$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d7d6da7-a703-48d0-8ca0-aff9987781c9.cer File: 5d7d6da7-a703-48d0-8ca0-aff9987781c9.cer (raw, json) Hash identifier: H8ciS0SGlHcAVhZkdRHmHuBuLnpvVgj7XyOqiW+GVqQ= Subject key identifier: 55:57:91:F9:9E:7E:D8:6B:FC:98:BA:5B:D6:E4:67:A0:87:80:97:28 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858494364786AC78875D34023D2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d7d6da7-a703-48d0-8ca0-aff9987781c9/5d7d6da7-a703-48d0-8ca0-aff9987781c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d7d6da7-a703-48d0-8ca0-aff9987781c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 16:15:25 +0000 Certificate not after: Sun 20 Jun 2027 21:14:16 +0000 Subordinate resources: AS: 13753 IP: 2602:f6ad::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:64:78:6a:c7:88:75:d3:40:23:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 21 16:15:25 2025 GMT Not After : Jun 20 21:14:16 2027 GMT Subject: CN=5d7d6da7-a703-48d0-8ca0-aff9987781c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:54:91:eb:2b:cb:ca:a5:ed:5e:cb:da:87: bf:98:79:99:25:97:23:73:5b:fa:be:dd:96:39:3f: f2:e0:18:1a:8f:04:f2:b2:73:61:52:f1:ea:1f:86: 08:1a:80:08:44:ea:03:c8:69:63:39:46:ad:33:4e: 1c:77:b3:db:a3:30:61:f8:ea:fc:e9:1d:94:db:37: b8:ea:e6:c6:61:78:93:91:8a:35:13:5c:f9:29:d7: 61:dd:98:37:b0:5a:18:3d:dc:e5:76:29:0e:dc:d0: 20:ad:8d:4e:80:32:a7:5e:c7:65:cd:04:02:48:f8: 27:22:fd:2d:ef:59:a8:1f:8a:5a:80:fe:cd:23:d9: b7:69:32:fe:8c:15:14:67:73:e6:9e:56:12:a6:5d: 48:fe:b4:80:97:d1:96:5e:e5:d2:50:95:11:8d:51: 56:2d:ad:ed:ad:1b:26:f2:d8:37:96:23:da:d8:50: d2:a2:e2:15:71:a5:3d:fe:d8:2e:0c:75:b8:13:8d: a0:22:ba:12:29:9b:38:f0:c6:64:6d:33:bd:f2:e1: 63:c0:97:5d:f1:ee:29:5d:56:31:ce:a4:cc:9f:2f: b6:45:5f:45:5f:34:b9:65:d1:86:c7:dc:01:0e:a0: 0c:3f:e5:a5:30:52:db:5d:04:50:0e:8c:bc:80:c2: 83:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:57:91:F9:9E:7E:D8:6B:FC:98:BA:5B:D6:E4:67:A0:87:80:97:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d7d6da7-a703-48d0-8ca0-aff9987781c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d7d6da7-a703-48d0-8ca0-aff9987781c9/5d7d6da7-a703-48d0-8ca0-aff9987781c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6ad::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13753 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:de:e4:b1:18:56:93:74:ad:c1:87:54:1a:6a:10:db:7f:28: 30:11:c0:8e:20:b5:ab:41:35:81:5f:bc:4b:da:1b:0d:0a:d7: 04:a2:8d:35:b1:92:29:1f:b8:63:60:52:85:98:e3:b1:d9:9d: b6:3a:f4:e0:a9:47:99:40:c6:42:50:68:35:cb:c6:73:a4:df: a6:f4:02:cb:ad:c8:75:ee:07:ae:ac:9f:f3:78:51:ec:1b:42: 78:39:b1:7c:fb:a1:76:32:b1:b6:00:e4:cd:a3:2d:6a:d5:be: b3:16:db:ad:c4:ed:49:2d:28:61:6a:bb:10:5c:56:6b:09:5e: cf:8d:6b:9d:1c:63:bf:5a:d1:7d:2f:37:e1:bb:25:65:1d:9b: 61:99:e4:8d:b2:27:6c:dc:35:73:48:53:e9:80:f4:85:b9:ed: a8:a7:32:f6:85:cf:41:22:51:76:e2:32:7b:cb:1b:e7:16:ac: d9:0f:ca:c0:05:99:ac:73:f4:58:3b:81:51:52:01:03:31:0e: 43:a6:b3:85:73:e9:18:6f:f3:cc:18:54:54:5f:02:8b:65:70: 7a:83:23:50:42:17:44:fd:70:73:65:2c:65:ad:f7:a8:4a:90: 08:7c:fc:2c:99:75:37:b0:a5:fb:9f:3c:c1:e2:83:28:1a:62: 3f:d4:d8:ac -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWElDZHhqx4h100Aj0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMyMTE2MTUyNVoXDTI3MDYyMDIxMTQxNlowLzEtMCsGA1UEAxMk NWQ3ZDZkYTctYTcwMy00OGQwLThjYTAtYWZmOTk4Nzc4MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliJUkesry8ql7V7L2oe/mHmZJZcjc1v6vt2W OT/y4BgajwTysnNhUvHqH4YIGoAIROoDyGljOUatM04cd7PbozBh+Or86R2U2ze4 6ubGYXiTkYo1E1z5Kddh3Zg3sFoYPdzldikO3NAgrY1OgDKnXsdlzQQCSPgnIv0t 71moH4pagP7NI9m3aTL+jBUUZ3PmnlYSpl1I/rSAl9GWXuXSUJURjVFWLa3trRsm 8tg3liPa2FDSouIVcaU9/tguDHW4E42gIroSKZs48MZkbTO98uFjwJdd8e4pXVYx zqTMny+2RV9FXzS5ZdGGx9wBDqAMP+WlMFLbXQRQDoy8gMKDIQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFFVXkfmefthr/Ji6W9bkZ6CHgJcoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 ZDdkNmRhNy1hNzAzLTQ4ZDAtOGNhMC1hZmY5OTg3NzgxYzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVkN2Q2ZGE3LWE3MDMtNDhkMC04 Y2EwLWFmZjk5ODc3ODFjOS81ZDdkNmRhNy1hNzAzLTQ4ZDAtOGNhMC1hZmY5OTg3 NzgxYzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvatADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgI1uTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBL3uSxGFaTdK3Bh1QaahDbfygwEcCOILWrQTWBX7xL2hsN CtcEoo01sZIpH7hjYFKFmOOx2Z22OvTgqUeZQMZCUGg1y8ZzpN+m9ALLrch17geu rJ/zeFHsG0J4ObF8+6F2MrG2AOTNoy1q1b6zFtutxO1JLShharsQXFZrCV7PjWud HGO/WtF9LzfhuyVlHZthmeSNsids3DVzSFPpgPSFue2opzL2hc9BIlF24jJ7yxvn FqzZD8rABZmsc/RYO4FRUgEDMQ5DprOFc+kYb/PMGFRUXwKLZXB6gyNQQhdE/XBz ZSxlrfeoSpAIfPwsmXU3sKX7nzzB4oMoGmI/1Nis -----END CERTIFICATE-----Generated at Sun Jun 15 05:13:34 2025 by rpki-client