$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer File: 8baf6f06-4472-4c79-8a01-5c338d64c402.cer (raw, json) Hash identifier: eHvOrYVela7By8v9JmES/C5P6uGSV5LcGncG5skXF0s= Subject key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B2759EDE0A3F28E95FB406180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 00:45:25 +0000 Certificate not after: Wed 15 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 401082 IP: 2602:f8b4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:59:ed:e0:a3:f2:8e:95:fb:40:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Sep 11 00:45:25 2025 GMT Not After : Dec 15 01:45:25 2027 GMT Subject: CN=8baf6f06-4472-4c79-8a01-5c338d64c402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:6f:1b:fd:c6:5c:96:00:58:68:4f:64:60: 89:2c:ad:f6:bb:cd:00:b7:0e:97:84:d6:9b:33:fe: f4:ba:44:47:4f:0a:b0:54:7a:f5:e2:ef:1f:83:a8: 78:d1:23:42:98:56:67:61:bb:cf:4f:97:00:86:16: 85:3b:2b:98:c1:a0:a1:66:97:5e:e5:70:19:13:8a: 2d:4f:69:9f:9f:2a:46:5c:2e:a9:2f:68:18:af:8d: 4b:0b:64:ed:89:20:61:6c:72:13:3d:46:f6:31:87: ce:01:ef:87:4f:be:39:8d:c0:d0:bf:68:95:d3:89: 10:ee:ee:87:ed:b3:9a:68:7c:0f:8c:6f:9d:93:e7: 6a:10:13:df:e8:c3:0e:6b:33:bc:ce:f0:3b:5d:71: ad:4b:5f:53:03:5d:aa:2a:41:da:95:9f:8f:bd:a8: e5:72:b2:ec:d3:ec:65:55:2d:cc:fa:54:6f:a0:c6: 54:96:15:6f:37:b8:eb:a5:79:95:42:79:ab:e5:50: 95:45:99:57:7e:be:0b:85:ea:4a:c4:59:f0:0d:35: e1:a4:c6:59:88:32:9b:35:f1:27:2e:0b:3b:b2:4e: 61:c6:a2:9d:2c:00:f4:32:b3:65:9a:92:65:e0:1c: 87:17:34:b1:13:43:80:b7:cc:e8:51:3d:c4:92:ef: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8b4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401082 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7f:46:df:29:1b:3e:8f:4b:00:b1:22:34:7e:f9:47:42:85: dd:06:33:17:84:26:fc:f4:14:36:a0:b1:06:32:c3:05:92:01: 07:a4:29:61:8b:80:6c:68:e0:b2:00:fd:fa:14:01:01:bc:db: 37:92:a4:6d:52:b3:79:77:f2:b3:ba:cf:8a:39:88:60:9a:29: 0d:95:7b:f9:86:7c:38:1a:46:2e:ef:59:d7:f0:35:14:d6:19: 33:65:85:ac:0d:4f:0e:c7:72:52:9e:d1:7a:f5:42:95:1b:4e: 83:f8:42:ef:8e:24:56:cf:7e:59:24:65:7e:89:c4:14:3d:ea: ff:75:17:42:86:56:05:75:03:3b:8f:bf:f0:63:f0:8d:0a:9d: a2:b5:5d:b6:bb:a8:95:24:84:33:9b:a3:46:01:1a:e6:51:2a: db:48:c8:a2:77:08:1f:1e:06:b5:d3:42:9e:b6:e7:74:e4:ec: 12:03:9f:99:b7:9c:7f:73:02:0f:38:65:1b:64:7d:33:a7:32: 56:87:39:d2:1a:b9:2a:3b:e1:a4:5a:ae:5b:a5:1b:2a:1b:a7: ab:e4:66:af:1a:a0:15:6a:12:b3:71:5c:87:c4:73:ff:ed:11: 8f:6e:3d:37:09:33:15:7d:de:7c:d4:c1:f7:29:ea:e4:40:a8: ef:2b:f2:23 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEsnWe3go/KOlftAYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDkxMTAwNDUyNVoXDTI3MTIxNTAxNDUyNVowLzEtMCsGA1UEAxMk OGJhZjZmMDYtNDQ3Mi00Yzc5LThhMDEtNWMzMzhkNjRjNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhFvG/3GXJYAWGhPZGCJLK32u80Atw6XhNab M/70ukRHTwqwVHr14u8fg6h40SNCmFZnYbvPT5cAhhaFOyuYwaChZpde5XAZE4ot T2mfnypGXC6pL2gYr41LC2TtiSBhbHITPUb2MYfOAe+HT745jcDQv2iV04kQ7u6H 7bOaaHwPjG+dk+dqEBPf6MMOazO8zvA7XXGtS19TA12qKkHalZ+PvajlcrLs0+xl VS3M+lRvoMZUlhVvN7jrpXmVQnmr5VCVRZlXfr4LhepKxFnwDTXhpMZZiDKbNfEn Lgs7sk5hxqKdLAD0MrNlmpJl4ByHFzSxE0OAt8zoUT3Eku/6HwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFJXTtYwNXV+FGc2P+jn0gsIzu50WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 YmFmNmYwNi00NDcyLTRjNzktOGEwMS01YzMzOGQ2NGM0MDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzhiYWY2ZjA2LTQ0NzItNGM3OS04 YTAxLTVjMzM4ZDY0YzQwMi84YmFmNmYwNi00NDcyLTRjNzktOGEwMS01YzMzOGQ2 NGM0MDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvi0ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGHrowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAd39G3ykbPo9LALEiNH75R0KF3QYzF4Qm/PQUNqCxBjLD BZIBB6QpYYuAbGjgsgD9+hQBAbzbN5KkbVKzeXfys7rPijmIYJopDZV7+YZ8OBpG Lu9Z1/A1FNYZM2WFrA1PDsdyUp7RevVClRtOg/hC744kVs9+WSRlfonEFD3q/3UX QoZWBXUDO4+/8GPwjQqdorVdtruolSSEM5ujRgEa5lEq20jIoncIHx4GtdNCnrbn dOTsEgOfmbecf3MCDzhlG2R9M6cyVoc50hq5KjvhpFquW6UbKhunq+RmrxqgFWoS s3Fch8Rz/+0Rj249NwkzFX3efNTB9ynq5ECo7yvyIw== -----END CERTIFICATE-----Generated at Fri Oct 10 15:21:29 2025 by rpki-client