$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4.cer File: 1e62482a-67fc-4fe8-b451-5436d07d4ef4.cer (raw, json) Hash identifier: Zw9Minoo3EMGX075QiI1q5sA4D76mO8AFuBZCiLXoDw= Subject key identifier: 65:C3:BB:DA:A2:9C:82:94:7F:3F:BF:C5:69:ED:CC:DB:F3:BB:8C:EC Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A188DAC2E6CEAD1C24E532B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4/1e62482a-67fc-4fe8-b451-5436d07d4ef4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Jun 2025 00:45:36 +0000 Certificate not after: Thu 09 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 18985 AS: 395318 IP: 2620:b6:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:8d:ac:2e:6c:ea:d1:c2:4e:53:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 6 00:45:36 2025 GMT Not After : Sep 9 00:45:36 2027 GMT Subject: CN=1e62482a-67fc-4fe8-b451-5436d07d4ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:78:75:8a:18:39:e0:69:33:75:18:e2:8b:5d: 62:6b:ab:f1:b4:2d:4f:40:e3:38:1f:3a:70:e6:36: 49:78:57:da:7d:28:c9:1c:b1:73:a2:9d:33:df:b3: de:1c:48:f4:fc:4e:41:ed:6b:55:33:e1:10:48:33: 7e:9a:c4:5f:81:7b:c1:88:35:57:f9:4b:72:89:d5: 42:63:79:28:83:04:6b:b2:1c:c4:02:85:d2:bc:37: 35:ef:9c:a2:b2:0d:cc:fb:8c:3d:16:9b:68:d8:ff: 80:16:67:fa:0a:aa:da:a7:42:ed:6f:68:b2:63:18: da:3a:e9:cd:26:9c:1a:73:4f:39:13:06:63:13:cc: 7f:47:7b:32:69:2e:c0:bc:70:8b:35:c8:e7:17:25: ef:55:d5:88:6f:99:2b:ed:10:8a:d7:b4:61:8e:bf: 91:c1:e5:a0:3a:44:92:52:50:20:16:98:a1:ac:bf: 36:f7:2c:7c:07:ca:3a:57:7a:7e:2a:45:f2:8e:77: fa:b6:6a:ef:d2:80:4f:46:fd:75:6c:a1:35:e4:87: 63:e5:cf:d2:3a:cb:bc:0e:72:9b:c9:97:2a:31:27: 8a:08:85:eb:e3:91:41:88:be:4e:9a:a5:97:3f:28: 65:38:4f:d0:85:4d:05:5d:3b:46:1d:e3:9e:a2:88: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C3:BB:DA:A2:9C:82:94:7F:3F:BF:C5:69:ED:CC:DB:F3:BB:8C:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4/1e62482a-67fc-4fe8-b451-5436d07d4ef4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv6: 2620:b6:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18985 395318 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:92:9b:22:ff:a4:0e:62:b4:bf:4e:c0:d3:75:f1:15:08:2e: 6a:5a:00:95:08:52:50:c9:1e:57:7a:5f:7f:30:bd:03:32:81: 8a:5f:b6:dc:7c:58:79:11:ae:25:71:2e:71:f5:e2:28:5c:31: ca:fa:39:b9:17:80:24:f2:56:76:6c:0e:95:be:e1:ec:7d:5d: 64:d2:4f:df:23:e7:21:71:05:00:6d:95:71:70:a5:58:72:35: e3:2c:33:60:44:47:89:85:c8:b5:31:78:de:c1:79:8f:73:2d: 9c:13:a3:00:47:a4:92:1d:c1:32:d4:b1:40:a5:45:40:f3:16: 67:27:c4:55:35:2b:57:50:08:e9:bb:e8:95:aa:6c:3a:e7:45: 4a:9a:38:42:8d:0f:7f:3e:59:6a:20:37:d3:56:77:a6:88:a6: 4b:fb:d6:9f:95:37:d2:f4:04:a6:93:65:67:5a:52:a7:f9:89: 06:de:b2:3d:b5:6d:18:22:2a:7e:fe:31:a2:e7:a5:4a:f1:45: cf:8b:97:86:98:b1:ad:62:47:14:41:ce:70:29:fb:9d:b7:30: d5:30:1d:ca:c8:ff:9b:aa:1b:7c:b6:72:7f:c8:33:a4:f8:72: c4:da:a0:59:cf:35:33:a0:15:2d:2a:23:e2:8a:53:24:b7:9a: e5:c4:61:9a -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEoYjawubOrRwk5TKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYwNjAwNDUzNloXDTI3MDkwOTAwNDUzNlowLzEtMCsGA1UEAxMk MWU2MjQ4MmEtNjdmYy00ZmU4LWI0NTEtNTQzNmQwN2Q0ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Hh1ihg54GkzdRjii11ia6vxtC1PQOM4Hzpw 5jZJeFfafSjJHLFzop0z37PeHEj0/E5B7WtVM+EQSDN+msRfgXvBiDVX+UtyidVC Y3kogwRrshzEAoXSvDc175yisg3M+4w9Fpto2P+AFmf6Cqrap0Ltb2iyYxjaOunN Jpwac085EwZjE8x/R3syaS7AvHCLNcjnFyXvVdWIb5kr7RCK17Rhjr+RweWgOkSS UlAgFpihrL829yx8B8o6V3p+KkXyjnf6tmrv0oBPRv11bKE15Idj5c/SOsu8DnKb yZcqMSeKCIXr45FBiL5OmqWXPyhlOE/QhU0FXTtGHeOeoogpGQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFGXDu9qinIKUfz+/xWntzNvzu4zsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x ZTYyNDgyYS02N2ZjLTRmZTgtYjQ1MS01NDM2ZDA3ZDRlZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFlNjI0ODJhLTY3ZmMtNGZlOC1i NDUxLTU0MzZkMDdkNGVmNC8xZTYyNDgyYS02N2ZjLTRmZTgtYjQ1MS01NDM2ZDA3 ZDRlZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAC2wAAwHgYIKwYBBQUHAQgBAf8EDzANoAsw CQICSikCAwYINjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBFkpsi/6QOYrS/TsDTdfEVCC5qWgCVCFJQyR5X el9/ML0DMoGKX7bcfFh5Ea4lcS5x9eIoXDHK+jm5F4Ak8lZ2bA6VvuHsfV1k0k/f I+chcQUAbZVxcKVYcjXjLDNgREeJhci1MXjewXmPcy2cE6MAR6SSHcEy1LFApUVA 8xZnJ8RVNStXUAjpu+iVqmw650VKmjhCjQ9/PllqIDfTVnemiKZL+9aflTfS9ASm k2VnWlKn+YkG3rI9tW0YIip+/jGi56VK8UXPi5eGmLGtYkcUQc5wKfudtzDVMB3K yP+bqht8tnJ/yDOk+HLE2qBZzzUzoBUtKiPiilMkt5rlxGGa -----END CERTIFICATE-----Generated at Sun Jun 29 16:13:46 2025 by rpki-client