$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer File: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer (raw, json) Hash identifier: vNb7TxFBSTT2c9CJCDOXdoI1TTMPTyEuymQ9khi+ftk= Subject key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A9A5E79BBC930132FC94F2D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 12:45:36 +0000 Certificate not after: Mon 25 Oct 2027 12:45:36 +0000 Subordinate resources: AS: 396350 IP: 2602:f950::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5e:79:bb:c9:30:13:2f:c9:4f:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 22 12:45:36 2025 GMT Not After : Oct 25 12:45:36 2027 GMT Subject: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bc:07:28:ca:79:86:01:17:cb:ae:5e:49:e6: 49:c4:7d:42:ea:c0:64:cc:7b:83:31:d1:37:8a:6a: e0:63:ac:81:47:62:64:18:7c:54:96:62:b7:12:88: fe:f0:cd:cd:bc:dd:4b:2d:2a:28:54:f3:cc:7a:9f: 16:ab:20:10:c5:fb:da:57:3a:60:e2:ef:cd:25:8b: 92:9d:13:58:05:a0:c5:0d:21:6e:38:e4:41:f9:ba: 6c:ff:30:1e:0e:f5:44:f6:5b:28:b6:03:db:aa:6d: e7:13:0d:6f:c7:62:cd:68:f3:11:60:16:0b:fc:12: 5e:05:8c:12:00:38:6a:83:9d:e0:53:4b:46:4a:82: 04:8c:fa:27:a1:2e:81:84:d7:f9:32:d4:cf:81:5a: d1:5c:72:e1:8b:f5:6c:2e:31:21:c8:5a:bb:5f:58: e0:4e:7d:ea:12:0f:16:d5:fc:9e:ee:9a:5f:a2:78: 82:ed:2c:a9:48:82:b0:4f:f1:ea:f9:b9:19:a3:e9: a7:a7:8d:61:44:e0:c1:0e:85:9b:9f:cf:43:db:0a: 3a:9a:bd:72:d1:05:47:68:30:fd:33:d2:57:41:7d: 32:37:76:f2:49:1f:66:4c:8c:8d:e4:1a:63:a8:77: 0b:fa:53:34:7a:14:11:62:e6:d7:9f:d9:85:85:cf: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f950::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396350 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ce:ac:7a:e6:a5:04:12:b8:07:43:3d:27:c8:34:5d:8b:70: c4:47:64:0e:a6:78:00:a2:1b:6c:12:5b:9e:a3:33:12:5c:77: 01:6c:e6:92:47:fc:62:67:b3:fa:3c:7d:be:ca:2f:91:4f:32: 85:2f:63:b0:be:29:ef:2f:c5:01:dd:c4:1b:8e:d3:6b:fe:28: 29:b5:c4:4d:90:94:42:db:f5:d4:83:26:e2:00:cf:cb:93:0d: ea:94:1e:f1:49:89:44:f2:26:9e:49:13:46:ba:6d:59:a7:6b: 50:9d:bc:56:1f:e2:f6:ca:6a:d4:d8:fa:27:68:21:1d:e6:aa: 71:a2:15:c9:36:8c:ad:33:2b:ec:30:7b:a8:05:f2:be:e4:80: 33:37:ab:a1:b6:72:bf:98:c5:e4:dd:80:cd:2a:2e:43:81:9e: 98:92:00:df:db:aa:5c:a9:58:3d:db:db:ea:16:98:41:1e:4c: ef:cf:41:c0:da:98:92:9f:e7:b0:c4:f9:ea:2f:5f:90:d5:3b: f7:66:28:68:3b:7e:97:99:06:b8:78:db:41:28:ee:6e:5e:b7: 04:a3:1e:3e:cc:fa:de:ce:c3:07:76:d7:ec:cf:b3:50:43:16: ae:ec:35:84:99:1a:69:5d:3d:6b:22:8b:8f:8e:cf:76:2b:c8: 55:da:70:21 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEqaXnm7yTATL8lPLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMjEyNDUzNloXDTI3MTAyNTEyNDUzNlowLzEtMCsGA1UEAxMk M2UzYjUyYzctYjdhNS00NWIwLWEyYTQtZjgyNDJiMmI2ZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbwHKMp5hgEXy65eSeZJxH1C6sBkzHuDMdE3 imrgY6yBR2JkGHxUlmK3Eoj+8M3NvN1LLSooVPPMep8WqyAQxfvaVzpg4u/NJYuS nRNYBaDFDSFuOORB+bps/zAeDvVE9lsotgPbqm3nEw1vx2LNaPMRYBYL/BJeBYwS ADhqg53gU0tGSoIEjPonoS6BhNf5MtTPgVrRXHLhi/VsLjEhyFq7X1jgTn3qEg8W 1fye7ppfoniC7SypSIKwT/Hq+bkZo+mnp41hRODBDoWbn89D2wo6mr1y0QVHaDD9 M9JXQX0yN3bySR9mTIyN5BpjqHcL+lM0ehQRYubXn9mFhc9edQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFLRwthF6yF8Cir6Uxm1cnCS6xvruMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIyYjZlMDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNlM2I1MmM3LWI3YTUtNDViMC1h MmE0LWY4MjQyYjJiNmUwMi8zZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIy YjZlMDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvlQADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGDD4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAnc6seualBBK4B0M9J8g0XYtwxEdkDqZ4AKIbbBJbnqMz Elx3AWzmkkf8Ymez+jx9vsovkU8yhS9jsL4p7y/FAd3EG47Ta/4oKbXETZCUQtv1 1IMm4gDPy5MN6pQe8UmJRPImnkkTRrptWadrUJ28Vh/i9spq1Nj6J2ghHeaqcaIV yTaMrTMr7DB7qAXyvuSAMzerobZyv5jF5N2AzSouQ4GemJIA39uqXKlYPdvb6haY QR5M789BwNqYkp/nsMT56i9fkNU792YoaDt+l5kGuHjbQSjubl63BKMePsz63s7D B3bX7M+zUEMWruw1hJkaaV09ayKLj47PdivIVdpwIQ== -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:33 2025 by rpki-client