$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer File: e7f210e3-2923-4916-a0dd-8d3cc9158403.cer (raw, json) Hash identifier: pBYeLajlJMPlv+cB4VS7YERWoVCoCYZ2kOy/FBg4aOg= Subject key identifier: BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A1F88625D4F8DC50471616060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Jun 2025 12:45:37 +0000 Certificate not after: Sat 11 Sep 2027 12:45:37 +0000 Subordinate resources: AS: 394837 IP: 2607:9d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:88:62:5d:4f:8d:c5:04:71:61:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 8 12:45:37 2025 GMT Not After : Sep 11 12:45:37 2027 GMT Subject: CN=e7f210e3-2923-4916-a0dd-8d3cc9158403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b7:2d:0a:59:ad:8d:dc:2f:c2:46:9b:39:28: 41:8c:f5:22:0b:7b:ee:a8:5d:85:a5:92:cd:b6:cd: 89:53:e9:70:2c:fc:bb:11:1d:ce:40:68:0d:66:15: e7:78:40:22:3f:59:a6:84:e4:96:cf:58:3a:f4:31: d6:4e:31:e8:bb:eb:e5:91:52:f9:7d:5f:43:e6:cf: cb:d7:3f:e0:66:fe:fc:cc:95:67:0f:6d:16:a6:32: 0b:f5:93:62:60:f8:ec:a5:8c:48:40:ae:10:f2:85: 5c:bd:f4:4a:46:c5:b0:ca:fd:6e:df:ef:d6:47:da: c3:f0:04:d5:08:a7:45:aa:3d:d0:a9:d9:1a:00:2f: d7:bd:bc:c2:89:45:df:51:0f:f6:25:df:f4:a0:9d: fb:df:80:c9:ea:73:42:9a:fc:ae:69:16:da:78:9b: 09:d6:83:33:05:c5:86:cd:79:75:7c:9a:50:2d:64: 2f:a5:c0:4a:3b:21:a9:e3:f5:b9:ce:b9:6e:4c:20: af:b3:66:8c:0d:0a:93:23:c4:dc:87:d4:5e:66:ad: ed:c0:77:5d:ef:b2:ca:77:de:86:ac:01:ad:76:1e: 56:aa:c6:36:c5:c1:a8:cd:e4:e7:76:82:3e:97:4e: 52:60:d3:71:e0:bf:76:97:56:76:ca:80:24:72:87: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2607:9d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394837 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:51:13:70:a9:e5:ef:06:ce:fd:1e:50:b2:24:a1:53:a7:cb: 16:43:12:52:9f:a5:2c:f1:ae:d5:e5:28:41:25:05:fb:bb:ef: be:02:9e:5e:c0:52:19:31:4b:dd:a8:5b:cf:b6:b5:7c:6e:9d: 03:eb:0d:5e:77:ec:76:e7:18:67:29:b4:f6:12:7f:3a:1e:50: 34:24:bb:b8:c7:11:a9:83:5f:d0:f9:14:4b:72:b4:e3:97:dc: f6:a1:de:2d:43:2f:0b:e9:e0:d8:91:85:a7:41:4e:bc:cc:a1: 41:fb:e4:88:b3:60:52:57:a7:da:54:99:41:b8:1b:ad:ec:d2: bf:73:f9:3b:64:f4:32:7f:d8:44:7a:65:ac:f8:78:df:31:e4: 2e:a8:49:0e:ae:8e:40:6c:07:13:03:ec:ba:16:e9:96:45:8f: 1d:b3:bc:a7:2f:31:e6:a8:1f:e0:0b:31:c5:45:d8:09:4b:ec: 0d:ba:42:93:bd:d3:84:ef:84:f2:5e:7b:1e:cd:be:f5:19:59: a5:e0:f2:01:ee:db:2d:6d:f1:40:8b:f2:50:27:61:60:66:ec: 1f:ca:3d:c2:fd:3c:62:28:04:76:ee:75:d5:38:f1:15:4e:f0: c5:37:e0:67:c5:31:03:cf:5b:cf:10:c6:2e:de:89:f4:7e:74: 2b:9f:da:8f -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEofiGJdT43FBHFhYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwODEyNDUzN1oXDTI3MDkxMTEyNDUzN1owLzEtMCsGA1UEAxMk ZTdmMjEwZTMtMjkyMy00OTE2LWEwZGQtOGQzY2M5MTU4NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7ctClmtjdwvwkabOShBjPUiC3vuqF2FpZLN ts2JU+lwLPy7ER3OQGgNZhXneEAiP1mmhOSWz1g69DHWTjHou+vlkVL5fV9D5s/L 1z/gZv78zJVnD20WpjIL9ZNiYPjspYxIQK4Q8oVcvfRKRsWwyv1u3+/WR9rD8ATV CKdFqj3QqdkaAC/XvbzCiUXfUQ/2Jd/0oJ3734DJ6nNCmvyuaRbaeJsJ1oMzBcWG zXl1fJpQLWQvpcBKOyGp4/W5zrluTCCvs2aMDQqTI8Tch9ReZq3twHdd77LKd96G rAGtdh5WqsY2xcGozeTndoI+l05SYNNx4L92l1Z2yoAkcocvlQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFLtqg/zishJm6f33sa9UUAv5C9j/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l N2YyMTBlMy0yOTIzLTQ5MTYtYTBkZC04ZDNjYzkxNTg0MDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U3ZjIxMGUzLTI5MjMtNDkxNi1h MGRkLThkM2NjOTE1ODQwMy9lN2YyMTBlMy0yOTIzLTQ5MTYtYTBkZC04ZDNjYzkx NTg0MDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB51AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYGVTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBgURNwqeXvBs79HlCyJKFTp8sWQxJSn6Us8a7V5ShBJQX7 u+++Ap5ewFIZMUvdqFvPtrV8bp0D6w1ed+x25xhnKbT2En86HlA0JLu4xxGpg1/Q +RRLcrTjl9z2od4tQy8L6eDYkYWnQU68zKFB++SIs2BSV6faVJlBuBut7NK/c/k7 ZPQyf9hEemWs+HjfMeQuqEkOro5AbAcTA+y6FumWRY8ds7ynLzHmqB/gCzHFRdgJ S+wNukKTvdOE74TyXnsezb71GVml4PIB7tstbfFAi/JQJ2FgZuwfyj3C/TxiKAR2 7nXVOPEVTvDFN+BnxTEDz1vPEMYu3on0fnQrn9qP -----END CERTIFICATE-----Generated at Tue Jun 17 02:45:16 2025 by rpki-client