$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer File: c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer (raw, json) Hash identifier: 22jY9pVlGw0I12j8kqEoF6jc/nnxpk4dw8m9/ucNEis= Subject key identifier: CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858488973992E29978E81E4D30080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jan 2025 01:45:33 +0000 Certificate not after: Mon 19 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 393581 IP: 2620:1fe::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:73:99:2e:29:97:8e:81:e4:d3:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 14 01:45:33 2025 GMT Not After : Apr 19 00:45:33 2027 GMT Subject: CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:2e:20:5c:42:9a:29:1a:95:74:84:33:3c: 54:7d:af:fe:3b:25:1c:e9:a5:43:aa:6c:77:50:3d: dd:a5:9f:59:63:53:81:b8:4d:85:b5:a5:ab:fc:7a: 2a:94:2b:5b:e8:f9:60:f0:82:e7:03:35:02:ca:2d: e7:d7:1d:25:d3:29:16:1c:7d:3b:d8:0c:71:d6:a2: 18:9e:95:22:40:17:ac:f2:1b:f6:10:09:c9:4e:a0: 84:65:69:8b:65:66:54:32:ba:70:f7:dd:3c:cb:28: 02:09:c4:1d:7d:ad:54:1a:30:15:b1:a5:da:a2:35: fe:10:06:09:f9:f6:22:bd:0c:89:9c:11:33:62:46: bb:af:37:8f:ea:22:c4:15:70:62:2c:10:a8:50:1f: 6e:69:d1:f7:1c:79:08:90:35:b6:7d:1a:8c:3b:5d: 7e:85:27:72:37:c8:d2:ec:48:a4:13:f9:0c:13:87: 87:fe:77:57:1f:f3:98:c8:48:71:68:da:2e:20:7a: b4:89:4b:14:10:64:fb:c4:51:11:43:4b:4e:69:55: fa:93:7d:47:57:e0:36:ce:06:4f:16:29:4f:6a:98: 11:83:89:d5:67:24:cb:fd:8e:04:15:08:ab:c7:3d: 6c:e3:ab:5e:46:b5:60:6a:61:02:f7:40:6e:80:32: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2620:1fe::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393581 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:61:6e:9b:1d:8c:14:0a:2d:28:e9:be:ea:d2:8f:24:18:b4: 8e:dd:63:ad:45:e7:be:e3:7a:ca:42:34:5f:fa:bd:ec:bf:68: 97:e4:14:0c:5d:33:dd:f8:ad:69:5b:7b:58:cd:29:6b:18:e3: 9b:97:1a:9e:91:bd:8b:d8:8a:f9:45:f5:52:1b:19:8d:24:3c: f5:32:1f:e4:94:02:18:ea:71:37:80:0c:fb:89:d4:91:c7:d6: 8d:64:81:da:91:ae:68:c1:36:66:b1:00:4e:01:22:66:3e:25: a7:09:67:47:33:0a:6d:60:7d:c6:f1:8a:27:4e:79:68:5b:0e: 0c:62:b2:6f:e3:82:d1:eb:6a:24:ee:d3:de:f8:95:6f:ee:02: b8:ec:f1:1f:8c:5e:de:66:5b:3e:fe:8d:2e:ee:d3:c7:7c:28: fa:18:39:8a:a2:98:44:38:2e:c3:4b:ea:80:43:fb:90:6a:46: f3:73:fb:b1:a1:24:56:26:08:43:3a:7c:58:b5:b3:32:e5:a9: 0a:65:29:fe:43:92:11:bc:29:bd:c5:26:7d:3b:04:8a:df:69: 95:54:a3:f7:a7:70:11:02:02:13:09:c4:dd:f0:6b:aa:77:45: 99:d5:83:11:a3:7b:32:ba:8b:d2:08:3c:6b:c4:7b:cd:6c:cb: c7:93:26:40 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEiJc5kuKZeOgeTTAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDExNDAxNDUzM1oXDTI3MDQxOTAwNDUzM1owLzEtMCsGA1UEAxMk YzI2NmZjNWUtOGEwNS00ODg1LThlMTgtMjMzMGE4M2ZjNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYUuIFxCmikalXSEMzxUfa/+OyUc6aVDqmx3 UD3dpZ9ZY1OBuE2FtaWr/HoqlCtb6Plg8ILnAzUCyi3n1x0l0ykWHH072Axx1qIY npUiQBes8hv2EAnJTqCEZWmLZWZUMrpw9908yygCCcQdfa1UGjAVsaXaojX+EAYJ +fYivQyJnBEzYka7rzeP6iLEFXBiLBCoUB9uadH3HHkIkDW2fRqMO11+hSdyN8jS 7EikE/kME4eH/ndXH/OYyEhxaNouIHq0iUsUEGT7xFERQ0tOaVX6k31HV+A2zgZP FilPapgRg4nVZyTL/Y4EFQirxz1s46teRrVgamEC90BugDI0QwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFM0WGd1mmYo55PxOsSQrosdjcgcqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j MjY2ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMwYTgzZmM1ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MyNjZmYzVlLThhMDUtNDg4NS04 ZTE4LTIzMzBhODNmYzVmNi9jMjY2ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMwYTgz ZmM1ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmIAH+ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGAW0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAbWFumx2MFAotKOm+6tKPJBi0jt1jrUXnvuN6ykI0X/q9 7L9ol+QUDF0z3fitaVt7WM0paxjjm5canpG9i9iK+UX1UhsZjSQ89TIf5JQCGOpx N4AM+4nUkcfWjWSB2pGuaME2ZrEATgEiZj4lpwlnRzMKbWB9xvGKJ055aFsODGKy b+OC0etqJO7T3viVb+4CuOzxH4xe3mZbPv6NLu7Tx3wo+hg5iqKYRDguw0vqgEP7 kGpG83P7saEkViYIQzp8WLWzMuWpCmUp/kOSEbwpvcUmfTsEit9plVSj96dwEQIC EwnE3fBrqndFmdWDEaN7MrqL0gg8a8R7zWzLx5MmQA== -----END CERTIFICATE-----Generated at Mon May 5 20:48:54 2025 by rpki-client