$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c19988c8-ea22-4038-a0ee-670dc58ac247.cer File: c19988c8-ea22-4038-a0ee-670dc58ac247.cer (raw, json) Hash identifier: mQPk8oNtNCdNSApYaFmhILsTemfogI56W1o7f3wLj6o= Subject key identifier: 7E:44:83:BC:46:4C:13:2A:6C:BA:3B:5E:AB:2A:A1:8C:59:AD:5E:E8 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285848EC9A16305E15EFB1C45A0080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c19988c8-ea22-4038-a0ee-670dc58ac247/c19988c8-ea22-4038-a0ee-670dc58ac247.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c19988c8-ea22-4038-a0ee-670dc58ac247/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 14:08:07 +0000 Certificate not after: Mon 24 May 2027 13:08:07 +0000 Subordinate resources: IP: 2620:10:6000::/48 IP: 2620:63:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:9a:16:30:5e:15:ef:b1:c4:5a:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Feb 18 14:08:07 2025 GMT Not After : May 24 13:08:07 2027 GMT Subject: CN=c19988c8-ea22-4038-a0ee-670dc58ac247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:f5:c3:f7:73:f8:a8:d4:ea:a4:7a:2b:a2: 45:3b:4c:5b:f1:96:be:7c:a3:94:e9:8b:42:9f:cf: 6e:aa:0f:f9:5b:c7:47:e5:51:f7:82:ff:98:f1:cd: ca:39:0c:54:31:01:83:d0:13:91:13:bc:bf:e4:ce: 2b:ec:a1:83:88:e7:f8:1a:cf:2a:81:6d:97:ab:d6: a6:ea:4f:4b:2a:3f:ee:1b:65:ce:5b:52:01:ba:41: 08:1a:33:3f:2c:34:8e:0b:9c:97:a3:e5:8a:07:85: d4:7e:b3:3a:ba:a7:eb:77:c3:da:84:42:2b:b8:ee: 75:80:ea:e1:e8:51:99:a9:db:f0:da:01:99:cb:98: fd:e9:32:31:55:96:55:e6:0c:3f:cd:02:b7:72:7d: 3f:e6:2b:d5:81:71:76:4c:f6:e6:74:aa:af:1f:4f: 7d:93:2e:24:b0:f2:4e:c0:d4:a6:97:db:4a:43:b4: c8:e5:61:80:93:6e:f8:1a:4a:63:54:6e:a2:01:98: 77:cf:32:74:17:d2:4c:66:de:68:b0:97:df:86:bc: 26:e9:17:a0:a2:7e:ef:fc:42:0f:d4:0a:3c:db:ba: f9:78:f8:4f:1e:cd:62:f8:3c:de:b6:c8:cc:bc:16: d8:94:fb:a3:ea:c4:21:be:f6:01:1c:e6:6d:59:af: 8c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:44:83:BC:46:4C:13:2A:6C:BA:3B:5E:AB:2A:A1:8C:59:AD:5E:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c19988c8-ea22-4038-a0ee-670dc58ac247/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c19988c8-ea22-4038-a0ee-670dc58ac247/c19988c8-ea22-4038-a0ee-670dc58ac247.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2620:10:6000::/48 2620:63:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5f:82:43:9d:b3:34:69:83:46:21:a5:8d:68:5a:e2:45:47: 79:70:fa:86:65:a5:28:02:ba:bb:b1:ca:8b:55:4e:e3:d4:22: d4:c6:32:6b:16:53:05:e3:09:69:a5:09:66:59:6a:e5:26:7e: d7:93:ba:8e:91:88:d0:77:2f:84:8c:a3:e6:49:87:24:bf:4a: 3d:d0:9b:6c:ec:1c:dc:31:22:31:fa:89:35:99:66:6c:40:e2: 5e:5c:da:10:04:e1:23:86:96:3f:39:1b:0b:4e:83:5a:03:35: ae:89:3d:a0:00:b3:3f:25:36:a1:9c:1b:5d:ba:01:70:33:8a: 29:8d:02:ea:7c:3f:63:3a:81:72:58:0c:e6:7c:42:39:78:0f: 37:07:cb:4c:48:11:9d:90:6b:58:d7:f1:f0:9f:5d:05:99:86: 57:c7:d3:d9:a4:ee:8b:15:1b:cf:5b:25:cb:42:fd:37:0d:6b: ab:2f:86:5a:f1:dc:6f:9f:4a:8a:d6:73:38:97:42:71:16:48: 9d:a0:87:92:0b:3d:1a:d3:b4:60:de:e6:2b:76:05:21:14:f2: db:ed:2d:7a:b9:6d:92:be:6d:a9:60:fd:02:31:e5:72:8c:31: 7d:f2:f1:a1:79:4b:34:2a:73:00:4d:df:56:a6:71:b3:be:f1: 07:c0:0a:aa -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEjsmhYwXhXvscRaAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDIxODE0MDgwN1oXDTI3MDUyNDEzMDgwN1owLzEtMCsGA1UEAxMk YzE5OTg4YzgtZWEyMi00MDM4LWEwZWUtNjcwZGM1OGFjMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWD1w/dz+KjU6qR6K6JFO0xb8Za+fKOU6YtC n89uqg/5W8dH5VH3gv+Y8c3KOQxUMQGD0BORE7y/5M4r7KGDiOf4Gs8qgW2Xq9am 6k9LKj/uG2XOW1IBukEIGjM/LDSOC5yXo+WKB4XUfrM6uqfrd8PahEIruO51gOrh 6FGZqdvw2gGZy5j96TIxVZZV5gw/zQK3cn0/5ivVgXF2TPbmdKqvH099ky4ksPJO wNSml9tKQ7TI5WGAk274GkpjVG6iAZh3zzJ0F9JMZt5osJffhrwm6Regon7v/EIP 1Ao827r5ePhPHs1i+DzetsjMvBbYlPuj6sQhvvYBHOZtWa+MvwIDAQABo4IECzCC BAcwHQYDVR0OBBYEFH5Eg7xGTBMqbLo7XqsqoYxZrV7oMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9j MTk5ODhjOC1lYTIyLTQwMzgtYTBlZS02NzBkYzU4YWMyNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2MxOTk4OGM4LWVhMjItNDAzOC1h MGVlLTY3MGRjNThhYzI0Ny9jMTk5ODhjOC1lYTIyLTQwMzgtYTBlZS02NzBkYzU4 YWMyNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgACMBIDBwAmIAAQYAADBwAmIABjoAAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeF+C Q52zNGmDRiGljWha4kVHeXD6hmWlKAK6u7HKi1VO49Qi1MYyaxZTBeMJaaUJZllq 5SZ+15O6jpGI0HcvhIyj5kmHJL9KPdCbbOwc3DEiMfqJNZlmbEDiXlzaEAThI4aW PzkbC06DWgM1rok9oACzPyU2oZwbXboBcDOKKY0C6nw/YzqBclgM5nxCOXgPNwfL TEgRnZBrWNfx8J9dBZmGV8fT2aTuixUbz1sly0L9Nw1rqy+GWvHcb59KitZzOJdC cRZInaCHkgs9GtO0YN7mK3YFIRTy2+0terltkr5tqWD9AjHlcowxffLxoXlLNCpz AE3fVqZxs77xB8AKqg== -----END CERTIFICATE-----Generated at Sun Apr 27 02:56:14 2025 by rpki-client