$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59.cer File: 74c673d2-2e7f-4d34-a0a2-b0c74151cf59.cer (raw, json) Hash identifier: baGBsluP1RmMla1I95FfbBrx8Cg+2P3Mz2JNwBIlWWg= Subject key identifier: F0:34:1D:5B:B9:80:BB:E4:A7:84:89:79:64:DB:F8:35:41:85:07:23 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858491686EA49EDF65DF2CA60EA20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59/74c673d2-2e7f-4d34-a0a2-b0c74151cf59.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 14:33:27 +0000 Certificate not after: Thu 13 May 2027 13:35:53 +0000 Subordinate resources: AS: 401477 IP: 2602:f6c8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:86:ea:49:ed:f6:5d:f2:ca:60:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 5 14:33:27 2025 GMT Not After : May 13 13:35:53 2027 GMT Subject: CN=74c673d2-2e7f-4d34-a0a2-b0c74151cf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f6:70:98:4e:29:a8:69:74:b1:44:d4:a7:1c: 23:89:83:ad:16:cc:9b:7c:1c:3e:d5:d7:ed:fa:00: 16:93:60:5d:0b:a4:1e:96:2e:69:6a:3b:fe:de:96: 65:22:b6:30:9d:9f:ff:d7:74:bf:79:d2:e6:d7:c9: db:18:b8:dc:c1:fe:0b:88:fd:74:e3:f1:c4:b4:28: 86:28:04:0c:dd:be:7b:9c:c3:08:25:44:b7:c8:d4: 49:9a:88:b9:b2:5b:cc:99:92:23:bd:7e:31:0a:c4: 12:a8:6b:4a:23:8b:c9:ea:fb:7b:7f:bc:7b:5a:61: e9:46:28:7e:10:d3:07:70:4f:24:da:1c:b4:30:d2: 87:8a:66:01:ad:29:eb:1a:c9:72:2f:bf:53:3c:fc: e4:07:1b:0b:17:c5:74:fa:a0:08:c0:ad:62:6e:66: 6c:90:f2:69:5f:ad:70:8f:ea:aa:66:a1:fd:c9:c4: 22:37:8a:c0:b5:7d:ce:34:44:15:14:1b:59:02:b6: d0:94:04:90:73:49:d3:ff:02:ce:ae:64:87:30:44: 6f:d0:1e:a1:3f:9d:5e:ba:0c:c1:92:b6:c6:72:f9: f3:68:0f:1d:36:fe:a3:f3:c7:c7:32:4b:69:45:31: 3b:ec:fe:26:8f:ee:67:dc:00:40:d3:7b:5a:5b:23: 9a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:1D:5B:B9:80:BB:E4:A7:84:89:79:64:DB:F8:35:41:85:07:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74c673d2-2e7f-4d34-a0a2-b0c74151cf59/74c673d2-2e7f-4d34-a0a2-b0c74151cf59.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6c8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401477 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:bf:43:de:7b:f6:cb:95:0d:ae:2e:fa:c3:82:bf:ee:7b:67: 6e:e8:2b:4a:8c:55:64:24:8d:2d:5c:ec:ea:7b:0d:94:1a:c7: ed:a4:68:22:0b:d3:ed:67:eb:64:18:a0:d0:40:f9:19:8e:9b: d0:2b:f7:03:b9:b0:dd:21:e7:42:62:c4:1a:6c:2f:74:c5:31: 1b:e3:a9:b1:f7:2e:66:bd:6f:1b:6f:39:5e:80:30:8b:d8:27: dd:43:35:26:ae:31:de:ac:66:fa:2a:c9:3f:0e:02:63:e0:e8: 46:f4:70:90:09:5d:1d:a8:05:f5:9d:a6:26:28:d1:1d:f2:64: ab:d4:9b:9b:d5:65:0d:8d:33:80:06:6b:97:0a:8f:f5:24:50: 84:5f:06:c4:3c:ef:5f:30:76:4a:4e:f8:ca:4f:61:c8:b2:5a: 90:ab:9e:ee:33:af:fb:71:f5:28:dd:57:66:a7:ee:b3:59:c0: 54:22:86:9c:b4:1e:e8:16:1d:d7:85:c2:35:a0:b6:32:15:6e: 49:25:bb:da:11:cc:f8:ba:32:a6:02:b7:fa:25:79:63:34:db: 80:f9:d8:30:41:af:dd:c0:62:e1:63:e1:1a:71:80:04:b7:ef: aa:23:1e:25:c1:83:68:5b:44:be:ea:41:b0:18:12:93:b6:63: 75:93:40:1d -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEkWhupJ7fZd8spg6iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNTE0MzMyN1oXDTI3MDUxMzEzMzU1M1owLzEtMCsGA1UEAxMk NzRjNjczZDItMmU3Zi00ZDM0LWEwYTItYjBjNzQxNTFjZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvZwmE4pqGl0sUTUpxwjiYOtFsybfBw+1dft +gAWk2BdC6Qeli5pajv+3pZlIrYwnZ//13S/edLm18nbGLjcwf4LiP104/HEtCiG KAQM3b57nMMIJUS3yNRJmoi5slvMmZIjvX4xCsQSqGtKI4vJ6vt7f7x7WmHpRih+ ENMHcE8k2hy0MNKHimYBrSnrGslyL79TPPzkBxsLF8V0+qAIwK1ibmZskPJpX61w j+qqZqH9ycQiN4rAtX3ONEQVFBtZArbQlASQc0nT/wLOrmSHMERv0B6hP51eugzB krbGcvnzaA8dNv6j88fHMktpRTE77P4mj+5n3ABA03taWyOanQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFPA0HVu5gLvkp4SJeWTb+DVBhQcjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 NGM2NzNkMi0yZTdmLTRkMzQtYTBhMi1iMGM3NDE1MWNmNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc0YzY3M2QyLTJlN2YtNGQzNC1h MGEyLWIwYzc0MTUxY2Y1OS83NGM2NzNkMi0yZTdmLTRkMzQtYTBhMi1iMGM3NDE1 MWNmNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvbIADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIEUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFL9D3nv2y5UNri76w4K/7ntnbugrSoxVZCSNLVzs6nsN lBrH7aRoIgvT7WfrZBig0ED5GY6b0Cv3A7mw3SHnQmLEGmwvdMUxG+OpsfcuZr1v G285XoAwi9gn3UM1Jq4x3qxm+irJPw4CY+DoRvRwkAldHagF9Z2mJijRHfJkq9Sb m9VlDY0zgAZrlwqP9SRQhF8GxDzvXzB2Sk74yk9hyLJakKue7jOv+3H1KN1XZqfu s1nAVCKGnLQe6BYd14XCNaC2MhVuSSW72hHM+LoypgK3+iV5YzTbgPnYMEGv3cBi 4WPhGnGABLfvqiMeJcGDaFtEvupBsBgSk7ZjdZNAHQ== -----END CERTIFICATE-----Generated at Tue May 6 03:12:42 2025 by rpki-client