$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2.cer File: 83a5e53e-dc50-4a1a-bb45-62fec63efea2.cer (raw, json) Hash identifier: LfVKjmL5VOmh6EYkNlN14H0mqEZ8YP7gNOVIzbVhb9I= Subject key identifier: 5B:BD:29:C9:E8:F1:53:55:CC:22:C1:83:08:8C:05:14:E9:0C:38:E5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A0502E0AE78115670BBDA7820 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2/83a5e53e-dc50-4a1a-bb45-62fec63efea2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 May 2025 00:45:36 +0000 Certificate not after: Thu 02 Sep 2027 00:45:36 +0000 Subordinate resources: IP: 2620:d4::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:02:e0:ae:78:11:56:70:bb:da:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 30 00:45:36 2025 GMT Not After : Sep 2 00:45:36 2027 GMT Subject: CN=83a5e53e-dc50-4a1a-bb45-62fec63efea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:a1:41:c1:44:ab:1a:09:e5:b3:f1:80:d9: f6:4d:25:71:f4:89:4e:00:67:9e:f9:3f:06:64:b5: 62:0f:73:29:3f:2e:a4:5b:1a:ef:82:54:98:74:88: b5:03:27:19:fc:9b:84:47:b7:90:17:7b:95:a9:17: 7e:94:62:90:23:3e:91:06:2a:d8:2d:fa:d1:b8:7c: f8:26:0c:14:08:55:6d:0f:a1:79:01:2b:3f:5f:20: 8f:d5:f4:2b:17:1e:bf:5e:e7:a5:12:34:fd:4e:4b: a8:41:ab:9c:6b:46:45:ea:3e:4b:8a:ce:aa:62:b7: 3e:d9:68:da:5f:8b:7a:4a:f5:fb:de:3f:95:ef:48: 86:00:fd:7c:4c:fe:96:d4:32:55:58:02:6e:b5:92: 49:7e:3f:6a:8a:c5:80:90:2f:d4:8e:63:51:f6:b8: 55:78:fa:8a:c5:ef:0c:ee:e7:61:69:3f:84:0b:2a: 23:e7:d3:12:64:1e:57:f4:03:e2:15:68:0f:38:eb: 4a:17:ce:ba:13:b1:6f:be:a8:92:d9:63:0f:ad:90: 5d:46:15:a0:64:3e:13:dd:1c:61:b2:e1:17:25:6d: a1:6a:bc:cb:90:2a:4d:a6:40:c7:3d:29:ce:df:f5: b7:f0:68:fe:4c:74:4c:85:ca:11:0b:c0:03:da:6f: cc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BD:29:C9:E8:F1:53:55:CC:22:C1:83:08:8C:05:14:E9:0C:38:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2/83a5e53e-dc50-4a1a-bb45-62fec63efea2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2620:d4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:45:38:7f:78:e2:40:be:57:09:e3:23:4f:46:9d:07:db:08: 49:64:b3:49:8d:18:11:fc:77:42:0d:5f:98:d6:f6:4d:61:4c: 01:57:75:b5:14:a9:39:65:e4:99:7a:7e:9a:46:c5:05:cc:10: 54:bc:58:3e:90:b3:e7:c3:4d:48:1c:f8:7c:98:13:cf:11:35: 5f:f8:29:ac:1b:28:b8:35:dd:17:1d:13:6c:96:6e:c1:af:45: aa:90:4f:d9:63:42:0d:0b:be:f7:6b:78:6a:e1:29:45:9f:e5: 8e:69:24:d6:d3:fe:49:cc:fd:9c:12:69:97:cf:7c:01:b5:d1: 19:6c:fc:8a:0b:bf:29:38:9f:c3:9d:a7:8b:75:91:b9:5f:c8: ea:aa:2c:49:0c:58:fa:90:c1:9a:ad:6f:53:23:b8:61:01:ca: 39:c0:05:b9:65:8b:03:77:1c:91:37:89:c7:bd:a8:71:52:bf: 07:54:7e:ec:5d:96:c9:af:8e:e8:7a:31:45:56:99:59:d0:33: d0:fa:ab:de:a9:5e:d0:4d:f9:f6:b1:90:7f:08:37:8f:35:91: 93:f6:1d:7d:af:b2:87:6f:39:3b:ad:f8:64:e6:29:f5:b3:ce: de:8e:12:ab:d0:c5:2b:37:79:f9:72:63:1c:a2:a5:c1:63:91: 80:38:8f:7e -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEoFAuCueBFWcLvaeCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUzMDAwNDUzNloXDTI3MDkwMjAwNDUzNlowLzEtMCsGA1UEAxMk ODNhNWU1M2UtZGM1MC00YTFhLWJiNDUtNjJmZWM2M2VmZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoehQcFEqxoJ5bPxgNn2TSVx9IlOAGee+T8G ZLViD3MpPy6kWxrvglSYdIi1AycZ/JuER7eQF3uVqRd+lGKQIz6RBirYLfrRuHz4 JgwUCFVtD6F5ASs/XyCP1fQrFx6/XuelEjT9TkuoQauca0ZF6j5Lis6qYrc+2Wja X4t6SvX73j+V70iGAP18TP6W1DJVWAJutZJJfj9qisWAkC/UjmNR9rhVePqKxe8M 7udhaT+ECyoj59MSZB5X9APiFWgPOOtKF866E7FvvqiS2WMPrZBdRhWgZD4T3Rxh suEXJW2harzLkCpNpkDHPSnO3/W38Gj+THRMhcoRC8AD2m/MiQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFFu9Kcno8VNVzCLBgwiMBRTpDDjlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 M2E1ZTUzZS1kYzUwLTRhMWEtYmI0NS02MmZlYzYzZWZlYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzgzYTVlNTNlLWRjNTAtNGExYS1i YjQ1LTYyZmVjNjNlZmVhMi84M2E1ZTUzZS1kYzUwLTRhMWEtYmI0NS02MmZlYzYz ZWZlYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADUAAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQ0U4f3jiQL5XCeMj T0adB9sISWSzSY0YEfx3Qg1fmNb2TWFMAVd1tRSpOWXkmXp+mkbFBcwQVLxYPpCz 58NNSBz4fJgTzxE1X/gprBsouDXdFx0TbJZuwa9FqpBP2WNCDQu+92t4auEpRZ/l jmkk1tP+Scz9nBJpl898AbXRGWz8igu/KTifw52ni3WRuV/I6qosSQxY+pDBmq1v UyO4YQHKOcAFuWWLA3cckTeJx72ocVK/B1R+7F2Wya+O6HoxRVaZWdAz0Pqr3qle 0E359rGQfwg3jzWRk/Ydfa+yh285O634ZOYp9bPO3o4Sq9DFKzd5+XJjHKKlwWOR gDiPfg== -----END CERTIFICATE-----Generated at Sun Jun 15 20:44:47 2025 by rpki-client