$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15c626e9-e2c2-4dbc-87b0-7777654c3a39.cer File: 15c626e9-e2c2-4dbc-87b0-7777654c3a39.cer (raw, json) Hash identifier: +CfeLJv0q7kmS4DY0NUt1sZ0yJtwVWdErFQU0WmC0mI= Subject key identifier: B5:30:E3:05:56:CC:62:24:14:2B:E1:A0:F9:3A:A1:65:50:E9:98:D6 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A3C125949F920BC6CC0D523C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15c626e9-e2c2-4dbc-87b0-7777654c3a39/15c626e9-e2c2-4dbc-87b0-7777654c3a39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15c626e9-e2c2-4dbc-87b0-7777654c3a39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Jun 2025 18:06:14 +0000 Certificate not after: Tue 21 Sep 2027 18:06:14 +0000 Subordinate resources: IP: 2602:fb72::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:12:59:49:f9:20:bc:6c:c0:d5:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 18 18:06:14 2025 GMT Not After : Sep 21 18:06:14 2027 GMT Subject: CN=15c626e9-e2c2-4dbc-87b0-7777654c3a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:9b:52:a6:58:ef:67:08:43:bb:0f:05:a6: d4:38:70:1f:09:6d:b4:77:d9:27:f9:cf:22:9e:5a: c0:ee:23:00:35:dd:63:b2:ad:ce:49:42:80:b6:c6: 74:b1:5c:03:ea:86:02:c4:07:20:7e:25:5d:cb:d2: 81:e6:c0:e6:c1:47:90:8c:4e:b4:33:5b:48:42:c6: fc:c5:62:42:dc:5a:68:5c:16:88:75:f4:22:3b:29: df:46:9c:97:15:14:8d:9a:a6:bc:8f:ae:e8:2d:63: 60:f3:96:f1:2b:81:98:be:e9:30:32:5d:f8:c8:a5: a2:94:58:89:17:18:a5:3a:d6:17:99:1a:be:de:3d: 53:90:a3:18:a2:3f:aa:91:7d:a9:0a:e0:1a:8f:fb: e1:15:a4:ec:b2:62:a2:72:ac:34:7b:28:de:6b:35: f6:16:b5:4a:89:bd:c0:f4:59:6a:23:4a:ef:83:14: e9:36:9b:3a:52:f2:6a:d1:26:e0:4f:97:06:22:d6: e5:75:0d:35:07:6f:24:1d:4d:cb:b9:90:75:37:28: 43:79:9a:3d:ef:17:cf:0b:58:99:6b:d0:3e:06:00: 20:95:93:a9:d1:78:53:77:2d:8d:b5:bf:f1:ef:25: 6e:78:c6:8c:85:71:0f:41:06:da:70:90:49:2b:7a: e4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:30:E3:05:56:CC:62:24:14:2B:E1:A0:F9:3A:A1:65:50:E9:98:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15c626e9-e2c2-4dbc-87b0-7777654c3a39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15c626e9-e2c2-4dbc-87b0-7777654c3a39/15c626e9-e2c2-4dbc-87b0-7777654c3a39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb72::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a0:3b:bb:c5:c5:d9:e9:50:34:70:85:7a:50:eb:11:7a:18: c5:11:25:a5:1f:12:c9:c0:c1:ca:61:c7:ce:f4:8a:be:20:6e: c5:d1:6d:91:f4:17:1d:87:39:28:c3:ca:d9:58:ca:86:0e:cf: 9c:9c:13:6f:9d:55:78:62:c4:39:7e:e0:db:cb:24:a7:e0:41: 57:e6:90:6c:4a:68:25:2f:3c:d3:bd:93:8b:c9:21:4b:4a:35: a2:14:18:b7:0e:3c:29:fd:4a:ec:4b:19:e5:18:4a:af:a4:32: 37:3f:4e:7d:ae:fd:68:df:50:c8:c8:0a:88:f7:e3:aa:40:8a: 88:7a:88:00:9a:39:cc:bd:ad:d9:1b:fd:33:92:43:50:bd:97: a0:c6:32:54:60:0f:fc:db:44:69:d8:ce:02:cb:db:27:cb:8c: 4f:8d:91:61:25:5a:5e:4c:06:3f:71:8c:0b:6c:ec:72:a1:de: b2:9a:fe:e1:98:15:25:69:5d:07:ed:18:c6:fb:48:e5:f6:17: 10:fa:82:9f:d1:a1:a2:95:6b:11:df:3c:96:59:05:86:bc:32: 54:ad:07:78:56:35:d9:08:22:bd:84:31:60:49:41:fd:5e:38: 13:f8:3f:91:f8:f4:68:de:cc:dc:a3:2e:3d:e6:b2:e0:5b:03: c9:53:13:da -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEo8EllJ+SC8bMDVI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxODE4MDYxNFoXDTI3MDkyMTE4MDYxNFowLzEtMCsGA1UEAxMk MTVjNjI2ZTktZTJjMi00ZGJjLTg3YjAtNzc3NzY1NGMzYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ6bUqZY72cIQ7sPBabUOHAfCW20d9kn+c8i nlrA7iMANd1jsq3OSUKAtsZ0sVwD6oYCxAcgfiVdy9KB5sDmwUeQjE60M1tIQsb8 xWJC3FpoXBaIdfQiOynfRpyXFRSNmqa8j67oLWNg85bxK4GYvukwMl34yKWilFiJ FxilOtYXmRq+3j1TkKMYoj+qkX2pCuAaj/vhFaTssmKicqw0eyjeazX2FrVKib3A 9FlqI0rvgxTpNps6UvJq0SbgT5cGItbldQ01B28kHU3LuZB1NyhDeZo97xfPC1iZ a9A+BgAglZOp0XhTdy2Ntb/x7yVueMaMhXEPQQbacJBJK3rktQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFLUw4wVWzGIkFCvhoPk6oWVQ6ZjWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x NWM2MjZlOS1lMmMyLTRkYmMtODdiMC03Nzc3NjU0YzNhMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzE1YzYyNmU5LWUyYzItNGRiYy04 N2IwLTc3Nzc2NTRjM2EzOS8xNWM2MjZlOS1lMmMyLTRkYmMtODdiMC03Nzc3NjU0 YzNhMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvtyADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHoDu7xcXZ6VA0cIV6 UOsRehjFESWlHxLJwMHKYcfO9Iq+IG7F0W2R9Bcdhzkow8rZWMqGDs+cnBNvnVV4 YsQ5fuDbyySn4EFX5pBsSmglLzzTvZOLySFLSjWiFBi3Djwp/UrsSxnlGEqvpDI3 P059rv1o31DIyAqI9+OqQIqIeogAmjnMva3ZG/0zkkNQvZegxjJUYA/820Rp2M4C y9sny4xPjZFhJVpeTAY/cYwLbOxyod6ymv7hmBUlaV0H7RjG+0jl9hcQ+oKf0aGi lWsR3zyWWQWGvDJUrQd4VjXZCCK9hDFgSUH9XjgT+D+R+PRo3szcoy495rLgWwPJ UxPa -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:09 2025 by rpki-client