$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer File: 823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer (raw, json) Hash identifier: TkJ2a9Ifz3IgFtbUfQKRv6s4Ls0bIkGFw+Dn68VPdlA= Subject key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584A4F3508168B89EDD3026E45A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 14:36:28 +0000 Certificate not after: Mon 07 Dec 2026 13:45:26 +0000 Subordinate resources: AS: 984 AS: 62816 AS: 395171 IP: 2606:fb40::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:35:08:16:8b:89:ed:d3:02:6e:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 25 14:36:28 2025 GMT Not After : Dec 7 13:45:26 2026 GMT Subject: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:8b:cc:eb:04:cd:d8:4d:b9:f7:96:e7:a6: b2:5f:21:9b:11:c7:19:bb:a2:1e:4d:dc:7d:34:18: 82:1c:f4:c5:84:7e:0b:46:c3:23:25:b2:e6:15:06: a9:c1:f9:51:75:59:a7:db:f0:dd:81:59:56:80:57: 7a:f6:16:7e:73:dd:40:74:b9:63:07:48:25:4a:40: 1d:f4:f2:dd:93:7b:ca:2a:82:c9:d8:4e:43:ca:08: 13:26:a0:80:00:7c:0b:72:d7:9c:2f:60:65:90:33: 52:21:dc:1e:23:dc:0e:ca:a4:9c:64:59:db:a7:8c: b2:d8:72:04:f5:57:55:8c:b2:bd:82:a6:6e:3b:48: 67:96:19:a4:5f:a3:5e:19:9a:d1:fb:89:60:41:a8: fc:4f:1b:72:20:a7:7e:c9:5e:ed:45:6e:9b:03:db: 4f:99:65:97:00:68:0d:71:d6:6c:f4:d7:c9:9b:88: d0:04:a3:4e:e0:cd:90:f3:83:42:24:74:e2:32:7a: b9:6f:b9:ac:82:e1:19:c9:27:33:d4:06:40:5b:83: ea:a3:8e:c3:f1:1e:db:bd:52:9f:4b:ad:31:c9:20: 0c:11:eb:c0:b9:8f:a8:62:18:bd:fd:fd:df:db:57: 13:86:39:c6:f9:1f:2f:6a:88:42:5a:f3:29:82:2c: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2606:fb40::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 984 62816 395171 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8f:69:38:5c:9c:45:a5:1e:85:2e:27:c9:00:5c:c6:a2:10: b0:73:70:9a:8f:7f:03:2a:98:9a:1b:4b:07:0e:0d:ca:f7:9c: 2c:af:6a:44:6f:3c:5c:c0:48:fb:d7:36:3c:6e:9d:13:da:68: eb:46:de:47:38:22:a2:76:44:8b:51:c0:8d:a5:1d:e5:1e:2b: 14:9b:2f:9f:a2:62:cf:ce:43:64:f9:2a:17:68:a9:87:08:cf: 4d:85:10:6f:27:cf:69:d3:f0:7d:95:b4:46:7c:87:97:f9:bb: 2d:06:d4:20:4f:aa:63:dc:ff:d5:57:66:48:09:61:4b:ba:78: 87:31:16:3e:d1:11:a5:fb:ce:af:fe:42:6f:f1:48:df:16:73: 2f:e9:90:f6:12:ed:be:68:25:30:fb:d2:91:0e:45:28:6c:d6: ee:fb:17:39:f8:c4:5d:e7:39:50:24:e8:fa:7d:07:cc:02:40: 37:5b:82:e7:30:70:bd:b6:30:f6:0c:11:7f:02:88:bb:aa:37: 11:ed:6d:53:8f:b3:5c:b3:b6:85:99:35:e3:8c:92:ba:df:f6: 27:6a:e7:f5:5b:e5:21:dc:78:02:98:ec:ed:55:9c:44:1c:3a: 18:3c:72:f8:58:df:58:39:0c:5f:64:d8:3c:c4:59:8c:9f:c9: 53:d9:78:d6 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEpPNQgWi4nt0wJuRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDYyNTE0MzYyOFoXDTI2MTIwNzEzNDUyNlowLzEtMCsGA1UEAxMk ODIzZTk3NzgtZTZlMy00ZDg1LWEyZTItN2U5MmNiYzk5ZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TSLzOsEzdhNufeW56ayXyGbEccZu6IeTdx9 NBiCHPTFhH4LRsMjJbLmFQapwflRdVmn2/DdgVlWgFd69hZ+c91AdLljB0glSkAd 9PLdk3vKKoLJ2E5DyggTJqCAAHwLctecL2BlkDNSIdweI9wOyqScZFnbp4yy2HIE 9VdVjLK9gqZuO0hnlhmkX6NeGZrR+4lgQaj8TxtyIKd+yV7tRW6bA9tPmWWXAGgN cdZs9NfJm4jQBKNO4M2Q84NCJHTiMnq5b7msguEZyScz1AZAW4Pqo47D8R7bvVKf S60xySAMEevAuY+oYhi9/f3f21cThjnG+R8vaohCWvMpgiyLnwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFA04A07Bw86n8e3Awta+z0S92uN8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2JjOTlmMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgyM2U5Nzc4LWU2ZTMtNGQ4NS1h MmUyLTdlOTJjYmM5OWYzOS84MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2Jj OTlmMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQQmBvtAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4C AgPYAgMA9WACAwYHozBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZj2k4XJxFpR6FLifJAFzGohCwc3Caj38D KpiaG0sHDg3K95wsr2pEbzxcwEj71zY8bp0T2mjrRt5HOCKidkSLUcCNpR3lHisU my+fomLPzkNk+SoXaKmHCM9NhRBvJ89p0/B9lbRGfIeX+bstBtQgT6pj3P/VV2ZI CWFLuniHMRY+0RGl+86v/kJv8UjfFnMv6ZD2Eu2+aCUw+9KRDkUobNbu+xc5+MRd 5zlQJOj6fQfMAkA3W4LnMHC9tjD2DBF/Aoi7qjcR7W1Tj7Ncs7aFmTXjjJK63/Yn auf1W+Uh3HgCmOztVZxEHDoYPHL4WN9YOQxfZNg8xFmMn8lT2XjW -----END CERTIFICATE-----Generated at Sun Jun 29 12:43:54 2025 by rpki-client