$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer File: 2bd61746-13db-450a-8df3-636a3fa01e59.cer (raw, json) Hash identifier: APuD04ZGW0h9UwF1zZ3Nqv+i7ViPekMyIp08PbjxSlA= Subject key identifier: C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285849928CD1CA3BD664F5C11D6740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Apr 2025 00:45:34 +0000 Certificate not after: Fri 23 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 393719 IP: 2605:4340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:8c:d1:ca:3b:d6:64:f5:c1:1d:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 19 00:45:34 2025 GMT Not After : Jul 23 00:45:34 2027 GMT Subject: CN=2bd61746-13db-450a-8df3-636a3fa01e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:46:49:ee:2a:a9:e2:bf:d2:a2:07:b4:ec:91: bb:ca:41:cc:ea:d5:5e:7a:d1:09:c7:79:26:86:ab: 4c:7f:f9:bf:dd:f9:56:0a:08:d9:df:61:b3:6c:3f: dd:0e:43:4b:81:0f:5a:00:db:7e:fa:8b:e6:8e:fe: 40:2a:03:71:11:90:7d:0f:f1:04:77:17:8f:c8:b2: 0c:66:76:56:c0:e8:ab:3c:2d:e8:91:a3:16:0a:a2: a1:c6:fe:aa:fb:9e:3a:ee:34:6a:e5:68:a8:0d:47: b9:18:12:b0:85:6d:6f:b6:ee:e5:91:7e:ec:8e:db: a3:25:d1:f7:99:cf:fd:d4:fc:4d:2a:d1:b3:bf:e5: 49:16:92:ca:c6:96:38:fa:da:c1:42:d4:60:32:56: 2a:ac:f2:33:c0:23:6a:54:ce:e1:31:c4:13:f6:16: 67:8e:e4:0e:e1:3c:eb:ae:c7:5b:70:42:61:d1:8f: f1:19:4e:9e:ce:af:8f:8e:cc:7e:65:49:90:80:69: 35:fd:4a:04:1b:ba:8a:59:3c:7d:b3:5e:78:85:98: 20:10:9b:82:ac:81:1f:85:18:f5:9e:47:e4:d8:22: 2c:1d:fc:27:11:71:d6:2a:40:d7:99:cb:dc:67:c5: a2:2e:bc:96:f7:04:1d:85:7b:44:a3:6c:ee:f4:74: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv6: 2605:4340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393719 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:80:91:d1:a9:da:29:29:45:54:1d:35:5b:bb:ab:da:5b:b8: 4c:67:05:b1:88:80:b3:0e:23:71:33:c2:7a:d9:dc:c2:9c:61: 3b:8c:7c:44:15:23:91:70:b8:19:25:40:7e:f7:cc:ee:12:fe: a6:fe:97:1b:a0:70:d8:39:6f:04:96:79:9b:68:ed:82:b0:8f: 3a:be:00:b3:f2:72:2a:45:eb:a5:74:79:f8:b1:81:93:95:bb: 78:c9:22:d4:e9:55:06:77:6c:8e:27:4b:05:24:d5:44:98:31: 30:cd:6c:ec:63:ef:b5:6d:bc:4b:80:26:07:65:b3:b2:75:3a: 20:0d:af:b6:bd:6c:b6:e7:e7:13:c3:9d:15:fd:45:39:87:29: cf:58:fa:cd:19:4e:b7:32:4e:31:d1:e4:0e:8b:27:f4:53:8d: ee:3e:f5:d4:19:a3:87:14:5a:24:38:03:b2:56:71:b4:6b:9e: 99:04:d5:a5:88:11:cd:4c:f1:f4:9d:13:99:3e:f8:7d:f4:b7: 7b:30:22:74:a3:4a:95:00:64:00:1a:e3:7f:25:08:5a:8a:3c: 3b:16:65:2c:28:6b:0e:14:16:ed:7b:1e:59:33:31:ab:ab:f5: c5:2e:fc:a5:b5:4c:99:1f:4e:f1:8c:b5:2f:00:0a:6f:84:e3: 43:cf:b6:67 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEmSjNHKO9Zk9cEdZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDQxOTAwNDUzNFoXDTI3MDcyMzAwNDUzNFowLzEtMCsGA1UEAxMk MmJkNjE3NDYtMTNkYi00NTBhLThkZjMtNjM2YTNmYTAxZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikZJ7iqp4r/Soge07JG7ykHM6tVeetEJx3km hqtMf/m/3flWCgjZ32GzbD/dDkNLgQ9aANt++ovmjv5AKgNxEZB9D/EEdxePyLIM ZnZWwOirPC3okaMWCqKhxv6q+5467jRq5WioDUe5GBKwhW1vtu7lkX7sjtujJdH3 mc/91PxNKtGzv+VJFpLKxpY4+trBQtRgMlYqrPIzwCNqVM7hMcQT9hZnjuQO4Tzr rsdbcEJh0Y/xGU6ezq+Pjsx+ZUmQgGk1/UoEG7qKWTx9s154hZggEJuCrIEfhRj1 nkfk2CIsHfwnEXHWKkDXmcvcZ8WiLryW9wQdhXtEo2zu9HTh1wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFMnPaDaqgxW8eZeAxDjpwf8AYvHjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y YmQ2MTc0Ni0xM2RiLTQ1MGEtOGRmMy02MzZhM2ZhMDFlNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzJiZDYxNzQ2LTEzZGItNDUwYS04 ZGYzLTYzNmEzZmEwMWU1OS8yYmQ2MTc0Ni0xM2RiLTQ1MGEtOGRmMy02MzZhM2Zh MDFlNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBUNAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYB9zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCTgJHRqdopKUVUHTVbu6vaW7hMZwWxiICzDiNxM8J62dzC nGE7jHxEFSORcLgZJUB+98zuEv6m/pcboHDYOW8ElnmbaO2CsI86vgCz8nIqReul dHn4sYGTlbt4ySLU6VUGd2yOJ0sFJNVEmDEwzWzsY++1bbxLgCYHZbOydTogDa+2 vWy25+cTw50V/UU5hynPWPrNGU63Mk4x0eQOiyf0U43uPvXUGaOHFFokOAOyVnG0 a56ZBNWliBHNTPH0nROZPvh99Ld7MCJ0o0qVAGQAGuN/JQhaijw7FmUsKGsOFBbt ex5ZMzGrq/XFLvyltUyZH07xjLUvAApvhONDz7Zn -----END CERTIFICATE-----Generated at Sun Apr 27 23:55:43 2025 by rpki-client