$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer File: ff223998-3819-4b72-ade1-eec292b0a8d0.cer (raw, json) Hash identifier: R1QH2cJjTmAFZkiVcBkFiIUuULiBmvSU3xhQpwETRFw= Subject key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A520D732C487550B63DF2FA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Jun 2025 15:04:09 +0000 Certificate not after: Wed 29 Sep 2027 15:04:09 +0000 Subordinate resources: AS: 11703 IP: 2602:f609::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:0d:73:2c:48:75:50:b6:3d:f2:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 26 15:04:09 2025 GMT Not After : Sep 29 15:04:09 2027 GMT Subject: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:30:99:86:df:c8:48:a7:06:a9:db:f8:9a: e7:12:e9:a5:ce:02:67:fa:a2:cf:63:96:ba:47:10: 6c:25:08:35:af:57:63:3c:62:53:23:62:8e:67:e3: 39:ba:38:35:08:46:cc:50:4f:d7:84:3e:57:8c:c8: 4f:d4:ae:1f:76:ee:7c:f5:0f:b5:bf:e1:2f:e0:83: a2:c4:90:77:6e:00:96:9f:42:c3:f6:bb:20:22:27: 36:d2:0a:02:8f:6b:7a:9a:97:0e:c4:20:9d:1f:1b: f7:dd:20:14:a1:16:ab:ad:87:2a:91:de:3a:b2:b9: af:3d:0f:b9:f0:6f:0d:3a:42:92:54:e1:38:4a:98: 08:21:21:1a:b3:a9:af:85:4a:72:59:ee:99:d3:5c: c6:be:4a:00:2f:ee:88:af:75:d6:cd:2e:b9:d6:96: 4a:69:cb:92:bf:3e:78:b7:d5:f2:f3:af:0d:6f:bc: ae:91:a1:23:2f:1a:2a:64:f2:aa:15:5f:ef:60:56: 04:fe:58:e6:71:78:dd:f4:48:51:48:8b:0e:bc:3f: 04:c0:bc:74:55:4b:fa:c6:86:9e:8f:a4:b7:b3:ce: 61:cf:56:b1:2e:85:d6:76:16:dd:94:ae:df:54:79: 6f:09:f7:33:69:1b:db:d5:0e:b3:1f:42:07:b8:38: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2602:f609::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11703 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9b:aa:40:e7:90:e0:c7:f0:68:79:08:59:92:31:92:2c:16: a0:36:6e:47:e3:0e:cb:47:ec:33:a8:b7:14:78:8a:08:30:9c: 91:f2:54:5f:58:f3:2e:37:92:2e:ed:f7:8c:ab:fe:3a:5c:c1: a7:8b:0b:d3:15:a3:60:11:2e:be:3a:dd:42:91:97:9d:95:11: 32:98:55:23:ee:02:69:fc:73:e2:49:7a:c1:b9:ab:d2:28:6b: 6b:b0:93:ec:48:99:9c:51:a5:db:00:c9:ad:dd:1e:78:a6:f6: 49:e0:ce:9c:47:ab:dc:11:37:db:8e:76:6e:53:6b:82:10:c7: 13:a9:f5:07:81:38:0a:f9:71:e9:29:2a:fc:03:90:b2:55:e2: df:13:af:3a:ad:2b:37:4b:5b:b6:e2:db:ad:a4:9f:10:ba:a4: 70:e8:b9:e2:ec:cf:2e:1e:32:57:7d:77:8b:2c:89:1f:55:b5: 24:50:17:0f:a6:62:2b:e6:12:e3:92:3f:4b:8b:a7:d8:90:5b: 44:2a:6d:0e:de:db:f3:f1:71:d1:be:a8:13:34:ba:37:62:51: 81:8a:fa:00:55:fb:8d:9b:cb:d1:c6:51:eb:fe:55:e0:ad:6a: 89:e4:1f:a6:82:32:30:00:4a:48:5b:45:3c:00:a4:c7:10:69: ff:c8:28:6e -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEpSDXMsSHVQtj3y+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYyNjE1MDQwOVoXDTI3MDkyOTE1MDQwOVowLzEtMCsGA1UEAxMk ZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBhOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv8wmYbfyEinBqnb+JrnEumlzgJn+qLPY5a6 RxBsJQg1r1djPGJTI2KOZ+M5ujg1CEbMUE/XhD5XjMhP1K4fdu589Q+1v+Ev4IOi xJB3bgCWn0LD9rsgIic20goCj2t6mpcOxCCdHxv33SAUoRarrYcqkd46srmvPQ+5 8G8NOkKSVOE4SpgIISEas6mvhUpyWe6Z01zGvkoAL+6Ir3XWzS651pZKacuSvz54 t9Xy868Nb7yukaEjLxoqZPKqFV/vYFYE/ljmcXjd9EhRSIsOvD8EwLx0VUv6xoae j6S3s85hz1axLoXWdhbdlK7fVHlvCfczaRvb1Q6zH0IHuDh02wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFDRkJHfe2SaMu66V1WRH9Kgz3ZJ5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m ZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZmMjIzOTk4LTM4MTktNGI3Mi1h ZGUxLWVlYzI5MmIwYThkMC9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJi MGE4ZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvYJADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIttzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB1m6pA55Dgx/BoeQhZkjGSLBagNm5H4w7LR+wzqLcUeIoI MJyR8lRfWPMuN5Iu7feMq/46XMGniwvTFaNgES6+Ot1CkZedlREymFUj7gJp/HPi SXrBuavSKGtrsJPsSJmcUaXbAMmt3R54pvZJ4M6cR6vcETfbjnZuU2uCEMcTqfUH gTgK+XHpKSr8A5CyVeLfE686rSs3S1u24tutpJ8QuqRw6Lni7M8uHjJXfXeLLIkf VbUkUBcPpmIr5hLjkj9Li6fYkFtEKm0O3tvz8XHRvqgTNLo3YlGBivoAVfuNm8vR xlHr/lXgrWqJ5B+mgjIwAEpIW0U8AKTHEGn/yChu -----END CERTIFICATE-----Generated at Wed Jul 2 10:15:34 2025 by rpki-client