$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer File: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer (raw, json) Hash identifier: WN9icJnJ4qtuwdJO2f0OSeP9A4XMovNKZmNJuZrY8vg= Subject key identifier: 4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A4D98AB34D1A0844ACDF9F600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 00:45:36 +0000 Certificate not after: Tue 28 Sep 2027 00:45:36 +0000 Subordinate resources: IP: 2620:182::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:98:ab:34:d1:a0:84:4a:cd:f9:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jun 25 00:45:36 2025 GMT Not After : Sep 28 00:45:36 2027 GMT Subject: CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:0f:38:25:9a:59:ee:40:40:e2:2e:0f:29: 00:08:d6:fe:8d:d8:c5:db:25:52:d3:ea:75:fc:c5: cc:01:dc:de:2e:20:f6:07:5d:70:02:c7:2c:4e:ac: ca:01:c7:8c:0f:50:c7:99:50:95:0c:69:43:ef:ef: b3:4d:90:a8:52:99:ae:eb:8c:86:84:79:a2:26:17: 21:d7:c3:64:0b:47:d4:4d:40:7f:21:96:ce:74:27: 29:ac:59:54:98:06:d7:50:b2:ba:9a:b4:f2:35:49: ad:e0:13:4b:05:ea:9f:39:04:1e:69:ec:d6:31:d2: 4d:b8:07:20:e0:5d:c5:29:51:a9:e0:9b:05:ae:8c: f7:0c:cb:63:ee:a1:3f:5a:88:50:fd:28:2d:a6:92: 25:ab:fa:8a:af:5b:92:46:4b:a5:44:d2:a3:13:b3: 24:17:a5:bc:9b:44:7c:b1:39:bd:29:ce:8f:fe:d9: 8d:f4:d9:34:7c:7f:b4:86:42:62:2d:d4:1f:a8:64: 2d:29:7f:7d:39:ea:c2:8c:2b:45:b6:a5:d0:3e:0d: 93:61:f3:f5:39:78:48:bf:33:bd:37:b0:2c:07:ea: f4:4b:c7:2f:19:87:f5:5f:97:ce:af:86:40:cd:51: 1c:f6:f0:60:88:e6:a5:07:6b:57:83:41:55:1c:4c: ef:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2620:182::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:84:be:33:4e:d1:a4:e7:3e:20:ad:a1:43:5a:5e:be:06:5e: 75:07:90:e7:b4:96:2e:ef:e6:92:8e:05:23:ab:9f:32:b6:af: 91:61:4a:9a:07:d3:6a:03:e5:e7:b2:9b:4a:a8:b9:9b:b9:24: f7:2b:c0:16:a9:8d:5d:a9:53:ff:7a:69:06:ef:24:9f:f9:af: 41:86:bc:b6:ee:f6:85:0c:03:87:7a:f1:ac:74:7d:9f:60:ed: 81:d9:c8:f2:04:b6:d4:53:ef:04:7a:83:a3:0a:e0:5b:f3:55: 68:36:02:3a:1e:15:b8:cd:71:4d:b1:d1:39:70:5c:03:83:c1: d9:41:87:9c:5f:c7:8b:c1:33:44:c4:f1:14:72:83:c5:ee:30: 12:e6:8a:f5:a3:90:e3:f0:ca:78:28:83:9e:07:eb:1a:fc:f7: 3c:22:01:02:68:a6:34:25:9b:b4:1c:eb:33:20:10:ca:53:8a: a1:0b:81:2e:b6:45:20:56:b4:f4:b1:c0:2a:a3:ac:33:c1:33: cc:50:39:e9:3e:a6:8e:4e:ca:01:6c:3e:7f:73:69:0d:dc:14: 5d:72:30:2d:e7:77:75:14:37:fa:3b:0d:28:40:e0:18:cf:22: 92:e8:8c:25:3a:4e:23:f7:50:d5:e1:13:3c:5c:74:dc:3d:30: 31:01:10:70 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEpNmKs00aCESs359gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDYyNTAwNDUzNloXDTI3MDkyODAwNDUzNlowLzEtMCsGA1UEAxMk YTVjYzg5ZDYtNzA5ZS00MzJiLTlhNmUtMjhhN2UzZmU0YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjIPOCWaWe5AQOIuDykACNb+jdjF2yVS0+p1 /MXMAdzeLiD2B11wAscsTqzKAceMD1DHmVCVDGlD7++zTZCoUpmu64yGhHmiJhch 18NkC0fUTUB/IZbOdCcprFlUmAbXULK6mrTyNUmt4BNLBeqfOQQeaezWMdJNuAcg 4F3FKVGp4JsFroz3DMtj7qE/WohQ/SgtppIlq/qKr1uSRkulRNKjE7MkF6W8m0R8 sTm9Kc6P/tmN9Nk0fH+0hkJiLdQfqGQtKX99OerCjCtFtqXQPg2TYfP1OXhIvzO9 N7AsB+r0S8cvGYf1X5fOr4ZAzVEc9vBgiOalB2tXg0FVHEzvSwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFEsY4w6rjdgpmU5tiDAPx1X2LvsxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h NWNjODlkNi03MDllLTQzMmItOWE2ZS0yOGE3ZTNmZTRjMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2E1Y2M4OWQ2LTcwOWUtNDMyYi05 YTZlLTI4YTdlM2ZlNGMyYi9hNWNjODlkNi03MDllLTQzMmItOWE2ZS0yOGE3ZTNm ZTRjMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmIAGCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYhL4zTtGk5z4graFD Wl6+Bl51B5DntJYu7+aSjgUjq58ytq+RYUqaB9NqA+XnsptKqLmbuST3K8AWqY1d qVP/emkG7ySf+a9Bhry27vaFDAOHevGsdH2fYO2B2cjyBLbUU+8EeoOjCuBb81Vo NgI6HhW4zXFNsdE5cFwDg8HZQYecX8eLwTNExPEUcoPF7jAS5or1o5Dj8Mp4KIOe B+sa/Pc8IgECaKY0JZu0HOszIBDKU4qhC4EutkUgVrT0scAqo6wzwTPMUDnpPqaO TsoBbD5/c2kN3BRdcjAt53d1FDf6Ow0oQOAYzyKS6IwlOk4j91DV4RM8XHTcPTAx ARBw -----END CERTIFICATE-----Generated at Mon Jun 30 15:27:04 2025 by rpki-client