$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477.cer File: 887a6da0-2576-4ec0-b3b5-4f9e0942a477.cer (raw, json) Hash identifier: IBtwQzSJ8GleJ8K0qV6wrHZyIgYx5yve+fJFNZv72m4= Subject key identifier: 58:51:2A:9A:19:18:A3:4F:A0:D2:24:07:CE:BE:63:BF:B3:C7:4B:94 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285849AAFFDE8B0F4CED5E50432880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/887a6da0-2576-4ec0-b3b5-4f9e0942a477.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 27 Apr 2025 18:56:47 +0000 Certificate not after: Sat 31 Jul 2027 18:56:47 +0000 Subordinate resources: IP: 2620:10f:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:ff:de:8b:0f:4c:ed:5e:50:43:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Apr 27 18:56:47 2025 GMT Not After : Jul 31 18:56:47 2027 GMT Subject: CN=887a6da0-2576-4ec0-b3b5-4f9e0942a477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:97:ef:f3:ed:1a:33:04:00:38:a4:9f:0c:03: 34:5c:f2:04:04:51:32:c7:78:7a:db:6b:42:af:dc: c3:8b:5c:d9:c7:65:42:71:1c:f6:ad:99:83:17:53: 71:c5:3a:ab:69:af:b9:35:58:df:16:ab:92:08:5a: bb:c0:34:8f:68:85:79:76:8b:64:76:38:6a:d4:bc: 6d:a5:d7:23:82:42:c7:94:30:51:fa:7d:a8:bc:24: c6:8d:4b:dc:4f:f8:76:d9:da:ba:3f:73:df:36:d8: f5:ce:7a:5c:89:5a:45:64:c6:1b:42:5b:a0:70:92: f8:c5:94:46:b1:a6:68:69:29:25:75:2e:40:4f:ae: 7a:af:3c:64:c7:59:9f:8b:1f:db:87:76:85:e6:4f: 17:fd:db:6b:97:ff:46:e2:c6:86:8c:9f:56:6a:97: 0b:7b:ac:e0:b9:3b:c0:b3:40:e6:a0:22:1f:9d:4e: 55:06:df:ee:01:55:38:15:a9:74:c0:bb:32:b9:71: 53:35:5d:0f:ca:c9:67:16:14:3e:64:3e:6d:42:d7: 22:db:2f:85:1c:be:99:7c:50:c9:68:f9:fc:30:aa: c8:6d:4c:dc:5d:ae:bf:0f:e5:d5:b8:e1:2c:52:7a: 79:3e:ea:d1:27:27:f6:8a:46:4b:48:35:7a:ce:62: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:51:2A:9A:19:18:A3:4F:A0:D2:24:07:CE:BE:63:BF:B3:C7:4B:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/887a6da0-2576-4ec0-b3b5-4f9e0942a477.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:82:9f:9b:da:d4:fa:04:06:07:6f:e6:f8:d6:f7:0a:4e:0d: f2:4e:28:41:f6:70:f1:c8:f5:42:18:b3:98:e1:ab:dc:26:9e: 16:ec:ff:4e:16:54:85:c6:1a:74:ec:71:70:cb:5f:f6:2a:c2: cf:49:4c:84:3e:d5:72:fd:dc:74:1a:e9:f2:e8:c0:81:cc:fd: 92:83:60:ae:35:de:7f:c5:10:10:e5:c3:25:db:05:6b:e0:26: 6f:36:2c:3c:de:ae:cd:fc:44:72:71:a4:29:61:62:61:12:68: 8a:68:0c:60:52:3e:4c:f5:89:3c:d8:8e:57:28:61:0c:c9:1b: 7c:14:b0:24:1d:f9:34:f6:e8:6c:68:52:54:e2:ac:3c:39:81: 30:99:aa:ae:6e:7b:58:37:55:cf:0b:04:c2:a7:cb:e1:7b:5f: 88:d3:2f:27:f9:78:c7:8d:ce:e4:30:c6:f7:7b:a9:d8:b8:6f: 6b:f6:d6:a7:f8:45:8b:d0:0e:dd:5c:5e:c1:e1:c5:5b:bc:86: e1:41:dc:36:6e:e1:13:2b:0a:b9:b1:4e:c4:7e:72:a8:50:9d: 66:26:81:32:99:4d:80:b4:05:cf:28:3d:fd:a8:3b:0e:64:7f: c9:3c:5f:25:e3:37:df:f2:d6:01:71:f0:66:59:f2:22:e5:3b: c0:2f:50:68 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEmq/96LD0ztXlBDKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDQyNzE4NTY0N1oXDTI3MDczMTE4NTY0N1owLzEtMCsGA1UEAxMk ODg3YTZkYTAtMjU3Ni00ZWMwLWIzYjUtNGY5ZTA5NDJhNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJfv8+0aMwQAOKSfDAM0XPIEBFEyx3h622tC r9zDi1zZx2VCcRz2rZmDF1NxxTqraa+5NVjfFquSCFq7wDSPaIV5dotkdjhq1Lxt pdcjgkLHlDBR+n2ovCTGjUvcT/h22dq6P3PfNtj1znpciVpFZMYbQlugcJL4xZRG saZoaSkldS5AT656rzxkx1mfix/bh3aF5k8X/dtrl/9G4saGjJ9WapcLe6zguTvA s0DmoCIfnU5VBt/uAVU4Fal0wLsyuXFTNV0PyslnFhQ+ZD5tQtci2y+FHL6ZfFDJ aPn8MKrIbUzcXa6/D+XVuOEsUnp5PurRJyf2ikZLSDV6zmKVqQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFFhRKpoZGKNPoNIkB86+Y7+zx0uUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 ODdhNmRhMC0yNTc2LTRlYzAtYjNiNS00ZjllMDk0MmE0NzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg4N2E2ZGEwLTI1NzYtNGVjMC1i M2I1LTRmOWUwOTQyYTQ3Ny84ODdhNmRhMC0yNTc2LTRlYzAtYjNiNS00ZjllMDk0 MmE0NzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAEP8AAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgIKfm9rU+gQGB2/m +Nb3Ck4N8k4oQfZw8cj1QhizmOGr3CaeFuz/ThZUhcYadOxxcMtf9irCz0lMhD7V cv3cdBrp8ujAgcz9koNgrjXef8UQEOXDJdsFa+AmbzYsPN6uzfxEcnGkKWFiYRJo imgMYFI+TPWJPNiOVyhhDMkbfBSwJB35NPbobGhSVOKsPDmBMJmqrm57WDdVzwsE wqfL4XtfiNMvJ/l4x43O5DDG93up2Lhva/bWp/hFi9AO3VxeweHFW7yG4UHcNm7h EysKubFOxH5yqFCdZiaBMplNgLQFzyg9/ag7DmR/yTxfJeM33/LWAXHwZlnyIuU7 wC9QaA== -----END CERTIFICATE-----Generated at Wed May 7 19:36:54 2025 by rpki-client