$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947.cer File: f6379de4-347a-4c3d-b13e-6f45f69b2947.cer (raw, json) Hash identifier: UsUX1K8ex6/Q82hdjR4pxNUjsJvUbnfpiRMtONY16qQ= Subject key identifier: DD:14:DC:8C:9D:9A:81:73:6D:09:58:C5:8E:B5:CC:CC:F2:03:EE:57 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A0A984000D07B0C91E5CCA2E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947/f6379de4-347a-4c3d-b13e-6f45f69b2947.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Jun 2025 00:45:37 +0000 Certificate not after: Sat 04 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 393282 IP: 2607:f140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0a:98:40:00:d0:7b:0c:91:e5:cc:a2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 1 00:45:37 2025 GMT Not After : Sep 4 00:45:37 2027 GMT Subject: CN=f6379de4-347a-4c3d-b13e-6f45f69b2947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:f0:13:43:d5:3d:71:ed:15:27:65:51:89: f9:f5:82:37:cd:85:f1:32:29:17:3d:2f:4a:70:a3: 7a:75:25:d8:35:a3:ae:2a:17:28:de:51:e7:a3:d4: fc:bf:b0:0e:64:a0:36:5c:8b:fa:a8:39:14:f2:af: 63:ef:39:53:af:18:6f:f3:0a:67:70:16:4b:63:65: f6:1f:10:a1:81:15:3d:9a:2d:d4:40:2b:c2:d4:2b: 1d:50:ce:3d:00:e5:c6:8c:ac:ef:e0:f4:4f:e1:00: fc:50:0e:bb:5b:95:88:cb:6f:98:5c:39:6e:13:bf: e5:de:ce:89:fb:97:50:4f:43:7d:5a:9e:c0:6e:d0: ad:af:b7:3a:bc:0b:b5:7b:e1:d3:b4:28:18:9c:a6: 56:68:bb:3a:b0:6f:66:2c:b0:13:c1:fc:d1:9b:9d: 13:d3:4d:5e:49:9c:dc:d3:60:41:c8:f0:11:c7:ed: 86:e7:9a:fa:c4:88:3f:05:7e:ea:d5:b0:20:cd:5d: 06:ee:8d:bb:be:e6:d8:db:ea:66:df:44:76:c7:47: 87:0a:52:63:9f:b0:85:19:bc:e3:95:d7:9a:3c:82: 68:ff:65:66:98:09:07:06:ad:7a:b0:cc:42:5e:c8: fa:b6:85:88:7b:40:d8:14:07:58:e7:95:89:35:67: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:14:DC:8C:9D:9A:81:73:6D:09:58:C5:8E:B5:CC:CC:F2:03:EE:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6379de4-347a-4c3d-b13e-6f45f69b2947/f6379de4-347a-4c3d-b13e-6f45f69b2947.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393282 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4c:65:8e:a8:cf:c2:04:3d:c6:63:bf:93:bd:4f:5e:3a:8b: 0e:18:aa:1d:03:85:5f:7a:b5:b6:1b:ea:b6:ed:75:83:16:c2: 42:9a:30:f0:16:57:df:f1:3c:60:4b:43:de:2e:b1:35:75:01: b2:07:9f:9c:ec:f8:99:18:16:4f:5f:8c:bb:43:66:53:50:bb: 46:09:34:c9:aa:cc:37:3b:98:c2:3d:ad:c0:76:89:10:69:1a: 7b:5e:24:ec:93:f2:fa:2b:c0:33:98:1d:a6:aa:1e:74:6b:07: b6:8f:fc:3d:4f:28:99:b5:74:5b:23:7e:98:a9:d7:4f:d4:9d: 38:81:2a:54:4d:4f:35:1d:99:9b:82:5b:95:57:fd:94:73:04: 17:de:83:0f:7d:0f:ae:75:f3:1a:0a:99:ed:96:69:15:31:99: f9:1a:93:e7:e4:27:6d:f3:1b:03:89:64:09:76:6a:e9:8e:07: 35:84:28:59:27:a1:1f:70:a7:ff:fa:4b:28:88:57:bf:5d:b4: 09:75:94:82:f0:59:e1:aa:36:38:d4:08:10:d7:11:d9:af:51: 34:43:80:dd:83:11:d8:67:09:fe:de:a8:80:07:2b:92:38:aa: f3:c5:54:01:bc:39:b9:8c:80:17:a1:f2:26:0b:c8:58:ec:54: 6f:67:ed:7d -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEoKmEAA0HsMkeXMouAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwMTAwNDUzN1oXDTI3MDkwNDAwNDUzN1owLzEtMCsGA1UEAxMk ZjYzNzlkZTQtMzQ3YS00YzNkLWIxM2UtNmY0NWY2OWIyOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAXwE0PVPXHtFSdlUYn59YI3zYXxMikXPS9K cKN6dSXYNaOuKhco3lHno9T8v7AOZKA2XIv6qDkU8q9j7zlTrxhv8wpncBZLY2X2 HxChgRU9mi3UQCvC1CsdUM49AOXGjKzv4PRP4QD8UA67W5WIy2+YXDluE7/l3s6J +5dQT0N9Wp7AbtCtr7c6vAu1e+HTtCgYnKZWaLs6sG9mLLATwfzRm50T001eSZzc 02BByPARx+2G55r6xIg/BX7q1bAgzV0G7o27vubY2+pm30R2x0eHClJjn7CFGbzj ldeaPIJo/2VmmAkHBq16sMxCXsj6toWIe0DYFAdY55WJNWcZ1wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFN0U3IydmoFzbQlYxY61zMzyA+5XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m NjM3OWRlNC0zNDdhLTRjM2QtYjEzZS02ZjQ1ZjY5YjI5NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y2Mzc5ZGU0LTM0N2EtNGMzZC1i MTNlLTZmNDVmNjliMjk0Ny9mNjM3OWRlNC0zNDdhLTRjM2QtYjEzZS02ZjQ1ZjY5 YjI5NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB/FAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYAQjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCETGWOqM/CBD3GY7+TvU9eOosOGKodA4VferW2G+q27XWD FsJCmjDwFlff8TxgS0PeLrE1dQGyB5+c7PiZGBZPX4y7Q2ZTULtGCTTJqsw3O5jC Pa3AdokQaRp7XiTsk/L6K8AzmB2mqh50awe2j/w9TyiZtXRbI36YqddP1J04gSpU TU81HZmbgluVV/2UcwQX3oMPfQ+udfMaCpntlmkVMZn5GpPn5Cdt8xsDiWQJdmrp jgc1hChZJ6EfcKf/+ksoiFe/XbQJdZSC8FnhqjY41AgQ1xHZr1E0Q4DdgxHYZwn+ 3qiAByuSOKrzxVQBvDm5jIAXofImC8hY7FRvZ+19 -----END CERTIFICATE-----Generated at Sun Jun 29 13:49:58 2025 by rpki-client