$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer File: d80ecca4-df87-49ed-896a-31c912ba8c98.cer (raw, json) Hash identifier: 98+gExCLXUQA6Loc1Op+ZQTt7+/LLl6qjaOgyoqGObI= Subject key identifier: FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A74AE3F34878301215CC8B580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Jul 2025 00:45:36 +0000 Certificate not after: Tue 12 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 26370 AS: 26566 IP: 23.178.224.0/24 IP: 130.51.192.0/23 IP: 198.163.75.0/24 IP: 2602:fe68::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:ae:3f:34:87:83:01:21:5c:c8:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 9 00:45:36 2025 GMT Not After : Oct 12 00:45:36 2027 GMT Subject: CN=d80ecca4-df87-49ed-896a-31c912ba8c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:cc:f9:52:c1:ce:85:96:3e:83:f0:19:0d: c9:29:3f:c4:9f:ac:80:8b:f3:8a:01:35:83:e0:18: 0e:5b:61:54:85:ef:93:b8:ca:d5:d6:c7:8c:9d:0c: 10:11:e5:fa:2e:66:7f:3e:73:cb:0c:fe:40:a8:3a: 98:c2:3e:6f:8b:8a:f6:87:12:40:50:71:a4:a6:c2: 20:3b:98:59:4d:78:27:bb:f7:3b:e3:26:e4:08:95: 1e:34:65:4c:c3:48:64:f9:03:23:7f:f8:44:ae:7f: 90:3a:8a:a7:86:93:79:6f:98:5d:ce:f7:3f:f6:62: 65:10:77:d5:9a:7b:a5:19:00:a8:45:cc:8e:a4:b5: 22:eb:5e:72:09:f5:c9:42:9a:7f:84:3e:1d:db:97: f0:c6:cc:a8:04:10:86:24:5d:64:49:02:5c:42:01: 31:49:f6:ab:9b:0a:f5:ab:65:0e:2b:0b:f6:e1:2a: 84:63:41:ce:4a:e9:97:fd:fd:36:48:ba:75:10:2f: a7:a5:96:01:4b:73:e4:7e:4d:f3:46:42:ac:07:67: 4c:74:fb:b5:d4:5b:ef:a7:52:3b:8d:a1:25:6d:76: 99:8b:20:74:cc:12:16:b6:ed:c2:5f:fd:76:fd:61: 46:36:28:33:53:91:4c:35:41:23:d4:f7:1c:13:ba: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.178.224.0/24 130.51.192.0/23 198.163.75.0/24 IPv6: 2602:fe68::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26370 26566 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1d:55:60:b1:69:4a:73:d3:0d:01:b6:cf:92:e5:22:c1:08: ca:28:9d:6a:07:b3:9f:bf:4c:fe:49:3c:42:94:96:9a:31:24: f1:d4:2f:8d:9f:c1:c8:2c:0b:ff:a8:34:89:2c:52:29:29:fb: da:6d:02:d0:e5:a0:66:8c:b0:df:7b:46:41:1e:cb:19:35:bb: e6:a4:b7:f0:32:af:36:91:25:1f:13:f8:5c:63:45:09:24:8c: 8e:a2:d5:b5:8c:45:03:b9:8e:0c:11:b7:4b:fa:70:da:11:64: 25:b0:f7:a0:4b:5e:f7:46:e0:ea:a3:c4:6c:3f:0f:5f:64:b0: fd:58:9b:68:99:d3:6a:2f:a5:ec:3b:fc:29:2d:01:df:f8:bb: a2:81:44:ea:3f:79:d4:fa:1c:9e:c3:5d:39:9f:01:f6:66:61: 18:04:2b:86:c1:8a:d2:43:bd:95:50:de:86:e0:67:db:8c:ff: 1a:a8:2c:c1:5a:bb:2b:bf:dd:78:7f:b7:be:be:98:8f:f4:b2: a3:42:5b:c2:34:64:01:2b:ef:ed:4c:c9:10:8c:67:b1:ac:40: bb:af:84:e3:b6:68:6f:a0:09:e3:d8:77:49:f4:58:21:0f:fe: fa:73:56:a0:7d:54:ac:ae:a3:50:1b:b5:21:56:bb:1c:68:4f: 84:6a:94:f7 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEp0rj80h4MBIVzItYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDcwOTAwNDUzNloXDTI3MTAxMjAwNDUzNlowLzEtMCsGA1UEAxMk ZDgwZWNjYTQtZGY4Ny00OWVkLTg5NmEtMzFjOTEyYmE4Yzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmXM+VLBzoWWPoPwGQ3JKT/En6yAi/OKATWD 4BgOW2FUhe+TuMrV1seMnQwQEeX6LmZ/PnPLDP5AqDqYwj5vi4r2hxJAUHGkpsIg O5hZTXgnu/c74ybkCJUeNGVMw0hk+QMjf/hErn+QOoqnhpN5b5hdzvc/9mJlEHfV mnulGQCoRcyOpLUi615yCfXJQpp/hD4d25fwxsyoBBCGJF1kSQJcQgExSfarmwr1 q2UOKwv24SqEY0HOSumX/f02SLp1EC+npZYBS3Pkfk3zRkKsB2dMdPu11Fvvp1I7 jaElbXaZiyB0zBIWtu3CX/12/WFGNigzU5FMNUEj1PccE7qNqQIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFPrZD8N41rb8Tw+9iLYptnGWmw0YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k ODBlY2NhNC1kZjg3LTQ5ZWQtODk2YS0zMWM5MTJiYThjOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Q4MGVjY2E0LWRmODctNDllZC04 OTZhLTMxYzkxMmJhOGM5OC9kODBlY2NhNC1kZjg3LTQ5ZWQtODk2YS0zMWM5MTJi YThjOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXsuADBAGCM8ADBADGo0swDgQCAAIwCAMGBCYC /mgAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAmcCAgJnxjBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACHVVg sWlKc9MNAbbPkuUiwQjKKJ1qB7Ofv0z+STxClJaaMSTx1C+Nn8HILAv/qDSJLFIp KfvabQLQ5aBmjLDfe0ZBHssZNbvmpLfwMq82kSUfE/hcY0UJJIyOotW1jEUDuY4M EbdL+nDaEWQlsPegS173RuDqo8RsPw9fZLD9WJtomdNqL6XsO/wpLQHf+LuigUTq P3nU+hyew105nwH2ZmEYBCuGwYrSQ72VUN6G4GfbjP8aqCzBWrsrv914f7e+vpiP 9LKjQlvCNGQBK+/tTMkQjGexrEC7r4TjtmhvoAnj2HdJ9FghD/76c1agfVSsrqNQ G7UhVrscaE+EapT3 -----END CERTIFICATE-----Generated at Wed Jul 9 20:31:39 2025 by rpki-client