$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df.cer File: 2b03a19b-4a04-4de7-a6cb-c014680895df.cer (raw, json) Hash identifier: dqfidobAPo5uOz0YfMPyloWV+bNQQ3HcKcz9ERtkLhM= Subject key identifier: 0F:8E:82:FE:86:87:B6:55:31:89:58:EA:25:08:9B:9A:A7:D8:57:8E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849781E8CFA6E92580D8C63CF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/2b03a19b-4a04-4de7-a6cb-c014680895df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 13:32:23 +0000 Certificate not after: Tue 13 Jul 2027 13:32:23 +0000 Subordinate resources: IP: 2602:81b:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:1e:8c:fa:6e:92:58:0d:8c:63:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 9 13:32:23 2025 GMT Not After : Jul 13 13:32:23 2027 GMT Subject: CN=2b03a19b-4a04-4de7-a6cb-c014680895df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:4f:6b:09:a6:5b:2f:aa:e8:73:97:87:67: d2:e3:11:00:bb:01:59:0e:bf:f6:5a:e5:ca:e1:65: 90:65:d0:7f:ea:1f:f8:2e:60:6a:3a:b8:43:61:dc: e4:4a:d9:fc:39:31:1a:63:6b:f1:c5:e0:70:fc:92: bc:ca:6a:05:3e:f8:7e:4d:99:37:8f:f6:e5:d9:d7: 3b:b0:47:d8:b1:c6:f7:1c:9f:40:c6:fc:a6:fb:ce: f5:0f:52:04:a3:d1:5c:63:96:56:21:94:1f:26:02: 84:76:e9:cd:29:70:1b:69:5b:f8:11:dc:51:58:48: c2:90:74:7d:d4:2c:7e:54:62:59:7a:13:ee:cb:97: 6b:49:f7:86:29:3d:d6:d3:93:71:0d:92:88:20:86: bc:0c:ed:2d:f6:73:a5:5a:84:a6:fb:c9:f9:31:01: 14:da:d5:0b:33:53:e0:0c:bc:3f:2d:6b:92:b5:ae: 5f:95:af:e4:e4:01:73:4f:67:de:50:d3:96:91:a9: d6:1f:fc:d5:19:3d:3b:59:74:75:02:81:3e:89:ce: 40:9d:a7:8a:c3:71:f5:e5:e2:4b:6f:34:8e:fc:5a: 73:17:06:75:6a:f3:60:26:ac:ef:24:d5:53:8b:cc: 02:2b:72:fd:44:71:db:84:43:65:66:05:e5:10:2f: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8E:82:FE:86:87:B6:55:31:89:58:EA:25:08:9B:9A:A7:D8:57:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/2b03a19b-4a04-4de7-a6cb-c014680895df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:81b:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:67:d5:ea:d7:f0:0c:88:79:5c:55:17:66:59:07:d2:e8:ee: a2:f6:14:b3:a3:ca:5d:55:09:0e:e2:16:db:58:42:ff:28:ff: 0c:15:fc:57:f0:31:a3:ab:b3:16:9f:72:86:fc:0b:64:d9:e9: 94:9c:79:4b:cb:36:11:1b:9e:3a:72:b0:7c:e5:a2:dd:9d:b2: a4:c4:2b:b7:38:b2:06:50:47:1c:9a:fc:ba:d6:e7:b1:6f:12: 70:a6:9a:1f:f6:12:d7:70:be:b9:e2:cd:2e:64:45:0b:f2:1f: b5:3b:70:78:55:11:c7:6f:76:6d:4f:89:d2:5a:f9:25:04:e1: b2:84:77:06:e5:41:03:71:0d:5e:57:ea:6f:a4:38:a6:53:63: 8b:5a:f1:ad:f4:ea:13:25:a1:12:22:80:7b:01:90:88:77:8a: a4:fa:61:95:2a:26:02:30:d6:14:75:0d:44:20:b0:c1:e5:63: 0e:b6:db:ab:73:da:75:c3:01:a5:8c:36:01:69:b4:c0:ef:1d: 41:a3:4c:e1:b2:71:b6:b9:ae:b7:a8:ef:ba:61:79:5c:03:0b: c0:27:6b:4e:54:92:ab:74:b1:f1:b3:d0:05:4b:bb:c4:73:1e: 00:3a:81:16:63:50:a3:4b:dd:84:00:74:13:75:61:d0:75:fa: ff:07:f0:e0 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEl4Hoz6bpJYDYxjzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwOTEzMzIyM1oXDTI3MDcxMzEzMzIyM1owLzEtMCsGA1UEAxMk MmIwM2ExOWItNGEwNC00ZGU3LWE2Y2ItYzAxNDY4MDg5NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDBPawmmWy+q6HOXh2fS4xEAuwFZDr/2WuXK 4WWQZdB/6h/4LmBqOrhDYdzkStn8OTEaY2vxxeBw/JK8ymoFPvh+TZk3j/bl2dc7 sEfYscb3HJ9Axvym+871D1IEo9FcY5ZWIZQfJgKEdunNKXAbaVv4EdxRWEjCkHR9 1Cx+VGJZehPuy5drSfeGKT3W05NxDZKIIIa8DO0t9nOlWoSm+8n5MQEU2tULM1Pg DLw/LWuSta5fla/k5AFzT2feUNOWkanWH/zVGT07WXR1AoE+ic5AnaeKw3H15eJL bzSO/FpzFwZ1avNgJqzvJNVTi8wCK3L9RHHbhENlZgXlEC82zwIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFA+Ogv6Gh7ZVMYlY6iUIm5qn2FeOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y YjAzYTE5Yi00YTA0LTRkZTctYTZjYi1jMDE0NjgwODk1ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJiMDNhMTliLTRhMDQtNGRlNy1h NmNiLWMwMTQ2ODA4OTVkZi8yYjAzYTE5Yi00YTA0LTRkZTctYTZjYi1jMDE0Njgw ODk1ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggbYAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiWfV6tfwDIh5XFUX ZlkH0ujuovYUs6PKXVUJDuIW21hC/yj/DBX8V/Axo6uzFp9yhvwLZNnplJx5S8s2 ERueOnKwfOWi3Z2ypMQrtziyBlBHHJr8utbnsW8ScKaaH/YS13C+ueLNLmRFC/If tTtweFURx292bU+J0lr5JQThsoR3BuVBA3ENXlfqb6Q4plNji1rxrfTqEyWhEiKA ewGQiHeKpPphlSomAjDWFHUNRCCwweVjDrbbq3PadcMBpYw2AWm0wO8dQaNM4bJx trmut6jvumF5XAMLwCdrTlSSq3Sx8bPQBUu7xHMeADqBFmNQo0vdhAB0E3Vh0HX6 /wfw4A== -----END CERTIFICATE-----Generated at Mon May 12 17:20:33 2025 by rpki-client