$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer File: c28b7c13-301c-47fc-b39b-2201e763c4dd.cer (raw, json) Hash identifier: OcDiRwOrP6cZlfn5kT8DJmP4YoK4VhYK5EZ4ZzolDHU= Subject key identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584A8DCE6694CE3A8793A7C68580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Jul 2025 00:45:37 +0000 Certificate not after: Thu 21 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 30256 IP: 2620:21:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:ce:66:94:ce:3a:87:93:a7:c6:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 18 00:45:37 2025 GMT Not After : Oct 21 00:45:37 2027 GMT Subject: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:24:10:2c:b7:e8:7e:02:10:c9:d8:d7:63:20: ba:e6:71:79:59:89:07:cf:72:19:0b:6a:85:09:77: dd:a6:91:21:ed:e9:85:8e:fa:42:c1:b0:2c:f1:64: 8a:5d:a9:13:ab:e0:39:18:f5:27:f2:a8:74:9e:67: 94:77:ea:78:fa:36:58:e7:98:37:3f:f8:60:9b:45: d4:28:fc:75:04:f3:6f:f8:09:e4:8b:1e:89:87:66: c1:68:aa:7c:fa:ad:36:c3:3f:5e:57:5f:53:39:49: ba:0a:28:06:e9:16:33:7a:cc:75:bd:21:c6:07:59: b6:a5:7c:ce:ef:71:6a:95:fc:0d:56:35:be:c5:cf: 55:59:c6:00:57:cd:23:34:0d:68:dd:cb:18:d7:f0: 09:07:76:ed:17:fe:50:f6:76:f0:e6:2f:ed:d6:ff: 6b:c3:bd:78:2e:7a:9c:38:ec:a8:d7:7c:70:2f:8b: 35:f0:40:d0:34:02:1b:be:00:47:44:e8:a7:0a:de: 51:11:2a:12:36:d9:c2:09:bb:96:36:f8:4c:a5:22: 2b:ac:90:8a:ff:a2:50:ae:04:dd:17:c2:a6:ea:9a: 4a:f1:50:ea:60:b6:be:c8:76:a4:48:12:21:42:ae: 27:cb:ca:33:37:6c:be:b4:6c:f0:4b:20:4a:3e:25: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2620:21:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30256 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:11:e5:f3:24:8f:9a:3f:f0:d4:df:e4:b2:f7:eb:2c:ee:5b: 55:42:c5:00:ec:33:bf:ad:ef:c9:88:b7:2b:2d:a6:9a:29:dc: d6:68:60:22:6b:e8:bc:2b:ce:f2:61:9c:1e:0a:50:4b:f8:de: 4c:3b:75:2f:75:ce:78:72:9e:d2:57:29:b6:96:05:1a:bd:7e: 99:9c:1e:55:d6:88:4f:bc:2e:12:8f:db:4e:88:7c:03:9c:00: 23:cf:fd:31:bd:23:be:7f:75:be:97:3b:4e:35:55:5e:3b:0f: e1:2b:00:f4:d6:3a:4a:e8:0e:40:6a:d4:87:a9:57:5a:14:be: 0d:56:79:65:ec:da:d3:24:4b:a9:f0:d2:07:43:76:d2:e0:00: 0b:a4:da:53:89:ae:77:59:ef:2d:c5:d2:ec:28:39:29:a5:03: 71:53:be:0b:1c:1f:b5:36:bb:24:e5:fd:ed:2d:50:e0:4a:49: a9:80:37:2d:eb:a2:ce:1f:46:ca:ae:ae:ce:52:37:da:4f:24: cf:a4:0f:42:8c:8a:7f:c8:2e:db:31:4c:ce:c7:1d:0e:4e:9b: 1a:41:18:16:57:d9:cb:e2:b7:fd:66:28:57:f6:c0:66:f8:70: 02:29:14:83:8f:4a:f2:74:f0:7b:2c:14:6f:75:a7:da:a6:ad: 78:6e:fd:cb -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEqNzmaUzjqHk6fGhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDcxODAwNDUzN1oXDTI3MTAyMTAwNDUzN1owLzEtMCsGA1UEAxMk YzI4YjdjMTMtMzAxYy00N2ZjLWIzOWItMjIwMWU3NjNjNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiQQLLfofgIQydjXYyC65nF5WYkHz3IZC2qF CXfdppEh7emFjvpCwbAs8WSKXakTq+A5GPUn8qh0nmeUd+p4+jZY55g3P/hgm0XU KPx1BPNv+Ankix6Jh2bBaKp8+q02wz9eV19TOUm6CigG6RYzesx1vSHGB1m2pXzO 73FqlfwNVjW+xc9VWcYAV80jNA1o3csY1/AJB3btF/5Q9nbw5i/t1v9rw714Lnqc OOyo13xwL4s18EDQNAIbvgBHROinCt5RESoSNtnCCbuWNvhMpSIrrJCK/6JQrgTd F8Km6ppK8VDqYLa+yHakSBIhQq4ny8ozN2y+tGzwSyBKPiXzXwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFOQARElq9ODCRyK5G+z4UMIre6yKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j MjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2M2M0ZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MyOGI3YzEzLTMwMWMtNDdmYy1i MzliLTIyMDFlNzYzYzRkZC9jMjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2 M2M0ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAhwAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICdjAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEABxHl8ySPmj/w1N/ksvfrLO5bVULFAOwzv63vyYi3Ky2m minc1mhgImvovCvO8mGcHgpQS/jeTDt1L3XOeHKe0lcptpYFGr1+mZweVdaIT7wu Eo/bToh8A5wAI8/9Mb0jvn91vpc7TjVVXjsP4SsA9NY6SugOQGrUh6lXWhS+DVZ5 Zeza0yRLqfDSB0N20uAAC6TaU4mud1nvLcXS7Cg5KaUDcVO+CxwftTa7JOX97S1Q 4EpJqYA3Leuizh9Gyq6uzlI32k8kz6QPQoyKf8gu2zFMzscdDk6bGkEYFlfZy+K3 /WYoV/bAZvhwAikUg49K8nTweywUb3Wn2qateG79yw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:46 2025 by rpki-client