$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer File: 1fb5932e-f862-443b-a719-26a612c2f112.cer (raw, json) Hash identifier: ZtzOYnCIdOt3S13SHfVoQiI21wuZDjQy78g3HpJ9k34= Subject key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584B4E6F826499A8AECED62D7D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 Sep 2025 00:45:26 +0000 Certificate not after: Wed 29 Dec 2027 01:45:26 +0000 Subordinate resources: AS: 17326 IP: 2602:fd2a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:6f:82:64:99:a8:ae:ce:d6:2d:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 25 00:45:26 2025 GMT Not After : Dec 29 01:45:26 2027 GMT Subject: CN=1fb5932e-f862-443b-a719-26a612c2f112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:eb:78:5e:8f:ab:2d:92:50:1b:d7:b0:3c: cd:eb:30:6b:25:de:27:f0:95:21:47:5f:61:83:61: a6:37:34:fb:08:c9:70:62:ae:d2:24:9b:32:44:70: 15:1b:82:bc:dc:92:4f:bb:54:4b:aa:13:9e:4b:b0: ec:c2:d4:e5:b5:93:c3:bd:71:7c:f1:af:6f:69:32: 2b:9c:e0:7f:c4:4d:10:64:ad:00:ae:a0:47:2c:0d: 6f:7d:99:44:28:46:bd:f6:ab:52:dc:f4:ae:5b:d8: 16:cb:de:68:72:da:97:82:3f:e2:02:03:38:3e:44: 53:99:a8:b0:8c:38:38:9a:48:7e:f9:fc:c8:08:18: 7d:af:1b:7e:1c:58:3e:05:51:02:9c:74:9f:bd:e3: 83:5a:9c:ec:12:fe:a0:aa:dd:d8:2b:73:28:a4:72: 1d:b7:e7:06:43:77:33:14:83:c4:02:1c:e5:67:58: aa:f0:a6:3c:6f:1d:3d:9b:6b:cd:f4:96:41:8b:bf: 40:6f:40:64:b5:2f:a4:3e:be:6b:49:55:d6:b2:4b: 67:51:bf:14:a7:a6:1b:bc:f2:b3:07:56:e2:0d:13: 47:2c:a9:58:19:2f:94:5d:92:a5:e6:b0:d0:12:82: ac:5e:d6:35:ee:69:ed:03:b7:09:61:fb:91:31:00: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd2a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17326 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a1:a4:5c:78:9a:28:ce:1d:c8:63:e0:86:3a:33:c9:ea:b3: e5:bf:b7:53:3d:54:51:b4:15:24:89:2f:91:cf:ca:c1:29:c3: 0f:eb:2a:a2:1e:90:c8:74:05:56:c3:99:43:fa:2c:48:13:ca: 60:74:de:eb:26:2c:4c:94:ac:24:26:71:e7:6a:79:63:22:4b: d7:b7:45:dd:54:b0:04:4b:ca:73:68:38:3a:8c:ed:5d:e0:08: 14:72:a5:40:3a:f4:6a:c4:d6:e3:27:8a:c5:5f:f7:16:88:86: e0:40:8e:8d:d9:68:27:64:53:4c:e1:b7:c8:bd:7f:ee:c4:0d: 18:a2:75:fc:34:cd:ed:e3:7c:70:5e:6b:50:20:be:7b:b8:26: 6e:ab:c6:02:55:b8:0f:24:7c:9d:fa:fe:7e:df:0a:ea:cf:90: 75:96:b6:fd:89:65:12:e0:c4:53:cf:f7:fe:a1:de:66:3a:d1: 0c:d2:da:71:76:dc:c8:8a:48:d5:f8:79:82:12:71:67:9c:17: ee:e9:e6:b9:64:f9:b1:7b:96:d1:af:3c:c1:ca:ee:bc:21:f7: cc:71:c2:78:86:50:63:56:00:d9:fd:6f:03:a2:1e:73:be:93: 03:ea:93:93:dd:c2:b1:17:dc:59:1a:ec:c5:f4:c6:3c:0c:43: fa:15:20:ca -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEtOb4JkmaiuztYtfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDkyNTAwNDUyNloXDTI3MTIyOTAxNDUyNlowLzEtMCsGA1UEAxMk MWZiNTkzMmUtZjg2Mi00NDNiLWE3MTktMjZhNjEyYzJmMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApurreF6Pqy2SUBvXsDzN6zBrJd4n8JUhR19h g2GmNzT7CMlwYq7SJJsyRHAVG4K83JJPu1RLqhOeS7DswtTltZPDvXF88a9vaTIr nOB/xE0QZK0ArqBHLA1vfZlEKEa99qtS3PSuW9gWy95octqXgj/iAgM4PkRTmaiw jDg4mkh++fzICBh9rxt+HFg+BVECnHSfveODWpzsEv6gqt3YK3MopHIdt+cGQ3cz FIPEAhzlZ1iq8KY8bx09m2vN9JZBi79Ab0BktS+kPr5rSVXWsktnUb8Up6YbvPKz B1biDRNHLKlYGS+UXZKl5rDQEoKsXtY17mntA7cJYfuRMQC9zwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFPWrD5BvmeaaktK2MYIsWYEUeazWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x ZmI1OTMyZS1mODYyLTQ0M2ItYTcxOS0yNmE2MTJjMmYxMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFmYjU5MzJlLWY4NjItNDQzYi1h NzE5LTI2YTYxMmMyZjExMi8xZmI1OTMyZS1mODYyLTQ0M2ItYTcxOS0yNmE2MTJj MmYxMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAv0qADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJDrjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAboaRceJoozh3IY+CGOjPJ6rPlv7dTPVRRtBUkiS+Rz8rB KcMP6yqiHpDIdAVWw5lD+ixIE8pgdN7rJixMlKwkJnHnanljIkvXt0XdVLAES8pz aDg6jO1d4AgUcqVAOvRqxNbjJ4rFX/cWiIbgQI6N2WgnZFNM4bfIvX/uxA0YonX8 NM3t43xwXmtQIL57uCZuq8YCVbgPJHyd+v5+3wrqz5B1lrb9iWUS4MRTz/f+od5m OtEM0tpxdtzIikjV+HmCEnFnnBfu6ea5ZPmxe5bRrzzByu68IffMccJ4hlBjVgDZ /W8Doh5zvpMD6pOT3cKxF9xZGuzF9MY8DEP6FSDK -----END CERTIFICATE-----Generated at Tue Oct 21 06:47:15 2025 by rpki-client