$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer File: badf1586-901d-41a7-b0f3-521998d53931.cer (raw, json) Hash identifier: /az1tir2LJJ3XrI9bZSC94QBeUqfgs9jwIAJM2cvx10= Subject key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858498908DF5E900E7E7A5AAB4F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Apr 2025 14:57:27 +0000 Certificate not after: Sun 18 Jul 2027 23:24:20 +0000 Subordinate resources: AS: 401661 IP: 2604:be0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:08:df:5e:90:0e:7e:7a:5a:ab:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 15 14:57:27 2025 GMT Not After : Jul 18 23:24:20 2027 GMT Subject: CN=badf1586-901d-41a7-b0f3-521998d53931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5c:6a:ad:ea:40:55:2b:a8:ca:67:6e:d7:e4: 3a:e3:7c:4d:b4:4f:2a:3d:ee:69:86:fb:7d:b8:b1: a3:cf:d3:e7:b9:ee:b5:1e:32:40:b1:1d:c6:5e:a6: 07:8c:96:4b:0c:69:b9:6e:28:a5:0c:d4:96:a0:aa: 4e:3a:74:f3:bd:ca:d3:b0:88:27:14:1b:1f:8b:09: b4:8f:4b:7d:45:63:17:16:1b:02:46:4f:44:ec:b4: 90:31:f0:03:61:55:d4:19:5f:e6:1a:1b:be:af:31: f0:21:6e:ea:c3:a2:49:fc:26:73:f4:6b:4d:9e:e1: 5e:6a:7a:16:30:31:3b:9c:81:b5:a3:ac:ea:c7:39: e9:2e:26:29:86:23:66:1e:2e:06:cd:ef:e7:55:d9: d9:4a:16:1f:ce:35:8d:c8:b7:3d:92:a7:f3:11:c5: 83:87:44:05:83:07:3a:2d:3d:d4:d9:c6:39:03:32: 91:b8:5a:2e:bc:5b:ee:5d:14:0b:ff:70:56:ff:3b: a2:cc:bc:13:27:2c:99:94:64:35:8f:11:1c:a7:37: e9:e2:e2:21:84:ef:5e:e9:dc:9c:b6:07:e4:a7:6e: 23:27:d2:4a:b1:d0:56:be:95:00:79:ed:69:e3:56: 6d:76:77:dd:7e:90:1a:d2:a5:12:90:69:a5:e9:62: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2604:be0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401661 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:bd:87:6b:8c:4d:13:32:60:ff:40:7d:89:c5:ff:d2:0f:e3: ec:8d:5d:0a:df:2e:d7:8e:bf:5c:cd:ee:00:6b:c2:fd:b9:c5: 80:5a:3c:f9:2e:7b:30:98:6b:56:5c:61:db:92:49:92:2f:1f: fe:f3:cc:4c:eb:99:aa:8c:4b:b9:53:83:4b:82:12:3b:bf:ad: 57:fc:52:42:98:ce:94:bf:82:0d:79:d5:70:64:fc:95:48:fb: 7a:a4:ee:8e:58:1d:5e:9e:81:bd:98:69:12:ea:75:92:36:03: 6f:ee:ad:82:af:76:b8:88:64:90:9f:84:52:d0:16:c3:1e:b9: 95:6b:90:d9:61:0f:83:c7:20:59:ac:12:06:ab:20:22:e3:b2: 0f:4c:fb:89:10:71:3c:9b:ae:86:18:43:34:be:26:72:af:06: 3b:19:39:82:b3:fb:9d:d1:54:65:c5:29:24:6a:45:8a:6e:ce: fa:18:c0:14:c7:91:ee:ce:fc:cb:18:3e:61:14:1e:be:6d:a7: d9:af:de:11:96:be:51:68:ac:82:b2:30:09:65:39:c8:35:b6: 37:a5:1d:bd:89:4c:b2:bf:9b:0b:6f:d9:a9:41:a5:37:c5:b7: 09:f6:2f:a8:1e:6e:8f:02:e2:ec:bd:80:ba:ba:2b:98:0d:e8: 45:4b:77:ca -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEmJCN9ekA5+elqrTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNTE0NTcyN1oXDTI3MDcxODIzMjQyMFowLzEtMCsGA1UEAxMk YmFkZjE1ODYtOTAxZC00MWE3LWIwZjMtNTIxOTk4ZDUzOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFxqrepAVSuoymdu1+Q643xNtE8qPe5phvt9 uLGjz9Pnue61HjJAsR3GXqYHjJZLDGm5biilDNSWoKpOOnTzvcrTsIgnFBsfiwm0 j0t9RWMXFhsCRk9E7LSQMfADYVXUGV/mGhu+rzHwIW7qw6JJ/CZz9GtNnuFeanoW MDE7nIG1o6zqxznpLiYphiNmHi4Gze/nVdnZShYfzjWNyLc9kqfzEcWDh0QFgwc6 LT3U2cY5AzKRuFouvFvuXRQL/3BW/zuizLwTJyyZlGQ1jxEcpzfp4uIhhO9e6dyc tgfkp24jJ9JKsdBWvpUAee1p41ZtdnfdfpAa0qUSkGml6WKcQwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFBfdvtUbJ5FWsEjHfj0O2U/6N6ueMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i YWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThkNTM5MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2JhZGYxNTg2LTkwMWQtNDFhNy1i MGYzLTUyMTk5OGQ1MzkzMS9iYWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThk NTM5MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBAvgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYg/TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA6vYdrjE0TMmD/QH2Jxf/SD+PsjV0K3y7Xjr9cze4Aa8L9 ucWAWjz5LnswmGtWXGHbkkmSLx/+88xM65mqjEu5U4NLghI7v61X/FJCmM6Uv4IN edVwZPyVSPt6pO6OWB1enoG9mGkS6nWSNgNv7q2Cr3a4iGSQn4RS0BbDHrmVa5DZ YQ+DxyBZrBIGqyAi47IPTPuJEHE8m66GGEM0viZyrwY7GTmCs/ud0VRlxSkkakWK bs76GMAUx5HuzvzLGD5hFB6+bafZr94Rlr5RaKyCsjAJZTnINbY3pR29iUyyv5sL b9mpQaU3xbcJ9i+oHm6PAuLsvYC6uiuYDehFS3fK -----END CERTIFICATE-----Generated at Sat Apr 26 23:09:01 2025 by rpki-client