$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer File: 6f599815-aa39-4cb1-86b8-df65da50cb35.cer (raw, json) Hash identifier: x5uJJ1tBbNEcxbvuGEY0obTl8ENDqoX3KLvXwXRaCUc= Subject key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848EF78C42B47F523C2D3AEF280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 14:48:25 +0000 Certificate not after: Sun 04 Apr 2027 22:37:47 +0000 Subordinate resources: AS: 53388 AS: 401543 IP: 2607:eb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:78:c4:2b:47:f5:23:c2:d3:ae:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 19 14:48:25 2025 GMT Not After : Apr 4 22:37:47 2027 GMT Subject: CN=6f599815-aa39-4cb1-86b8-df65da50cb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:09:cc:fd:3e:c6:07:61:8e:04:1a:98:2f: 3a:75:9e:38:ff:d8:2c:f0:42:51:54:77:60:db:34: 98:7d:59:32:15:eb:bc:30:cf:c1:c9:4e:53:6a:f2: 56:b2:fd:39:c8:7a:e6:5a:64:84:50:c1:b5:f1:b1: 4a:7c:1b:52:f0:cb:c2:e8:a8:bb:28:07:50:d7:dc: 27:fd:c5:04:e8:89:19:8d:7d:3b:62:5e:cd:c9:55: bd:0f:82:eb:84:1c:21:d6:2e:c6:ab:05:6c:b6:78: b5:46:9c:f0:74:0d:7b:d7:9f:dd:99:57:61:56:b9: b6:32:ab:fc:9a:e4:58:bd:69:4a:06:35:5b:be:7f: ca:ab:9a:9d:71:b3:1f:11:38:3d:9e:ac:a9:f0:e6: b2:aa:85:91:13:85:70:43:5d:33:08:51:fe:89:90: 98:05:f4:09:f5:5b:5b:e8:ed:83:ed:a8:41:14:51: 47:48:78:ca:d9:50:2a:fc:01:2c:87:56:22:4a:b4: 40:20:d1:75:81:9d:7c:bb:90:57:a7:eb:3c:8b:2f: 73:64:e2:d4:37:13:83:9c:1a:94:55:a8:b9:e1:2f: a2:d0:07:8f:0e:62:1d:10:56:30:48:36:10:75:d1: a6:57:5f:86:04:9d:10:30:c9:68:1a:fd:c2:ce:86: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2607:eb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53388 401543 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:04:92:d0:0f:f8:b7:51:35:04:6a:59:8b:50:86:73:09:8c: 39:8a:79:8e:b5:cf:76:0c:a5:f0:33:03:f9:02:ec:e1:93:6c: 20:7f:27:84:df:95:92:cd:0c:80:d4:fd:b6:12:3f:2b:eb:d0: 7e:8c:2d:bb:58:4d:84:dc:13:65:d5:f4:d0:b5:94:f3:55:59: 87:66:bd:5a:83:16:e1:2b:92:26:47:22:c7:ee:0e:a0:e4:d9: 9e:e3:91:73:66:4c:2c:d7:2e:21:7e:c7:29:71:11:69:ce:98: ab:ff:e7:f0:26:23:0e:bb:16:5d:a4:a8:d8:fb:12:5c:e3:06: aa:cb:94:28:e8:39:39:6d:75:2b:3d:4b:8b:be:51:ea:be:29: 40:cd:cc:69:a6:45:e2:67:bb:c6:99:a8:90:64:28:f5:28:95: 09:58:a5:29:9a:ab:33:6e:a4:c2:7a:2f:89:15:18:48:3a:6f: c7:e5:0a:25:b4:65:53:0a:c8:f9:bf:29:7f:ca:08:bd:49:e9: 03:5f:22:36:16:2b:bf:49:2f:e8:7f:dc:b1:82:1d:5f:b8:aa: 3b:da:7b:7b:29:83:78:6f:13:b6:55:f0:22:78:5a:b0:d8:84: f7:c8:61:f1:04:92:5d:4d:27:ff:c8:81:4b:07:50:8a:a3:45: 83:ac:e7:42 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEjveMQrR/UjwtOu8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxOTE0NDgyNVoXDTI3MDQwNDIyMzc0N1owLzEtMCsGA1UEAxMk NmY1OTk4MTUtYWEzOS00Y2IxLTg2YjgtZGY2NWRhNTBjYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SsJzP0+xgdhjgQamC86dZ44/9gs8EJRVHdg 2zSYfVkyFeu8MM/ByU5TavJWsv05yHrmWmSEUMG18bFKfBtS8MvC6Ki7KAdQ19wn /cUE6IkZjX07Yl7NyVW9D4LrhBwh1i7GqwVstni1RpzwdA1715/dmVdhVrm2Mqv8 muRYvWlKBjVbvn/Kq5qdcbMfETg9nqyp8OayqoWRE4VwQ10zCFH+iZCYBfQJ9Vtb 6O2D7ahBFFFHSHjK2VAq/AEsh1YiSrRAINF1gZ18u5BXp+s8iy9zZOLUNxODnBqU Vai54S+i0AePDmIdEFYwSDYQddGmV1+GBJ0QMMloGv3Czoax5QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFADx7yxAPY772YCnIi/2VIiXpgwTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 ZjU5OTgxNS1hYTM5LTRjYjEtODZiOC1kZjY1ZGE1MGNiMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzZmNTk5ODE1LWFhMzktNGNiMS04 NmI4LWRmNjVkYTUwY2IzNS82ZjU5OTgxNS1hYTM5LTRjYjEtODZiOC1kZjY1ZGE1 MGNiMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB+tAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC AwDQjAIDBiCHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAkEktAP+LdRNQRqWYtQhnMJjDmKeY61z3YMpfAz A/kC7OGTbCB/J4TflZLNDIDU/bYSPyvr0H6MLbtYTYTcE2XV9NC1lPNVWYdmvVqD FuErkiZHIsfuDqDk2Z7jkXNmTCzXLiF+xylxEWnOmKv/5/AmIw67Fl2kqNj7Elzj BqrLlCjoOTltdSs9S4u+Ueq+KUDNzGmmReJnu8aZqJBkKPUolQlYpSmaqzNupMJ6 L4kVGEg6b8flCiW0ZVMKyPm/KX/KCL1J6QNfIjYWK79JL+h/3LGCHV+4qjvae3sp g3hvE7ZV8CJ4WrDYhPfIYfEEkl1NJ//IgUsHUIqjRYOs50I= -----END CERTIFICATE-----Generated at Mon May 5 23:15:58 2025 by rpki-client