$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef.cer File: d9676341-649a-455a-996d-1bf21249eaef.cer (raw, json) Hash identifier: eAo97Lr8K4D4ZUfUAEEbRqCTYYG1Bd5W6mvpwDI2vvQ= Subject key identifier: 19:88:90:E9:13:98:65:31:94:9D:62:5C:1F:4F:16:4C:2A:B5:A1:D9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A4108951AAA5E317649003300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/d9676341-649a-455a-996d-1bf21249eaef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Jun 2025 12:45:36 +0000 Certificate not after: Thu 23 Sep 2027 12:45:36 +0000 Subordinate resources: AS: 19451 IP: 2607:a0c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:08:95:1a:aa:5e:31:76:49:00:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 20 12:45:36 2025 GMT Not After : Sep 23 12:45:36 2027 GMT Subject: CN=d9676341-649a-455a-996d-1bf21249eaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:03:9d:a4:8b:2b:2e:85:ba:a5:be:a8:7d: 99:12:c2:27:f7:7b:e7:25:4d:74:cd:f8:a5:81:f6: 66:89:4d:87:5d:8e:e2:a3:8f:39:8b:9d:6b:5b:b3: 8c:ab:61:72:39:a2:99:3f:ed:35:2a:32:0c:1e:1b: 5e:c2:37:59:34:c3:85:c3:5f:5d:9c:c1:a3:2a:f5: 60:be:ff:95:c1:1f:f3:71:30:e4:e3:2c:b5:3d:9d: a6:ab:53:b7:87:f9:0f:a3:57:0a:30:4a:c5:bf:9e: 7e:c0:35:f0:dc:88:dd:b6:89:90:f7:f9:05:c3:03: 22:b5:08:e8:ad:64:27:35:fb:9f:d0:01:e7:ce:fc: f1:99:25:f1:5a:c5:53:82:53:bc:64:72:d9:d7:83: 9f:cf:11:03:e8:c9:81:15:a4:2e:3f:88:a9:24:2b: c0:07:61:d4:91:f5:15:06:cc:99:e5:0c:bb:36:ad: 0d:5f:83:4f:a1:3b:42:16:72:62:95:3d:c0:05:4d: c7:84:ba:d8:4a:76:8b:aa:b1:16:64:87:9a:fa:50: 44:2e:a7:76:d2:b6:49:59:d6:b2:12:60:06:f4:35: f0:57:61:11:05:31:75:97:28:f3:36:18:e9:7d:94: 95:8d:2e:29:a7:07:14:75:be:fc:9f:92:7b:a1:4a: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:88:90:E9:13:98:65:31:94:9D:62:5C:1F:4F:16:4C:2A:B5:A1:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/d9676341-649a-455a-996d-1bf21249eaef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2607:a0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19451 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:31:03:e5:93:e8:27:c0:37:5a:83:0b:b5:93:33:59:b8:8c: 27:45:ae:fa:3e:63:df:c6:f4:a7:54:31:fe:cb:f5:41:cf:48: c5:d9:9f:04:55:d1:53:87:5c:d1:30:22:6a:e9:3e:90:08:db: 98:55:e6:23:7a:98:a4:bd:42:08:01:28:f4:8e:a2:2d:54:3e: d1:0d:23:48:0b:8a:6d:08:23:f0:8b:f6:e0:e9:45:d6:a2:9c: 65:95:bb:b4:ff:d6:4e:75:06:6f:d6:1d:db:36:19:66:c4:26: e0:28:07:d5:e1:1d:f1:5b:85:09:17:10:d0:f4:03:c1:1c:c4: 0f:6b:f4:46:4b:db:e5:b9:3e:77:e3:a4:c0:81:2f:df:c9:92: ab:cc:08:8d:55:af:90:63:eb:63:50:9f:6b:fc:1e:d0:f9:d5: d5:2d:75:fa:9c:dc:d6:7d:a6:0e:f8:d6:73:d0:b5:50:12:2c: c4:99:8f:60:36:f5:85:97:12:12:eb:a6:ca:8d:ea:ba:8a:80: 65:9b:db:67:b8:3f:75:9f:aa:3b:97:b4:69:8c:8a:49:80:7d: 8b:44:c3:7a:6f:22:0c:d6:41:d7:6c:11:a7:62:20:ee:b3:91: f9:13:40:d4:8e:75:ac:d2:32:c5:1c:41:7f:d9:2d:7b:83:5f: 7d:c1:e0:59 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEpBCJUaql4xdkkAMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyMDEyNDUzNloXDTI3MDkyMzEyNDUzNlowLzEtMCsGA1UEAxMk ZDk2NzYzNDEtNjQ5YS00NTVhLTk5NmQtMWJmMjEyNDllYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjcDnaSLKy6FuqW+qH2ZEsIn93vnJU10zfil gfZmiU2HXY7io485i51rW7OMq2FyOaKZP+01KjIMHhtewjdZNMOFw19dnMGjKvVg vv+VwR/zcTDk4yy1PZ2mq1O3h/kPo1cKMErFv55+wDXw3IjdtomQ9/kFwwMitQjo rWQnNfuf0AHnzvzxmSXxWsVTglO8ZHLZ14OfzxED6MmBFaQuP4ipJCvAB2HUkfUV BsyZ5Qy7Nq0NX4NPoTtCFnJilT3ABU3HhLrYSnaLqrEWZIea+lBELqd20rZJWday EmAG9DXwV2ERBTF1lyjzNhjpfZSVjS4ppwcUdb78n5J7oUp0XQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBmIkOkTmGUxlJ1iXB9PFkwqtaHZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k OTY3NjM0MS02NDlhLTQ1NWEtOTk2ZC0xYmYyMTI0OWVhZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Q5Njc2MzQxLTY0OWEtNDU1YS05 OTZkLTFiZjIxMjQ5ZWFlZi9kOTY3NjM0MS02NDlhLTQ1NWEtOTk2ZC0xYmYyMTI0 OWVhZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB6DAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Akv7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF8xA+WT6CfAN1qDC7WTM1m4jCdFrvo+Y9/G9KdUMf7L9UHP SMXZnwRV0VOHXNEwImrpPpAI25hV5iN6mKS9QggBKPSOoi1UPtENI0gLim0II/CL 9uDpRdainGWVu7T/1k51Bm/WHds2GWbEJuAoB9XhHfFbhQkXEND0A8EcxA9r9EZL 2+W5PnfjpMCBL9/JkqvMCI1Vr5Bj62NQn2v8HtD51dUtdfqc3NZ9pg741nPQtVAS LMSZj2A29YWXEhLrpsqN6rqKgGWb22e4P3WfqjuXtGmMikmAfYtEw3pvIgzWQdds EadiIO6zkfkTQNSOdazSMsUcQX/ZLXuDX33B4Fk= -----END CERTIFICATE-----Generated at Wed Jul 2 00:45:13 2025 by rpki-client