$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359.cer File: eb047d23-6a3f-4a43-9374-a2cfa94f3359.cer (raw, json) Hash identifier: L97VUJ6FhjMuP2lE4aScD4jKz/V16ojcwT0Sq0yyU0M= Subject key identifier: 4D:EA:4E:EA:10:C6:33:62:CD:76:08:E0:30:52:D0:94:AB:57:07:FA Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A17342E35CFB8BF314121E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/eb047d23-6a3f-4a43-9374-a2cfa94f3359.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Jun 2025 13:09:29 +0000 Certificate not after: Tue 31 Aug 2027 14:29:49 +0000 Subordinate resources: IP: 2620:91::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:34:2e:35:cf:b8:bf:31:41:21:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 5 13:09:29 2025 GMT Not After : Aug 31 14:29:49 2027 GMT Subject: CN=eb047d23-6a3f-4a43-9374-a2cfa94f3359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:65:63:2d:e2:76:f9:88:a6:00:ae:6c:e4: 4d:e5:34:30:96:2d:47:7d:96:78:de:57:4c:61:a7: 1d:72:40:93:fb:d6:bf:4e:27:fa:20:a4:2d:4c:50: 2a:c2:3e:c9:f4:9f:af:bf:c0:ee:bc:c9:7e:81:5f: 20:56:e1:d7:1e:64:fa:e7:64:53:d8:15:0b:d8:82: 3e:82:85:99:26:58:5a:be:6f:f7:a7:ee:b8:8a:9a: 69:a9:3d:e2:ec:a9:de:9e:1e:e8:08:ab:d3:d1:4a: 47:3d:55:a0:2f:2c:c0:29:f1:29:fb:a3:b8:4a:07: bc:95:6b:78:d6:eb:1f:d5:a2:54:d1:48:6e:ac:fa: 0b:7b:77:df:d4:ae:71:5b:a3:b7:73:7b:68:36:92: 9b:e1:59:41:9f:d1:28:99:76:c2:df:49:95:c7:32: 85:c2:da:e7:f4:15:cf:07:b8:b3:48:8e:fc:6d:34: 8a:e6:e9:1a:a9:e0:72:03:7f:a9:52:5a:aa:c0:f6: b7:70:46:87:2a:7b:59:d5:93:01:18:e7:a0:83:90: 4d:e5:24:35:36:8d:a7:37:c8:90:48:99:f6:8a:44: 8b:0d:3c:07:14:0f:c8:6f:1f:fe:7b:d5:64:31:3c: 74:cd:b3:94:53:d1:16:21:ec:9a:02:99:a7:63:c7: 19:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:4E:EA:10:C6:33:62:CD:76:08:E0:30:52:D0:94:AB:57:07:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/eb047d23-6a3f-4a43-9374-a2cfa94f3359.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:91::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:1c:ee:f8:76:c2:99:ca:8b:1c:a3:7f:92:84:c5:d8:e3:71: c8:27:a7:0c:fe:7c:b8:b1:00:20:94:24:05:f6:15:ae:ba:dc: 38:27:27:47:e8:c5:e9:4a:2d:42:58:4e:b5:a4:f5:e4:21:84: 8c:b5:92:da:28:50:f7:20:cc:17:0d:ac:39:d1:a5:2f:0a:3d: 9b:6b:11:0c:b4:df:95:c9:09:ae:6d:63:07:87:a0:52:99:8d: 48:37:63:8f:49:1f:ad:ea:be:f6:e2:0f:cc:89:fe:61:b7:5f: 6c:71:c6:79:dd:5e:a3:16:47:eb:74:23:1e:f1:44:57:57:36: f5:e0:c9:01:e3:31:26:ad:62:41:31:5a:fd:ef:61:7a:f2:be: f9:de:ac:62:86:9a:67:01:23:e9:f6:2c:a4:df:a3:cf:a2:cd: 98:d3:7c:53:e9:b6:d2:2f:40:5c:9b:6c:33:de:72:4d:8c:d1: d0:ec:2f:bd:d4:99:f0:dc:90:8b:9d:df:cf:c4:68:39:bd:90: 06:46:1a:60:45:0d:65:5b:6a:b4:af:c8:28:44:3c:ec:a6:ce: f7:11:95:a4:fa:95:e7:d8:13:ad:d5:19:4c:cc:d9:14:c9:d0: e3:13:44:7d:0b:89:c1:df:f3:36:1a:23:2e:0a:0b:cf:67:09: ba:e6:c4:ec -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEoXNC41z7i/MUEh5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYwNTEzMDkyOVoXDTI3MDgzMTE0Mjk0OVowLzEtMCsGA1UEAxMk ZWIwNDdkMjMtNmEzZi00YTQzLTkzNzQtYTJjZmE5NGYzMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrxlYy3idvmIpgCubORN5TQwli1HfZZ43ldM YacdckCT+9a/Tif6IKQtTFAqwj7J9J+vv8DuvMl+gV8gVuHXHmT652RT2BUL2II+ goWZJlhavm/3p+64ipppqT3i7Knenh7oCKvT0UpHPVWgLyzAKfEp+6O4Sge8lWt4 1usf1aJU0UhurPoLe3ff1K5xW6O3c3toNpKb4VlBn9EomXbC30mVxzKFwtrn9BXP B7izSI78bTSK5ukaqeByA3+pUlqqwPa3cEaHKntZ1ZMBGOegg5BN5SQ1No2nN8iQ SJn2ikSLDTwHFA/Ibx/+e9VkMTx0zbOUU9EWIeyaApmnY8cZEQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFE3qTuoQxjNizXYI4DBS0JSrVwf6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l YjA0N2QyMy02YTNmLTRhNDMtOTM3NC1hMmNmYTk0ZjMzNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ViMDQ3ZDIzLTZhM2YtNGE0My05 Mzc0LWEyY2ZhOTRmMzM1OS9lYjA0N2QyMy02YTNmLTRhNDMtOTM3NC1hMmNmYTk0 ZjMzNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIACRAAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAxzu+HbCmcqLHKN/ koTF2ONxyCenDP58uLEAIJQkBfYVrrrcOCcnR+jF6UotQlhOtaT15CGEjLWS2ihQ 9yDMFw2sOdGlLwo9m2sRDLTflckJrm1jB4egUpmNSDdjj0kfreq+9uIPzIn+Ybdf bHHGed1eoxZH63QjHvFEV1c29eDJAeMxJq1iQTFa/e9hevK++d6sYoaaZwEj6fYs pN+jz6LNmNN8U+m20i9AXJtsM95yTYzR0OwvvdSZ8NyQi53fz8RoOb2QBkYaYEUN ZVtqtK/IKEQ87KbO9xGVpPqV59gTrdUZTMzZFMnQ4xNEfQuJwd/zNhojLgoLz2cJ uubE7A== -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:18 2025 by rpki-client