$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522.cer File: c6f8b9a1-4e03-4169-9de2-09a23bd91522.cer (raw, json) Hash identifier: nXrZS6AvXmy5IDWpBap7OxlVLKgYyef1cFBqd79VQRg= Subject key identifier: FF:E4:A2:4B:10:2A:EA:54:1D:19:4B:F0:3E:75:A5:9E:11:D5:88:F1 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584AC7C8915C0F3F889563D2F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/c6f8b9a1-4e03-4169-9de2-09a23bd91522.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 Aug 2025 19:10:45 +0000 Certificate not after: Wed 10 Nov 2027 20:10:45 +0000 Subordinate resources: AS: 401904 IP: 2620:db:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:c8:91:5c:0f:3f:88:95:63:d2:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 7 19:10:45 2025 GMT Not After : Nov 10 20:10:45 2027 GMT Subject: CN=c6f8b9a1-4e03-4169-9de2-09a23bd91522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:e5:4d:53:1e:f8:1b:60:6a:7c:44:5f:89: 28:9a:3c:c5:a6:fa:87:89:8e:77:f4:07:9f:e7:98: 85:00:bc:9c:83:6c:1a:c9:78:2d:c3:f2:c4:4a:7f: c7:3a:8f:82:77:b1:ff:ac:b0:79:bb:c5:23:1c:c5: bd:b4:27:32:08:5a:0f:bd:d4:23:ff:3d:d1:e4:45: bd:90:f1:72:c7:17:6b:67:98:8b:f6:97:ba:a3:b0: 48:a3:4e:d0:67:01:b4:f4:81:59:f3:f4:ff:eb:65: 4f:9a:0a:88:cb:1a:e8:b1:42:21:64:bc:1d:04:d2: 41:8d:7c:2c:4d:b3:14:ff:e3:8d:6e:86:44:40:ff: a5:eb:fa:74:f3:a9:00:16:0e:69:a2:49:ab:01:d6: ea:e7:63:d4:d3:54:f8:0a:3a:13:fb:02:cf:df:98: 0f:52:48:a2:a9:36:4a:df:79:e4:fd:12:79:00:f2: db:9f:89:97:eb:38:82:be:8c:7a:ec:84:b8:06:4c: eb:75:02:d2:89:cb:b0:da:0a:43:ea:79:ff:25:d6: b3:5d:59:19:bb:69:42:cd:58:36:85:78:92:d5:b1: 5b:e7:36:c4:98:68:b2:04:60:a8:68:c5:e7:b2:51: 43:aa:c6:e4:04:05:a8:bb:53:e5:8d:5d:48:84:51: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E4:A2:4B:10:2A:EA:54:1D:19:4B:F0:3E:75:A5:9E:11:D5:88:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/c6f8b9a1-4e03-4169-9de2-09a23bd91522.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv6: 2620:db:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401904 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c7:8c:6d:90:4b:b6:ae:b5:31:9f:52:e3:06:4e:bc:75:79: 1a:ee:8d:3c:8f:21:91:aa:19:58:3c:e7:a3:56:18:28:5b:5c: a8:4b:96:d5:a2:e9:dd:96:68:84:83:65:a7:f8:64:1d:1d:e2: 04:e9:91:51:5a:5c:8a:be:3e:0c:05:27:7f:03:58:1a:85:35: d6:58:f8:37:a5:c3:26:7c:b8:ed:45:65:d6:64:a7:44:a3:5d: bc:1e:d5:4d:4f:ff:27:f4:c9:1a:89:ca:a2:84:e4:a2:66:31: eb:81:80:c1:6d:c4:66:fa:ca:6b:6f:83:e1:c4:fe:3f:e3:90: 55:d6:5b:93:40:e8:79:3e:df:c6:62:4a:e5:83:3d:09:98:db: f4:e6:b3:42:dc:7f:60:a4:79:8d:07:cf:02:f9:6f:54:ba:5d: 23:e9:22:eb:33:76:38:27:cd:28:7c:23:c8:32:7d:ff:50:68: 65:1f:fc:46:a3:38:38:8c:7d:21:9c:3e:b4:bc:29:e6:62:05: ab:af:35:cc:1f:8c:f1:38:c6:88:d5:b1:3c:8d:f4:98:ba:bd: ad:b6:e4:64:bf:e8:69:51:2e:99:e3:e2:2f:72:cd:1e:e1:bf: 6f:8e:87:2b:59:1d:f2:75:2a:15:0c:db:ab:96:ee:0b:9c:bf: 3e:06:af:fc -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWErHyJFcDz+IlWPS9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDgwNzE5MTA0NVoXDTI3MTExMDIwMTA0NVowLzEtMCsGA1UEAxMk YzZmOGI5YTEtNGUwMy00MTY5LTlkZTItMDlhMjNiZDkxNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1flTVMe+BtganxEX4komjzFpvqHiY539Aef 55iFALycg2wayXgtw/LESn/HOo+Cd7H/rLB5u8UjHMW9tCcyCFoPvdQj/z3R5EW9 kPFyxxdrZ5iL9pe6o7BIo07QZwG09IFZ8/T/62VPmgqIyxrosUIhZLwdBNJBjXws TbMU/+ONboZEQP+l6/p086kAFg5pokmrAdbq52PU01T4CjoT+wLP35gPUkiiqTZK 33nk/RJ5APLbn4mX6ziCvox67IS4BkzrdQLSicuw2gpD6nn/JdazXVkZu2lCzVg2 hXiS1bFb5zbEmGiyBGCoaMXnslFDqsbkBAWou1PljV1IhFETCwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFP/koksQKupUHRlL8D51pZ4R1YjxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9j NmY4YjlhMS00ZTAzLTQxNjktOWRlMi0wOWEyM2JkOTE1MjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2M2ZjhiOWExLTRlMDMtNDE2OS05 ZGUyLTA5YTIzYmQ5MTUyMi9jNmY4YjlhMS00ZTAzLTQxNjktOWRlMi0wOWEyM2Jk OTE1MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADbIAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiHwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBABDHjG2QS7autTGfUuMGTrx1eRrujTyPIZGqGVg856NW GChbXKhLltWi6d2WaISDZaf4ZB0d4gTpkVFaXIq+PgwFJ38DWBqFNdZY+DelwyZ8 uO1FZdZkp0SjXbwe1U1P/yf0yRqJyqKE5KJmMeuBgMFtxGb6ymtvg+HE/j/jkFXW W5NA6Hk+38ZiSuWDPQmY2/Tms0Lcf2CkeY0HzwL5b1S6XSPpIuszdjgnzSh8I8gy ff9QaGUf/EajODiMfSGcPrS8KeZiBauvNcwfjPE4xojVsTyN9Ji6va225GS/6GlR Lpnj4i9yzR7hv2+OhytZHfJ1KhUM26uW7gucvz4Gr/w= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:13 2025 by rpki-client