$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df.cer File: f25f5e06-187d-4236-81cb-8e31d54075df.cer (raw, json) Hash identifier: vyBAZdOZ91IOQpaPEBvPReDhPGuBZcBEg3GvS3dUMTg= Subject key identifier: 28:64:0C:12:6A:E8:06:99:75:CD:BF:BA:F9:51:8F:52:5B:62:1B:F7 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849CB13A050421A3D77E65FDC70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/f25f5e06-187d-4236-81cb-8e31d54075df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 May 2025 06:42:28 +0000 Certificate not after: Thu 12 Aug 2027 06:42:28 +0000 Subordinate resources: AS: 401186 IP: 2602:f654::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:13:a0:50:42:1a:3d:77:e6:5f:dc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 9 06:42:28 2025 GMT Not After : Aug 12 06:42:28 2027 GMT Subject: CN=f25f5e06-187d-4236-81cb-8e31d54075df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:a6:c7:fe:7e:f5:0e:60:33:e0:3f:34:78: 07:b8:d7:19:dd:e9:c5:40:83:52:a0:8c:79:f8:57: 68:1d:8c:1f:dd:92:47:42:44:30:af:f4:29:27:d1: 9a:be:40:49:38:6d:82:68:90:d8:2b:86:d8:d0:ed: 84:57:a3:e7:7e:91:10:5b:26:d1:83:bc:76:95:06: 49:0d:05:64:e1:f1:20:1e:85:0b:56:5e:51:a5:06: ba:55:19:04:14:84:ab:7c:05:91:7b:8f:17:60:fc: 80:23:d4:fe:e8:b0:e3:0f:51:48:c3:f3:eb:85:44: 73:c9:60:d1:ac:bd:ac:69:ad:38:49:c6:0f:dd:98: bf:11:52:2e:2b:04:d9:ba:ce:80:f4:ab:14:be:70: b9:71:ea:d5:b4:ae:0e:e7:6f:88:68:15:13:61:e3: f8:ea:20:72:fe:f7:7c:ff:80:b2:a9:0c:f9:ea:d0: 98:b0:1b:d4:21:40:8b:ba:aa:8e:97:a5:8e:06:1e: 1e:de:3b:a7:f7:08:cd:b3:7e:f9:b7:f8:11:8c:cc: 6d:42:1e:c2:9e:d1:bf:dc:03:87:70:54:db:a8:c3: c7:ee:10:bd:cf:78:5f:af:7a:f4:48:d7:17:49:e1: b8:6c:01:07:38:4a:03:bc:cc:1d:76:48:fc:52:31: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:64:0C:12:6A:E8:06:99:75:CD:BF:BA:F9:51:8F:52:5B:62:1B:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/f25f5e06-187d-4236-81cb-8e31d54075df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f654::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401186 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a0:49:b8:b0:9b:62:78:f6:8b:be:2f:99:fa:c8:11:43:22: 48:38:35:d9:27:01:12:87:29:5e:b0:41:46:ee:e5:22:d3:61: 76:e3:aa:a2:1b:fb:04:7d:4a:c8:cf:8c:fd:51:d2:1b:bd:2c: 63:93:6f:b4:c8:49:1f:d9:9f:6c:aa:52:a5:09:1b:a9:3c:ea: 5f:0c:84:f1:e1:2e:02:0e:e4:dd:fb:2f:36:3d:0a:fa:6e:19: a6:04:10:98:df:40:41:f2:9f:8c:37:74:33:9e:90:8d:b9:ac: df:08:c7:4f:87:ec:ed:3d:c5:ab:8b:05:75:b5:ca:93:e5:ab: 2a:ef:77:ae:b2:3f:1f:d0:da:c7:f6:eb:e3:8c:5a:09:f5:28: 9f:72:2b:83:93:74:16:78:45:e6:2e:45:15:be:df:7c:66:c6: 36:71:b7:17:ea:72:ce:04:2c:d5:e3:a5:7d:e6:d5:d7:e2:3d: a5:fc:81:bf:ec:42:58:21:6f:51:71:a2:83:37:89:1d:41:0d: f2:f7:c9:89:c0:99:27:42:ab:08:e0:82:e8:ba:d7:6d:d0:47: c9:57:51:19:8c:f8:b1:6d:c0:20:2a:2f:a2:8a:4b:84:fb:08: c8:d6:7a:12:ff:b7:f0:43:3d:bf:b1:9a:18:45:10:34:9f:64: 36:85:5f:58 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEnLE6BQQho9d+Zf3HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwOTA2NDIyOFoXDTI3MDgxMjA2NDIyOFowLzEtMCsGA1UEAxMk ZjI1ZjVlMDYtMTg3ZC00MjM2LTgxY2ItOGUzMWQ1NDA3NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZemx/5+9Q5gM+A/NHgHuNcZ3enFQINSoIx5 +FdoHYwf3ZJHQkQwr/QpJ9GavkBJOG2CaJDYK4bY0O2EV6PnfpEQWybRg7x2lQZJ DQVk4fEgHoULVl5RpQa6VRkEFISrfAWRe48XYPyAI9T+6LDjD1FIw/PrhURzyWDR rL2saa04ScYP3Zi/EVIuKwTZus6A9KsUvnC5cerVtK4O52+IaBUTYeP46iBy/vd8 /4CyqQz56tCYsBvUIUCLuqqOl6WOBh4e3jun9wjNs375t/gRjMxtQh7CntG/3AOH cFTbqMPH7hC9z3hfr3r0SNcXSeG4bAEHOEoDvMwddkj8UjELzQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFChkDBJq6AaZdc2/uvlRj1JbYhv3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m MjVmNWUwNi0xODdkLTQyMzYtODFjYi04ZTMxZDU0MDc1ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2YyNWY1ZTA2LTE4N2QtNDIzNi04 MWNiLThlMzFkNTQwNzVkZi9mMjVmNWUwNi0xODdkLTQyMzYtODFjYi04ZTMxZDU0 MDc1ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvZUADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGHyIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAiqBJuLCbYnj2i74vmfrIEUMiSDg12ScBEocpXrBBRu7l ItNhduOqohv7BH1KyM+M/VHSG70sY5NvtMhJH9mfbKpSpQkbqTzqXwyE8eEuAg7k 3fsvNj0K+m4ZpgQQmN9AQfKfjDd0M56Qjbms3wjHT4fs7T3Fq4sFdbXKk+WrKu93 rrI/H9Dax/br44xaCfUon3Irg5N0FnhF5i5FFb7ffGbGNnG3F+pyzgQs1eOlfebV 1+I9pfyBv+xCWCFvUXGigzeJHUEN8vfJicCZJ0KrCOCC6LrXbdBHyVdRGYz4sW3A ICovoopLhPsIyNZ6Ev+38EM9v7GaGEUQNJ9kNoVfWA== -----END CERTIFICATE-----Generated at Mon May 12 18:08:58 2025 by rpki-client