$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer File: f6a6838a-15aa-48f4-960c-d9d0071829af.cer (raw, json) Hash identifier: sp7BnF0tbfjZvrp7kb3GwGQ31CwzfOG6W+dGaddS14I= Subject key identifier: 21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A347881026E0A842D6DE3DD10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 00:45:35 +0000 Certificate not after: Sun 19 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 19051 IP: 2602:f95d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:78:81:02:6e:0a:84:2d:6d:e3:dd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 16 00:45:35 2025 GMT Not After : Sep 19 00:45:35 2027 GMT Subject: CN=f6a6838a-15aa-48f4-960c-d9d0071829af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:1e:e4:97:0e:f8:80:a5:4c:27:e1:0e:31: 29:22:39:e1:1c:8f:c3:9c:d2:c8:22:4c:9e:6c:8b: 88:9e:cc:c3:44:87:da:4c:f9:0b:fb:d4:b4:8f:a2: 2f:0d:77:13:4f:f6:e3:65:30:c0:3d:3b:72:77:44: 08:1b:ea:d4:f1:47:e6:98:e5:be:d3:05:28:36:18: 1e:69:bf:73:8d:14:a2:bf:ae:73:6a:01:12:d8:d5: f4:6c:a6:d1:93:58:f4:ba:d3:3d:bf:a5:d1:f4:de: da:bf:ff:75:b2:d5:fb:f7:4f:30:01:6a:fd:4b:84: fd:c5:a8:77:8d:c7:bb:f2:40:e0:04:31:e4:52:f6: af:8c:4b:30:ec:f5:ff:de:9c:58:8a:07:54:51:a7: 7b:54:ba:b0:68:c1:cb:af:bd:a0:c1:b6:9d:45:d5: ba:04:04:8c:05:93:15:90:54:2b:05:fb:dd:e3:20: 7f:3d:be:05:bc:69:2f:c8:bf:08:2c:b5:a6:39:8c: 20:5d:c5:af:7b:5f:57:f1:7e:c5:da:d3:18:de:e3: ab:98:75:26:cb:9c:d7:fb:13:c7:5f:93:ea:30:5a: 25:76:cf:39:32:1e:cb:de:48:8c:5e:5d:b1:25:a2: 99:93:f0:3b:52:ef:62:19:71:bf:4f:73:8a:b9:2a: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19051 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6f:86:e0:73:c5:48:17:07:2f:36:36:03:09:64:d1:80:30: 9b:c9:66:f3:7b:82:07:61:04:81:2f:e4:2d:20:5e:b3:7b:e8: 06:65:29:6b:a7:77:aa:b5:06:78:bc:9c:0f:16:e7:34:a6:ec: 70:3b:da:3e:9d:c6:24:1e:bc:9f:a7:33:c4:00:cf:84:61:99: 7a:2c:6a:77:38:39:fc:22:9d:a8:c1:ed:e9:39:ed:71:0f:75: 64:29:5c:2b:48:12:7f:d0:4f:c7:41:2c:81:d0:d0:7c:80:a8: 53:d1:34:50:2a:ed:4e:13:f3:e9:02:a5:8e:3a:ac:0b:d3:93: 05:c1:15:da:15:f0:58:a9:f8:30:d1:7d:ed:2a:f8:a0:98:73: e1:ca:34:ff:0d:f3:7f:05:22:45:f0:40:0d:15:16:14:b7:d1: b0:10:60:e8:2a:e2:e5:89:35:91:3e:e5:0f:3b:38:0a:38:a7: 3d:80:77:a3:5e:95:9f:25:0f:9d:f2:a5:85:77:a0:e4:21:c1: 86:8c:44:0d:31:db:25:e5:3a:6d:93:96:f0:8f:9a:0b:89:7b: 3c:20:d4:45:69:5a:14:cd:77:c2:ad:47:bf:63:97:f8:5d:0c: b8:d7:7f:7d:86:8c:f7:79:89:79:6f:c0:d7:54:b7:ca:ef:73: bc:3f:dd:9b -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEo0eIECbgqELW3j3RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxNjAwNDUzNVoXDTI3MDkxOTAwNDUzNVowLzEtMCsGA1UEAxMk ZjZhNjgzOGEtMTVhYS00OGY0LTk2MGMtZDlkMDA3MTgyOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Ye5JcO+IClTCfhDjEpIjnhHI/DnNLIIkye bIuInszDRIfaTPkL+9S0j6IvDXcTT/bjZTDAPTtyd0QIG+rU8UfmmOW+0wUoNhge ab9zjRSiv65zagES2NX0bKbRk1j0utM9v6XR9N7av/91stX7908wAWr9S4T9xah3 jce78kDgBDHkUvavjEsw7PX/3pxYigdUUad7VLqwaMHLr72gwbadRdW6BASMBZMV kFQrBfvd4yB/Pb4FvGkvyL8ILLWmOYwgXcWve19X8X7F2tMY3uOrmHUmy5zX+xPH X5PqMFolds85Mh7L3kiMXl2xJaKZk/A7Uu9iGXG/T3OKuSrr1wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFCHgG10oKNTuuLJ3uAndoEptugtxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m NmE2ODM4YS0xNWFhLTQ4ZjQtOTYwYy1kOWQwMDcxODI5YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y2YTY4MzhhLTE1YWEtNDhmNC05 NjBjLWQ5ZDAwNzE4MjlhZi9mNmE2ODM4YS0xNWFhLTQ4ZjQtOTYwYy1kOWQwMDcx ODI5YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvldADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJKazBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB/b4bgc8VIFwcvNjYDCWTRgDCbyWbze4IHYQSBL+QtIF6z e+gGZSlrp3eqtQZ4vJwPFuc0puxwO9o+ncYkHryfpzPEAM+EYZl6LGp3ODn8Ip2o we3pOe1xD3VkKVwrSBJ/0E/HQSyB0NB8gKhT0TRQKu1OE/PpAqWOOqwL05MFwRXa FfBYqfgw0X3tKvigmHPhyjT/DfN/BSJF8EANFRYUt9GwEGDoKuLliTWRPuUPOzgK OKc9gHejXpWfJQ+d8qWFd6DkIcGGjEQNMdsl5Tptk5bwj5oLiXs8INRFaVoUzXfC rUe/Y5f4XQy41399hoz3eYl5b8DXVLfK73O8P92b -----END CERTIFICATE-----Generated at Sun Jun 29 14:15:37 2025 by rpki-client