$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer File: c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer (raw, json) Hash identifier: BCgeAhFmSAvMdUModwpz9lQXyD2YV7/1g+0qAmuLz9Q= Subject key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A294DC3F6828414C55CCFF180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Jun 2025 00:45:35 +0000 Certificate not after: Wed 15 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 5670 IP: 23.134.80.0/24 IP: 206.55.224.0/19 IP: 2605:32c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:4d:c3:f6:82:84:14:c5:5c:cf:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 12 00:45:35 2025 GMT Not After : Sep 15 00:45:35 2027 GMT Subject: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:10:a4:c3:41:86:8e:36:d9:91:5a:64:0d:d8: b9:89:49:47:bb:23:c5:ba:23:58:e6:c8:d0:40:4f: 79:c1:a3:a4:63:57:16:5e:63:ef:cf:47:0e:5f:fa: 52:90:28:fd:1e:de:34:13:1d:a7:0b:44:8c:cd:dd: 78:51:6d:97:f0:ab:bc:c5:97:35:6d:56:eb:b0:81: 68:f2:08:8a:a2:04:f7:5f:ca:74:b8:be:79:7b:25: b5:60:bf:cf:2a:27:21:36:88:88:17:46:c5:45:88: 48:96:66:c6:3c:be:da:ca:d2:83:18:e2:3d:92:c0: 7a:b2:e2:be:f1:12:5a:6d:7d:9c:e4:e6:5a:69:a5: e0:a4:cf:2d:8d:ad:b0:7d:bb:90:46:96:07:8d:0a: 1d:18:0f:b5:0f:1a:cd:5b:3d:14:2a:0a:59:b5:1e: 47:ce:63:b2:7c:04:71:53:42:ec:79:4b:49:f2:85: 5e:6b:6a:19:52:e9:3c:e4:b3:2a:0d:d2:49:dd:f7: a0:15:f7:92:d1:f6:e9:9c:57:55:49:7a:74:af:8d: 1d:9e:6c:05:b9:ce:c9:b0:4c:c4:c8:4a:25:97:8c: 15:f2:fb:e9:05:60:09:3f:b2:fd:fa:96:d0:4c:fd: c6:23:5d:b7:47:19:c0:2f:e6:6c:50:71:0c:75:e8: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.134.80.0/24 206.55.224.0/19 IPv6: 2605:32c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5670 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:70:28:97:cc:a8:82:5d:c9:0c:2f:a4:cb:c8:14:f2:47:0e: 47:b3:1d:10:8d:2b:52:e4:9c:26:ea:18:6b:5b:a4:41:55:6f: 25:00:e2:1f:ba:76:5e:39:eb:b6:2a:1c:fa:ab:62:30:b2:9f: e7:36:7a:65:f6:1e:74:9c:56:78:9d:a3:43:f8:92:e0:5d:70: dc:f4:dd:6f:51:ce:b0:60:ac:40:d2:4d:09:d7:7e:b2:b3:d0: 39:ee:6d:17:10:44:a6:59:e1:3d:79:42:56:b2:f4:c0:3f:3b: 97:64:a6:a9:e9:a9:38:6d:25:6d:ec:5a:92:80:23:9b:e1:e4: c0:1e:a0:91:fc:46:cd:b6:03:be:64:24:46:55:0d:0b:dd:84: e4:69:59:5f:87:60:47:25:44:cb:4d:bb:85:24:66:75:8b:52: dc:5f:71:a6:57:95:a0:89:07:b2:6e:84:89:30:37:bd:09:b7: fd:aa:4a:c8:17:31:58:cd:7a:16:4a:b4:3a:72:a8:c8:bc:7f: db:fb:ee:7f:a1:b3:27:26:d5:bf:e0:b8:22:80:72:81:5b:63: 96:55:d9:87:1c:4a:76:4e:ec:11:ce:0b:73:a4:d1:3c:bf:3b: e0:0e:8a:0f:21:5e:59:f2:ed:13:f1:ad:51:a3:4d:52:98:32: 39:6f:d7:aa -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEopTcP2goQUxVzP8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYxMjAwNDUzNVoXDTI3MDkxNTAwNDUzNVowLzEtMCsGA1UEAxMk YzFjMmZjYjUtODIyNC00MGFhLWJhY2UtMjMwZmNkZWZiYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxCkw0GGjjbZkVpkDdi5iUlHuyPFuiNY5sjQ QE95waOkY1cWXmPvz0cOX/pSkCj9Ht40Ex2nC0SMzd14UW2X8Ku8xZc1bVbrsIFo 8giKogT3X8p0uL55eyW1YL/PKichNoiIF0bFRYhIlmbGPL7aytKDGOI9ksB6suK+ 8RJabX2c5OZaaaXgpM8tja2wfbuQRpYHjQodGA+1DxrNWz0UKgpZtR5HzmOyfARx U0LseUtJ8oVea2oZUuk85LMqDdJJ3fegFfeS0fbpnFdVSXp0r40dnmwFuc7JsEzE yEoll4wV8vvpBWAJP7L9+pbQTP3GI123RxnAL+ZsUHEMdeiq/QIDAQABo4IELzCC BCswHQYDVR0OBBYEFLMhHn6iO9zvEnO45kdO+WdGWGCxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j MWMyZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBmY2RlZmJhYTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2MxYzJmY2I1LTgyMjQtNDBhYS1i YWNlLTIzMGZjZGVmYmFhNS9jMWMyZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBmY2Rl ZmJhYTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXhlADBAXON+AwDQQCAAIwBwMFACYFMsAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICFiYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWHAol8yogl3JDC+ky8gU 8kcOR7MdEI0rUuScJuoYa1ukQVVvJQDiH7p2Xjnrtioc+qtiMLKf5zZ6ZfYedJxW eJ2jQ/iS4F1w3PTdb1HOsGCsQNJNCdd+srPQOe5tFxBEplnhPXlCVrL0wD87l2Sm qempOG0lbexakoAjm+HkwB6gkfxGzbYDvmQkRlUNC92E5GlZX4dgRyVEy027hSRm dYtS3F9xpleVoIkHsm6EiTA3vQm3/apKyBcxWM16Fkq0OnKoyLx/2/vuf6GzJybV v+C4IoBygVtjllXZhxxKdk7sEc4Lc6TRPL874A6KDyFeWfLtE/GtUaNNUpgyOW/X qg== -----END CERTIFICATE-----Generated at Sat Jun 14 20:41:15 2025 by rpki-client