$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer File: e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer (raw, json) Hash identifier: Hi4YH50zrgHSlpiAyfscswmgePGSzkLQGvOg0scehr8= Subject key identifier: FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A5063599120FC706C76F4DD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Jun 2025 00:45:36 +0000 Certificate not after: Wed 29 Sep 2027 00:45:36 +0000 Subordinate resources: IP: 2602:fb33::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:63:59:91:20:fc:70:6c:76:f4:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jun 26 00:45:36 2025 GMT Not After : Sep 29 00:45:36 2027 GMT Subject: CN=e9ba2448-ef35-44cb-836b-3f71ba57a40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:e6:af:17:f4:13:8c:75:ce:10:09:ce:bf: e4:c3:28:da:01:06:14:fb:80:30:e6:dd:b0:15:3d: 9c:ef:27:de:b2:53:a7:38:82:a4:63:f3:ab:9e:ef: 6a:18:c6:fb:80:68:a1:41:54:5c:c3:51:6b:59:b7: db:e1:55:09:b3:12:5d:3f:88:d8:ab:4b:b5:91:ee: 94:e5:d8:a4:0a:2b:b2:f0:7d:79:47:57:db:11:08: fe:be:a5:86:8f:83:1b:3f:20:7a:0b:9b:bb:5d:e1: 78:00:13:b1:fe:c3:94:75:a9:bc:2e:2d:28:fb:63: 62:34:41:35:b3:0b:86:1b:ab:78:aa:d5:94:fd:69: 8e:0f:2e:9a:13:33:04:6a:40:d2:86:aa:34:ac:46: b2:4a:29:48:b0:8f:15:e5:c1:00:c6:b7:ea:6a:8a: cb:f0:36:4f:77:e4:e8:eb:89:3e:7b:42:12:9c:53: 13:e3:b3:17:f1:d7:d5:c8:0a:d1:6b:31:89:e1:b7: a0:46:2d:df:d6:a4:3c:da:91:04:93:68:a8:c3:de: 36:c1:e3:0b:c1:79:c5:00:91:25:f4:19:15:2a:01: a7:db:8c:2b:47:37:1d:2f:40:1c:41:65:43:d7:51: e0:40:0f:c7:07:66:8e:ee:f1:4a:2e:03:bb:b6:2c: 4d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb33::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:dc:53:0f:ba:f6:0c:4e:ca:59:68:2e:96:0f:41:ed:bd:00: 64:86:7f:25:f9:de:b8:ed:72:fc:b5:d5:72:27:ae:15:25:a3: 2d:16:28:a1:53:00:8e:f7:78:5c:11:af:08:cb:09:de:26:67: 95:39:1e:2f:a1:f9:99:30:1c:96:21:d8:25:33:6a:7c:ba:89: b7:b6:7e:05:1d:7e:24:82:71:07:41:39:9a:96:ae:8c:bf:a5: 79:f5:cc:91:cd:ca:74:ab:e7:fb:de:0a:cd:8b:8a:1f:93:a2: dd:58:ce:4e:e6:81:42:6f:81:e3:d6:7d:e7:bf:9e:8e:b5:34: 50:9d:9c:de:71:6e:f0:e7:e1:cd:9e:cf:e6:c5:d4:21:c7:54: d6:24:2e:31:be:03:3e:82:76:23:62:85:8a:1c:c5:95:bb:9a: 6b:43:9d:a9:2c:9b:b7:b8:f2:ed:39:a8:6d:3a:42:6a:9f:68: ad:a4:18:6b:67:9a:2d:0b:ee:03:b4:eb:4a:bf:0b:21:b8:45: 49:11:65:d0:a5:aa:c7:91:d6:6a:d7:a7:f0:ba:df:e5:c0:fb: ea:cf:b6:62:0d:d3:8d:48:94:03:21:cb:b5:1c:44:9b:a6:5d: ca:56:fc:6d:6c:cb:d2:28:c2:c8:c8:48:3d:d0:e4:f4:c0:eb: fd:50:12:56 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEpQY1mRIPxwbHb03QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDYyNjAwNDUzNloXDTI3MDkyOTAwNDUzNlowLzEtMCsGA1UEAxMk ZTliYTI0NDgtZWYzNS00NGNiLTgzNmItM2Y3MWJhNTdhNDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIPmrxf0E4x1zhAJzr/kwyjaAQYU+4Aw5t2w FT2c7yfeslOnOIKkY/Ornu9qGMb7gGihQVRcw1FrWbfb4VUJsxJdP4jYq0u1ke6U 5dikCiuy8H15R1fbEQj+vqWGj4MbPyB6C5u7XeF4ABOx/sOUdam8Li0o+2NiNEE1 swuGG6t4qtWU/WmODy6aEzMEakDShqo0rEaySilIsI8V5cEAxrfqaorL8DZPd+To 64k+e0ISnFMT47MX8dfVyArRazGJ4begRi3f1qQ82pEEk2iow942weMLwXnFAJEl 9BkVKgGn24wrRzcdL0AcQWVD11HgQA/HB2aO7vFKLgO7tixN0wIDAQABo4IEATCC A/0wHQYDVR0OBBYEFPsvuTC6ajO3WLL52Ti7PDY8aJaZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9l OWJhMjQ0OC1lZjM1LTQ0Y2ItODM2Yi0zZjcxYmE1N2E0MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2U5YmEyNDQ4LWVmMzUtNDRjYi04 MzZiLTNmNzFiYTU3YTQwZi9lOWJhMjQ0OC1lZjM1LTQ0Y2ItODM2Yi0zZjcxYmE1 N2E0MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvszADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB03FMPuvYMTspZaC6W D0HtvQBkhn8l+d647XL8tdVyJ64VJaMtFiihUwCO93hcEa8IywneJmeVOR4vofmZ MByWIdglM2p8uom3tn4FHX4kgnEHQTmalq6Mv6V59cyRzcp0q+f73grNi4ofk6Ld WM5O5oFCb4Hj1n3nv56OtTRQnZzecW7w5+HNns/mxdQhx1TWJC4xvgM+gnYjYoWK HMWVu5prQ52pLJu3uPLtOahtOkJqn2itpBhrZ5otC+4DtOtKvwshuEVJEWXQparH kdZq16fwut/lwPvqz7ZiDdONSJQDIcu1HESbpl3KVvxtbMvSKMLIyEg90OT0wOv9 UBJW -----END CERTIFICATE-----Generated at Sat Jul 5 19:04:30 2025 by rpki-client