$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer File: d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer (raw, json) Hash identifier: mMyl48110vKfqgI508/J8KVSl0RrF7X3Lyle8WwucYo= Subject key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A294DC36E77BD274D5C339B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Jun 2025 00:45:35 +0000 Certificate not after: Wed 15 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 17050 IP: 2602:817:9000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:4d:c3:6e:77:bd:27:4d:5c:33:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 12 00:45:35 2025 GMT Not After : Sep 15 00:45:35 2027 GMT Subject: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:b2:39:0b:e9:fa:42:c2:28:8a:91:1c:c5: 81:4a:d8:cd:6d:d5:57:b2:bc:a0:08:de:3c:f9:79: 88:ab:b1:53:37:a4:24:bb:c9:b8:52:e9:5c:0e:e2: f1:4b:0d:12:e9:0d:45:18:ab:a3:63:19:97:b2:3a: ae:c1:d3:36:3c:45:70:3d:82:8e:38:16:e5:44:76: 33:b4:e6:a1:31:55:87:01:b2:af:9f:7a:fa:71:85: 00:fd:85:50:b6:89:b9:6d:ab:28:1b:14:e8:d4:01: 11:17:c2:87:cb:38:77:9f:8e:06:fc:9b:71:11:09: b8:b2:f2:93:bc:fe:cb:1d:b4:33:9b:e2:32:5f:ff: 16:f7:d6:63:4a:c6:8e:54:0f:04:a4:85:b9:c5:c1: 28:ad:1a:ac:ca:cf:e9:db:f7:7d:2a:a4:f8:35:e5: 78:83:32:45:23:3b:d6:f9:76:fe:0c:f6:04:f7:f7: dc:cc:e7:ef:85:21:5b:62:10:11:30:09:08:3d:e8: fd:04:b5:57:af:01:f3:13:65:ff:d7:4d:61:2d:02: 29:bd:6e:fe:c9:20:9d:d4:d6:fb:a9:6a:9c:3c:fe: e7:e8:cd:3b:f6:3a:17:58:9a:a6:03:c1:29:c5:b1: 36:7c:9c:c7:d4:a8:b7:45:2c:b5:b5:88:ec:fa:d5: 07:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:9000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17050 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ef:4d:26:20:f3:50:e5:ee:57:b3:21:e2:f5:41:92:09:d5: ee:38:b5:df:6f:40:7a:f7:6b:11:42:66:b1:ef:be:01:e7:8b: fb:67:79:23:bc:2c:18:0d:66:cf:1d:f1:b1:53:ae:4a:17:4e: a1:85:d6:b7:bb:2f:76:55:1a:a5:a0:ae:0b:a8:29:29:0f:e9: 04:d4:b6:a7:9e:02:45:f5:2c:18:be:c9:f0:d3:6f:1a:67:60: 83:10:ee:17:4c:78:5c:a9:13:e7:44:32:a7:7e:e3:b2:03:dc: cc:52:f0:18:05:37:dd:ee:5d:88:df:49:19:5d:00:da:bc:bf: 7c:40:9b:4d:3a:ef:16:26:22:30:f5:dc:2a:0e:de:a1:03:13: 36:cf:36:36:b1:ec:85:44:58:e4:b1:ed:9d:ae:1b:a7:b4:da: 6b:5a:04:06:53:1d:a7:03:3a:b4:1b:c7:0c:09:94:0b:e6:6e: 60:67:cb:7a:8d:00:9f:d7:b6:31:5c:69:dc:e1:23:69:a4:1e: bc:35:02:7c:d1:82:7c:17:30:e5:98:55:2c:89:43:7a:7f:f6: d3:1b:90:0f:1e:8a:8d:6b:76:1c:df:d1:6f:1b:b4:a6:33:db: 16:10:2e:3d:f1:c4:81:d4:00:8e:ba:61:cf:e3:6e:34:2e:bc: 97:64:09:3a -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEopTcNud70nTVwzm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxMjAwNDUzNVoXDTI3MDkxNTAwNDUzNVowLzEtMCsGA1UEAxMk ZDIwYzRjMzgtYWJjMy00ZmFjLThhNzYtNjFhOTU2MGEyM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAayOQvp+kLCKIqRHMWBStjNbdVXsrygCN48 +XmIq7FTN6Qku8m4UulcDuLxSw0S6Q1FGKujYxmXsjquwdM2PEVwPYKOOBblRHYz tOahMVWHAbKvn3r6cYUA/YVQtom5basoGxTo1AERF8KHyzh3n44G/JtxEQm4svKT vP7LHbQzm+IyX/8W99ZjSsaOVA8EpIW5xcEorRqsys/p2/d9KqT4NeV4gzJFIzvW +Xb+DPYE9/fczOfvhSFbYhARMAkIPej9BLVXrwHzE2X/101hLQIpvW7+ySCd1Nb7 qWqcPP7n6M079joXWJqmA8EpxbE2fJzH1Ki3RSy1tYjs+tUHMQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFCgJQGMqMjguvYxm1RrUDF6+cRRpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k MjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYwYTIzYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2QyMGM0YzM4LWFiYzMtNGZhYy04 YTc2LTYxYTk1NjBhMjNhMy9kMjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYw YTIzYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggXkAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICQpowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAlO9NJiDzUOXuV7Mh4vVBkgnV7ji1329AevdrEUJmse++ AeeL+2d5I7wsGA1mzx3xsVOuShdOoYXWt7svdlUapaCuC6gpKQ/pBNS2p54CRfUs GL7J8NNvGmdggxDuF0x4XKkT50Qyp37jsgPczFLwGAU33e5diN9JGV0A2ry/fECb TTrvFiYiMPXcKg7eoQMTNs82NrHshURY5LHtna4bp7Taa1oEBlMdpwM6tBvHDAmU C+ZuYGfLeo0An9e2MVxp3OEjaaQevDUCfNGCfBcw5ZhVLIlDen/20xuQDx6KjWt2 HN/Rbxu0pjPbFhAuPfHEgdQAjrphz+NuNC68l2QJOg== -----END CERTIFICATE-----Generated at Sun Jun 15 04:59:40 2025 by rpki-client