$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76.cer File: 6c1a6120-a591-4dbe-830b-9b263e868b76.cer (raw, json) Hash identifier: fn5ggYQixpwuJRIxP6ZRtMGfs1C8BCQQeoClgsz8Dmo= Subject key identifier: 9A:E6:46:8D:4D:7A:74:D5:8F:91:EE:E7:2F:42:64:77:71:4E:37:0F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC868D6D28E6ED428DD474980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/6c1a6120-a591-4dbe-830b-9b263e868b76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 00:33:40 +0000 Certificate not after: Thu 11 Nov 2027 01:33:40 +0000 Subordinate resources: IP: 2620:0:3b0::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:68:d6:d2:8e:6e:d4:28:dd:47:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 8 00:33:40 2025 GMT Not After : Nov 11 01:33:40 2027 GMT Subject: CN=6c1a6120-a591-4dbe-830b-9b263e868b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d6:6f:2e:88:ff:14:ac:e0:e6:bc:90:72:e5: e2:45:14:ad:94:83:ca:a4:de:e2:bf:34:50:51:79: fa:1d:d5:7a:7f:dd:db:e3:02:71:bf:c4:f4:04:e9: d4:54:07:db:28:6e:b9:e0:bd:4b:8a:0b:cf:90:a8: ce:be:a8:54:97:92:49:75:c7:f4:85:ee:9a:77:4b: cf:f4:3f:39:54:3f:c8:e4:97:ba:68:d1:bd:dd:4a: 51:a5:20:ca:a4:53:62:5f:49:4f:79:37:93:88:95: 29:45:2d:c4:db:b2:d5:e9:ba:45:cb:f4:43:1b:e5: 84:8c:9c:c8:6f:69:99:ab:99:d5:02:5c:9b:0c:99: 3e:0b:bc:b3:73:30:4c:a5:8f:26:fe:4d:40:59:5e: 87:a1:de:b4:6c:27:36:9e:12:d2:8d:59:00:0e:c4: 94:93:72:ef:db:87:3f:5e:1e:59:73:74:62:76:a3: 16:36:03:b0:d9:82:20:02:f8:df:cd:9d:f5:a8:32: c3:32:ce:b3:6b:c5:e3:0e:e7:54:ad:83:f7:d6:fa: 54:38:b5:cc:4b:77:33:43:a6:0e:3d:b5:75:c1:5f: aa:43:9a:8e:47:19:97:d7:73:fd:de:24:e9:64:4c: d4:85:93:5d:52:df:a5:d4:e9:85:6a:f5:39:22:15: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E6:46:8D:4D:7A:74:D5:8F:91:EE:E7:2F:42:64:77:71:4E:37:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6c1a6120-a591-4dbe-830b-9b263e868b76/6c1a6120-a591-4dbe-830b-9b263e868b76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:3b0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7f:a7:eb:e1:6a:be:2d:4b:b5:cc:1d:25:96:70:d4:a4:80: 62:3f:90:fd:ff:e5:e7:cf:8a:56:72:64:e7:cd:9e:a1:be:3b: 03:24:a1:32:64:07:72:05:54:7f:43:bb:e5:7b:b7:62:d1:00: 0e:7f:cf:ed:da:3d:77:03:2c:4d:fc:32:2e:51:96:9c:76:bd: 3c:9f:3a:ba:31:e0:72:43:75:a6:b2:42:be:2d:c6:c1:71:b8: a2:59:3c:d2:bc:25:45:d5:13:fb:90:dc:38:7e:85:70:ab:e0: fd:8b:ff:01:78:df:7e:f5:f3:3f:a8:91:2b:78:8b:11:be:d0: f0:d7:e2:4a:af:2b:e8:30:25:36:fc:9f:97:28:c9:de:08:39: 37:4f:fe:3b:62:c2:e3:40:4c:fa:0f:de:14:f3:ea:91:96:cd: 52:f7:85:5b:8a:93:5e:98:b3:05:ad:a2:31:99:c3:2b:dd:08: d0:20:1a:8c:38:8d:ac:ce:fc:34:1d:3f:c7:81:2e:ba:7f:d4: 17:59:bd:52:05:d0:3d:de:ef:23:0d:b2:30:91:39:e8:ce:0d: 8e:60:70:cc:f7:14:c2:09:13:02:3d:aa:e9:5b:31:11:eb:cf: 27:f7:15:49:a9:19:9e:e6:37:5a:90:26:b0:79:be:28:02:60: f7:17:26:22 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWErIaNbSjm7UKN1HSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwODAwMzM0MFoXDTI3MTExMTAxMzM0MFowLzEtMCsGA1UEAxMk NmMxYTYxMjAtYTU5MS00ZGJlLTgzMGItOWIyNjNlODY4Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNZvLoj/FKzg5ryQcuXiRRStlIPKpN7ivzRQ UXn6HdV6f93b4wJxv8T0BOnUVAfbKG654L1LigvPkKjOvqhUl5JJdcf0he6ad0vP 9D85VD/I5Je6aNG93UpRpSDKpFNiX0lPeTeTiJUpRS3E27LV6bpFy/RDG+WEjJzI b2mZq5nVAlybDJk+C7yzczBMpY8m/k1AWV6Hod60bCc2nhLSjVkADsSUk3Lv24c/ Xh5Zc3RidqMWNgOw2YIgAvjfzZ31qDLDMs6za8XjDudUrYP31vpUOLXMS3czQ6YO PbV1wV+qQ5qORxmX13P93iTpZEzUhZNdUt+l1OmFavU5IhVsKwIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFJrmRo1NenTVj5Hu5y9CZHdxTjcPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82 YzFhNjEyMC1hNTkxLTRkYmUtODMwYi05YjI2M2U4NjhiNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzZjMWE2MTIwLWE1OTEtNGRiZS04 MzBiLTliMjYzZTg2OGI3Ni82YzFhNjEyMC1hNTkxLTRkYmUtODMwYi05YjI2M2U4 NjhiNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAAA7AwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN3+n6+Fqvi1Ltcwd JZZw1KSAYj+Q/f/l58+KVnJk582eob47AyShMmQHcgVUf0O75Xu3YtEADn/P7do9 dwMsTfwyLlGWnHa9PJ86ujHgckN1prJCvi3GwXG4olk80rwlRdUT+5DcOH6FcKvg /Yv/AXjffvXzP6iRK3iLEb7Q8NfiSq8r6DAlNvyflyjJ3gg5N0/+O2LC40BM+g/e FPPqkZbNUveFW4qTXpizBa2iMZnDK90I0CAajDiNrM78NB0/x4Euun/UF1m9UgXQ Pd7vIw2yMJE56M4NjmBwzPcUwgkTAj2q6VsxEevPJ/cVSakZnuY3WpAmsHm+KAJg 9xcmIg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:55 2025 by rpki-client