$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer File: c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer (raw, json) Hash identifier: 9AoFzb+4kLQb5yIPkTsjiQwguF1tLONHOVKTk6pSV48= Subject key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584A34788128EB3636CA3C100AE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 00:45:35 +0000 Certificate not after: Sun 19 Sep 2027 00:45:35 +0000 Subordinate resources: IP: 2606:2b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:78:81:28:eb:36:36:ca:3c:10:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 16 00:45:35 2025 GMT Not After : Sep 19 00:45:35 2027 GMT Subject: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:77:cb:e0:fc:b1:b8:fd:32:90:07:91:3e: 4f:97:c2:90:c4:32:69:4f:c6:bf:07:6f:cf:3e:a6: 72:c6:54:37:a2:e2:2c:8a:38:1a:86:a9:46:e5:91: 36:a7:65:4a:7f:18:19:88:d5:72:66:35:44:17:6e: 35:a5:2d:89:6f:40:7b:d0:5e:7d:dc:c3:94:73:8f: f2:93:c9:d2:15:79:09:a0:ff:b6:4d:ec:16:4c:f7: 68:1c:53:9f:9d:93:ed:83:54:5f:2f:c2:d4:23:d8: 62:0d:c5:fa:e6:2d:0a:d4:6d:8a:51:34:74:c5:e4: 08:0f:e9:ca:f9:b3:d6:0a:52:7f:e5:fe:90:eb:2c: d2:e3:ef:79:70:9f:65:0f:a3:34:02:9a:74:43:d0: af:92:8e:4b:bf:2c:fe:5a:9c:fd:b0:f0:cc:72:b4: 4f:2a:d2:ca:02:73:56:36:51:25:98:ff:34:a7:74: 7c:c5:d8:ba:b0:2d:07:98:0e:af:f3:ed:04:6d:7d: 1b:13:31:9b:8c:17:9e:96:5c:e5:bf:d4:59:c4:35: ff:17:00:1b:c2:b7:5c:4e:a3:be:90:10:82:db:03: 75:d3:25:97:24:64:88:13:11:99:2d:1d:8c:34:e9: f7:01:4b:06:b2:8d:8d:40:0b:9b:a8:de:66:49:3b: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv6: 2606:2b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f3:61:9c:89:0f:c6:6f:43:9f:99:b7:0d:39:ac:06:de:a3: f8:77:ad:fe:92:b2:36:fb:94:56:07:03:d0:ba:63:13:35:87: cb:39:47:ec:80:a8:80:f1:70:6b:8f:7d:0a:4b:9a:b7:a2:52: 36:90:b6:ba:22:1c:6e:bc:d7:c4:33:a8:84:ab:36:45:9f:7b: a1:13:24:92:16:31:01:25:b3:37:06:f0:8c:d2:39:b9:c0:30: f6:c7:8e:b7:65:ff:a8:a1:57:cf:a7:f7:51:96:61:b4:cf:4e: bc:b3:c0:80:53:eb:af:b9:96:88:28:ee:89:54:04:a4:ac:db: a9:7c:3c:b6:83:38:7c:91:92:7d:d7:c6:5e:dd:90:e4:a2:f3: d7:7e:0d:b0:ae:e2:48:3d:12:a9:ba:72:b3:78:15:82:56:e1: 01:a0:08:21:00:4e:e1:e5:64:2d:65:6e:86:f6:23:ac:eb:9a: a2:b9:dd:e8:03:0e:80:8c:0c:a9:e7:1e:82:1b:df:f7:e5:af: c3:be:b5:2e:8d:15:97:89:ad:02:85:fb:c4:c2:6a:b6:78:2c: c5:00:7e:c2:08:c6:a3:99:ed:7a:58:b6:06:9f:81:58:4a:94: 2e:32:c2:8d:1a:4a:c7:be:d6:0c:55:36:5f:2e:15:71:51:b7: de:85:bf:7c -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEo0eIEo6zY2yjwQCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDYxNjAwNDUzNVoXDTI3MDkxOTAwNDUzNVowLzEtMCsGA1UEAxMk YzE0MjhkOTktYWQyMy00ZDU4LWI1ZjQtMTdkYTRhNTBkNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n93y+D8sbj9MpAHkT5Pl8KQxDJpT8a/B2/P PqZyxlQ3ouIsijgahqlG5ZE2p2VKfxgZiNVyZjVEF241pS2Jb0B70F593MOUc4/y k8nSFXkJoP+2TewWTPdoHFOfnZPtg1RfL8LUI9hiDcX65i0K1G2KUTR0xeQID+nK +bPWClJ/5f6Q6yzS4+95cJ9lD6M0App0Q9Cvko5Lvyz+Wpz9sPDMcrRPKtLKAnNW NlElmP80p3R8xdi6sC0HmA6v8+0EbX0bEzGbjBeellzlv9RZxDX/FwAbwrdcTqO+ kBCC2wN10yWXJGSIExGZLR2MNOn3AUsGso2NQAubqN5mSTupwQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFD0nrpBagQBRVR5Et+U9rYu1bX6OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j MTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1MGQ1OWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2MxNDI4ZDk5LWFkMjMtNGQ1OC1i NWY0LTE3ZGE0YTUwZDU5YS9jMTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1 MGQ1OWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBisAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIHzYZyJD8ZvQ5+Ztw05 rAbeo/h3rf6Ssjb7lFYHA9C6YxM1h8s5R+yAqIDxcGuPfQpLmreiUjaQtroiHG68 18QzqISrNkWfe6ETJJIWMQElszcG8IzSObnAMPbHjrdl/6ihV8+n91GWYbTPTryz wIBT66+5logo7olUBKSs26l8PLaDOHyRkn3Xxl7dkOSi89d+DbCu4kg9Eqm6crN4 FYJW4QGgCCEATuHlZC1lbob2I6zrmqK53egDDoCMDKnnHoIb3/flr8O+tS6NFZeJ rQKF+8TCarZ4LMUAfsIIxqOZ7XpYtgafgVhKlC4ywo0aSse+1gxVNl8uFXFRt96F v3w= -----END CERTIFICATE-----Generated at Sun Jun 29 01:56:36 2025 by rpki-client