$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926.cer File: ae71e986-bf08-451a-bb35-0be370d3b926.cer (raw, json) Hash identifier: OAACNIF/cliscLcc6PE/9CMORzONNCfOx7cFUaK1ya4= Subject key identifier: 80:75:E4:CB:7B:4A:19:FD:BE:65:DA:D6:71:EC:4B:65:E1:95:8B:A9 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849816F59FF5173E529077A1544 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/ae71e986-bf08-451a-bb35-0be370d3b926.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 12 Apr 2025 21:37:28 +0000 Certificate not after: Fri 16 Jul 2027 21:37:28 +0000 Subordinate resources: AS: 401420 IP: 2602:f7bf::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:6f:59:ff:51:73:e5:29:07:7a:15:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 12 21:37:28 2025 GMT Not After : Jul 16 21:37:28 2027 GMT Subject: CN=ae71e986-bf08-451a-bb35-0be370d3b926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:a9:e8:ab:74:de:87:f9:62:85:48:15:79: 62:9e:b5:2b:4d:fc:1e:c3:20:ad:9c:47:99:b5:2a: d4:9b:d7:6b:c6:60:35:14:08:5e:09:5f:b5:1a:a0: 9c:fe:ce:b2:80:9e:9f:8a:93:5c:2c:98:b2:60:6c: ca:69:80:b3:6a:a2:b7:67:2a:e8:a5:7d:9f:83:78: 3c:45:4e:ba:ce:20:d8:e0:bd:a6:ef:02:1f:7b:a4: 8d:56:c3:99:d9:6c:97:e8:ca:51:0c:98:c6:fe:cc: 58:54:17:3d:8b:5a:89:e8:be:b0:23:1b:2a:0e:18: 92:03:44:34:fa:27:e0:ea:0f:50:d8:67:f1:3a:23: 49:b6:4e:f3:75:ef:99:01:bb:2f:e7:ec:f5:04:4b: 2a:25:7f:88:a9:af:69:07:05:c4:c4:85:9a:3e:58: b9:4a:f1:53:52:8e:cd:7e:8c:c1:3d:a5:d1:25:ff: 9f:dd:06:7c:3f:10:fa:f1:89:ec:85:46:f5:03:0e: 9e:1c:21:47:a5:bf:a8:c2:a0:40:be:33:b3:4a:ae: 79:79:73:7d:3d:0a:81:1e:59:e3:99:90:1a:e8:06: bd:d7:6d:67:66:a7:1b:d2:a5:cb:77:f1:8f:23:31: 71:34:6c:ff:9f:78:af:5c:7b:fc:6a:ad:d7:95:a6: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:75:E4:CB:7B:4A:19:FD:BE:65:DA:D6:71:EC:4B:65:E1:95:8B:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae71e986-bf08-451a-bb35-0be370d3b926/ae71e986-bf08-451a-bb35-0be370d3b926.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7bf::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401420 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:61:0e:45:d6:e7:5c:fa:5b:03:a5:63:34:d0:35:5b:ed:23: 35:62:d4:00:57:0e:d1:7b:b9:19:46:29:c9:62:18:94:f2:b9: 32:b2:08:74:69:c8:ad:71:5c:50:5f:d9:d8:83:ee:e4:f4:50: 88:7b:6f:7e:3b:ba:be:fc:45:f3:57:6b:42:80:d2:16:1f:26: 55:52:93:14:9a:c3:32:c2:61:6b:5d:d4:48:d1:fe:4d:75:76: 3f:31:2b:75:65:29:a5:0c:0c:39:80:cd:dc:47:06:3d:e6:e3: 89:48:c1:f6:4d:21:34:67:ab:07:63:aa:cb:18:ca:ee:a5:ba: e0:14:a9:8f:34:dc:58:ad:3d:49:22:27:de:ff:35:42:03:79: 38:7a:a7:57:8e:6f:80:b7:a7:8c:83:f9:92:c5:1a:dc:9d:e2: 14:22:ef:87:94:2d:e6:b2:59:91:f9:9b:62:72:ad:31:1d:df: e0:21:a7:b9:b4:52:6d:30:cd:eb:c9:00:ce:0a:7c:00:17:5d: 6d:24:f6:0f:e6:f4:29:48:c6:19:45:39:59:8e:ed:c7:e3:34: c7:e1:95:3e:ac:ce:df:65:ae:80:61:70:fa:7f:4f:35:4f:66: fa:a9:b9:81:21:b7:b5:fb:53:a3:ab:b1:cb:c3:68:d7:33:4b: 18:ed:c2:7d -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEmBb1n/UXPlKQd6FUQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxMjIxMzcyOFoXDTI3MDcxNjIxMzcyOFowLzEtMCsGA1UEAxMk YWU3MWU5ODYtYmYwOC00NTFhLWJiMzUtMGJlMzcwZDNiOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm++p6Kt03of5YoVIFXlinrUrTfwewyCtnEeZ tSrUm9drxmA1FAheCV+1GqCc/s6ygJ6fipNcLJiyYGzKaYCzaqK3ZyropX2fg3g8 RU66ziDY4L2m7wIfe6SNVsOZ2WyX6MpRDJjG/sxYVBc9i1qJ6L6wIxsqDhiSA0Q0 +ifg6g9Q2GfxOiNJtk7zde+ZAbsv5+z1BEsqJX+Iqa9pBwXExIWaPli5SvFTUo7N fozBPaXRJf+f3QZ8PxD68YnshUb1Aw6eHCFHpb+owqBAvjOzSq55eXN9PQqBHlnj mZAa6Aa9121nZqcb0qXLd/GPIzFxNGz/n3ivXHv8aq3XlaZ3LQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFIB15Mt7Shn9vmXa1nHsS2XhlYupMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h ZTcxZTk4Ni1iZjA4LTQ1MWEtYmIzNS0wYmUzNzBkM2I5MjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2FlNzFlOTg2LWJmMDgtNDUxYS1i YjM1LTBiZTM3MGQzYjkyNi9hZTcxZTk4Ni1iZjA4LTQ1MWEtYmIzNS0wYmUzNzBk M2I5MjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAve/ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIAwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACmEORdbnXPpbA6VjNNA1W+0jNWLUAFcO0Xu5GUYpyWIY lPK5MrIIdGnIrXFcUF/Z2IPu5PRQiHtvfju6vvxF81drQoDSFh8mVVKTFJrDMsJh a13USNH+TXV2PzErdWUppQwMOYDN3EcGPebjiUjB9k0hNGerB2OqyxjK7qW64BSp jzTcWK09SSIn3v81QgN5OHqnV45vgLenjIP5ksUa3J3iFCLvh5Qt5rJZkfmbYnKt MR3f4CGnubRSbTDN68kAzgp8ABddbST2D+b0KUjGGUU5WY7tx+M0x+GVPqzO32Wu gGFw+n9PNU9m+qm5gSG3tftTo6uxy8No1zNLGO3CfQ== -----END CERTIFICATE-----Generated at Sun Apr 27 04:27:00 2025 by rpki-client