$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e198b6d-f680-40b6-93df-0840e254cd28.cer File: 6e198b6d-f680-40b6-93df-0840e254cd28.cer (raw, json) Hash identifier: Tgnub7CIqwNSywOZFJx6zngIXhSbBl+ej46+qO4TgeY= Subject key identifier: 08:0F:52:3A:FE:DA:78:2A:8A:B5:FB:0B:A4:CD:70:33:46:E7:F1:E5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A3A6D7DB95F8F2EC14BFBF120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e198b6d-f680-40b6-93df-0840e254cd28/6e198b6d-f680-40b6-93df-0840e254cd28.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e198b6d-f680-40b6-93df-0840e254cd28/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Jun 2025 03:58:15 +0000 Certificate not after: Tue 21 Sep 2027 03:58:15 +0000 Subordinate resources: AS: 11808 IP: 2602:f70b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:6d:7d:b9:5f:8f:2e:c1:4b:fb:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 18 03:58:15 2025 GMT Not After : Sep 21 03:58:15 2027 GMT Subject: CN=6e198b6d-f680-40b6-93df-0840e254cd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:dc:ba:a9:fa:92:a9:b9:81:67:5d:08:b7: 58:6a:a6:cd:5a:7a:66:ef:c8:bf:01:86:ef:b7:5f: a5:08:19:eb:43:ed:e6:98:77:9d:84:45:71:62:e3: 49:41:d4:2f:20:4e:36:75:d1:5a:48:0b:0a:f6:1f: 5c:b2:10:28:9f:55:43:67:1c:f5:91:87:6c:39:90: d2:a9:64:9f:2c:d9:64:1d:07:d7:24:1f:db:95:fa: c0:f4:8c:60:5c:78:d5:2c:a5:2d:ab:83:38:4d:7e: e0:23:fa:2e:b7:af:ad:32:d6:11:a2:96:24:df:7d: cf:1d:9a:a8:76:4a:e6:80:44:99:a8:a7:d9:f8:02: 3e:0c:ff:64:c4:1e:5e:ca:61:e8:ae:e3:00:18:9e: b6:ab:33:3a:b2:cc:c8:62:69:cf:41:41:46:71:6a: 88:b0:25:ef:2c:69:3d:45:1d:49:d7:76:eb:32:12: 5b:d1:df:89:17:31:73:e9:8c:5d:97:d9:13:a7:fd: ae:80:e5:44:78:42:cf:0d:28:62:a4:3a:bd:ed:24: 1a:13:d4:d5:99:64:49:ca:c9:d7:a2:ea:9d:27:2d: 75:a3:4d:1b:67:84:bb:18:1d:94:a8:4d:48:20:11: 82:40:1f:b4:a7:8b:26:32:8d:31:57:60:33:95:a6: de:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0F:52:3A:FE:DA:78:2A:8A:B5:FB:0B:A4:CD:70:33:46:E7:F1:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e198b6d-f680-40b6-93df-0840e254cd28/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6e198b6d-f680-40b6-93df-0840e254cd28/6e198b6d-f680-40b6-93df-0840e254cd28.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f70b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11808 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:34:b2:00:75:3c:9b:e8:eb:d0:81:61:3c:1a:20:78:ca:e3: 56:3c:17:5d:c8:d4:ff:22:e7:3b:41:b0:42:c3:d5:55:1b:27: 1f:f8:2d:36:66:2a:63:7f:be:54:04:cd:d3:73:e5:85:7c:79: ba:88:43:93:8e:9b:fe:3f:70:91:c1:ed:f7:61:94:a1:7d:f2: dd:2a:ea:29:36:27:67:ea:99:36:8b:48:62:ea:d9:bd:4d:81: ba:3f:52:11:45:2d:81:f2:a3:27:a4:68:2f:57:d4:ff:21:04: be:fe:ea:1c:bf:55:e7:97:8c:00:78:0b:9f:f2:db:cc:67:b7: f5:77:e8:06:d1:e7:70:95:01:39:71:d4:1a:fd:a2:75:63:8e: 60:3e:80:fe:c0:1e:0c:25:bd:da:d6:95:4f:01:4a:29:81:d1: 4b:ac:a6:c6:bd:74:9f:d9:bf:a2:2e:ad:54:3d:45:ab:db:3a: e0:f9:d7:de:a0:58:e9:7a:01:9d:52:b5:5e:c3:10:af:d8:66: 3f:9f:27:63:92:7e:0b:de:88:50:99:ef:c8:10:e6:49:84:4d: bc:0f:e0:ef:a6:f3:97:8a:76:f1:74:7d:fa:2b:e1:be:c7:89: e9:dd:e7:fd:61:b6:83:18:4a:84:ea:84:17:ea:bd:82:06:3b: 77:92:e2:5e -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEo6bX25X48uwUv78SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYxODAzNTgxNVoXDTI3MDkyMTAzNTgxNVowLzEtMCsGA1UEAxMk NmUxOThiNmQtZjY4MC00MGI2LTkzZGYtMDg0MGUyNTRjZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3THcuqn6kqm5gWddCLdYaqbNWnpm78i/AYbv t1+lCBnrQ+3mmHedhEVxYuNJQdQvIE42ddFaSAsK9h9cshAon1VDZxz1kYdsOZDS qWSfLNlkHQfXJB/blfrA9IxgXHjVLKUtq4M4TX7gI/out6+tMtYRopYk333PHZqo dkrmgESZqKfZ+AI+DP9kxB5eymHoruMAGJ62qzM6sszIYmnPQUFGcWqIsCXvLGk9 RR1J13brMhJb0d+JFzFz6Yxdl9kTp/2ugOVEeELPDShipDq97SQaE9TVmWRJysnX ouqdJy11o00bZ4S7GB2UqE1IIBGCQB+0p4smMo0xV2AzlabezQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFAgPUjr+2ngqirX7C6TNcDNG5/HlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 ZTE5OGI2ZC1mNjgwLTQwYjYtOTNkZi0wODQwZTI1NGNkMjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZlMTk4YjZkLWY2ODAtNDBiNi05 M2RmLTA4NDBlMjU0Y2QyOC82ZTE5OGI2ZC1mNjgwLTQwYjYtOTNkZi0wODQwZTI1 NGNkMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvcLADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIuIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAwNLIAdTyb6OvQgWE8GiB4yuNWPBddyNT/Iuc7QbBCw9VV Gycf+C02Zipjf75UBM3Tc+WFfHm6iEOTjpv+P3CRwe33YZShffLdKuopNidn6pk2 i0hi6tm9TYG6P1IRRS2B8qMnpGgvV9T/IQS+/uocv1Xnl4wAeAuf8tvMZ7f1d+gG 0edwlQE5cdQa/aJ1Y45gPoD+wB4MJb3a1pVPAUopgdFLrKbGvXSf2b+iLq1UPUWr 2zrg+dfeoFjpegGdUrVewxCv2GY/nydjkn4L3ohQme/IEOZJhE28D+DvpvOXinbx dH36K+G+x4np3ef9YbaDGEqE6oQX6r2CBjt3kuJe -----END CERTIFICATE-----Generated at Wed Jun 18 23:11:06 2025 by rpki-client