$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d605c12b-ac18-40bb-adb3-78730040a3b5.cer File: d605c12b-ac18-40bb-adb3-78730040a3b5.cer (raw, json) Hash identifier: iUeZ9faVSwfzuduZgDVuleJ0tAAanttKnwQ+pWB6A7Q= Subject key identifier: B2:36:D7:42:2C:60:E2:D1:DA:57:5F:C8:00:D1:13:C1:A7:BA:7B:46 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584A8D26929B80E57024283FC400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d605c12b-ac18-40bb-adb3-78730040a3b5/d605c12b-ac18-40bb-adb3-78730040a3b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d605c12b-ac18-40bb-adb3-78730040a3b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 19:07:28 +0000 Certificate not after: Wed 20 Oct 2027 19:07:28 +0000 Subordinate resources: IP: 2620:10f:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:26:92:9b:80:e5:70:24:28:3f:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 17 19:07:28 2025 GMT Not After : Oct 20 19:07:28 2027 GMT Subject: CN=d605c12b-ac18-40bb-adb3-78730040a3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:30:1b:11:a1:6d:65:89:50:64:24:b1:29: 0d:9a:a2:ff:98:5a:1c:79:0b:09:01:81:15:37:ac: 8a:fe:df:47:99:c3:98:66:bc:7a:f3:4f:ed:bb:35: c5:a1:c5:db:76:c5:27:b0:63:e2:88:0f:cb:5d:a1: 04:25:17:90:87:4f:01:4e:2f:de:d0:5e:04:04:98: ce:27:ef:b4:6e:2d:04:de:ad:89:f9:3c:af:48:91: 60:c2:34:84:59:52:6e:53:2a:c1:76:36:02:c2:09: 44:a9:ef:82:33:89:fa:0b:8a:6f:d1:a1:fb:a4:56: 27:de:ef:72:12:70:d3:c6:19:4b:e4:75:64:d9:4d: fd:7c:1b:3e:f2:c5:95:9d:7e:d4:22:96:e3:b2:18: b2:41:c5:bd:2b:c0:c8:68:0d:6f:18:ef:84:b4:33: 00:cd:3d:84:0c:08:22:89:df:bf:6f:e5:a7:4a:fb: e8:b9:f3:ba:f8:93:a9:74:fe:d8:de:f4:26:fe:4f: e5:d0:c4:2f:e1:4d:f5:82:96:6f:24:7c:09:cd:4b: b5:32:69:41:09:7f:25:f6:90:ad:6a:99:d9:d7:f7: 49:6c:70:f5:96:7d:cb:54:25:e1:4d:c1:08:68:7c: 29:e2:84:fc:5e:ee:b3:5d:9e:6a:0b:48:a5:22:be: 00:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:D7:42:2C:60:E2:D1:DA:57:5F:C8:00:D1:13:C1:A7:BA:7B:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d605c12b-ac18-40bb-adb3-78730040a3b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d605c12b-ac18-40bb-adb3-78730040a3b5/d605c12b-ac18-40bb-adb3-78730040a3b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b7:f1:72:fb:7d:d8:94:f3:c5:2b:1e:22:1d:45:29:1f:5e: ce:0a:20:8b:81:d5:a4:c8:a8:23:c9:90:78:c9:73:a9:30:21: 14:c8:94:b4:05:32:ca:7e:c6:17:0e:dd:61:bb:54:4d:13:7a: a3:8a:d8:04:26:6e:fa:77:ed:2a:9c:c7:f3:1a:dd:62:f5:fd: 55:57:eb:6a:32:73:b9:95:ec:a4:ce:1e:d9:b6:c6:2b:e4:cb: 6c:2d:b3:4d:b8:d8:95:b2:26:94:94:09:53:ab:d5:db:f8:74: d0:f2:72:0b:b6:73:cb:0e:c8:3a:bb:36:4f:51:70:4c:63:76: c9:d7:4b:3a:70:11:a0:9b:81:12:55:b1:70:ce:1e:c1:ae:4d: c5:6b:65:52:4b:82:10:14:e1:42:a7:b5:0a:00:e5:48:c8:24: e6:0e:15:1c:9e:41:02:c8:ef:26:aa:cd:19:de:9b:03:f8:29: 1e:23:42:69:4c:54:ee:78:9e:dd:10:62:02:3c:ec:ba:7b:1c: d6:98:f1:42:57:fd:59:9c:58:ca:61:74:08:8c:7f:31:c1:c9: 1d:af:f5:7a:f3:4f:cb:67:50:fe:43:79:8a:8f:61:33:fe:ac: 70:47:66:2a:a2:0f:83:92:ef:d5:e5:35:a7:75:8f:7d:35:0c: b7:da:30:ba -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEqNJpKbgOVwJCg/xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcxNzE5MDcyOFoXDTI3MTAyMDE5MDcyOFowLzEtMCsGA1UEAxMk ZDYwNWMxMmItYWMxOC00MGJiLWFkYjMtNzg3MzAwNDBhM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP8wGxGhbWWJUGQksSkNmqL/mFoceQsJAYEV N6yK/t9HmcOYZrx680/tuzXFocXbdsUnsGPiiA/LXaEEJReQh08BTi/e0F4EBJjO J++0bi0E3q2J+TyvSJFgwjSEWVJuUyrBdjYCwglEqe+CM4n6C4pv0aH7pFYn3u9y EnDTxhlL5HVk2U39fBs+8sWVnX7UIpbjshiyQcW9K8DIaA1vGO+EtDMAzT2EDAgi id+/b+WnSvvoufO6+JOpdP7Y3vQm/k/l0MQv4U31gpZvJHwJzUu1MmlBCX8l9pCt apnZ1/dJbHD1ln3LVCXhTcEIaHwp4oT8Xu6zXZ5qC0ilIr4A8QIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFLI210IsYOLR2ldfyADRE8GnuntGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k NjA1YzEyYi1hYzE4LTQwYmItYWRiMy03ODczMDA0MGEzYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2Q2MDVjMTJiLWFjMTgtNDBiYi1h ZGIzLTc4NzMwMDQwYTNiNS9kNjA1YzEyYi1hYzE4LTQwYmItYWRiMy03ODczMDA0 MGEzYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAEP8AAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAArfxcvt92JTzxSse Ih1FKR9ezgogi4HVpMioI8mQeMlzqTAhFMiUtAUyyn7GFw7dYbtUTRN6o4rYBCZu +nftKpzH8xrdYvX9VVfrajJzuZXspM4e2bbGK+TLbC2zTbjYlbImlJQJU6vV2/h0 0PJyC7Zzyw7IOrs2T1FwTGN2yddLOnARoJuBElWxcM4ewa5NxWtlUkuCEBThQqe1 CgDlSMgk5g4VHJ5BAsjvJqrNGd6bA/gpHiNCaUxU7nie3RBiAjzsunsc1pjxQlf9 WZxYymF0CIx/McHJHa/1evNPy2dQ/kN5io9hM/6scEdmKqIPg5Lv1eU1p3WPfTUM t9owug== -----END CERTIFICATE-----Generated at Thu Jul 24 23:02:38 2025 by rpki-client