$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer File: dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer (raw, json) Hash identifier: kOs9FZtdK7pKTZznAqn/Dl+b4qqulblsNHPllpO89tw= Subject key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849B2EBE01FDAE038354A1B3C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 15:02:58 +0000 Certificate not after: Tue 03 Aug 2027 15:02:58 +0000 Subordinate resources: IP: 2607:9bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:eb:e0:1f:da:e0:38:35:4a:1b:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 30 15:02:58 2025 GMT Not After : Aug 3 15:02:58 2027 GMT Subject: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:6f:4e:ed:83:10:1b:da:f2:8b:48:83:db: 11:b5:7d:cd:89:6f:42:0b:5f:b0:3e:27:0f:32:3c: 80:ba:49:b1:66:19:cc:75:66:c5:97:2b:5c:ff:d6: 42:37:34:06:ad:8e:9a:d3:e7:4d:20:9b:82:87:bc: 68:5d:57:27:f6:0f:d0:e8:1a:99:b4:cd:b0:f8:c6: 0a:72:0b:e7:4e:c3:61:22:77:f5:03:80:e8:ed:50: c3:9e:4f:16:e5:59:47:53:79:15:d8:6d:4c:8d:e9: d9:5b:f0:48:52:cc:b3:0f:69:ca:af:35:94:75:1c: 68:b0:87:b7:6f:65:91:25:33:ae:07:a8:84:89:a0: 6e:61:a7:9f:c4:3c:37:92:a2:f5:c6:30:29:a2:17: 5a:a0:d4:2e:5b:3f:4d:79:65:0e:18:cd:db:f0:cc: cf:7d:62:bf:de:b7:57:d6:91:88:5e:6c:38:f5:6a: ce:29:0a:f5:92:1b:ec:a9:fd:68:49:e4:93:0e:af: 9a:ad:3c:dc:c4:d0:5d:a4:34:17:00:4c:4c:d3:d3: 7e:1b:be:e8:1a:78:69:64:9e:bf:da:c0:37:6a:46: 44:c5:5a:22:47:09:85:80:63:f2:e1:ec:63:00:81: 09:48:ca:6e:f8:a8:48:21:4f:5e:04:5c:fc:73:91: c6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2607:9bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:49:72:62:79:86:0e:4c:b5:4b:e2:6b:34:78:78:34:31:b3: 9e:9c:ee:36:48:27:65:4d:4f:76:8e:e3:27:f2:93:07:8a:0c: e8:f5:78:ff:d7:d6:1d:57:41:b8:cb:fb:70:75:3e:6d:da:ac: ec:5c:c6:93:88:ae:8e:f6:7e:6f:f4:6f:02:49:e9:73:24:49: 73:8b:7e:73:10:84:a5:5b:6d:22:29:d9:9a:24:d2:4b:54:57: 8b:f2:5e:26:36:8f:ff:b0:b1:6f:48:5e:22:59:f3:1d:80:d0: 7c:26:36:d0:37:79:99:ca:88:af:4e:2a:50:91:71:87:62:42: 8a:a1:be:f8:7e:ac:a9:c9:8c:0b:fc:a0:04:75:57:87:38:13: fd:38:51:80:1b:ef:f8:64:5b:dd:15:d9:bf:05:38:79:14:cc: 61:e5:e4:3f:74:1e:d1:89:96:50:38:36:1e:2d:86:3c:e0:5e: 0f:9d:83:8e:3f:7c:1b:df:ca:b7:82:49:f9:4e:78:92:82:5d: 54:69:c1:4c:35:d0:6f:ef:6f:40:56:8c:ee:2c:9e:0c:9f:fb: 7b:48:e7:0a:c5:04:12:35:58:63:35:a3:a3:b3:0d:1e:2c:83: d6:96:62:11:0c:a7:ac:72:cc:24:4d:66:f1:cd:91:f9:c2:fe: c1:15:f1:0a -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEmy6+Af2uA4NUobPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQzMDE1MDI1OFoXDTI3MDgwMzE1MDI1OFowLzEtMCsGA1UEAxMk ZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcxMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo85vTu2DEBva8otIg9sRtX3NiW9CC1+wPicP MjyAukmxZhnMdWbFlytc/9ZCNzQGrY6a0+dNIJuCh7xoXVcn9g/Q6BqZtM2w+MYK cgvnTsNhInf1A4Do7VDDnk8W5VlHU3kV2G1MjenZW/BIUsyzD2nKrzWUdRxosIe3 b2WRJTOuB6iEiaBuYaefxDw3kqL1xjApohdaoNQuWz9NeWUOGM3b8MzPfWK/3rdX 1pGIXmw49WrOKQr1khvsqf1oSeSTDq+arTzcxNBdpDQXAExM09N+G77oGnhpZJ6/ 2sA3akZExVoiRwmFgGPy4exjAIEJSMpu+KhIIU9eBFz8c5HGQQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFK/8Oxx5eDE98/L+vk2kSyE6CF6lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k YmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2RiZGE4ZWEyLWExNjgtNGE4Yi1i MDFiLTIxYTQyMWU3MTMwZS9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFl NzEzMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB5vAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIZJcmJ5hg5MtUviazR4 eDQxs56c7jZIJ2VNT3aO4yfykweKDOj1eP/X1h1XQbjL+3B1Pm3arOxcxpOIro72 fm/0bwJJ6XMkSXOLfnMQhKVbbSIp2Zok0ktUV4vyXiY2j/+wsW9IXiJZ8x2A0Hwm NtA3eZnKiK9OKlCRcYdiQoqhvvh+rKnJjAv8oAR1V4c4E/04UYAb7/hkW90V2b8F OHkUzGHl5D90HtGJllA4Nh4thjzgXg+dg44/fBvfyreCSflOeJKCXVRpwUw10G/v b0BWjO4sngyf+3tI5wrFBBI1WGM1o6OzDR4sg9aWYhEMp6xyzCRNZvHNkfnC/sEV 8Qo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:58:10 2025 by rpki-client