$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer File: 4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer (raw, json) Hash identifier: FBDb35YITEF6A6/zx5tdcrO0EupqhD1UvOF/qCWTp3M= Subject key identifier: FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584988C76DFA02821C8A7BB9AE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Apr 2025 12:45:35 +0000 Certificate not after: Mon 19 Jul 2027 12:45:35 +0000 Subordinate resources: IP: 2604:580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c7:6d:fa:02:82:1c:8a:7b:b9:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 15 12:45:35 2025 GMT Not After : Jul 19 12:45:35 2027 GMT Subject: CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:53:89:f7:49:45:5e:1a:5b:2e:47:54:8e: 1a:26:04:df:e8:30:ef:b3:2f:d4:ec:4f:7a:72:b1: 61:21:c6:26:4f:cc:0b:54:f1:0c:fe:5f:d8:9a:fe: 9d:6a:ba:a2:cf:ee:12:99:65:04:79:e5:af:45:42: 39:31:ec:36:ba:89:57:e3:c4:5e:e8:39:fc:8f:ac: c6:c4:34:1a:91:51:3a:74:ff:5c:db:a3:f7:2f:f4: 85:7f:e4:5b:a8:3d:1b:88:15:11:b2:43:32:69:98: ca:6e:16:7f:05:f1:cd:2c:11:ed:2a:34:fd:b1:39: db:7f:62:06:60:40:39:a5:aa:ab:cd:6a:81:7b:ca: 51:55:4e:6d:10:72:c7:48:a5:5e:91:ba:85:6b:97: 51:8f:d8:37:9e:df:d2:60:c8:7e:c3:9a:6f:43:f1: b7:1f:96:50:84:10:d1:aa:18:e0:c1:a6:86:97:ae: 23:3d:19:12:0d:8c:d4:15:3a:f6:5a:01:49:c1:b8: 01:c5:73:be:92:e5:3b:f6:86:e2:fd:4f:cc:b5:b7: ac:1a:89:4d:a0:f2:3e:d2:b9:2a:6e:19:7d:11:9b: 90:c5:1c:6d:78:5e:8f:d1:93:2d:10:40:13:a6:b7: 4d:03:9a:68:58:8a:39:15:d5:0c:62:02:2e:7b:c6: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2604:580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5d:a1:46:72:14:ea:57:86:1d:e6:6c:f6:3c:6d:75:04:06: 39:a1:c6:97:51:5b:98:b3:e6:69:a3:cd:10:b2:3f:68:06:7b: b0:a3:18:d2:10:5e:e3:05:ac:50:50:5f:c4:d9:90:90:02:61: 4a:8f:37:b6:37:37:61:58:e0:4e:a0:86:2b:44:9e:34:c1:50: aa:ea:b6:5f:1c:07:d3:70:b5:f2:72:0a:be:6f:26:3a:fc:33: 58:70:b3:6f:a5:b9:70:7a:51:b9:64:f3:12:4e:bd:c9:8e:6e: f4:60:c7:41:9e:53:6c:49:8a:b4:dc:dd:75:28:93:13:14:a2: 3a:c3:56:ac:a3:04:09:c9:fa:1d:c2:1c:7c:47:eb:5a:68:3c: 13:f9:1c:24:4e:e4:93:8e:0b:69:7f:74:2f:74:e3:b4:f1:5f: 1d:39:5d:3f:1e:7a:36:91:9c:0d:7d:6f:67:47:c6:2f:fa:30: 82:d3:ea:64:ea:27:34:7e:de:27:16:4f:0e:90:65:fc:35:f7: c4:c8:4a:ba:4d:9a:05:3a:04:f9:4d:49:a7:2c:c6:ed:d8:18: fa:63:a8:1b:88:d0:83:6d:d9:22:e6:2a:cb:72:75:d0:c7:40: bd:f4:c5:1e:88:e7:6a:49:83:e0:46:db:9f:7a:ef:19:52:55: 08:fc:be:f1 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEmIx236AoIcinu5roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQxNTEyNDUzNVoXDTI3MDcxOTEyNDUzNVowLzEtMCsGA1UEAxMk NGM4MWZhNWYtM2Y2ZC00N2RiLWE1MDQtYWNlYjU0ZjkzYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaZTifdJRV4aWy5HVI4aJgTf6DDvsy/U7E96 crFhIcYmT8wLVPEM/l/Ymv6darqiz+4SmWUEeeWvRUI5Mew2uolX48Re6Dn8j6zG xDQakVE6dP9c26P3L/SFf+RbqD0biBURskMyaZjKbhZ/BfHNLBHtKjT9sTnbf2IG YEA5paqrzWqBe8pRVU5tEHLHSKVekbqFa5dRj9g3nt/SYMh+w5pvQ/G3H5ZQhBDR qhjgwaaGl64jPRkSDYzUFTr2WgFJwbgBxXO+kuU79obi/U/MtbesGolNoPI+0rkq bhl9EZuQxRxteF6P0ZMtEEATprdNA5poWIo5FdUMYgIue8ZuFwIDAQABo4IEADCC A/wwHQYDVR0OBBYEFP9S1UnSV1eBCUkV/A8Yz2Hn1+kUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 YzgxZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2ViNTRmOTNjMjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRjODFmYTVmLTNmNmQtNDdkYi1h NTA0LWFjZWI1NGY5M2MyOC80YzgxZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2ViNTRm OTNjMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBAWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABpdoUZyFOpXhh3mbPY8 bXUEBjmhxpdRW5iz5mmjzRCyP2gGe7CjGNIQXuMFrFBQX8TZkJACYUqPN7Y3N2FY 4E6ghitEnjTBUKrqtl8cB9NwtfJyCr5vJjr8M1hws2+luXB6Ublk8xJOvcmObvRg x0GeU2xJirTc3XUokxMUojrDVqyjBAnJ+h3CHHxH61poPBP5HCRO5JOOC2l/dC90 47TxXx05XT8eejaRnA19b2dHxi/6MILT6mTqJzR+3icWTw6QZfw198TISrpNmgU6 BPlNSacsxu3YGPpjqBuI0INt2SLmKstyddDHQL30xR6I52pJg+BG25967xlSVQj8 vvE= -----END CERTIFICATE-----Generated at Sun Jun 15 13:43:55 2025 by rpki-client