$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer File: bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer (raw, json) Hash identifier: UqU0HPThfX+OpH7OKXqW9lvIaymLR4LJBQ0p9IzrBUg= Subject key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A102DA0269D7BF46A2CF8D480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Jun 2025 00:45:37 +0000 Certificate not after: Mon 06 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 393437 IP: 23.186.64.0/24 IP: 2600:b400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:2d:a0:26:9d:7b:f4:6a:2c:f8:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 3 00:45:37 2025 GMT Not After : Sep 6 00:45:37 2027 GMT Subject: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:69:56:1d:d8:61:de:c6:a8:3d:91:c5:a7: cf:02:6a:48:46:8e:f2:bc:9c:c4:33:51:37:83:02: 77:a2:33:37:6e:e2:e5:dd:6d:2b:28:c6:16:4d:21: 0a:cb:9d:e8:47:d0:1b:02:5d:ca:80:47:22:75:52: 69:d4:47:ed:f9:e7:76:bc:ea:dc:2e:39:e5:a0:ca: b7:bd:fc:9d:29:ec:23:06:aa:37:ac:de:d2:bc:10: 3d:a7:da:40:6d:47:fa:9f:94:d7:a6:80:88:c7:39: e6:76:b5:56:25:e9:c1:c8:27:6f:63:a2:d6:bb:3d: 1a:86:ed:71:29:79:e0:7d:7d:2e:fc:d0:0e:8a:2d: 57:b7:5d:5c:5c:62:45:f3:e1:de:18:c6:5b:72:18: 62:25:0c:aa:59:22:ed:54:c5:9f:75:01:0f:3d:ef: 12:2c:d7:d3:b7:71:d1:13:15:a6:73:5c:20:7d:32: fe:a9:6e:18:9a:62:3a:c1:d2:7c:69:c1:0f:c0:47: bb:2c:17:7c:91:64:17:96:43:c3:aa:7c:88:f2:ce: fb:fa:66:d6:dd:73:7b:bc:e5:8d:2b:d6:18:51:b7: 19:67:84:df:f4:62:d3:e3:c0:af:49:6f:0c:92:a8: 1d:a3:77:7f:3a:b0:ef:8f:15:61:c6:0f:11:1f:dc: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.186.64.0/24 IPv6: 2600:b400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393437 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b8:8d:80:c5:bf:92:86:46:a8:93:76:6a:3f:06:a6:c9:a3: e6:e7:d4:2e:2f:7d:b5:71:b6:1e:2e:ef:66:e1:50:21:9e:05: 98:2d:9f:42:52:08:a0:ad:d8:ad:fe:b6:9f:80:6f:24:8f:f0: ae:6c:88:cc:54:dd:f0:bb:01:c4:4d:48:74:26:20:90:aa:a0: 96:bc:9f:8d:94:fa:b3:79:ee:25:fb:33:20:1d:0b:33:1d:49: 60:17:7c:bb:6a:ff:bd:5b:4a:71:8c:84:da:d5:5f:dd:fb:80: d7:e8:e6:8b:15:f1:0d:63:4e:17:f6:45:3c:57:ba:a2:2c:bb: 54:aa:73:f5:c2:64:c7:59:5a:f3:43:4e:19:40:f5:af:f9:11: e1:07:76:12:75:78:01:b9:97:89:52:36:0f:80:02:47:4c:bf: 6d:17:25:02:aa:c3:37:3a:f8:09:5b:9e:88:bb:93:e0:08:71: 2d:86:1e:18:4d:26:6c:12:b7:6c:9a:90:d1:ff:80:53:0b:95: d0:13:6f:33:8d:e1:0f:9f:81:61:32:e8:24:f2:6d:f4:4f:c9: 84:3d:40:a2:c4:93:95:39:6a:f2:27:b5:97:c1:fe:e0:c4:3c: ed:53:65:8b:ed:e9:58:93:b2:97:ef:b3:73:07:6f:2a:fa:07: 78:94:96:e7 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEoQLaAmnXv0aiz41IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYwMzAwNDUzN1oXDTI3MDkwNjAwNDUzN1owLzEtMCsGA1UEAxMk YmM4MzFmNmItNzFhNi00NmJiLTlmNjQtMmRhODBjY2MyNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1tpVh3YYd7GqD2RxafPAmpIRo7yvJzEM1E3 gwJ3ojM3buLl3W0rKMYWTSEKy53oR9AbAl3KgEcidVJp1Eft+ed2vOrcLjnloMq3 vfydKewjBqo3rN7SvBA9p9pAbUf6n5TXpoCIxznmdrVWJenByCdvY6LWuz0ahu1x KXngfX0u/NAOii1Xt11cXGJF8+HeGMZbchhiJQyqWSLtVMWfdQEPPe8SLNfTt3HR ExWmc1wgfTL+qW4YmmI6wdJ8acEPwEe7LBd8kWQXlkPDqnyI8s77+mbW3XN7vOWN K9YYUbcZZ4Tf9GLT48CvSW8Mkqgdo3d/OrDvjxVhxg8RH9yWTwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKlQRqVafrsPzgYiuqSvEVnyPs0kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i YzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNjYzI0NGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2JjODMxZjZiLTcxYTYtNDZiYi05 ZjY0LTJkYTgwY2NjMjQ0Yy9iYzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNj YzI0NGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXukAwDQQCAAIwBwMFACYAtAAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgDdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJG4jYDFv5KGRqiTdmo/BqbJo+bn 1C4vfbVxth4u72bhUCGeBZgtn0JSCKCt2K3+tp+AbySP8K5siMxU3fC7AcRNSHQm IJCqoJa8n42U+rN57iX7MyAdCzMdSWAXfLtq/71bSnGMhNrVX937gNfo5osV8Q1j Thf2RTxXuqIsu1Sqc/XCZMdZWvNDThlA9a/5EeEHdhJ1eAG5l4lSNg+AAkdMv20X JQKqwzc6+Albnoi7k+AIcS2GHhhNJmwSt2yakNH/gFMLldATbzON4Q+fgWEy6CTy bfRPyYQ9QKLEk5U5avIntZfB/uDEPO1TZYvt6ViTspfvs3MHbyr6B3iUluc= -----END CERTIFICATE-----Generated at Sun Jun 15 11:58:37 2025 by rpki-client