$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer File: 3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer (raw, json) Hash identifier: Czp9YgcMopPj6Ahr1TlSrdH8lVncEoqVMIfskjudd8U= Subject key identifier: A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848519DEBBE669FE02460CFFD90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Dec 2024 01:45:33 +0000 Certificate not after: Tue 30 Mar 2027 00:45:33 +0000 Subordinate resources: IP: 2607:6a40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:9d:eb:be:66:9f:e0:24:60:cf:fd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 25 01:45:33 2024 GMT Not After : Mar 30 00:45:33 2027 GMT Subject: CN=3e5a4c55-417a-4d58-b604-09c3cc10a5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:93:96:92:59:b8:ed:da:75:a8:66:e3:34:6f: 96:f3:19:fb:b6:76:ef:2e:68:ae:dc:1f:3e:c4:2d: 52:15:b7:7f:2a:bc:5c:70:bf:11:52:c1:9d:04:38: 03:10:9c:d8:43:79:b0:fe:61:b1:c0:fa:4b:59:74: 7b:68:e4:a4:c7:ac:f5:d1:5b:8a:a2:98:2f:48:b3: 3a:2d:50:6d:40:32:93:4a:4b:47:55:31:b7:e7:74: 62:66:68:c3:e8:a4:d8:0b:05:a9:da:9f:34:1c:29: c1:33:ef:cd:60:45:59:c9:cb:c4:bd:d2:37:24:b3: 3b:14:1f:55:d6:c9:3a:c0:49:aa:62:d1:d2:f3:1e: bb:d3:46:bc:d4:94:3a:b3:31:7d:c8:cc:76:37:75: 35:44:dc:2f:ec:4a:15:d8:8d:92:dc:95:84:cf:1f: 31:29:33:6e:47:bf:ec:79:34:85:39:f2:12:75:ad: bd:5c:cd:86:6b:c8:a4:a9:e0:7d:0a:8b:78:f8:01: 5f:c5:2e:e7:f9:20:a3:4c:26:18:57:fa:d2:79:d3: fa:e2:d7:14:58:a0:f5:42:c8:30:5c:e6:5e:6d:cd: 3e:cd:26:a6:6a:f1:0b:07:59:a1:eb:01:05:2c:89: 1b:63:6d:25:04:14:92:15:e4:97:a2:c7:4a:e1:75: 26:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2607:6a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c2:34:0c:4f:3a:9d:9d:d9:9d:09:fc:25:b2:4f:bc:c7:cf: 10:ed:97:b9:ba:92:4f:a4:66:ce:b9:a0:5d:d1:10:80:dc:b4: d7:2a:5c:ef:f9:95:9a:9b:7f:7b:a7:12:a2:a6:e1:63:b6:53: 41:83:2a:f8:6e:b0:6d:e8:6a:1e:80:f0:89:99:93:34:e8:07: 64:a3:3c:51:e9:25:c6:4e:15:30:5e:d6:71:72:2a:a3:97:df: 1f:df:74:53:6c:14:ce:7f:13:ec:99:9e:af:fa:01:3f:07:8a: 9e:c3:10:34:84:d6:82:aa:ee:06:c8:98:39:68:96:a2:83:e6: 18:68:d5:91:ad:a8:54:2b:9d:b2:fa:c1:53:62:c5:a8:3d:d5: 38:a0:c5:d4:8c:c6:1f:a8:52:49:c5:97:33:d6:14:9c:32:ff: 0a:82:66:67:d1:9b:e6:34:1a:34:29:64:15:1c:b7:36:fc:3f: 6e:01:51:25:5e:82:fc:3c:5f:65:31:53:fc:47:d0:cf:01:d3: 28:97:48:96:ee:c4:26:be:4f:ee:4e:40:74:34:41:d1:8f:42: b5:f4:0d:59:e5:53:b3:25:dc:de:92:5e:70:ed:bc:85:d0:7d: 12:d2:a6:3b:e9:ea:50:28:da:50:ef:18:71:2d:e0:aa:db:c6: 65:ff:5a:06 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEhRneu+Zp/gJGDP/ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIyNTAxNDUzM1oXDTI3MDMzMDAwNDUzM1owLzEtMCsGA1UEAxMk M2U1YTRjNTUtNDE3YS00ZDU4LWI2MDQtMDljM2NjMTBhNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpOWklm47dp1qGbjNG+W8xn7tnbvLmiu3B8+ xC1SFbd/KrxccL8RUsGdBDgDEJzYQ3mw/mGxwPpLWXR7aOSkx6z10VuKopgvSLM6 LVBtQDKTSktHVTG353RiZmjD6KTYCwWp2p80HCnBM+/NYEVZycvEvdI3JLM7FB9V 1sk6wEmqYtHS8x6700a81JQ6szF9yMx2N3U1RNwv7EoV2I2S3JWEzx8xKTNuR7/s eTSFOfISda29XM2Ga8ikqeB9Cot4+AFfxS7n+SCjTCYYV/rSedP64tcUWKD1Qsgw XOZebc0+zSamavELB1mh6wEFLIkbY20lBBSSFeSXosdK4XUmsQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFKPlCzakweothn/EiIgIREX8LDIqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z ZTVhNGM1NS00MTdhLTRkNTgtYjYwNC0wOWMzY2MxMGE1ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzNlNWE0YzU1LTQxN2EtNGQ1OC1i NjA0LTA5YzNjYzEwYTVlZi8zZTVhNGM1NS00MTdhLTRkNTgtYjYwNC0wOWMzY2Mx MGE1ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB2pAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA/CNAxPOp2d2Z0J/CWy T7zHzxDtl7m6kk+kZs65oF3REIDctNcqXO/5lZqbf3unEqKm4WO2U0GDKvhusG3o ah6A8ImZkzToB2SjPFHpJcZOFTBe1nFyKqOX3x/fdFNsFM5/E+yZnq/6AT8Hip7D EDSE1oKq7gbImDlolqKD5hho1ZGtqFQrnbL6wVNixag91TigxdSMxh+oUknFlzPW FJwy/wqCZmfRm+Y0GjQpZBUctzb8P24BUSVegvw8X2UxU/xH0M8B0yiXSJbuxCa+ T+5OQHQ0QdGPQrX0DVnlU7Ml3N6SXnDtvIXQfRLSpjvp6lAo2lDvGHEt4KrbxmX/ WgY= -----END CERTIFICATE-----Generated at Sun Apr 27 17:44:08 2025 by rpki-client