$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer File: cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer (raw, json) Hash identifier: LcxdRV3SD7ArrxjXe7lfagLyALo+E2TjarwMugabNaM= Subject key identifier: 82:B6:6E:60:AF:4C:46:CB:04:58:D3:DF:12:5A:8F:B9:38:6F:8F:60 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584B23E4B82B5854C69E88A39C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 19:01:50 +0000 Certificate not after: Mon 13 Dec 2027 20:01:50 +0000 Subordinate resources: AS: 54074 IP: 2602:f56f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:e4:b8:2b:58:54:c6:9e:88:a3:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 9 19:01:50 2025 GMT Not After : Dec 13 20:01:50 2027 GMT Subject: CN=cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:41:f4:15:96:2e:77:a6:15:2c:40:e9:d0: df:ea:9a:89:af:61:7f:ac:a1:5c:f6:a0:b9:f1:2c: ef:e6:f8:b8:33:db:ff:07:2b:44:14:40:f7:75:06: 18:96:3f:28:c0:93:e8:8b:6a:bc:f0:8b:72:a0:ab: f6:4d:c4:f9:88:16:ca:9b:cb:4f:a6:cd:a4:b4:79: f8:24:81:f8:f8:07:34:ab:a7:4b:db:06:dc:17:d4: c1:97:ec:06:b8:fa:32:f7:4b:60:21:77:ff:c2:8d: f2:c3:60:e6:a2:eb:1f:09:8e:73:f8:07:17:85:ee: 23:b3:75:f4:23:41:ef:7c:42:2b:6e:49:f1:5e:41: 11:9a:7e:a1:9c:78:2a:93:90:ff:b9:46:64:70:89: c5:ec:a8:3b:1e:b3:b9:65:83:06:df:bd:07:a4:bb: 96:0f:c7:46:8c:5c:6f:1b:dc:1c:7e:52:6e:91:aa: a5:31:c1:ac:3a:57:d5:28:89:70:0d:37:aa:31:9b: 12:85:c9:ec:08:f3:88:d0:4d:9e:46:f2:38:cd:28: a4:90:8b:ff:b8:44:c3:4a:4c:a8:d8:0d:04:4c:b1: 0f:6f:8c:82:2a:65:64:c9:4b:c7:91:a4:16:2b:39: 67:62:ec:02:a9:c9:f4:f5:12:b0:5e:b7:54:be:b2: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B6:6E:60:AF:4C:46:CB:04:58:D3:DF:12:5A:8F:B9:38:6F:8F:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f56f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54074 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e0:33:fc:2f:c5:40:09:06:ee:19:b9:fc:82:13:fc:cc:22: f0:a7:b1:ef:8a:ff:30:63:e5:cb:a3:29:2e:ec:21:a0:a5:33: e8:da:6a:21:59:42:32:8b:21:c5:13:ef:54:c2:33:7f:13:7b: 12:0e:78:cf:5c:b0:8f:8b:c7:80:75:f7:6a:1c:c0:e9:4d:bf: dc:05:62:76:25:fe:a8:ce:51:92:db:9a:da:58:4d:f7:42:41: e1:fc:bf:c8:14:f4:3d:b4:0c:ea:37:87:2e:06:35:7c:29:cc: b8:9a:59:30:6a:8d:d9:a8:a4:1c:34:92:09:7f:16:2e:ce:0d: d0:c5:99:1a:e9:0d:22:fc:00:e5:4a:49:cd:9a:d2:fe:6b:73: c2:e0:0f:d5:05:b5:79:5e:14:aa:5e:34:7a:f8:03:da:d8:16: 77:a2:71:48:b2:70:e7:83:aa:e9:3b:d2:3c:d5:6e:98:06:46: 29:0b:42:6e:6d:42:b7:9c:ad:7d:61:9a:f6:ae:4a:27:e0:2b: d2:c0:96:bf:3e:4d:28:16:d8:d7:18:96:ca:4b:07:59:be:bf: b5:61:c9:fc:59:1a:ad:58:76:cf:2f:01:9e:7d:86:b8:f1:b0: e9:b7:1c:a4:ff:fe:e8:1c:e6:1c:6b:b0:92:42:09:19:dd:4f: 47:3f:e7:81 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEsj5LgrWFTGnoijnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDkwOTE5MDE1MFoXDTI3MTIxMzIwMDE1MFowLzEtMCsGA1UEAxMk Y2FmYjUxODAtZWI2NS00YWEzLThjZTAtOWQyYmQ1N2U5YTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZpB9BWWLnemFSxA6dDf6pqJr2F/rKFc9qC5 8Szv5vi4M9v/BytEFED3dQYYlj8owJPoi2q88ItyoKv2TcT5iBbKm8tPps2ktHn4 JIH4+Ac0q6dL2wbcF9TBl+wGuPoy90tgIXf/wo3yw2DmousfCY5z+AcXhe4js3X0 I0HvfEIrbknxXkERmn6hnHgqk5D/uUZkcInF7Kg7HrO5ZYMG370HpLuWD8dGjFxv G9wcflJukaqlMcGsOlfVKIlwDTeqMZsShcnsCPOI0E2eRvI4zSikkIv/uETDSkyo 2A0ETLEPb4yCKmVkyUvHkaQWKzlnYuwCqcn09RKwXrdUvrISOwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFIK2bmCvTEbLBFjT3xJaj7k4b49gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j YWZiNTE4MC1lYjY1LTRhYTMtOGNlMC05ZDJiZDU3ZTlhMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2NhZmI1MTgwLWViNjUtNGFhMy04 Y2UwLTlkMmJkNTdlOWEzNS9jYWZiNTE4MC1lYjY1LTRhYTMtOGNlMC05ZDJiZDU3 ZTlhMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvVvADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMA0zowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAheAz/C/FQAkG7hm5/IIT/Mwi8Kex74r/MGPly6MpLuwh oKUz6NpqIVlCMoshxRPvVMIzfxN7Eg54z1ywj4vHgHX3ahzA6U2/3AVidiX+qM5R ktua2lhN90JB4fy/yBT0PbQM6jeHLgY1fCnMuJpZMGqN2aikHDSSCX8WLs4N0MWZ GukNIvwA5UpJzZrS/mtzwuAP1QW1eV4Uql40evgD2tgWd6JxSLJw54Oq6TvSPNVu mAZGKQtCbm1Ct5ytfWGa9q5KJ+Ar0sCWvz5NKBbY1xiWyksHWb6/tWHJ/FkarVh2 zy8Bnn2GuPGw6bccpP/+6BzmHGuwkkIJGd1PRz/ngQ== -----END CERTIFICATE-----Generated at Wed Sep 17 17:34:11 2025 by rpki-client