$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer File: 1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer (raw, json) Hash identifier: 8Rp8ViOgdRPcVvjCOwKf7sttqXeu/Pk7XhquKVMFXwc= Subject key identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849E382A89ED35D35DB164F3A70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 18 May 2025 00:45:34 +0000 Certificate not after: Sat 21 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 14217 IP: 2602:f96f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:82:a8:9e:d3:5d:35:db:16:4f:3a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 18 00:45:34 2025 GMT Not After : Aug 21 00:45:34 2027 GMT Subject: CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:31:0a:be:dd:48:08:09:f0:35:c6:74:b5:db: fb:86:3e:42:a4:f0:7f:8b:c1:09:43:18:0d:e5:2a: 4a:9f:60:3c:45:d8:2c:90:0b:22:a9:12:0e:f9:a9: 45:b6:d2:d1:65:a2:0a:69:7f:b7:0a:79:02:3f:38: f8:1b:6c:74:b6:38:43:e2:98:89:01:bd:c8:59:77: 4a:50:cd:96:eb:0c:c9:9f:0e:7c:c1:3b:bf:ea:c0: 43:96:53:39:d2:77:55:2f:01:29:6e:43:ce:bf:5e: 61:aa:ac:92:dd:fe:60:fb:a8:ee:3c:c0:b4:db:09: 99:d2:22:c6:c8:58:ad:5a:6e:de:e3:72:dc:ef:9d: 60:0a:a7:8f:96:24:10:47:af:af:da:3e:23:d6:4c: 6e:4c:37:7e:73:0f:8f:5b:11:42:b6:cb:e3:d5:19: 90:07:86:75:a0:1e:9e:e6:78:a6:4d:5c:10:d2:3b: ad:d9:f3:21:17:d2:57:57:9b:8c:8b:0f:e6:57:0e: e6:06:59:cc:33:de:b5:87:be:2a:99:55:c6:8c:35: d3:21:85:43:71:8b:1c:c3:72:f2:ff:e3:1d:07:af: b4:23:20:6e:81:6e:36:52:54:ae:dc:6c:d8:b0:b9: 25:44:5a:81:77:9a:2c:9a:fe:ed:d5:cf:3f:1a:14: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f96f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14217 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:59:99:91:df:fc:cb:b3:e7:d6:4c:cd:5f:c5:7a:d0:f2:9e: 6c:26:c2:5b:7e:45:d0:3c:00:a7:04:b3:b5:12:ca:22:d2:a1: 0b:67:5c:f5:b2:83:48:bd:d7:a7:3f:66:8f:90:3a:83:2a:0c: 41:9b:d1:62:b2:ca:b9:b0:43:95:c3:9e:4a:b1:7d:23:29:bf: 32:61:80:e4:62:12:8e:7f:45:2b:c5:43:90:71:0d:1a:b5:d7: 53:7f:2b:75:5c:d6:c7:ae:17:b5:5f:dd:03:dc:4f:0c:fc:1d: 95:5d:7e:ee:c2:05:4c:bf:40:03:7c:c0:b3:46:a0:1c:ca:88: ad:e8:6f:de:e7:05:6f:96:21:05:50:cf:3b:38:70:5e:4d:17: 13:26:f4:31:d5:cb:a2:71:d4:53:e1:b4:15:e7:41:53:94:75: 29:f8:48:a9:16:68:ae:71:9d:89:e9:a9:ce:4f:a7:7b:08:8e: 9b:a8:86:5a:e0:67:da:11:95:10:11:30:fe:42:26:56:2f:3a: c8:2e:64:53:e9:85:55:2b:b2:89:b4:90:85:2c:6b:8e:1f:61: fe:4a:38:53:29:b8:89:e9:6f:37:1b:99:c7:54:33:b0:89:ab: f0:cb:d5:7b:01:69:b0:ea:cb:c2:32:54:55:3b:74:77:48:66: 62:20:f9:71 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEnjgqie01012xZPOnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxODAwNDUzNFoXDTI3MDgyMTAwNDUzNFowLzEtMCsGA1UEAxMk MWU2NDQyY2UtZmYxZi00YjZiLTk0ZTMtMzY0NzlkMDFjYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzEKvt1ICAnwNcZ0tdv7hj5CpPB/i8EJQxgN 5SpKn2A8RdgskAsiqRIO+alFttLRZaIKaX+3CnkCPzj4G2x0tjhD4piJAb3IWXdK UM2W6wzJnw58wTu/6sBDllM50ndVLwEpbkPOv15hqqyS3f5g+6juPMC02wmZ0iLG yFitWm7e43Lc751gCqePliQQR6+v2j4j1kxuTDd+cw+PWxFCtsvj1RmQB4Z1oB6e 5nimTVwQ0jut2fMhF9JXV5uMiw/mVw7mBlnMM961h74qmVXGjDXTIYVDcYscw3Ly /+MdB6+0IyBugW42UlSu3GzYsLklRFqBd5osmv7t1c8/GhSRnQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFA+vK0BP6W3sAQ0DjmIZbDaEdZgxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x ZTY0NDJjZS1mZjFmLTRiNmItOTRlMy0zNjQ3OWQwMWNhNTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzFlNjQ0MmNlLWZmMWYtNGI2Yi05 NGUzLTM2NDc5ZDAxY2E1Mi8xZTY0NDJjZS1mZjFmLTRiNmItOTRlMy0zNjQ3OWQw MWNhNTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvlvADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgI3iTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAmWZmR3/zLs+fWTM1fxXrQ8p5sJsJbfkXQPACnBLO1Esoi 0qELZ1z1soNIvdenP2aPkDqDKgxBm9Fissq5sEOVw55KsX0jKb8yYYDkYhKOf0Ur xUOQcQ0atddTfyt1XNbHrhe1X90D3E8M/B2VXX7uwgVMv0ADfMCzRqAcyoit6G/e 5wVvliEFUM87OHBeTRcTJvQx1cuicdRT4bQV50FTlHUp+EipFmiucZ2J6anOT6d7 CI6bqIZa4GfaEZUQETD+QiZWLzrILmRT6YVVK7KJtJCFLGuOH2H+SjhTKbiJ6W83 G5nHVDOwiavwy9V7AWmw6svCMlRVO3R3SGZiIPlx -----END CERTIFICATE-----Generated at Sun Jun 15 04:49:41 2025 by rpki-client