$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer File: bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer (raw, json) Hash identifier: 28FMdVOOUmnG31JvkB9hePpERihi36y+ogpZe36/THw= Subject key identifier: 0B:90:22:7D:07:1F:F7:BB:3E:CA:84:48:84:2D:38:AB:65:6A:FD:DD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849DB22972F08CBBEB1EEDC9740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 May 2025 00:45:33 +0000 Certificate not after: Wed 18 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 394446 IP: 2602:fd1a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:22:97:2f:08:cb:be:b1:ee:dc:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 15 00:45:33 2025 GMT Not After : Aug 18 00:45:33 2027 GMT Subject: CN=bc531289-e97e-4da3-a7d9-a36ddfc34cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:51:35:34:e9:15:0e:b6:b5:d0:03:d4:15: 21:31:13:30:37:73:9c:ee:d3:ea:c6:05:b3:ca:a7: c4:69:ef:61:eb:11:5e:f5:e6:56:60:87:72:57:c6: df:56:89:38:7a:f3:3b:21:bf:5a:a7:94:7c:4c:71: 88:4e:5f:97:3c:ca:e5:38:7f:7f:44:6f:d5:60:0a: 87:a4:d3:6f:60:6f:05:81:31:58:85:15:42:83:4e: 29:6f:1b:5b:53:96:7d:84:9f:52:67:74:29:18:c0: d1:2c:40:16:f4:8e:79:ff:08:ed:62:f3:06:65:52: 58:09:54:0d:d4:98:7b:2e:f4:e8:b8:ca:cd:35:3b: de:75:27:d0:6a:b4:4a:ce:1b:7b:8c:71:a4:09:fa: 84:87:75:12:5f:68:e8:3f:07:45:dc:06:f6:56:fd: 77:d2:4a:18:cd:c0:89:90:63:8b:5f:b7:4c:b3:19: fa:1d:6e:12:39:3c:35:78:28:2d:ec:f7:60:0c:80: da:63:52:c3:08:cf:26:0f:1a:55:87:73:30:96:aa: 89:6d:67:b0:01:c1:dc:bd:37:c3:28:dc:bf:e9:3b: 3f:83:cc:df:f4:50:a3:0b:ab:60:99:50:1a:85:50: 42:7a:fc:d7:89:c9:9f:6c:94:df:a4:1b:b0:51:3c: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:90:22:7D:07:1F:F7:BB:3E:CA:84:48:84:2D:38:AB:65:6A:FD:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd1a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:86:da:3b:b3:99:75:8e:7e:14:f1:a1:2c:c1:97:4b:bb:5b: 50:99:40:cb:e4:ed:9d:48:38:ea:80:a1:ef:52:b8:42:06:5d: c7:26:93:bb:23:1c:e3:85:37:bf:fc:53:68:cf:91:02:20:e9: 50:37:99:05:ac:5c:e2:a9:ec:01:6d:3d:db:bf:bf:e8:59:74: b7:ef:93:85:e3:02:d5:13:94:c3:91:90:aa:c8:61:55:5b:e5: fe:13:d4:29:6b:22:44:2e:5c:66:a0:32:bb:16:6d:15:f5:b5: 72:60:0b:e3:c3:a2:92:c6:1d:dd:e1:51:52:80:79:2e:bb:dd: 19:7d:69:97:72:5b:70:ac:46:94:de:58:90:b1:a2:76:e3:30: 54:e7:fc:e6:6e:ec:d2:a9:f1:43:9c:0e:62:e1:98:a5:5e:03: 31:2f:8e:3f:93:65:fa:d2:e2:71:93:9f:c1:5c:8e:d2:13:e8: 61:2a:44:e3:36:d1:a4:87:bb:8e:e4:63:13:c0:41:fd:30:db: 91:60:c6:d5:43:0a:51:ee:70:ac:2d:9f:11:cb:2d:36:e6:56: 8a:fa:88:48:b4:d9:7e:c1:32:bd:f7:b8:66:7b:d5:24:41:ef: 10:ff:9d:ff:a8:5a:ab:d2:b7:a2:ee:04:9f:6c:a0:2e:4b:71: da:88:9e:0b -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEnbIpcvCMu+se7cl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDUxNTAwNDUzM1oXDTI3MDgxODAwNDUzM1owLzEtMCsGA1UEAxMk YmM1MzEyODktZTk3ZS00ZGEzLWE3ZDktYTM2ZGRmYzM0Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7tRNTTpFQ62tdAD1BUhMRMwN3Oc7tPqxgWz yqfEae9h6xFe9eZWYIdyV8bfVok4evM7Ib9ap5R8THGITl+XPMrlOH9/RG/VYAqH pNNvYG8FgTFYhRVCg04pbxtbU5Z9hJ9SZ3QpGMDRLEAW9I55/wjtYvMGZVJYCVQN 1Jh7LvTouMrNNTvedSfQarRKzht7jHGkCfqEh3USX2joPwdF3Ab2Vv130koYzcCJ kGOLX7dMsxn6HW4SOTw1eCgt7PdgDIDaY1LDCM8mDxpVh3MwlqqJbWewAcHcvTfD KNy/6Ts/g8zf9FCjC6tgmVAahVBCevzXicmfbJTfpBuwUTypVwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFAuQIn0HH/e7PsqESIQtOKtlav3dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i YzUzMTI4OS1lOTdlLTRkYTMtYTdkOS1hMzZkZGZjMzRjZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2JjNTMxMjg5LWU5N2UtNGRhMy1h N2Q5LWEzNmRkZmMzNGNkZi9iYzUzMTI4OS1lOTdlLTRkYTMtYTdkOS1hMzZkZGZj MzRjZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAv0aADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGBM4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXobaO7OZdY5+FPGhLMGXS7tbUJlAy+TtnUg46oCh71K4 QgZdxyaTuyMc44U3v/xTaM+RAiDpUDeZBaxc4qnsAW0927+/6Fl0t++TheMC1ROU w5GQqshhVVvl/hPUKWsiRC5cZqAyuxZtFfW1cmAL48OiksYd3eFRUoB5LrvdGX1p l3JbcKxGlN5YkLGiduMwVOf85m7s0qnxQ5wOYuGYpV4DMS+OP5Nl+tLicZOfwVyO 0hPoYSpE4zbRpIe7juRjE8BB/TDbkWDG1UMKUe5wrC2fEcstNuZWivqISLTZfsEy vfe4ZnvVJEHvEP+d/6haq9K3ou4En2ygLktx2oieCw== -----END CERTIFICATE-----Generated at Sun Jun 15 04:58:13 2025 by rpki-client