$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074.cer File: 70dc2956-fb1c-4553-a350-34a7af11a074.cer (raw, json) Hash identifier: SxsBpeCirX4R/H4IQBWICpQe/BE0ICKe6ja2HcoMvxY= Subject key identifier: FE:2E:65:F2:CC:D2:5E:EF:03:5C:33:14:86:01:54:6E:38:D1:05:0C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849518A83AA830F07680B7A1D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074/70dc2956-fb1c-4553-a350-34a7af11a074.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Mar 2025 17:53:23 +0000 Certificate not after: Tue 29 Jun 2027 17:53:23 +0000 Subordinate resources: AS: 400696 IP: 2602:f6e9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:8a:83:aa:83:0f:07:68:0b:7a:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 26 17:53:23 2025 GMT Not After : Jun 29 17:53:23 2027 GMT Subject: CN=70dc2956-fb1c-4553-a350-34a7af11a074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:38:c1:c8:05:ba:4a:c8:59:0f:6a:90:d6:03: 6c:e7:84:9e:70:00:1a:a9:dd:36:7c:8c:53:eb:7d: 29:4d:55:bd:fd:f6:d7:93:eb:a8:eb:7e:94:bb:37: 23:e6:b5:47:38:96:ab:f6:16:a2:cb:47:29:03:9f: aa:44:32:aa:a1:46:c1:aa:6b:91:92:80:17:f7:6a: a6:f7:15:f4:da:f2:38:27:eb:c6:69:e7:23:80:b8: b0:15:3e:ca:79:97:0d:96:1a:d4:70:6c:92:15:65: 94:45:c3:91:96:a3:50:8f:5d:d2:06:bd:0b:81:12: 29:60:3e:c5:3f:d8:44:6c:22:64:32:1f:73:ab:7a: 0c:78:e0:21:6a:c6:15:2b:62:b2:a5:e4:dc:c2:93: 6e:59:47:84:a5:67:c3:84:f4:7c:fc:c5:a1:00:f3: 14:b0:74:c0:b2:93:a1:36:70:e5:db:cd:30:14:ef: 5a:5a:5e:56:d2:5a:e8:8f:30:7e:16:82:ed:23:f6: 53:6b:18:3a:fb:10:97:87:ac:ee:76:3e:7c:bb:77: 0d:1f:91:bb:a9:87:e8:3d:69:b7:1b:97:08:f0:7d: a4:f7:e2:1c:0c:8a:91:06:84:88:c4:05:f6:bb:0d: 28:58:77:cd:5d:39:eb:56:f3:d7:03:f5:d5:18:b5: b6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:65:F2:CC:D2:5E:EF:03:5C:33:14:86:01:54:6E:38:D1:05:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074/70dc2956-fb1c-4553-a350-34a7af11a074.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6e9::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400696 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8c:34:ca:51:df:7b:2f:ef:f9:3e:cb:1d:6f:8f:47:51:32: 1e:6d:6c:4d:78:5d:c4:c4:09:7a:f7:0b:81:31:89:01:cb:27: df:c9:d2:e6:f9:4d:ad:f7:44:18:3e:33:a9:44:12:76:57:bf: e3:2f:55:79:f9:c5:a6:51:3b:ee:d9:ce:fe:ac:25:b2:52:8a: 6a:29:ba:1c:12:ba:30:af:20:85:ee:56:89:b7:83:c3:13:b8: 2f:24:f6:67:33:fe:f9:0c:86:6e:d8:5f:db:6d:8f:37:76:a7: 3c:e0:c7:71:38:b3:5c:b0:42:f5:de:d5:c8:93:5b:db:59:44: 2e:cb:38:22:00:13:fd:43:07:93:88:ba:56:3d:15:e8:38:d3: 21:12:7a:e6:ea:3e:74:13:73:46:11:c9:37:a3:f6:f7:d7:be: 38:c7:2e:f6:ef:92:76:3b:0a:94:4a:ff:c2:15:cf:4f:e7:8b: d1:a0:00:94:3b:b5:24:29:d5:ac:b9:81:f7:97:be:42:5b:52: f8:2e:16:80:f6:7e:80:2a:17:89:4f:9d:77:b6:36:54:65:a1: 50:05:d9:5c:8b:23:7c:c9:94:08:b2:b9:40:4d:ac:98:f9:a6: dc:cf:ff:95:7c:da:aa:7c:a6:dc:55:57:bd:d6:63:c8:4d:03: f3:26:d6:f2 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWElRioOqgw8HaAt6HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNjE3NTMyM1oXDTI3MDYyOTE3NTMyM1owLzEtMCsGA1UEAxMk NzBkYzI5NTYtZmIxYy00NTUzLWEzNTAtMzRhN2FmMTFhMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzjByAW6SshZD2qQ1gNs54SecAAaqd02fIxT 630pTVW9/fbXk+uo636Uuzcj5rVHOJar9haiy0cpA5+qRDKqoUbBqmuRkoAX92qm 9xX02vI4J+vGaecjgLiwFT7KeZcNlhrUcGySFWWURcORlqNQj13SBr0LgRIpYD7F P9hEbCJkMh9zq3oMeOAhasYVK2KypeTcwpNuWUeEpWfDhPR8/MWhAPMUsHTAspOh NnDl280wFO9aWl5W0lrojzB+FoLtI/ZTaxg6+xCXh6zudj58u3cNH5G7qYfoPWm3 G5cI8H2k9+IcDIqRBoSIxAX2uw0oWHfNXTnrVvPXA/XVGLW2bwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFP4uZfLM0l7vA1wzFIYBVG440QUMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 MGRjMjk1Ni1mYjFjLTQ1NTMtYTM1MC0zNGE3YWYxMWEwNzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzcwZGMyOTU2LWZiMWMtNDU1My1h MzUwLTM0YTdhZjExYTA3NC83MGRjMjk1Ni1mYjFjLTQ1NTMtYTM1MC0zNGE3YWYx MWEwNzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvbpADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGHTgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAWIw0ylHfey/v+T7LHW+PR1EyHm1sTXhdxMQJevcLgTGJ Acsn38nS5vlNrfdEGD4zqUQSdle/4y9VefnFplE77tnO/qwlslKKaim6HBK6MK8g he5WibeDwxO4LyT2ZzP++QyGbthf222PN3anPODHcTizXLBC9d7VyJNb21lELss4 IgAT/UMHk4i6Vj0V6DjTIRJ65uo+dBNzRhHJN6P299e+OMcu9u+SdjsKlEr/whXP T+eL0aAAlDu1JCnVrLmB95e+QltS+C4WgPZ+gCoXiU+dd7Y2VGWhUAXZXIsjfMmU CLK5QE2smPmm3M//lXzaqnym3FVXvdZjyE0D8ybW8g== -----END CERTIFICATE-----Generated at Fri Apr 4 16:25:02 2025 by rpki-client