$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3d243244-3c2a-454f-bf9a-3f4067884235.cer File: 3d243244-3c2a-454f-bf9a-3f4067884235.cer (raw, json) Hash identifier: /tMeacOeAzhEhOkYFD1P5vevgkYNlgLq62sSBtp4t5Q= Subject key identifier: 56:3F:9C:F3:6D:3E:9E:B7:38:74:F4:37:76:7C:D5:31:E4:9C:0C:78 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584990905AE054903324A062CCB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3d243244-3c2a-454f-bf9a-3f4067884235/3d243244-3c2a-454f-bf9a-3f4067884235.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3d243244-3c2a-454f-bf9a-3f4067884235/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 07:41:05 +0000 Certificate not after: Thu 22 Jul 2027 07:41:05 +0000 Subordinate resources: AS: 22599 IP: 2602:f7b6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:90:90:5a:e0:54:90:33:24:a0:62:cc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 18 07:41:05 2025 GMT Not After : Jul 22 07:41:05 2027 GMT Subject: CN=3d243244-3c2a-454f-bf9a-3f4067884235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:e6:6e:29:c8:77:03:fb:64:ad:b4:5e:96: db:75:e3:e4:43:79:4a:26:bf:ec:e9:20:36:eb:95: bf:f4:71:23:4f:3d:0d:ae:47:26:54:c4:bf:fb:9d: c4:e6:8b:77:9f:03:37:d7:49:b0:5f:b3:62:33:dc: 30:ed:0f:7c:fc:5d:46:06:2c:2d:ba:b1:4b:58:95: 49:53:86:3e:96:f9:43:20:89:4b:17:61:e3:02:01: a7:c2:bb:d6:7d:a4:d6:8c:f9:d9:4e:29:4d:f2:5c: e8:1b:ee:27:27:fa:38:4b:96:9c:13:9c:c3:f7:ca: 16:68:e5:21:a0:db:e9:b7:cf:31:35:c8:e6:0c:ad: 58:17:37:90:26:3c:38:9f:82:5c:58:8e:14:e5:53: 47:74:0a:b6:e9:b5:68:c1:15:8b:76:31:27:0a:e1: a9:c9:07:b8:de:86:ff:53:26:0f:ce:64:ee:0a:29: 7d:31:5d:90:21:c1:62:cc:57:8b:b7:bf:99:95:6a: 4c:c6:a6:61:d2:75:a3:82:9f:00:01:6c:7f:0b:64: f4:1a:cf:f6:41:ff:21:c0:94:ea:e6:9d:50:28:51: 57:0b:23:a0:79:84:c6:8d:51:82:5c:d7:de:98:b6: 23:f4:6c:f1:1f:b4:0c:5c:28:88:a8:3b:56:28:b5: 19:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3F:9C:F3:6D:3E:9E:B7:38:74:F4:37:76:7C:D5:31:E4:9C:0C:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3d243244-3c2a-454f-bf9a-3f4067884235/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3d243244-3c2a-454f-bf9a-3f4067884235/3d243244-3c2a-454f-bf9a-3f4067884235.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7b6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22599 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f8:0d:60:bc:59:16:61:10:16:79:f9:8d:0c:17:f9:ec:c6: a6:1a:53:1b:06:91:cd:bb:0d:d8:9f:1b:19:03:b1:d9:78:c6: 41:b1:d1:7f:78:63:4e:68:05:d6:b0:89:11:38:b7:e2:f2:b8: 05:7b:e1:5f:0b:45:a0:6b:6d:df:ef:31:06:3b:48:75:c7:ad: fc:ad:f8:56:20:3c:ab:58:2d:64:c9:2b:81:ef:24:48:73:c2: 84:9b:f7:cd:f6:a6:a4:f4:46:fa:fb:d6:fb:41:f2:fb:ce:26: 6e:1f:0f:77:af:64:22:80:43:d5:ab:4d:c9:83:6e:50:0e:ee: 73:7a:6c:33:74:fb:fb:8f:dd:f4:34:aa:64:d3:c0:93:35:e2: 59:10:35:b5:95:9f:4e:59:63:e2:a8:5d:07:64:3c:90:45:94: 54:8a:e7:b6:93:48:1e:b7:66:7f:0e:cb:40:4e:33:34:53:67: 68:8d:8c:43:32:90:1e:4f:1b:ba:c4:93:cf:d9:71:30:43:f8: 75:02:b4:a4:1e:20:6b:ad:bc:8f:c4:86:29:47:68:ea:b9:17: f5:c3:b2:94:fe:52:7b:08:86:fe:c5:41:39:66:82:2f:93:b6: f4:ae:48:d3:58:69:51:0f:8a:80:6d:c8:22:41:b3:fd:72:71: 08:c9:f2:6d -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEmQkFrgVJAzJKBizLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxODA3NDEwNVoXDTI3MDcyMjA3NDEwNVowLzEtMCsGA1UEAxMk M2QyNDMyNDQtM2MyYS00NTRmLWJmOWEtM2Y0MDY3ODg0MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXPmbinIdwP7ZK20XpbbdePkQ3lKJr/s6SA2 65W/9HEjTz0NrkcmVMS/+53E5ot3nwM310mwX7NiM9ww7Q98/F1GBiwturFLWJVJ U4Y+lvlDIIlLF2HjAgGnwrvWfaTWjPnZTilN8lzoG+4nJ/o4S5acE5zD98oWaOUh oNvpt88xNcjmDK1YFzeQJjw4n4JcWI4U5VNHdAq26bVowRWLdjEnCuGpyQe43ob/ UyYPzmTuCil9MV2QIcFizFeLt7+ZlWpMxqZh0nWjgp8AAWx/C2T0Gs/2Qf8hwJTq 5p1QKFFXCyOgeYTGjVGCXNfemLYj9GzxH7QMXCiIqDtWKLUZPQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFFY/nPNtPp63OHT0N3Z81THknAx4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z ZDI0MzI0NC0zYzJhLTQ1NGYtYmY5YS0zZjQwNjc4ODQyMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNkMjQzMjQ0LTNjMmEtNDU0Zi1i ZjlhLTNmNDA2Nzg4NDIzNS8zZDI0MzI0NC0zYzJhLTQ1NGYtYmY5YS0zZjQwNjc4 ODQyMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAve2ADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJYRzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBE+A1gvFkWYRAWefmNDBf57MamGlMbBpHNuw3YnxsZA7HZ eMZBsdF/eGNOaAXWsIkROLfi8rgFe+FfC0Wga23f7zEGO0h1x638rfhWIDyrWC1k ySuB7yRIc8KEm/fN9qak9Eb6+9b7QfL7ziZuHw93r2QigEPVq03Jg25QDu5zemwz dPv7j930NKpk08CTNeJZEDW1lZ9OWWPiqF0HZDyQRZRUiue2k0get2Z/DstATjM0 U2dojYxDMpAeTxu6xJPP2XEwQ/h1ArSkHiBrrbyPxIYpR2jquRf1w7KU/lJ7CIb+ xUE5ZoIvk7b0rkjTWGlRD4qAbcgiQbP9cnEIyfJt -----END CERTIFICATE-----Generated at Fri May 2 01:50:31 2025 by rpki-client