$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer File: 65b40bd5-5bac-4926-93a3-fd16c7c31445.cer (raw, json) Hash identifier: 36kSkxv1NNpgmjcxjnh1ythynraEtGHMdF75d/RGkRU= Subject key identifier: 37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849C2027392122273F57580CD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 May 2025 00:45:35 +0000 Certificate not after: Mon 09 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 32712 IP: 2607:8840::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:02:73:92:12:22:73:f5:75:80:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 6 00:45:35 2025 GMT Not After : Aug 9 00:45:35 2027 GMT Subject: CN=65b40bd5-5bac-4926-93a3-fd16c7c31445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:d5:92:c1:3b:8e:b2:6b:31:9b:7c:66:a4: 02:eb:80:c6:fc:5e:c8:c1:db:5f:88:b0:60:0d:6b: da:2f:72:ce:ff:88:0d:b6:8b:91:7f:80:09:73:2d: ae:30:63:e1:54:38:cf:d8:f9:1a:4c:c3:30:8f:2d: f4:26:9d:dc:17:e7:4b:68:0a:e5:94:ad:47:e1:8d: 11:8e:e6:12:e2:04:e6:56:d6:71:af:77:fb:09:7e: d3:c4:5d:fa:98:a4:a6:0f:98:0c:5a:cc:67:85:f0: 63:f2:0f:4c:ba:7f:e7:50:31:33:f2:8d:59:09:ad: 52:04:ec:24:bf:ee:e1:dc:61:e1:4e:ca:f0:9d:45: f2:fb:93:ef:21:94:75:ee:5f:ec:d2:62:51:ce:4b: 0b:97:72:46:30:c6:2c:cc:7e:a3:f0:c2:e2:be:73: 5b:53:39:08:dc:25:57:12:12:b1:6c:66:3b:56:70: bd:6f:85:6e:0b:cb:a5:1e:fc:91:0d:59:03:86:a6: 41:e0:12:10:c0:c3:64:0e:9a:46:7e:aa:4a:c3:6b: af:c9:1c:b6:c3:fe:2f:c9:e2:0c:c1:58:a9:9a:6b: 49:c5:55:dd:d1:55:8c:e1:67:e8:eb:1a:08:47:fb: 03:8e:01:45:cc:74:6f:d1:99:48:78:d2:8e:9b:16: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2607:8840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32712 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:28:46:f2:e7:ff:7a:00:98:05:b3:68:9f:91:3c:96:e8:c5: 13:51:54:b9:6b:84:68:cc:18:6d:10:f1:d5:6f:56:ef:6b:8a: 22:7d:73:fd:dd:0d:91:8c:b5:fd:56:71:89:05:aa:27:48:c7: 38:bf:73:2d:05:47:83:bc:3c:09:f5:6c:4a:95:06:78:e9:60: a8:ca:7b:aa:6a:c9:c4:92:e4:42:ea:72:20:c5:21:4c:de:e0: 48:b3:0f:aa:8f:d1:35:e2:d2:4c:27:69:04:36:d7:01:cb:97: 82:12:80:b0:0d:cd:55:bf:47:0d:74:9e:2e:98:f1:a7:8a:2f: 7b:3c:75:a5:4f:f9:80:78:e0:29:18:af:a5:c5:d4:af:45:9b: ce:b6:4a:a6:fd:24:1e:54:68:ff:86:aa:c0:ff:2b:b0:da:1a: f5:27:73:27:d2:cb:50:aa:de:ef:ea:44:7b:54:ba:9c:43:28: f0:27:e0:0e:59:d7:f3:ff:a3:43:5a:33:61:77:c2:d1:83:89: 73:10:f2:bd:60:37:da:68:b2:b4:18:f4:8b:b9:7a:1c:68:ec: 95:4f:82:85:3a:26:7c:56:06:19:c6:33:23:60:b2:ba:67:5b: c1:50:ca:13:e3:f6:25:74:b9:49:d1:f3:80:0c:6e:2b:91:a1: 56:4b:e4:e5 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEnCAnOSEiJz9XWAzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNjAwNDUzNVoXDTI3MDgwOTAwNDUzNVowLzEtMCsGA1UEAxMk NjViNDBiZDUtNWJhYy00OTI2LTkzYTMtZmQxNmM3YzMxNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbrVksE7jrJrMZt8ZqQC64DG/F7IwdtfiLBg DWvaL3LO/4gNtouRf4AJcy2uMGPhVDjP2PkaTMMwjy30Jp3cF+dLaArllK1H4Y0R juYS4gTmVtZxr3f7CX7TxF36mKSmD5gMWsxnhfBj8g9Mun/nUDEz8o1ZCa1SBOwk v+7h3GHhTsrwnUXy+5PvIZR17l/s0mJRzksLl3JGMMYszH6j8MLivnNbUzkI3CVX EhKxbGY7VnC9b4VuC8ulHvyRDVkDhqZB4BIQwMNkDppGfqpKw2uvyRy2w/4vyeIM wVipmmtJxVXd0VWM4Wfo6xoIR/sDjgFFzHRv0ZlIeNKOmxYTCQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDfchxg7s3wXQVMcY2sYYggFHlK0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 NWI0MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2YzdjMzE0NDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzY1YjQwYmQ1LTViYWMtNDkyNi05 M2EzLWZkMTZjN2MzMTQ0NS82NWI0MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2Yzdj MzE0NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB4hAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC An/IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJAoRvLn/3oAmAWzaJ+RPJboxRNRVLlrhGjMGG0Q8dVvVu9r iiJ9c/3dDZGMtf1WcYkFqidIxzi/cy0FR4O8PAn1bEqVBnjpYKjKe6pqycSS5ELq ciDFIUze4EizD6qP0TXi0kwnaQQ21wHLl4ISgLANzVW/Rw10ni6Y8aeKL3s8daVP +YB44CkYr6XF1K9Fm862Sqb9JB5UaP+GqsD/K7DaGvUncyfSy1Cq3u/qRHtUupxD KPAn4A5Z1/P/o0NaM2F3wtGDiXMQ8r1gN9posrQY9Iu5ehxo7JVPgoU6JnxWBhnG MyNgsrpnW8FQyhPj9iV0uUnR84AMbiuRoVZL5OU= -----END CERTIFICATE-----Generated at Sat May 10 07:52:45 2025 by rpki-client