$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer File: 42820f2e-2eb1-4049-8630-b2760e0a03a1.cer (raw, json) Hash identifier: jqDWZ8VhAXkF+tfsqPe1n8xv4UWXE6+hrWBShWnr4ys= Subject key identifier: 3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858499FDD094C214E3506443F3828 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 19:12:43 +0000 Certificate not after: Tue 27 Jul 2027 19:12:43 +0000 Subordinate resources: AS: 395670 IP: 2620:ac:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:dd:09:4c:21:4e:35:06:44:3f:38:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 23 19:12:43 2025 GMT Not After : Jul 27 19:12:43 2027 GMT Subject: CN=42820f2e-2eb1-4049-8630-b2760e0a03a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:d9:16:c4:25:a1:0d:f2:5f:d9:dc:05:90: 0e:4a:2e:19:9d:2b:93:01:71:37:5e:d6:a0:51:98: b3:22:fc:36:74:2b:5e:72:5f:8d:f4:87:26:d0:de: 25:95:7e:f4:2b:5b:da:56:97:aa:d8:e4:fa:cb:6e: 6c:25:ed:52:c3:02:6f:83:79:7d:45:99:ea:08:1e: 34:6b:99:b8:03:7c:a3:da:94:e8:bd:10:25:a2:50: 56:9b:22:f5:19:44:8c:2b:e1:ed:df:78:65:48:30: f5:3a:03:2e:03:25:de:f3:ab:ad:87:59:0c:61:e4: 1f:a3:3b:83:08:d5:61:d4:b1:9a:1c:12:04:4a:29: 3e:cb:19:05:27:0a:40:8b:ed:42:e7:40:25:b4:da: 93:22:57:28:bb:1b:fe:06:f3:28:45:b7:f9:29:11: 86:39:76:0c:df:9d:21:82:d2:54:27:d8:66:2f:82: d4:8c:79:71:98:35:e3:d5:fa:39:3d:83:20:6e:05: f2:4e:1c:97:85:8d:9e:55:a8:06:2c:2a:ae:3a:86: 05:52:81:92:bd:70:a2:fe:c7:5c:61:1e:46:04:2e: a6:77:ba:3a:5a:86:c6:01:59:0d:60:a4:6f:03:a7: e7:e6:8f:ea:22:02:9f:97:5a:fe:2c:77:57:8b:e7: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:ac:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395670 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:01:bf:e2:21:54:ce:cc:dd:b5:4e:19:da:e2:57:b4:ec:96: 24:ab:a6:ef:de:f0:7a:6f:c3:a8:18:5a:12:fd:b1:8f:b3:8d: e5:fa:4e:b9:ad:6d:78:66:9c:3c:84:98:08:6f:12:d5:6e:df: 9c:a6:cd:6f:2c:8b:5f:2f:3d:ae:b1:4a:e8:2d:c3:c7:b8:bb: f0:db:2b:b1:d5:99:4c:84:28:48:c6:bd:bf:54:b3:0f:ab:b3: cd:02:11:40:77:fc:ab:18:0c:58:a5:a5:21:68:d6:73:20:44: 7c:97:67:45:ea:e7:e3:28:84:2a:71:15:74:c2:67:cc:98:ba: 6d:81:81:d9:61:29:e7:1e:b0:0e:a8:8c:ef:da:f6:3f:83:d9: 99:c4:1c:14:6f:a4:e6:58:1f:fc:32:e2:9b:bf:8c:e4:dc:94: 0e:e8:92:57:39:1c:aa:2b:90:25:3e:a0:a3:a8:03:a6:2a:1b: 3e:9f:f2:14:59:a4:c0:e6:4d:8e:5e:01:ce:43:7f:54:6f:f9: 8d:36:96:ed:b1:b6:ce:e1:d5:67:d5:5a:06:9f:c4:49:79:43: e6:b5:db:25:fb:70:d6:4b:dc:5d:c1:9e:67:38:d8:aa:5d:27: 31:e5:1b:0e:a1:47:dc:b6:77:f2:27:ca:50:89:ce:07:3f:2c: 3b:4d:45:9d -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEmf3QlMIU41BkQ/OCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyMzE5MTI0M1oXDTI3MDcyNzE5MTI0M1owLzEtMCsGA1UEAxMk NDI4MjBmMmUtMmViMS00MDQ5LTg2MzAtYjI3NjBlMGEwM2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YnZFsQloQ3yX9ncBZAOSi4ZnSuTAXE3Xtag UZizIvw2dCtecl+N9Icm0N4llX70K1vaVpeq2OT6y25sJe1SwwJvg3l9RZnqCB40 a5m4A3yj2pTovRAlolBWmyL1GUSMK+Ht33hlSDD1OgMuAyXe86uth1kMYeQfozuD CNVh1LGaHBIESik+yxkFJwpAi+1C50AltNqTIlcouxv+BvMoRbf5KRGGOXYM350h gtJUJ9hmL4LUjHlxmDXj1fo5PYMgbgXyThyXhY2eVagGLCquOoYFUoGSvXCi/sdc YR5GBC6md7o6WobGAVkNYKRvA6fn5o/qIgKfl1r+LHdXi+eRFwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFDxWQvZD8vi+n88hVHD/X2zqFlgbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 MjgyMGYyZS0yZWIxLTQwNDktODYzMC1iMjc2MGUwYTAzYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQyODIwZjJlLTJlYjEtNDA0OS04 NjMwLWIyNzYwZTBhMDNhMS80MjgyMGYyZS0yZWIxLTQwNDktODYzMC1iMjc2MGUw YTAzYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIACsIAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBgmWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAA0Bv+IhVM7M3bVOGdriV7TsliSrpu/e8Hpvw6gYWhL9 sY+zjeX6TrmtbXhmnDyEmAhvEtVu35ymzW8si18vPa6xSugtw8e4u/DbK7HVmUyE KEjGvb9Usw+rs80CEUB3/KsYDFilpSFo1nMgRHyXZ0Xq5+MohCpxFXTCZ8yYum2B gdlhKecesA6ojO/a9j+D2ZnEHBRvpOZYH/wy4pu/jOTclA7oklc5HKorkCU+oKOo A6YqGz6f8hRZpMDmTY5eAc5Df1Rv+Y02lu2xts7h1WfVWgafxEl5Q+a12yX7cNZL 3F3Bnmc42KpdJzHlGw6hR9y2d/InylCJzgc/LDtNRZ0= -----END CERTIFICATE-----Generated at Sun Oct 26 00:40:53 2025 by rpki-client