$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287.cer File: 9fa1f513-7800-4b16-b8c2-e28305418287.cer (raw, json) Hash identifier: uv7FUT8I8tMS4e8GEvpI+Ps9ZaPiSrYdXiAwz3Z4ljY= Subject key identifier: 34:88:0B:1F:A7:A3:6B:26:FA:0D:04:4E:D1:99:B2:DD:34:13:2A:87 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849D3FB2865B8BE415508444100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 May 2025 11:15:26 +0000 Certificate not after: Thu 12 Aug 2027 18:21:00 +0000 Subordinate resources: AS: 401370 IP: 2602:f651::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d3:fb:28:65:b8:be:41:55:08:44:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 12 11:15:26 2025 GMT Not After : Aug 12 18:21:00 2027 GMT Subject: CN=9fa1f513-7800-4b16-b8c2-e28305418287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:47:6a:ec:b2:6d:37:1a:41:df:a6:84:95:d3: cb:b8:e1:a3:43:f5:91:1a:e1:6d:0e:a2:cd:91:88: 8e:87:79:56:18:72:f0:af:65:97:5c:dc:56:1a:ff: f8:3f:8b:4e:27:54:ad:18:07:1c:aa:11:3f:6f:44: ca:10:c3:fa:72:f5:a8:1b:78:f4:17:88:94:1a:ea: c2:5a:33:46:fc:6a:04:39:cb:e8:62:69:fa:7c:9c: 9b:06:b8:c1:3f:1b:5c:b5:ec:40:e1:c5:c2:76:0f: e2:c0:04:fe:63:fb:f5:0a:d5:ed:a2:ae:39:95:ec: f6:bb:e3:7a:1a:00:ea:38:1f:0c:b2:95:ac:f3:0f: e2:cf:53:ab:a4:05:67:1f:41:72:c7:e7:28:73:83: a0:57:57:d4:07:90:1a:10:05:67:03:2b:35:a8:76: 6e:91:0a:ff:a9:8c:ad:3f:9c:f5:8a:55:83:9c:e4: 44:4b:1a:45:3e:1a:7e:b8:1f:03:9c:74:3c:00:75: 93:15:b3:a5:28:fe:a1:75:d7:7b:f1:13:65:15:38: 17:56:a4:84:bc:77:56:83:ca:c8:2f:de:81:6f:d7: 71:cc:f5:b0:9b:c9:50:ea:0a:df:e0:8f:29:40:ae: 67:49:17:59:6d:94:a9:55:df:b5:38:cf:10:6d:d7: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:88:0B:1F:A7:A3:6B:26:FA:0D:04:4E:D1:99:B2:DD:34:13:2A:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f651::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401370 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a6:40:d6:bf:6d:da:7e:aa:0c:bd:d3:7c:05:b3:1b:af:f9: 32:9a:02:55:94:72:14:d5:6a:f7:63:69:9d:97:d0:70:6a:58: 22:02:2c:f7:9f:15:c1:cf:e3:7d:40:23:56:99:68:0d:88:e8: 09:32:34:90:66:1d:c9:51:52:0b:df:22:6e:53:b8:a6:75:f9: 0f:59:63:37:0e:36:51:26:ae:9f:3f:d1:2b:74:3e:3a:8d:0b: dd:f3:5f:5c:9c:31:99:e7:a7:8a:5c:e9:94:48:2f:72:00:40: cb:0d:38:d7:17:6a:b0:50:bd:1d:ae:39:dc:83:3c:0a:50:40: 6a:47:ae:8f:b8:4f:fc:05:7c:24:bc:89:c3:2a:1a:40:34:b2: 21:e3:30:d7:f2:e8:a0:05:71:d9:95:90:24:25:13:ce:0a:a5: 6c:3a:1a:b4:30:af:d0:8e:af:97:f7:86:0b:d6:12:40:22:f6: 1c:4b:7e:79:ee:6a:2d:c2:a4:6b:0f:9e:56:8a:b7:20:51:c0: d4:bb:aa:dd:0b:c9:2d:b2:53:d4:02:62:71:33:f8:12:fd:b2: 3b:05:da:3f:92:26:bf:00:ca:b5:77:ee:37:bd:18:e1:65:38: 77:af:8b:3a:ed:7f:54:58:c3:49:fb:98:77:6e:27:c6:c5:be: 86:d7:df:2f -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEnT+yhluL5BVQhEQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxMjExMTUyNloXDTI3MDgxMjE4MjEwMFowLzEtMCsGA1UEAxMk OWZhMWY1MTMtNzgwMC00YjE2LWI4YzItZTI4MzA1NDE4Mjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEdq7LJtNxpB36aEldPLuOGjQ/WRGuFtDqLN kYiOh3lWGHLwr2WXXNxWGv/4P4tOJ1StGAccqhE/b0TKEMP6cvWoG3j0F4iUGurC WjNG/GoEOcvoYmn6fJybBrjBPxtctexA4cXCdg/iwAT+Y/v1CtXtoq45lez2u+N6 GgDqOB8MspWs8w/iz1OrpAVnH0Fyx+coc4OgV1fUB5AaEAVnAys1qHZukQr/qYyt P5z1ilWDnORESxpFPhp+uB8DnHQ8AHWTFbOlKP6hddd78RNlFTgXVqSEvHdWg8rI L96Bb9dxzPWwm8lQ6grf4I8pQK5nSRdZbZSpVd+1OM8QbdfqgQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFDSICx+no2sm+g0ETtGZst00EyqHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85 ZmExZjUxMy03ODAwLTRiMTYtYjhjMi1lMjgzMDU0MTgyODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzlmYTFmNTEzLTc4MDAtNGIxNi1i OGMyLWUyODMwNTQxODI4Ny85ZmExZjUxMy03ODAwLTRiMTYtYjhjMi1lMjgzMDU0 MTgyODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvZRADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGH9owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFqZA1r9t2n6qDL3TfAWzG6/5MpoCVZRyFNVq92NpnZfQ cGpYIgIs958Vwc/jfUAjVploDYjoCTI0kGYdyVFSC98iblO4pnX5D1ljNw42USau nz/RK3Q+Oo0L3fNfXJwxmeenilzplEgvcgBAyw041xdqsFC9Ha453IM8ClBAakeu j7hP/AV8JLyJwyoaQDSyIeMw1/LooAVx2ZWQJCUTzgqlbDoatDCv0I6vl/eGC9YS QCL2HEt+ee5qLcKkaw+eVoq3IFHA1Luq3QvJLbJT1AJicTP4Ev2yOwXaP5ImvwDK tXfuN70Y4WU4d6+LOu1/VFjDSfuYd24nxsW+htffLw== -----END CERTIFICATE-----Generated at Tue May 13 19:41:31 2025 by rpki-client