$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b.cer File: 0e57893c-23f0-42fb-8b16-9b33b844849b.cer (raw, json) Hash identifier: J3UchLZ/CepI1fVrC10r0fHNkSTwZbYki3+H0EVibPw= Subject key identifier: 63:A8:3E:52:7D:F3:82:0D:3C:FF:6B:BB:10:BD:E6:4A:36:3A:20:3D Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849BF37C3956CB90D508E9D1880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/0e57893c-23f0-42fb-8b16-9b33b844849b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 May 2025 00:45:34 +0000 Certificate not after: Sun 08 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 398858 IP: 2602:f98f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:37:c3:95:6c:b9:0d:50:8e:9d:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 5 00:45:34 2025 GMT Not After : Aug 8 00:45:34 2027 GMT Subject: CN=0e57893c-23f0-42fb-8b16-9b33b844849b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:a1:6a:c0:84:21:2c:0a:ce:b4:55:bd:0e: 47:c7:b3:c7:9f:71:0d:9d:db:79:e7:d6:8a:3f:cb: 6e:03:79:e5:1c:50:64:bf:c9:c9:61:92:1b:00:07: ff:c4:00:ad:55:5f:26:f6:27:5d:31:6d:98:29:15: 14:22:69:0a:40:88:f1:6b:7d:b6:2f:91:44:1f:35: b7:3e:c7:93:64:c3:0b:c4:9f:69:2d:15:34:16:30: 57:36:49:02:6a:7b:5a:a8:26:74:4c:cb:65:62:80: 43:32:b6:d9:ec:65:14:5e:f8:d2:2b:c9:9c:78:b0: ea:a6:74:ed:c4:49:ec:cf:78:c2:ed:a3:c0:14:af: bb:af:da:f6:a5:c4:16:f3:8c:5e:1c:95:b1:31:d5: 97:a0:8f:d4:01:03:61:d0:7f:d8:27:d3:7f:f7:80: 24:6d:8e:0c:58:7e:d7:ff:64:b9:23:1d:01:ba:57: a6:58:1b:28:3e:d3:00:f0:c6:96:e8:e5:b3:4b:9a: 10:90:71:ea:83:c7:85:f1:41:f6:46:2f:cf:0e:c5: cd:af:10:88:36:4d:f1:64:4f:37:ae:e7:32:c3:19: a9:93:c4:1b:b0:51:21:51:6c:e6:22:b7:5a:51:5c: 16:80:db:fc:17:8e:97:b8:bd:d4:02:61:47:cc:cd: 36:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A8:3E:52:7D:F3:82:0D:3C:FF:6B:BB:10:BD:E6:4A:36:3A:20:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e57893c-23f0-42fb-8b16-9b33b844849b/0e57893c-23f0-42fb-8b16-9b33b844849b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398858 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:eb:30:f3:78:8e:b6:88:13:82:3a:38:c3:02:1c:ff:de:f2: 04:96:2c:ac:4d:1a:3a:7a:57:a5:f1:f2:d6:1b:59:fc:05:83: c6:80:72:92:cb:25:7e:c0:73:2b:5a:f8:88:01:4a:1b:89:bc: 63:90:00:33:09:dd:c8:74:2a:b1:ac:25:f0:85:1b:4b:91:a3: 5a:84:f8:ce:bd:a2:49:7f:18:c5:db:8c:79:e1:91:f5:45:20: a9:eb:e4:8e:67:eb:8c:7d:1f:73:0b:d4:bc:12:ff:80:2f:03: cf:3a:e2:02:1d:05:76:6d:ec:25:83:c3:5e:d1:67:f7:b9:1a: 7f:e0:7f:9e:03:5d:8f:c6:55:90:60:91:29:63:72:1c:10:a8: ca:c2:eb:2e:19:dd:dd:05:4a:85:b1:d6:b2:ae:de:4f:d1:5b: 66:09:ea:76:80:f0:84:7f:36:d0:cc:1d:45:fd:ca:92:4d:f1: 26:96:c0:8f:55:9f:b9:e7:b6:26:d6:81:09:52:c5:93:c5:46: 39:7f:9d:4d:22:67:b8:a4:96:91:33:7f:c6:c5:25:3f:b5:a8: b2:25:87:80:09:da:71:a7:a0:ea:0f:26:fc:04:cd:87:04:bd: 74:ec:89:4c:e8:dd:33:42:37:7a:bf:c4:66:85:04:b3:20:f4: 9e:6c:b2:f5 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEm/N8OVbLkNUI6dGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNTAwNDUzNFoXDTI3MDgwODAwNDUzNFowLzEtMCsGA1UEAxMk MGU1Nzg5M2MtMjNmMC00MmZiLThiMTYtOWIzM2I4NDQ4NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm6hasCEISwKzrRVvQ5Hx7PHn3ENndt559aK P8tuA3nlHFBkv8nJYZIbAAf/xACtVV8m9iddMW2YKRUUImkKQIjxa322L5FEHzW3 PseTZMMLxJ9pLRU0FjBXNkkCantaqCZ0TMtlYoBDMrbZ7GUUXvjSK8mceLDqpnTt xEnsz3jC7aPAFK+7r9r2pcQW84xeHJWxMdWXoI/UAQNh0H/YJ9N/94AkbY4MWH7X /2S5Ix0BulemWBsoPtMA8MaW6OWzS5oQkHHqg8eF8UH2Ri/PDsXNrxCINk3xZE83 rucywxmpk8QbsFEhUWzmIrdaUVwWgNv8F46XuL3UAmFHzM02+wIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFGOoPlJ984INPP9ruxC95ko2OiA9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w ZTU3ODkzYy0yM2YwLTQyZmItOGIxNi05YjMzYjg0NDg0OWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzBlNTc4OTNjLTIzZjAtNDJmYi04 YjE2LTliMzNiODQ0ODQ5Yi8wZTU3ODkzYy0yM2YwLTQyZmItOGIxNi05YjMzYjg0 NDg0OWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvmPADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGFgowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPOsw83iOtogTgjo4wwIc/97yBJYsrE0aOnpXpfHy1htZ /AWDxoByksslfsBzK1r4iAFKG4m8Y5AAMwndyHQqsawl8IUbS5GjWoT4zr2iSX8Y xduMeeGR9UUgqevkjmfrjH0fcwvUvBL/gC8DzzriAh0Fdm3sJYPDXtFn97kaf+B/ ngNdj8ZVkGCRKWNyHBCoysLrLhnd3QVKhbHWsq7eT9FbZgnqdoDwhH820MwdRf3K kk3xJpbAj1Wfuee2JtaBCVLFk8VGOX+dTSJnuKSWkTN/xsUlP7WosiWHgAnacaeg 6g8m/ATNhwS9dOyJTOjdM0I3er/EZoUEsyD0nmyy9Q== -----END CERTIFICATE-----Generated at Wed May 7 15:22:27 2025 by rpki-client