$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer File: d3d6dade-3164-4681-8f0a-34023fdf6934.cer (raw, json) Hash identifier: +oFwRXtVfWR3Uj8ATWHxg87Co3fYKVzsJTGgNhaO1cQ= Subject key identifier: C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849658E356A443EF7C23A18E200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Apr 2025 21:57:00 +0000 Certificate not after: Tue 06 Jul 2027 21:57:00 +0000 Subordinate resources: AS: 399349 IP: 2620:1bd::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:8e:35:6a:44:3e:f7:c2:3a:18:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 2 21:57:00 2025 GMT Not After : Jul 6 21:57:00 2027 GMT Subject: CN=d3d6dade-3164-4681-8f0a-34023fdf6934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cc:60:2a:54:85:d5:57:5d:e1:62:c1:5a:ac: c2:8a:92:a4:4d:49:98:36:5a:97:e1:a8:88:0d:71: 70:bd:06:ff:b1:ad:a3:9f:af:be:0e:b5:85:3e:52: 9a:68:e5:64:f9:b9:7e:c8:27:7e:91:a6:b5:f8:21: 06:55:32:5a:de:a0:af:cb:4c:f8:df:8a:61:d8:8b: 3e:70:71:6a:2f:f4:08:70:74:9d:c8:b8:c0:bb:1c: 1c:f5:d4:dc:92:8a:25:3c:42:55:a0:66:6e:6a:4e: 07:ec:2a:3e:b3:92:0a:86:91:b5:e1:07:be:6f:60: e9:79:14:13:15:37:40:c8:7d:c7:47:47:c9:d9:47: 6b:93:d4:bb:48:f1:33:07:d2:9e:a5:70:e4:fe:92: f7:8a:2c:30:9f:3a:8a:37:b3:13:95:36:7f:ad:23: d3:5a:60:53:01:b7:de:d3:3e:8d:c1:db:a6:ca:ac: ea:63:f2:11:d7:96:7b:47:b0:78:18:8d:ac:cb:b4: 74:fd:54:a9:30:08:c3:ca:64:71:75:1f:aa:b5:55: 7f:d6:79:fb:46:83:1f:92:7f:f5:aa:b0:e1:ec:8a: d3:f0:f7:dd:19:63:2f:db:e4:c6:94:24:8a:3b:11: 2e:61:d2:3d:e6:c6:c1:a5:43:1a:e9:d7:ca:f4:ac: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:1bd::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399349 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:75:d4:92:03:a0:d0:e9:9f:f4:49:60:97:83:65:99:06:17: 1c:28:e3:f3:c0:b0:82:54:1d:9b:d5:30:88:78:67:65:31:ed: 55:59:d2:4c:83:b8:50:99:1c:c9:0a:fb:12:cc:bb:71:4e:10: df:85:93:01:b9:f0:01:db:27:f9:ea:25:03:6e:5f:81:58:44: ff:cb:40:7c:af:db:09:5c:b3:0d:7b:54:54:1e:b8:4b:db:82: 70:19:43:3e:bb:29:03:28:73:cb:c8:6f:ee:fa:b3:ad:1d:0d: 7d:18:4e:3a:d4:b4:1d:10:98:f1:fe:1b:85:6c:68:74:68:b8: 36:65:01:79:44:10:ca:06:e0:f6:d5:b3:a8:b6:f2:f4:6a:cf: cc:fb:57:54:22:bc:ec:23:ec:d6:8b:b2:2c:be:26:3d:3c:03: fd:ce:65:ee:33:49:86:07:b4:ff:73:e3:7f:b0:d4:db:e5:02: 24:86:51:ed:e3:75:9e:f0:07:8f:f8:66:d6:7e:8f:d9:d6:aa: d3:44:0b:65:45:b6:cc:bb:56:ea:33:00:ec:8d:da:71:95:2d: 9d:1e:92:38:25:db:56:df:9b:ae:e7:40:ce:bd:62:ef:1a:26: ba:b0:ac:cf:45:44:8a:56:c2:0f:fd:cc:c1:c0:17:bd:c9:3d: fc:6a:b8:df -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWElljjVqRD73wjoY4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwMjIxNTcwMFoXDTI3MDcwNjIxNTcwMFowLzEtMCsGA1UEAxMk ZDNkNmRhZGUtMzE2NC00NjgxLThmMGEtMzQwMjNmZGY2OTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksxgKlSF1Vdd4WLBWqzCipKkTUmYNlqX4aiI DXFwvQb/sa2jn6++DrWFPlKaaOVk+bl+yCd+kaa1+CEGVTJa3qCvy0z434ph2Is+ cHFqL/QIcHSdyLjAuxwc9dTckoolPEJVoGZuak4H7Co+s5IKhpG14Qe+b2DpeRQT FTdAyH3HR0fJ2Udrk9S7SPEzB9KepXDk/pL3iiwwnzqKN7MTlTZ/rSPTWmBTAbfe 0z6NwdumyqzqY/IR15Z7R7B4GI2sy7R0/VSpMAjDymRxdR+qtVV/1nn7RoMfkn/1 qrDh7IrT8PfdGWMv2+TGlCSKOxEuYdI95sbBpUMa6dfK9KxF3wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFMGv4odnR4D2Qe1O8xU1YT88xWipMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k M2Q2ZGFkZS0zMTY0LTQ2ODEtOGYwYS0zNDAyM2ZkZjY5MzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2QzZDZkYWRlLTMxNjQtNDY4MS04 ZjBhLTM0MDIzZmRmNjkzNC9kM2Q2ZGFkZS0zMTY0LTQ2ODEtOGYwYS0zNDAyM2Zk ZjY5MzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmIAG9MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYX9TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB2ddSSA6DQ6Z/0SWCXg2WZBhccKOPzwLCCVB2b1TCIeGdl Me1VWdJMg7hQmRzJCvsSzLtxThDfhZMBufAB2yf56iUDbl+BWET/y0B8r9sJXLMN e1RUHrhL24JwGUM+uykDKHPLyG/u+rOtHQ19GE461LQdEJjx/huFbGh0aLg2ZQF5 RBDKBuD21bOotvL0as/M+1dUIrzsI+zWi7IsviY9PAP9zmXuM0mGB7T/c+N/sNTb 5QIkhlHt43We8AeP+GbWfo/Z1qrTRAtlRbbMu1bqMwDsjdpxlS2dHpI4JdtW35uu 50DOvWLvGia6sKzPRUSKVsIP/czBwBe9yT38arjf -----END CERTIFICATE-----Generated at Thu Jul 3 10:08:19 2025 by rpki-client