$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059.cer File: 9326b60c-910b-4c2d-acc0-4eaf54d2b059.cer (raw, json) Hash identifier: RKODoDis6RazZh7KilRAhTjhJthAw+DTxJmA/sqqERI= Subject key identifier: 75:6A:61:A9:35:56:52:A2:40:29:9C:C0:54:F9:CE:12:E5:07:38:25 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A98F92301E325C59FE380A800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/9326b60c-910b-4c2d-acc0-4eaf54d2b059.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 00:45:36 +0000 Certificate not after: Mon 25 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 2620:8c:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:f9:23:01:e3:25:c5:9f:e3:80:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 22 00:45:36 2025 GMT Not After : Oct 25 00:45:36 2027 GMT Subject: CN=9326b60c-910b-4c2d-acc0-4eaf54d2b059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:25:32:03:37:0b:44:4a:a0:c3:57:72:95:e0: 17:e1:4a:2c:6a:8d:ed:aa:87:33:d2:df:d5:5c:c5: 8e:ed:d6:2f:81:dd:81:2b:2f:cc:4c:33:aa:2e:d5: 91:92:6e:a2:4d:2f:13:4e:e9:35:ea:9a:2f:59:3f: 31:f9:7d:08:5f:ec:47:6a:23:5d:16:d4:64:51:f0: 3a:71:48:6f:37:db:2b:c9:f4:52:89:c5:03:6c:6b: 5e:da:82:ca:1d:d9:71:5c:5d:b8:85:82:4c:b9:b6: c7:ac:0a:58:00:a9:6c:f1:a9:de:23:a6:71:91:5d: a2:1f:46:9d:ae:8b:3a:4a:ee:7c:ba:b5:d1:38:95: 63:06:3e:48:51:fc:64:c6:48:92:f9:a3:5e:ac:30: 24:a2:29:6f:ae:78:95:48:12:7f:0d:37:a6:f9:19: ce:e2:20:62:7c:a1:5b:ce:a0:fe:96:6f:7f:a8:87: 1d:e6:ba:99:44:c4:77:e5:38:6b:82:4f:88:29:ed: e5:0a:9d:6a:4a:77:15:e0:ce:ce:d4:c1:65:02:c7: fb:e4:13:3e:f7:34:76:bf:19:d4:a1:fa:5a:ee:b9: f1:17:92:af:c9:7d:11:41:c9:4b:8f:c5:25:ac:da: 0f:77:6a:9d:82:ea:85:52:3c:22:2e:16:09:44:cf: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6A:61:A9:35:56:52:A2:40:29:9C:C0:54:F9:CE:12:E5:07:38:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/9326b60c-910b-4c2d-acc0-4eaf54d2b059.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2620:8c:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0e:e7:be:30:73:29:f1:db:62:4f:9d:38:f3:c4:50:57:09: 05:bc:49:5f:f2:3a:6d:0d:d6:8b:e4:90:61:cd:47:63:fc:61: ec:ff:ca:11:e6:57:fc:bf:e1:e2:5f:3e:20:98:b9:c8:e5:0b: 25:6e:8a:18:39:53:9c:40:ba:6f:9a:16:57:47:13:2f:3f:1d: e9:48:d1:1d:3d:93:25:6c:ed:55:11:06:6f:7d:ff:97:08:41: d8:ee:10:40:0e:56:bd:c6:25:d4:1e:1c:77:ca:cd:dc:f8:13: b2:1d:8a:5e:62:c2:40:49:73:a9:4f:09:76:16:dd:7f:78:f4: 63:74:2c:b4:6c:7c:7c:b0:2d:f7:23:19:e4:bb:2b:9a:35:8c: 24:f6:a3:e3:07:4e:5f:f6:37:c6:55:af:d9:a3:ba:be:4d:9a: a6:f1:0a:49:34:e4:c4:05:d9:6e:2a:2b:fe:c7:8c:a1:7e:34: 81:52:7a:15:83:1e:31:90:d5:3f:c4:8f:9f:26:21:9a:e8:06: 8b:5a:8d:4e:aa:2d:77:c5:b7:6d:aa:67:4d:9d:99:3b:df:51: a4:26:dc:6b:0d:08:5b:ca:a6:0a:a2:60:a2:e0:a5:2a:a3:cf: 9c:53:13:8f:98:d0:ab:f0:a6:46:88:61:01:2d:45:49:80:bf: 87:bd:87:c0 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEqY+SMB4yXFn+OAqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMjAwNDUzNloXDTI3MTAyNTAwNDUzNlowLzEtMCsGA1UEAxMk OTMyNmI2MGMtOTEwYi00YzJkLWFjYzAtNGVhZjU0ZDJiMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyUyAzcLREqgw1dyleAX4Uosao3tqocz0t/V XMWO7dYvgd2BKy/MTDOqLtWRkm6iTS8TTuk16povWT8x+X0IX+xHaiNdFtRkUfA6 cUhvN9sryfRSicUDbGte2oLKHdlxXF24hYJMubbHrApYAKls8aneI6ZxkV2iH0ad ros6Su58urXROJVjBj5IUfxkxkiS+aNerDAkoilvrniVSBJ/DTem+RnO4iBifKFb zqD+lm9/qIcd5rqZRMR35Thrgk+IKe3lCp1qSncV4M7O1MFlAsf75BM+9zR2vxnU ofpa7rnxF5KvyX0RQclLj8UlrNoPd2qdguqFUjwiLhYJRM9TVwIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFHVqYak1VlKiQCmcwFT5zhLlBzglMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 MzI2YjYwYy05MTBiLTRjMmQtYWNjMC00ZWFmNTRkMmIwNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzkzMjZiNjBjLTkxMGItNGMyZC1h Y2MwLTRlYWY1NGQyYjA1OS85MzI2YjYwYy05MTBiLTRjMmQtYWNjMC00ZWFmNTRk MmIwNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIACMoAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbw7nvjBzKfHbYk+d OPPEUFcJBbxJX/I6bQ3Wi+SQYc1HY/xh7P/KEeZX/L/h4l8+IJi5yOULJW6KGDlT nEC6b5oWV0cTLz8d6UjRHT2TJWztVREGb33/lwhB2O4QQA5WvcYl1B4cd8rN3PgT sh2KXmLCQElzqU8Jdhbdf3j0Y3QstGx8fLAt9yMZ5LsrmjWMJPaj4wdOX/Y3xlWv 2aO6vk2apvEKSTTkxAXZbior/seMoX40gVJ6FYMeMZDVP8SPnyYhmugGi1qNTqot d8W3bapnTZ2ZO99RpCbcaw0IW8qmCqJgouClKqPPnFMTj5jQq/CmRohhAS1FSYC/ h72HwA== -----END CERTIFICATE-----Generated at Mon Aug 4 16:06:40 2025 by rpki-client