$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31.cer File: a2e3fb4b-e277-458e-bd0b-3983238eff31.cer (raw, json) Hash identifier: w7wStUEyyaFFkueyUW+RbJGQQ1zDBuBrRetuRSW8APk= Subject key identifier: 23:5B:E8:A9:D1:C4:77:94:BA:4A:B6:F2:63:FD:56:D0:8D:0E:4D:33 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A37433194BD7025E3EEFFA200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31/a2e3fb4b-e277-458e-bd0b-3983238eff31.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Jun 2025 00:45:36 +0000 Certificate not after: Mon 20 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 11309 IP: 2620:137:3000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:43:31:94:bd:70:25:e3:ee:ff:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 17 00:45:36 2025 GMT Not After : Sep 20 00:45:36 2027 GMT Subject: CN=a2e3fb4b-e277-458e-bd0b-3983238eff31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:c1:38:28:0f:97:69:89:8c:83:cd:9a:89: f9:11:70:02:d4:3d:04:a4:e8:50:5d:aa:74:ef:53: 94:c0:d6:1c:8f:a9:ca:a8:48:3c:51:0a:c3:cd:a9: 93:92:6d:52:da:51:e2:68:a2:fe:ce:bd:22:64:e8: 06:eb:d2:72:65:7b:8d:50:75:40:86:a3:61:ff:58: 8b:d7:28:e2:1c:14:b9:44:6c:cc:e6:28:9b:00:dd: e3:c5:c3:f3:d8:78:e6:f5:89:f3:e7:91:2d:e1:f5: 20:c7:4b:8f:0d:10:9f:2b:60:09:1b:a8:6f:62:6e: 60:05:57:e4:6c:34:3e:30:8d:75:39:ef:b1:00:52: aa:ac:7a:12:5a:8f:46:18:71:ec:67:02:29:aa:ce: f9:e6:b5:69:3c:91:5b:3b:60:28:7a:87:6a:69:0a: 24:ca:64:07:8a:a2:11:a0:2f:6a:8b:f1:c8:ef:17: 9b:e7:6c:ec:95:49:79:e5:d1:4c:6b:dd:6b:9a:dd: 2c:7f:a2:2b:f4:d8:f1:8a:3a:9b:8b:ea:36:7d:48: 5e:96:9d:42:aa:b7:ea:d0:00:61:8c:5f:95:ba:b9: 1f:1c:d6:e1:fb:92:d0:b3:50:ef:be:c7:02:5a:b4: 73:9a:18:b1:2a:36:e5:f0:73:cf:83:58:aa:5d:f3: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5B:E8:A9:D1:C4:77:94:BA:4A:B6:F2:63:FD:56:D0:8D:0E:4D:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31/a2e3fb4b-e277-458e-bd0b-3983238eff31.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv6: 2620:137:3000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11309 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2f:ec:7c:ff:b0:4e:eb:98:67:6f:51:08:df:f5:ed:07:33: 70:53:c5:d2:52:f4:db:c8:73:90:ce:4a:75:0c:c8:31:ef:54: 84:d4:a4:29:f0:cb:48:71:df:54:29:ed:6f:08:16:fd:69:3c: c5:24:29:a2:d8:8f:b6:9c:fc:40:4e:2b:1c:a6:56:53:2e:66: ac:3e:51:90:5b:7a:96:0b:38:51:28:e4:f4:b1:1f:15:7e:4d: e1:55:66:b5:d0:8a:a8:10:d2:78:66:b6:f9:b3:2f:5f:15:e4: 27:65:ba:53:d7:97:0c:50:3d:27:e3:9d:28:3f:fe:c7:d0:ea: 16:c5:28:ce:e6:63:61:91:a7:37:30:9b:35:6a:cc:00:12:83: 1f:cb:08:1f:d8:a0:6d:5f:b3:31:64:a3:0e:e6:f1:ea:89:38: 93:8d:a3:a8:28:82:45:8a:62:c6:8c:fa:bb:06:54:85:a7:56: dd:e9:2e:44:70:00:90:d4:7b:89:f0:64:b3:df:f6:d1:d6:d5: 2e:a8:f7:9f:b0:9a:4c:15:96:9a:03:30:b1:2d:31:f6:2c:32: 12:27:ac:9f:3a:15:cb:22:71:32:c5:ba:69:94:f3:d1:13:35: 73:91:a8:5b:eb:85:d4:38:ae:09:5f:88:2d:f0:7f:4e:3f:5b: b8:e9:ab:ec -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEo3QzGUvXAl4+7/ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDYxNzAwNDUzNloXDTI3MDkyMDAwNDUzNlowLzEtMCsGA1UEAxMk YTJlM2ZiNGItZTI3Ny00NThlLWJkMGItMzk4MzIzOGVmZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhnBOCgPl2mJjIPNmon5EXAC1D0EpOhQXap0 71OUwNYcj6nKqEg8UQrDzamTkm1S2lHiaKL+zr0iZOgG69JyZXuNUHVAhqNh/1iL 1yjiHBS5RGzM5iibAN3jxcPz2Hjm9Ynz55Et4fUgx0uPDRCfK2AJG6hvYm5gBVfk bDQ+MI11Oe+xAFKqrHoSWo9GGHHsZwIpqs755rVpPJFbO2AoeodqaQokymQHiqIR oC9qi/HI7xeb52zslUl55dFMa91rmt0sf6Ir9Njxijqbi+o2fUhelp1Cqrfq0ABh jF+VurkfHNbh+5LQs1DvvscCWrRzmhixKjbl8HPPg1iqXfNLpwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFCNb6KnRxHeUukq28mP9VtCNDk0zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h MmUzZmI0Yi1lMjc3LTQ1OGUtYmQwYi0zOTgzMjM4ZWZmMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2EyZTNmYjRiLWUyNzctNDU4ZS1i ZDBiLTM5ODMyMzhlZmYzMS9hMmUzZmI0Yi1lMjc3LTQ1OGUtYmQwYi0zOTgzMjM4 ZWZmMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAE3MDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIsLTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCCL+x8/7BO65hnb1EI3/XtBzNwU8XSUvTbyHOQzkp1DMgx 71SE1KQp8MtIcd9UKe1vCBb9aTzFJCmi2I+2nPxATiscplZTLmasPlGQW3qWCzhR KOT0sR8Vfk3hVWa10IqoENJ4Zrb5sy9fFeQnZbpT15cMUD0n450oP/7H0OoWxSjO 5mNhkac3MJs1aswAEoMfywgf2KBtX7MxZKMO5vHqiTiTjaOoKIJFimLGjPq7BlSF p1bd6S5EcACQ1HuJ8GSz3/bR1tUuqPefsJpMFZaaAzCxLTH2LDISJ6yfOhXLInEy xbpplPPREzVzkahb64XUOK4JX4gt8H9OP1u46avs -----END CERTIFICATE-----Generated at Sun Jun 29 11:50:10 2025 by rpki-client