$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer File: 2ef52563-8058-416a-a5ae-9e83b023cee1.cer (raw, json) Hash identifier: 0e2Ns2IrvXILcC3Xl7cH4uCDslTardZCW7TOf6RAOCI= Subject key identifier: FC:86:55:88:E1:92:6D:D6:20:4B:F4:92:D1:D0:2E:69:B7:46:C2:16 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849B00E084B989D23282AC06080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Apr 2025 14:24:22 +0000 Certificate not after: Mon 02 Aug 2027 14:24:22 +0000 Subordinate resources: AS: 11875 IP: 2602:815:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:0e:08:4b:98:9d:23:28:2a:c0:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 29 14:24:22 2025 GMT Not After : Aug 2 14:24:22 2027 GMT Subject: CN=2ef52563-8058-416a-a5ae-9e83b023cee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:1f:75:cb:08:ec:a7:a5:68:23:c2:b3:11: 58:2d:06:8a:5b:b7:43:f4:4d:c3:47:02:2c:51:01: ca:62:79:f7:63:b5:9c:3f:fe:e3:f9:5d:9c:f9:97: 9e:0a:1c:67:46:9e:ce:73:fe:3b:f8:c4:44:de:75: ea:a9:82:10:de:be:5b:59:07:c0:b4:3b:cd:09:0e: ea:3d:e3:7e:65:6a:dd:0f:14:c7:04:1b:36:e5:2d: 98:1e:67:1a:06:4e:b9:0d:70:9c:1e:1b:b6:79:d4: 3e:c2:a4:9e:7c:fa:91:aa:5f:f8:1d:16:38:67:6c: 55:44:eb:1b:6b:46:85:6b:18:01:11:a2:dc:c2:b5: 9d:7d:2c:61:df:06:e8:42:1a:bc:fa:af:f2:e5:2b: e9:68:d9:cd:70:05:13:cc:c8:eb:8d:f7:7a:9e:93: 26:1c:71:64:2c:06:ed:c6:17:98:62:66:17:ea:73: af:b2:7d:9e:30:04:12:92:d3:35:3e:b4:42:b2:82: 61:e4:0b:b0:88:e4:3b:a2:f1:16:bb:48:e2:9c:68: 34:a3:60:44:ad:59:48:f8:51:2c:6d:a1:4d:71:b0: 3e:85:1f:76:dc:29:67:a9:eb:c5:ae:44:39:da:27: 45:65:93:2e:f7:39:59:75:47:38:eb:38:00:b4:8c: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:86:55:88:E1:92:6D:D6:20:4B:F4:92:D1:D0:2E:69:B7:46:C2:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2602:815:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11875 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:07:90:bf:86:c7:c7:d6:0a:a5:c8:5b:8c:5e:f2:45:f8:fb: 26:4b:ba:ae:8c:4d:85:b2:b8:3e:02:91:a5:e3:5b:d9:b1:81: 09:6e:3b:01:34:0e:3b:ac:2e:b6:7e:6a:f4:87:7c:1e:0d:4a: c2:cb:30:e2:26:f2:2e:fa:4c:b2:f6:c8:38:41:20:06:f7:97: b9:f6:d3:3e:ab:35:0c:0b:bd:b4:1e:7d:ae:2c:67:7b:bb:2f: 31:bf:2f:b9:b8:29:31:0a:b5:20:80:a7:20:73:25:a7:76:a0: 40:dd:5e:1d:95:40:36:91:43:d5:c9:fb:ef:e9:89:c3:19:7b: a7:ff:16:1b:b8:a1:0a:ff:0d:a7:98:42:62:f6:9e:a7:ea:8b: 72:f2:69:d0:1f:6f:a5:03:7e:af:c7:55:20:f5:34:a2:62:a8: a2:bc:35:00:26:ce:53:7d:68:75:e7:ab:7f:3d:34:f8:bc:a0: 70:7d:51:80:be:7b:bc:67:71:15:65:7b:38:7c:0d:2b:db:b6: 08:5a:90:34:f0:59:b0:43:a7:97:3f:47:b3:43:64:71:32:f4: ec:58:c7:ff:b3:e2:20:10:37:3f:91:4b:6e:67:f6:69:18:31: 97:30:f9:9e:73:1b:74:89:89:0c:ab:b5:25:ee:23:1c:70:3e: b4:03:4b:2e -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEmwDghLmJ0jKCrAYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQyOTE0MjQyMloXDTI3MDgwMjE0MjQyMlowLzEtMCsGA1UEAxMk MmVmNTI1NjMtODA1OC00MTZhLWE1YWUtOWU4M2IwMjNjZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoesfdcsI7KelaCPCsxFYLQaKW7dD9E3DRwIs UQHKYnn3Y7WcP/7j+V2c+ZeeChxnRp7Oc/47+MRE3nXqqYIQ3r5bWQfAtDvNCQ7q PeN+ZWrdDxTHBBs25S2YHmcaBk65DXCcHhu2edQ+wqSefPqRql/4HRY4Z2xVROsb a0aFaxgBEaLcwrWdfSxh3wboQhq8+q/y5SvpaNnNcAUTzMjrjfd6npMmHHFkLAbt xheYYmYX6nOvsn2eMAQSktM1PrRCsoJh5AuwiOQ7ovEWu0jinGg0o2BErVlI+FEs baFNcbA+hR923ClnqevFrkQ52idFZZMu9zlZdUc46zgAtIxuCQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFPyGVYjhkm3WIEv0ktHQLmm3RsIWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y ZWY1MjU2My04MDU4LTQxNmEtYTVhZS05ZTgzYjAyM2NlZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzJlZjUyNTYzLTgwNTgtNDE2YS1h NWFlLTllODNiMDIzY2VlMS8yZWY1MjU2My04MDU4LTQxNmEtYTVhZS05ZTgzYjAy M2NlZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggVYAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICLmMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAIweQv4bHx9YKpchbjF7yRfj7Jku6roxNhbK4PgKRpeNb 2bGBCW47ATQOO6wutn5q9Id8Hg1Kwssw4ibyLvpMsvbIOEEgBveXufbTPqs1DAu9 tB59rixne7svMb8vubgpMQq1IICnIHMlp3agQN1eHZVANpFD1cn77+mJwxl7p/8W G7ihCv8Np5hCYvaep+qLcvJp0B9vpQN+r8dVIPU0omKoorw1ACbOU31odeerfz00 +LygcH1RgL57vGdxFWV7OHwNK9u2CFqQNPBZsEOnlz9Hs0NkcTL07FjH/7PiIBA3 P5FLbmf2aRgxlzD5nnMbdImJDKu1Je4jHHA+tANLLg== -----END CERTIFICATE-----Generated at Mon May 12 10:27:04 2025 by rpki-client