$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c.cer File: 8451ed63-cb69-4202-bd4e-4bb93315e13c.cer (raw, json) Hash identifier: VpaEK3959EYQbO1lDddfwUIw2uyEWWxsyY+GmQLPF20= Subject key identifier: 7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849D7E578ADC31EB7347836ED00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 May 2025 20:54:59 +0000 Certificate not after: Mon 16 Aug 2027 20:54:59 +0000 Subordinate resources: AS: 11540 IP: 2620:31:8000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:e5:78:ad:c3:1e:b7:34:78:36:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 13 20:54:59 2025 GMT Not After : Aug 16 20:54:59 2027 GMT Subject: CN=8451ed63-cb69-4202-bd4e-4bb93315e13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:85:c9:4b:b2:d4:8f:5d:63:88:08:3a:6a: c2:25:c6:61:78:c5:76:ef:7b:e6:d7:c6:95:4c:d4: fc:33:28:34:4b:60:66:aa:aa:9c:cd:e5:77:07:de: a1:1b:89:ed:22:d4:9f:b6:2a:ec:28:ad:1b:1f:d5: 33:ad:4c:f1:0a:a7:d8:20:40:7f:87:e9:66:a3:aa: 97:d9:8a:0d:36:e8:82:12:39:cd:2a:38:e7:81:77: 6f:e8:b7:b0:ef:30:ef:f2:05:da:53:7d:f7:6e:5a: 96:92:7c:91:5f:11:1c:d6:d9:e3:22:85:d2:fd:82: 8a:14:36:29:c5:cc:3d:5f:ae:21:db:1b:77:79:86: 33:2b:af:89:5e:c2:c0:d7:cc:86:30:9f:da:95:70: 3e:2f:2d:50:25:2d:66:b2:db:f8:5b:20:9b:82:cf: 35:6d:aa:0b:83:a4:f3:93:a7:fa:1a:95:64:79:d4: 38:6a:96:35:1d:ce:96:71:d5:c5:40:e3:74:1f:43: 89:1a:0a:0e:25:5a:d5:4a:c4:af:68:63:82:99:b9: 3a:b8:82:c2:50:fa:24:0a:bb:81:e6:cc:02:d9:1e: b6:99:8e:8e:2e:e0:d6:df:64:dd:61:97:61:fd:ca: 0b:72:ce:c0:30:43:69:00:1c:a1:8b:e7:8b:6f:77: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6F:8A:09:0C:6A:CF:D9:BE:D5:8B:59:FE:96:32:84:E9:3E:1B:11 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8451ed63-cb69-4202-bd4e-4bb93315e13c/8451ed63-cb69-4202-bd4e-4bb93315e13c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2620:31:8000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11540 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:83:2e:90:7c:44:89:64:3a:e7:10:50:35:13:cf:71:2c:eb: 23:44:0e:67:ed:49:f4:f4:5b:10:b0:c4:76:4a:76:e2:a6:da: 7a:10:56:6a:89:bb:72:7b:13:80:02:cc:5c:d3:a0:aa:f3:a0: f7:95:64:fd:48:cf:30:2b:e9:3a:e0:9d:20:07:dd:40:15:08: 96:6b:69:fc:58:68:14:1a:1d:d3:07:fa:1e:98:49:c7:70:c9: 80:c3:e4:ac:4d:bf:ca:7b:9f:f3:da:af:06:c8:4e:9f:6f:49: 24:1f:cf:07:49:da:91:d7:fc:db:a2:52:12:cc:30:cc:f0:79: f2:5f:9b:73:10:d7:62:09:1a:c1:6a:09:47:de:49:b6:e5:8a: 97:ed:31:5b:71:7c:18:07:d0:c3:f4:f6:1a:52:b8:e6:2a:4b: bb:93:df:fa:46:4b:bc:bf:ae:27:a2:2c:87:0f:3f:61:cd:79: cb:1d:53:0e:a7:d9:61:bd:34:03:5b:ee:2b:85:c5:6e:c3:32: 4f:98:ea:8b:c7:14:c4:75:18:19:b0:79:e6:4e:1c:c5:80:d8: 59:33:d9:92:4c:2a:99:12:6e:c7:1f:72:41:f7:c0:10:24:be: 65:b8:87:22:9f:c3:7e:ab:d8:37:be:00:ac:fb:80:32:64:90: 51:50:6e:a3 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEnX5Xitwx63NHg27QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUxMzIwNTQ1OVoXDTI3MDgxNjIwNTQ1OVowLzEtMCsGA1UEAxMk ODQ1MWVkNjMtY2I2OS00MjAyLWJkNGUtNGJiOTMzMTVlMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyOFyUuy1I9dY4gIOmrCJcZheMV273vm18aV TNT8Myg0S2BmqqqczeV3B96hG4ntItSftirsKK0bH9UzrUzxCqfYIEB/h+lmo6qX 2YoNNuiCEjnNKjjngXdv6Lew7zDv8gXaU333blqWknyRXxEc1tnjIoXS/YKKFDYp xcw9X64h2xt3eYYzK6+JXsLA18yGMJ/alXA+Ly1QJS1mstv4WyCbgs81baoLg6Tz k6f6GpVkedQ4apY1Hc6WcdXFQON0H0OJGgoOJVrVSsSvaGOCmbk6uILCUPokCruB 5swC2R62mY6OLuDW32TdYZdh/coLcs7AMENpAByhi+eLb3eiLQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFHpvigkMas/ZvtWLWf6WMoTpPhsRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 NDUxZWQ2My1jYjY5LTQyMDItYmQ0ZS00YmI5MzMxNWUxM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg0NTFlZDYzLWNiNjktNDIwMi1i ZDRlLTRiYjkzMzE1ZTEzYy84NDUxZWQ2My1jYjY5LTQyMDItYmQ0ZS00YmI5MzMx NWUxM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAAxgAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICLRQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAc4MukHxEiWQ65xBQNRPPcSzrI0QOZ+1J9PRbELDEdkp2 4qbaehBWaom7cnsTgALMXNOgqvOg95Vk/UjPMCvpOuCdIAfdQBUIlmtp/FhoFBod 0wf6HphJx3DJgMPkrE2/ynuf89qvBshOn29JJB/PB0nakdf826JSEswwzPB58l+b cxDXYgkawWoJR95JtuWKl+0xW3F8GAfQw/T2GlK45ipLu5Pf+kZLvL+uJ6Ishw8/ Yc15yx1TDqfZYb00A1vuK4XFbsMyT5jqi8cUxHUYGbB55k4cxYDYWTPZkkwqmRJu xx9yQffAECS+ZbiHIp/DfqvYN74ArPuAMmSQUVBuow== -----END CERTIFICATE-----Generated at Sun Jun 15 05:07:15 2025 by rpki-client