$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798.cer File: bdbbe046-d490-45ba-874a-27181cb4b798.cer (raw, json) Hash identifier: uXkVJSDrfha5RKp3TImWNbziaDVoVdcDqrk1Ul6fLy0= Subject key identifier: 53:30:DA:7B:DE:0A:A0:09:B2:05:36:2F:7E:74:14:45:06:D3:CF:DB Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584991F7C8E28E36D2B7042E9100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798/bdbbe046-d490-45ba-874a-27181cb4b798.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 19:45:17 +0000 Certificate not after: Thu 22 Jul 2027 19:45:17 +0000 Subordinate resources: AS: 32071 IP: 2620:66:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:f7:c8:e2:8e:36:d2:b7:04:2e:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 18 19:45:17 2025 GMT Not After : Jul 22 19:45:17 2027 GMT Subject: CN=bdbbe046-d490-45ba-874a-27181cb4b798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:68:33:16:75:0d:a4:2e:40:c3:25:18:82: 7e:7a:6b:64:88:7c:7d:23:7e:8e:04:44:01:a8:2b: 1a:47:bf:81:00:d8:94:c6:f1:68:cd:6c:8e:65:4e: 04:3a:f1:8c:e6:f0:78:99:84:e6:50:49:2d:ad:99: ee:52:b9:34:aa:e9:5e:90:96:a4:9f:f5:d5:69:e3: 73:8f:1f:9e:66:49:56:9b:80:5c:45:39:38:0a:29: 3b:e3:ba:94:29:e8:59:9f:09:82:08:79:78:3f:fb: 30:ff:37:92:b3:46:39:6b:66:8a:f0:42:1f:e7:cd: 8a:6f:a7:43:ef:0e:67:73:7a:05:98:33:10:17:8a: 00:85:43:93:84:af:41:ea:aa:e7:59:8d:2e:1d:40: 95:d6:b5:f8:d7:54:74:91:b4:86:2f:fa:29:40:29: 37:ee:4d:1c:f6:a0:ea:22:8a:6d:bb:8e:93:8f:30: 0b:8d:38:bb:97:e1:4c:26:08:94:67:36:78:a3:83: fe:dc:e6:e9:85:4c:16:e8:42:72:33:42:59:17:f7: b4:68:d4:e5:48:4b:2e:29:2a:65:bc:92:38:f4:4e: ea:bd:90:3c:d7:d3:d3:34:e8:34:7c:67:91:32:4e: 07:d0:7f:3a:6f:f8:f2:6e:14:c7:48:ba:c2:36:db: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:DA:7B:DE:0A:A0:09:B2:05:36:2F:7E:74:14:45:06:D3:CF:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798/bdbbe046-d490-45ba-874a-27181cb4b798.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:66:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f7:bd:b3:53:74:e0:a0:dd:ea:64:11:02:bb:68:cf:93:9e: 92:1e:d7:f4:58:fa:03:2f:e8:1a:c4:08:50:4a:75:93:97:5f: 5f:b3:dd:f4:51:c5:a5:8c:ed:36:d8:c4:b1:7e:90:23:05:a2: d4:af:78:a6:09:60:4e:f0:72:35:86:cf:53:9f:da:fd:28:dd: 51:e0:1d:0c:78:b9:2d:13:a3:18:77:b4:84:19:0e:72:a8:00: a5:bf:6c:2c:73:0b:40:ca:35:fd:a1:76:ae:4e:89:59:3f:fd: ae:72:ca:cf:5c:4b:0d:33:5e:13:36:1a:a6:8d:5b:e2:7b:7e: dc:79:4e:82:cf:16:96:ef:59:23:63:c7:f3:f2:bb:cc:a0:e4: 53:0d:56:be:49:7f:85:41:a7:4c:86:15:66:7d:83:36:18:0e: 1e:82:99:fc:ac:60:0c:6f:ba:19:ea:6c:eb:8e:ae:24:57:d4: 14:72:ec:93:ac:41:4a:2a:10:10:38:f2:32:74:ac:36:13:ea: ab:48:33:cf:33:17:29:b2:bc:c6:b1:f9:36:ee:a7:59:be:1e: d9:0b:0b:27:fd:9d:8b:07:f1:26:d3:86:1e:7b:8d:78:b8:13: a8:ca:6a:c9:48:98:5b:70:41:ae:26:cd:93:6d:03:02:7e:ea: a6:ed:74:5e -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEmR98jijjbStwQukQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxODE5NDUxN1oXDTI3MDcyMjE5NDUxN1owLzEtMCsGA1UEAxMk YmRiYmUwNDYtZDQ5MC00NWJhLTg3NGEtMjcxODFjYjRiNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfJoMxZ1DaQuQMMlGIJ+emtkiHx9I36OBEQB qCsaR7+BANiUxvFozWyOZU4EOvGM5vB4mYTmUEktrZnuUrk0qulekJakn/XVaeNz jx+eZklWm4BcRTk4Cik747qUKehZnwmCCHl4P/sw/zeSs0Y5a2aK8EIf582Kb6dD 7w5nc3oFmDMQF4oAhUOThK9B6qrnWY0uHUCV1rX411R0kbSGL/opQCk37k0c9qDq Ioptu46TjzALjTi7l+FMJgiUZzZ4o4P+3ObphUwW6EJyM0JZF/e0aNTlSEsuKSpl vJI49E7qvZA819PTNOg0fGeRMk4H0H86b/jybhTHSLrCNtt/GQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFFMw2nveCqAJsgU2L350FEUG08/bMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i ZGJiZTA0Ni1kNDkwLTQ1YmEtODc0YS0yNzE4MWNiNGI3OTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2JkYmJlMDQ2LWQ0OTAtNDViYS04 NzRhLTI3MTgxY2I0Yjc5OC9iZGJiZTA0Ni1kNDkwLTQ1YmEtODc0YS0yNzE4MWNi NGI3OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIABmgAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICfUcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAKve9s1N04KDd6mQRArtoz5Oekh7X9Fj6Ay/oGsQIUEp1 k5dfX7Pd9FHFpYztNtjEsX6QIwWi1K94pglgTvByNYbPU5/a/SjdUeAdDHi5LROj GHe0hBkOcqgApb9sLHMLQMo1/aF2rk6JWT/9rnLKz1xLDTNeEzYapo1b4nt+3HlO gs8Wlu9ZI2PH8/K7zKDkUw1Wvkl/hUGnTIYVZn2DNhgOHoKZ/KxgDG+6Geps646u JFfUFHLsk6xBSioQEDjyMnSsNhPqq0gzzzMXKbK8xrH5Nu6nWb4e2QsLJ/2diwfx JtOGHnuNeLgTqMpqyUiYW3BBribNk20DAn7qpu10Xg== -----END CERTIFICATE-----Generated at Sun Oct 26 00:41:45 2025 by rpki-client