$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer File: 8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer (raw, json) Hash identifier: TUCalbNkT8dWD7eDXVpkvg6Hsr8OG7B6WImpaAgdQHM= Subject key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584A017B079D9F4788886449B080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 May 2025 18:24:28 +0000 Certificate not after: Mon 10 May 2027 17:33:29 +0000 Subordinate resources: AS: 394787 IP: 2604:1160::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:7b:07:9d:9f:47:88:88:64:49:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 28 18:24:28 2025 GMT Not After : May 10 17:33:29 2027 GMT Subject: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:3f:74:24:b2:65:b7:04:0e:6a:a2:c0:be: 8c:ac:93:5e:43:cc:9a:11:5d:8a:97:a0:da:1f:08: 7a:46:87:29:81:be:18:ab:93:f8:90:da:1d:48:dd: 1d:41:4a:4f:2e:b5:1c:54:c5:e6:61:cf:89:37:50: 80:15:75:db:a7:43:bd:53:a2:8a:f2:67:49:da:b4: a8:50:57:d3:0e:0e:0d:4d:a8:f7:84:34:24:b8:56: 16:d6:9a:e7:72:e2:99:02:6b:e7:d5:f1:c2:f4:b3: fb:e5:56:d6:a2:db:11:31:e8:e9:e3:37:a2:da:4d: 03:02:66:b9:5c:9f:60:7d:09:88:fc:a4:98:63:4a: 0a:8b:98:90:7e:e7:77:cf:04:40:9c:f7:69:08:ed: 31:6e:a4:e2:d2:78:3d:9f:cf:cd:be:41:aa:7c:bf: 9c:6a:ae:5d:29:d5:39:bd:c5:3d:3a:ca:1c:70:eb: 27:7f:88:e5:d6:ad:93:6f:e3:f6:0b:a7:00:dc:58: 6a:31:10:36:f7:5a:2d:f7:36:db:c0:57:3f:09:a2: e5:ad:43:bb:40:27:c6:ea:8e:bc:57:06:25:8b:8c: 8f:d8:60:46:c2:bd:40:25:34:36:dc:22:b6:cd:40: 69:eb:7c:f7:d6:8d:b9:23:86:e5:e6:a7:28:42:9b: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2604:1160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394787 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7c:b7:21:72:f5:79:fd:f0:f1:5b:b4:ea:b7:20:70:c1:bb: fa:93:13:08:d8:60:8e:39:6c:9a:dd:58:c4:8e:f3:ff:47:4a: 52:cf:02:d4:d8:95:15:2e:7b:d6:bb:51:1b:47:8a:51:7e:37: cf:0c:1c:a2:d5:4b:02:f7:de:be:57:0a:ec:90:a9:24:fe:0e: 09:14:24:d7:0a:47:e4:5f:d4:a4:04:14:0f:15:62:e9:bf:d6: d0:b8:ff:0a:2a:d0:06:41:18:cd:c8:48:ca:fb:09:1e:1f:ff: 89:1b:d2:8b:dd:de:6f:0a:52:d2:14:4b:38:50:c4:28:25:90: c5:47:bd:4d:b7:89:34:c0:5a:25:d0:81:cb:4d:1e:5b:d6:fb: d1:cc:e8:01:7f:0c:2c:38:92:66:dc:6e:ac:14:35:18:7a:ad: e2:d4:1b:04:d5:95:a4:ee:ef:fc:17:fa:43:f2:33:a1:f8:50: 05:bb:09:db:ba:9e:ad:18:4b:6b:4f:a9:b8:59:a0:ef:98:9f: 97:1d:8d:c8:05:1d:df:50:19:6c:75:e8:0c:92:ed:b2:d8:d1: 18:e1:dc:76:e2:1d:6f:ba:f7:79:a4:f3:49:7a:39:66:a9:3c: 6c:99:e0:0c:fc:be:ce:6b:14:c3:16:98:16:77:64:3e:c7:21: 9c:65:6c:87 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEoBewedn0eIiGRJsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDUyODE4MjQyOFoXDTI3MDUxMDE3MzMyOVowLzEtMCsGA1UEAxMk ODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMzMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXg/dCSyZbcEDmqiwL6MrJNeQ8yaEV2Kl6Da Hwh6Rocpgb4Yq5P4kNodSN0dQUpPLrUcVMXmYc+JN1CAFXXbp0O9U6KK8mdJ2rSo UFfTDg4NTaj3hDQkuFYW1prncuKZAmvn1fHC9LP75VbWotsRMejp4zei2k0DAma5 XJ9gfQmI/KSYY0oKi5iQfud3zwRAnPdpCO0xbqTi0ng9n8/NvkGqfL+caq5dKdU5 vcU9OsoccOsnf4jl1q2Tb+P2C6cA3FhqMRA291ot9zbbwFc/CaLlrUO7QCfG6o68 VwYli4yP2GBGwr1AJTQ23CK2zUBp63z31o25I4bl5qcoQpvZYwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFB57WNiOKWIcEzHCfyuSsJ2H8sJjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg2ODNmNGUxLTUxYjEtNGNiMi05 YTUxLWIwZjBjNDkzMzEwMC84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5 MzMxMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBBFgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYGIzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAJfLchcvV5/fDxW7TqtyBwwbv6kxMI2GCOOWya3VjEjvP/ R0pSzwLU2JUVLnvWu1EbR4pRfjfPDByi1UsC996+VwrskKkk/g4JFCTXCkfkX9Sk BBQPFWLpv9bQuP8KKtAGQRjNyEjK+wkeH/+JG9KL3d5vClLSFEs4UMQoJZDFR71N t4k0wFol0IHLTR5b1vvRzOgBfwwsOJJm3G6sFDUYeq3i1BsE1ZWk7u/8F/pD8jOh +FAFuwnbup6tGEtrT6m4WaDvmJ+XHY3IBR3fUBlsdegMku2y2NEY4dx24h1vuvd5 pPNJejlmqTxsmeAM/L7OaxTDFpgWd2Q+xyGcZWyH -----END CERTIFICATE-----Generated at Mon Jun 30 18:14:18 2025 by rpki-client