$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177.cer File: 7239948d-c2b8-4644-b00c-f9cf98d1d177.cer (raw, json) Hash identifier: rECmDsVj+MG/krm1a2LDkJ7C0slcY+Qrl9jFQ1YE9ME= Subject key identifier: B8:25:7F:B0:F6:A2:72:8E:EB:99:47:A4:2C:07:F8:57:7A:6A:ED:C6 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A707E37F331DDD3D4AA4F4CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177/7239948d-c2b8-4644-b00c-f9cf98d1d177.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 12:45:36 +0000 Certificate not after: Sun 10 Oct 2027 12:45:36 +0000 Subordinate resources: IP: 2602:803:a000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:7e:37:f3:31:dd:d3:d4:aa:4f:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 7 12:45:36 2025 GMT Not After : Oct 10 12:45:36 2027 GMT Subject: CN=7239948d-c2b8-4644-b00c-f9cf98d1d177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ee:c9:2e:31:82:96:26:22:14:31:5e:a7:ab: 90:ae:93:41:a5:11:2a:da:4c:73:9f:da:1c:31:b2: 06:09:a8:40:67:bd:8c:aa:48:1b:d0:2a:34:7c:79: 68:94:b6:96:7a:25:0c:35:c0:42:e7:df:dc:d7:0c: 42:1a:03:98:00:00:a9:59:66:98:f9:cf:70:4c:53: 1d:6d:bd:30:c5:f2:d1:75:34:b3:ec:13:04:08:9d: c5:a9:c1:ba:eb:9a:7a:4e:71:78:98:70:d0:1c:a8: 1f:e3:34:ef:3e:5b:f7:bc:de:70:47:2f:02:6d:94: d6:9c:c5:c0:11:58:82:b8:0a:2e:78:34:21:71:1f: e4:43:aa:4c:4c:61:1c:0a:53:9c:8d:74:ef:44:c7: 0f:6a:fc:6d:3d:c8:54:a1:b1:ea:08:09:60:f8:99: 47:88:b9:17:98:45:df:56:ef:b8:26:2c:5a:16:d8: c6:a9:21:28:72:d2:ad:82:06:dc:91:82:84:8f:1c: cd:83:94:f8:3b:fc:f5:cb:88:a6:13:6f:00:03:8a: 5d:b6:51:82:0d:ad:e4:c6:3f:00:2a:be:cb:5c:8b: 2c:6e:ac:af:73:11:19:ac:68:ac:16:a5:de:68:b6: 8a:aa:b7:08:68:2a:24:1f:38:47:2d:18:fe:f3:48: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:25:7F:B0:F6:A2:72:8E:EB:99:47:A4:2C:07:F8:57:7A:6A:ED:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7239948d-c2b8-4644-b00c-f9cf98d1d177/7239948d-c2b8-4644-b00c-f9cf98d1d177.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:803:a000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:39:88:51:fb:91:8e:ea:dc:40:b2:32:dc:eb:f9:0f:59:0d: a9:5d:8b:51:74:bc:47:25:69:1b:ab:2f:7c:85:c5:ea:26:2c: b8:2d:82:b1:b0:ee:68:b2:87:79:99:6b:94:7c:1b:c0:95:e7: b5:47:9a:0a:4c:a3:39:78:9c:30:f3:d0:8c:a5:9c:e8:de:0b: 43:58:b7:2a:77:1a:b8:40:19:32:32:0f:c5:1d:f4:eb:61:cb: 0a:b6:e4:32:56:d9:4e:3c:00:65:f1:c4:24:5e:03:9b:4e:fb: 0a:12:6c:d9:f2:73:9b:d3:5d:30:db:75:1b:76:fb:1c:fe:c5: af:a2:81:68:98:84:1e:64:f3:79:0a:6a:72:14:42:07:f1:7d: 16:94:fd:fe:bd:b3:a2:20:8e:a5:ce:02:3e:31:03:ad:a0:73: 13:de:d1:0a:45:5e:ad:26:c8:c3:8c:d4:20:86:8c:e6:00:0e: 78:d9:c8:63:c4:cf:8c:09:f0:b8:45:dd:77:43:23:54:18:52: e9:9a:19:c5:2c:7d:ee:16:6f:e4:b3:db:f0:6a:8c:ae:b3:dd: 02:5d:f1:0e:a4:48:71:ee:db:e5:9b:36:80:88:20:71:4b:d1: 2f:d1:ca:ec:3a:28:4a:fa:86:d2:24:5f:c8:31:7f:a8:f9:e3: fd:67:ed:c3 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEpwfjfzMd3T1KpPTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwNzEyNDUzNloXDTI3MTAxMDEyNDUzNlowLzEtMCsGA1UEAxMk NzIzOTk0OGQtYzJiOC00NjQ0LWIwMGMtZjljZjk4ZDFkMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie7JLjGCliYiFDFep6uQrpNBpREq2kxzn9oc MbIGCahAZ72Mqkgb0Co0fHlolLaWeiUMNcBC59/c1wxCGgOYAACpWWaY+c9wTFMd bb0wxfLRdTSz7BMECJ3FqcG665p6TnF4mHDQHKgf4zTvPlv3vN5wRy8CbZTWnMXA EViCuAoueDQhcR/kQ6pMTGEcClOcjXTvRMcPavxtPchUobHqCAlg+JlHiLkXmEXf Vu+4JixaFtjGqSEoctKtggbckYKEjxzNg5T4O/z1y4imE28AA4pdtlGCDa3kxj8A Kr7LXIssbqyvcxEZrGisFqXeaLaKqrcIaCokHzhHLRj+80huZQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFLglf7D2onKO65lHpCwH+Fd6au3GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 MjM5OTQ4ZC1jMmI4LTQ2NDQtYjAwYy1mOWNmOThkMWQxNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzcyMzk5NDhkLWMyYjgtNDY0NC1i MDBjLWY5Y2Y5OGQxZDE3Ny83MjM5OTQ4ZC1jMmI4LTQ2NDQtYjAwYy1mOWNmOThk MWQxNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAggDoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7OYhR+5GO6txAsjLc 6/kPWQ2pXYtRdLxHJWkbqy98hcXqJiy4LYKxsO5osod5mWuUfBvAlee1R5oKTKM5 eJww89CMpZzo3gtDWLcqdxq4QBkyMg/FHfTrYcsKtuQyVtlOPABl8cQkXgObTvsK EmzZ8nOb010w23Ubdvsc/sWvooFomIQeZPN5CmpyFEIH8X0WlP3+vbOiII6lzgI+ MQOtoHMT3tEKRV6tJsjDjNQghozmAA542chjxM+MCfC4Rd13QyNUGFLpmhnFLH3u Fm/ks9vwaoyus90CXfEOpEhx7tvlmzaAiCBxS9Ev0crsOihK+obSJF/IMX+o+eP9 Z+3D -----END CERTIFICATE-----Generated at Mon Aug 4 08:18:34 2025 by rpki-client