$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer File: 6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer (raw, json) Hash identifier: EMkRSlzlj6QIq8yUXN1d9yCsFpB4DjzfpbrcYOi/MG4= Subject key identifier: B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858486D88C2DBF04E772836184B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Jan 2025 01:45:33 +0000 Certificate not after: Fri 09 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 2600:f000::/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:88:c2:db:f0:4e:77:28:36:18:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 4 01:45:33 2025 GMT Not After : Apr 9 00:45:33 2027 GMT Subject: CN=6a9537a8-a685-4b48-9fa8-8362e4fc47ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:57:e8:93:0c:18:d7:c5:b2:d8:9d:d5:c4:15: 4f:02:d4:7a:2e:84:f2:84:c6:87:af:17:e9:40:39: f4:4f:04:25:be:35:26:dd:23:20:b2:0a:c8:ce:0f: d4:14:40:e5:2a:e8:b7:a4:3e:03:f4:de:24:4d:30: 5e:66:e8:44:74:b9:f2:2d:58:1a:85:3c:f9:31:66: 24:ca:9a:6e:c3:18:5f:24:7e:ba:9c:ae:6e:af:23: 5f:b7:c0:d2:8b:51:5d:07:ce:0c:1b:ce:a1:5b:9e: 8f:4c:fe:dc:51:f0:ed:59:7d:bd:b6:f2:66:3e:97: b3:74:02:78:7f:65:2a:1b:36:72:e0:14:c5:d6:89: 07:94:c1:9e:9d:76:16:59:31:3f:57:55:3c:d6:37: e2:da:bd:bc:4b:31:48:f5:47:1a:1f:60:1f:2d:f9: 06:18:eb:4c:9a:82:bb:a9:bc:02:b5:5b:48:04:50: c3:df:9f:8e:60:20:5c:a3:62:63:11:97:fc:0d:3d: 74:05:c0:97:94:2d:0b:9f:2e:14:b9:e8:ee:9c:11: 7b:fe:8a:86:00:1f:37:dd:7b:5d:17:42:dc:96:00: 31:e8:ac:2b:e5:25:99:b1:76:46:93:55:a2:09:28: 57:b4:7f:9f:d3:28:b8:64:7f:66:84:f4:6e:8f:2f: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2600:f000::/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:33:63:7b:b8:43:0d:36:84:a8:7b:db:c3:99:93:c3:4d:88: 1c:72:11:6c:16:e2:f8:b8:1c:bd:7c:41:6f:1a:55:86:70:3f: 8e:80:74:22:d3:fc:3d:e7:08:d0:71:5e:4a:f4:a0:e2:46:82: e6:bc:f0:ea:a5:d3:b9:82:d2:1d:9c:20:f8:89:9f:39:dd:62: 41:98:16:56:50:1e:0b:58:2b:4c:47:38:49:be:d3:d0:3f:b1: b2:fb:a3:22:2c:b3:9a:06:23:b1:f4:db:af:59:2d:55:46:20: d9:0e:be:f9:dc:92:9c:ea:6c:07:46:fb:bd:d9:97:8b:7f:96: 39:8d:f0:69:2f:a3:d8:1b:51:f6:b9:7f:7e:3c:76:bd:94:c0: 8a:ac:ba:83:df:c0:d8:08:27:ab:8a:15:c3:2d:90:fb:8e:c8: f1:ce:1d:e8:c5:74:07:ff:79:1a:bc:f3:aa:78:a5:7c:84:a7: c2:04:57:da:a6:4f:1e:f4:73:f2:c9:52:42:db:de:96:fc:15: 14:20:e2:6c:e7:31:fa:c3:82:e9:cd:02:13:44:02:11:00:7b: c1:90:0d:04:a1:5d:41:32:46:80:70:99:bd:d2:53:60:1b:e0: c2:10:33:2e:62:ba:82:53:e2:db:8a:40:25:de:56:98:07:70: f1:39:16:d5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEhtiMLb8E53KDYYS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDEwNDAxNDUzM1oXDTI3MDQwOTAwNDUzM1owLzEtMCsGA1UEAxMk NmE5NTM3YTgtYTY4NS00YjQ4LTlmYTgtODM2MmU0ZmM0N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1fokwwY18Wy2J3VxBVPAtR6LoTyhMaHrxfp QDn0TwQlvjUm3SMgsgrIzg/UFEDlKui3pD4D9N4kTTBeZuhEdLnyLVgahTz5MWYk yppuwxhfJH66nK5uryNft8DSi1FdB84MG86hW56PTP7cUfDtWX29tvJmPpezdAJ4 f2UqGzZy4BTF1okHlMGenXYWWTE/V1U81jfi2r28SzFI9UcaH2AfLfkGGOtMmoK7 qbwCtVtIBFDD35+OYCBco2JjEZf8DT10BcCXlC0Lny4UuejunBF7/oqGAB833Xtd F0LclgAx6Kwr5SWZsXZGk1WiCShXtH+f0yi4ZH9mhPRujy+KiQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLFzbuIFK63UfgEqJcxEfo8mC7FEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 YTk1MzdhOC1hNjg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZhOTUzN2E4LWE2ODUtNGI0OC05 ZmE4LTgzNjJlNGZjNDdhZS82YTk1MzdhOC1hNjg1LTRiNDgtOWZhOC04MzYyZTRm YzQ3YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgACMAYDBAAmAPAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADzNje7hDDTaEqHvbw5mT w02IHHIRbBbi+LgcvXxBbxpVhnA/joB0ItP8PecI0HFeSvSg4kaC5rzw6qXTuYLS HZwg+ImfOd1iQZgWVlAeC1grTEc4Sb7T0D+xsvujIiyzmgYjsfTbr1ktVUYg2Q6+ +dySnOpsB0b7vdmXi3+WOY3waS+j2BtR9rl/fjx2vZTAiqy6g9/A2Agnq4oVwy2Q +47I8c4d6MV0B/95GrzzqnilfISnwgRX2qZPHvRz8slSQtvelvwVFCDibOcx+sOC 6c0CE0QCEQB7wZANBKFdQTJGgHCZvdJTYBvgwhAzLmK6glPi24pAJd5WmAdw8TkW 1Q== -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:24 2025 by rpki-client