP8jF22bnLPD0 3oZqsoWekNHSENjClbgWWFPvHH7NsAd5MOGxYoAbq/+MJTWT7UZhThiIsGE= -----END CERTIFICATE-----Generated at Sun May 4 16:19:18 2025 by rpki-client