$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer File: f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer (raw, json) Hash identifier: 16G+fD5LpD0yA6AUZgYRFMQwcgBQXiaisFgIJxhRSO4= Subject key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849DF91193A95BD7B72513DEF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 May 2025 14:51:27 +0000 Certificate not after: Thu 12 Aug 2027 06:42:19 +0000 Subordinate resources: AS: 401185 AS: 401721 IP: 2602:f655::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:91:19:3a:95:bd:7b:72:51:3d:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 16 14:51:27 2025 GMT Not After : Aug 12 06:42:19 2027 GMT Subject: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1a:85:65:be:73:14:eb:3d:41:fc:c4:0e:08: 37:04:c2:b2:12:a5:d3:a9:89:11:4c:a7:a9:69:b3: b8:33:2e:16:5f:e1:92:0d:1a:69:c1:ef:c0:9d:b9: 97:2d:1a:a6:ae:39:f7:81:62:9b:57:e0:22:01:01: e4:38:b0:5e:bb:b0:9a:c6:eb:8f:9d:5f:13:8c:89: 58:84:bc:13:22:dd:db:37:cb:e3:fb:a7:3b:7d:48: 0c:53:ba:10:68:06:32:92:7e:61:1c:91:10:be:78: d8:c6:41:5d:c2:47:d2:0f:75:f0:f0:ff:7c:dc:13: 49:a8:e6:0c:60:da:71:76:96:6a:b1:d8:36:04:fd: 7f:03:78:72:67:63:f0:bb:e8:f9:3e:07:39:8f:60: 3c:7d:45:8c:5d:b5:11:df:e3:97:cd:ec:aa:4d:b6: da:c9:5e:93:87:4a:4f:ca:d9:a1:b7:98:99:eb:60: 36:0c:c2:10:82:d0:43:3f:ce:fa:9a:66:1c:a6:2e: f6:ef:1f:fe:08:0c:93:1d:49:db:17:ce:fb:c5:63: e5:e3:af:f9:a7:dd:74:e4:d9:6d:66:17:33:51:8f: e5:d3:6a:51:51:81:dc:16:0d:bf:d4:97:d0:9c:64: 47:96:b6:42:25:25:4c:e5:25:66:b2:03:b3:b0:ce: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f655::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401185 401721 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ad:14:5e:18:e0:49:33:09:a1:3e:24:38:68:c2:f2:d9:d0: 5b:6c:c7:b8:79:e6:81:3b:44:0e:6a:6f:6a:1e:17:9b:c2:74: af:45:7b:47:a0:1f:3d:fd:95:d3:e7:a4:a2:e2:05:c4:71:1b: 22:9e:8f:1d:06:97:e0:9a:70:a0:cb:2d:33:92:1a:5f:37:7b: b6:66:a3:02:29:ce:c4:52:61:61:38:1c:1f:a3:be:0d:01:c9: f9:ab:38:b1:14:36:77:f0:3b:30:21:bf:49:ca:c6:21:fc:95: 7b:b4:c2:68:ec:46:bf:5b:70:73:5e:d8:3a:7d:45:c7:a0:be: 9d:4d:4e:6a:da:2f:16:e6:90:df:9d:9a:4e:ae:1b:05:85:d3: 99:1a:11:65:8a:7d:95:75:c3:97:5d:1b:4f:7d:47:09:bc:2a: 17:91:a2:c0:bd:4e:92:02:08:59:f8:e9:1f:a4:16:46:07:a4: 23:55:ab:92:e8:07:86:f5:b0:85:6f:d9:d9:11:96:53:80:7b: f0:27:86:f6:13:b6:2c:2b:99:ea:57:77:57:87:87:c2:a7:1d: 08:2b:42:4a:60:25:49:5b:d4:d5:60:00:ec:0a:9d:e0:a9:52: af:dd:84:07:23:da:4c:82:da:3c:46:fb:e5:7f:c6:36:e5:9b: 5d:98:c2:de -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEnfkRk6lb17clE970AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxNjE0NTEyN1oXDTI3MDgxMjA2NDIxOVowLzEtMCsGA1UEAxMk ZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZmZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghqFZb5zFOs9QfzEDgg3BMKyEqXTqYkRTKep abO4My4WX+GSDRppwe/AnbmXLRqmrjn3gWKbV+AiAQHkOLBeu7CaxuuPnV8TjIlY hLwTIt3bN8vj+6c7fUgMU7oQaAYykn5hHJEQvnjYxkFdwkfSD3Xw8P983BNJqOYM YNpxdpZqsdg2BP1/A3hyZ2Pwu+j5Pgc5j2A8fUWMXbUR3+OXzeyqTbbayV6Th0pP ytmht5iZ62A2DMIQgtBDP876mmYcpi727x/+CAyTHUnbF877xWPl46/5p9105Nlt ZhczUY/l02pRUYHcFg2/1JfQnGRHlrZCJSVM5SVmsgOzsM683QIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFDYeqQ4xI3iI4+td/XkvXjwGvYlqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m NzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Y3MWQyNTJiLTlhMGUtNDQ5My1i ZTkzLWU2YThlMmZmZmVlMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJm ZmZlZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvZVADAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMGHyECAwYhOTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQANrRReGOBJMwmhPiQ4aMLy2dBbbMe4eeaBO0QO am9qHhebwnSvRXtHoB89/ZXT56Si4gXEcRsino8dBpfgmnCgyy0zkhpfN3u2ZqMC Kc7EUmFhOBwfo74NAcn5qzixFDZ38DswIb9JysYh/JV7tMJo7Ea/W3BzXtg6fUXH oL6dTU5q2i8W5pDfnZpOrhsFhdOZGhFlin2VdcOXXRtPfUcJvCoXkaLAvU6SAghZ +OkfpBZGB6QjVauS6AeG9bCFb9nZEZZTgHvwJ4b2E7YsK5nqV3dXh4fCpx0IK0JK YCVJW9TVYADsCp3gqVKv3YQHI9pMgto8Rvvlf8Y25ZtdmMLe -----END CERTIFICATE-----Generated at Wed Jun 18 11:13:54 2025 by rpki-client