$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3.cer File: 265e5c58-c30c-41c5-b814-554320a3f4e3.cer (raw, json) Hash identifier: HShGjHeLR+u00cJWU/wLj3baezT1Aa5fpfCTTSCwIAk= Subject key identifier: 5A:A8:78:C2:15:2E:F2:94:29:1F:42:21:32:DC:78:28:6E:C5:41:A1 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849A173AC4B26386D77E20012C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/265e5c58-c30c-41c5-b814-554320a3f4e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Apr 2025 08:52:02 +0000 Certificate not after: Wed 28 Jul 2027 08:52:02 +0000 Subordinate resources: IP: 2602:f674::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:73:ac:4b:26:38:6d:77:e2:00:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 24 08:52:02 2025 GMT Not After : Jul 28 08:52:02 2027 GMT Subject: CN=265e5c58-c30c-41c5-b814-554320a3f4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9c:34:9b:39:95:19:d0:1e:60:5b:b6:03:71: 8b:0a:06:54:71:68:41:aa:73:ed:d9:c9:e8:e0:ed: 4e:09:c8:07:66:ce:35:01:e4:23:f7:cf:1d:c5:c3: 6e:ee:38:74:12:a8:93:93:97:09:88:81:e5:d8:61: da:af:22:0d:9b:8c:de:8a:73:06:d0:d0:b8:a3:79: 09:d3:5b:d7:25:d5:26:f1:94:84:f0:34:16:50:18: 2a:c8:22:04:94:cc:51:b6:2d:9d:17:16:a9:5e:7b: 91:26:44:d2:f4:4a:ba:55:b6:f4:20:84:4e:97:c0: e4:c4:74:a2:06:bd:7e:6a:a6:86:f7:93:6c:d4:90: db:f2:d0:12:2f:9b:42:2f:50:01:e9:ab:4b:0e:50: 82:94:a0:b2:35:5c:ea:e9:3c:22:92:28:24:03:41: 91:85:b6:a2:1c:cc:1f:6e:7d:18:e0:e8:f3:b5:56: 65:7b:39:bc:92:c4:0b:d0:46:26:1b:a0:44:cc:8f: 88:4b:61:15:8f:53:88:eb:f1:06:08:8b:dc:3c:91: 0b:60:7c:0d:72:c1:87:92:5d:aa:b7:24:04:fa:5b: 64:be:a8:a2:d9:49:38:b5:8a:d1:fe:da:a9:05:28: 54:d9:42:0b:4f:88:d0:9a:72:38:4f:9d:15:ab:dd: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:78:C2:15:2E:F2:94:29:1F:42:21:32:DC:78:28:6E:C5:41:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/265e5c58-c30c-41c5-b814-554320a3f4e3/265e5c58-c30c-41c5-b814-554320a3f4e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f674::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d4:de:09:23:56:37:88:04:95:0e:8f:44:ff:9b:e7:10:f4: 57:27:3b:66:61:7d:b3:e6:7c:13:53:b1:bb:f1:63:45:a6:96: a3:9f:eb:51:96:8d:b5:f7:ee:c2:1a:b6:71:50:e5:f8:89:0a: ef:4f:c0:46:f4:7c:2b:67:75:a9:6c:31:d4:8e:af:d6:f5:0f: 0b:71:96:bb:4f:b0:05:c1:8e:c4:b5:7e:d2:30:ed:a5:7a:7c: 7e:68:f5:0c:13:09:27:c2:58:5b:c0:eb:88:d6:b7:a6:3a:91: 11:96:9a:34:d2:95:5c:f8:f6:25:c1:3d:78:ad:32:a7:b6:55: 3a:94:6d:f0:af:b0:e5:a3:0e:26:96:8e:72:c7:89:97:c0:8d: 93:cc:a5:6b:c2:84:d8:92:d6:79:ff:ae:4a:91:ef:41:90:5c: 23:07:9d:2a:bd:86:11:6b:e5:6c:98:d7:97:32:ba:b2:17:dd: fe:d7:9d:e9:a2:6e:77:02:99:5e:12:08:01:e4:48:3a:13:67: 00:e9:e2:0a:bd:19:a4:55:b2:3d:6f:da:e6:7b:75:2b:91:6a: 30:01:2c:3d:ab:49:88:51:12:86:cc:5d:ab:89:f6:8e:c7:97: 4f:fa:42:49:72:70:ac:b0:ad:b1:81:69:c9:73:d3:60:3e:fb: 65:6f:87:60 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEmhc6xLJjhtd+IAEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyNDA4NTIwMloXDTI3MDcyODA4NTIwMlowLzEtMCsGA1UEAxMk MjY1ZTVjNTgtYzMwYy00MWM1LWI4MTQtNTU0MzIwYTNmNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipw0mzmVGdAeYFu2A3GLCgZUcWhBqnPt2cno 4O1OCcgHZs41AeQj988dxcNu7jh0EqiTk5cJiIHl2GHaryINm4zeinMG0NC4o3kJ 01vXJdUm8ZSE8DQWUBgqyCIElMxRti2dFxapXnuRJkTS9Eq6Vbb0IIROl8DkxHSi Br1+aqaG95Ns1JDb8tASL5tCL1AB6atLDlCClKCyNVzq6TwikigkA0GRhbaiHMwf bn0Y4OjztVZlezm8ksQL0EYmG6BEzI+IS2EVj1OI6/EGCIvcPJELYHwNcsGHkl2q tyQE+ltkvqii2Uk4tYrR/tqpBShU2UILT4jQmnI4T50Vq90eNQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFFqoeMIVLvKUKR9CITLceChuxUGhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y NjVlNWM1OC1jMzBjLTQxYzUtYjgxNC01NTQzMjBhM2Y0ZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzI2NWU1YzU4LWMzMGMtNDFjNS1i ODE0LTU1NDMyMGEzZjRlMy8yNjVlNWM1OC1jMzBjLTQxYzUtYjgxNC01NTQzMjBh M2Y0ZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvZ0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB21N4JI1Y3iASVDo9E /5vnEPRXJztmYX2z5nwTU7G78WNFppajn+tRlo219+7CGrZxUOX4iQrvT8BG9Hwr Z3WpbDHUjq/W9Q8LcZa7T7AFwY7EtX7SMO2lenx+aPUMEwknwlhbwOuI1remOpER lpo00pVc+PYlwT14rTKntlU6lG3wr7Dlow4mlo5yx4mXwI2TzKVrwoTYktZ5/65K ke9BkFwjB50qvYYRa+VsmNeXMrqyF93+153pom53ApleEggB5Eg6E2cA6eIKvRmk VbI9b9rme3UrkWowASw9q0mIURKGzF2rifaOx5dP+kJJcnCssK2xgWnJc9NgPvtl b4dg -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:02 2025 by rpki-client