$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.cer File: eb1de40c-bc28-46a6-9184-ddc5da1f27e3.cer (raw, json) Hash identifier: 7uY0K9DwLEitNelaqK/GekHdZU9eWOqpayL5Uqxpilo= Subject key identifier: 75:79:D8:A3:21:32:CD:A0:94:AC:F3:82:5F:D4:DB:B5:2C:AB:04:74 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849FE56DBD96BE396C1310A6E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 May 2025 15:24:09 +0000 Certificate not after: Mon 30 Aug 2027 15:24:09 +0000 Subordinate resources: AS: 17324 IP: 2620:14d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:56:db:d9:6b:e3:96:c1:31:0a:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 27 15:24:09 2025 GMT Not After : Aug 30 15:24:09 2027 GMT Subject: CN=eb1de40c-bc28-46a6-9184-ddc5da1f27e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:69:f4:da:0a:26:76:4e:38:2b:99:b7:12:f3: c4:35:ed:ef:10:00:17:b0:f8:fa:e6:5d:67:2a:e6: 43:ab:a6:f9:dc:f4:78:95:f4:1f:f9:07:5d:3b:ef: ec:38:26:ac:1f:e1:37:ab:82:da:44:ba:8c:5d:85: a6:43:ad:35:f9:e3:93:f0:50:4e:f3:41:a2:0a:dc: 5a:3e:55:7e:23:33:ec:a5:7c:30:50:d2:64:aa:2d: e2:90:21:b3:e8:a8:ec:00:82:c6:dd:e7:45:d0:58: 68:9b:0a:8b:8c:19:ec:bc:01:3b:06:cb:aa:a2:7f: fd:5d:ec:d7:10:43:41:a8:fb:f0:43:a5:55:29:1e: bb:ba:ff:8c:cf:e9:b7:70:81:d7:31:73:b0:6d:14: 89:61:93:6e:fc:46:c9:59:39:74:93:db:a6:09:73: 03:28:a1:80:a5:33:77:53:75:fd:4a:23:ab:8a:2f: b5:14:3d:94:05:01:99:25:07:d9:e0:49:61:4e:6c: b1:58:9a:17:f7:9a:51:2e:ce:e1:4d:4f:bc:ef:c9: 49:08:05:70:4f:28:0d:a6:27:8a:03:8a:8c:72:e8: 1c:78:53:8b:de:f7:4d:43:60:b6:7e:bb:0d:db:07: 0d:19:3c:3f:f5:fd:af:a7:07:20:86:35:f8:86:9d: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:79:D8:A3:21:32:CD:A0:94:AC:F3:82:5F:D4:DB:B5:2C:AB:04:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:14d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17324 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ed:51:6b:dd:05:5f:6b:e9:98:8f:88:7a:90:9e:99:08:3d: 91:6b:39:84:10:b8:66:9c:e6:2b:70:8c:a6:64:2f:43:51:17: 8d:e3:db:84:d9:fd:54:9e:d4:c0:a0:7b:5e:3c:54:b6:cb:62: 5f:50:f3:19:32:86:02:ad:ee:0f:b4:fd:b0:64:3a:50:b6:81: e1:37:8e:69:f1:4d:95:89:21:29:11:19:1d:ff:e0:da:72:87: 09:65:70:e1:a5:c2:bf:b1:77:7e:58:11:57:c0:15:7f:a6:3d: 52:cb:4f:b8:36:ae:38:de:7d:65:f3:3d:62:89:ff:04:f4:68: 84:c0:a6:f6:99:ac:3b:b9:a3:93:28:6f:f6:0e:53:d6:38:aa: 4f:71:cb:d4:d3:56:ff:51:95:9d:64:b3:c9:59:4a:05:f2:c6: 11:f7:eb:18:98:a4:9a:ad:b1:28:8f:2f:06:ec:90:12:3f:ff: b8:f4:fe:fc:72:ac:28:8e:9c:55:f4:7c:9b:db:4a:7c:30:42: 2b:80:9b:69:20:53:20:44:42:41:36:81:94:40:87:f2:dc:13: 16:68:dd:23:23:14:c9:32:15:24:1e:05:ad:82:73:02:0f:10: f2:00:c0:1c:45:bf:31:14:b6:69:77:64:f1:85:b0:06:d6:a7: 39:53:a6:fc -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEn+VtvZa+OWwTEKboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUyNzE1MjQwOVoXDTI3MDgzMDE1MjQwOVowLzEtMCsGA1UEAxMk ZWIxZGU0MGMtYmMyOC00NmE2LTkxODQtZGRjNWRhMWYyN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimn02gomdk44K5m3EvPENe3vEAAXsPj65l1n KuZDq6b53PR4lfQf+QddO+/sOCasH+E3q4LaRLqMXYWmQ601+eOT8FBO80GiCtxa PlV+IzPspXwwUNJkqi3ikCGz6KjsAILG3edF0FhomwqLjBnsvAE7Bsuqon/9XezX EENBqPvwQ6VVKR67uv+Mz+m3cIHXMXOwbRSJYZNu/EbJWTl0k9umCXMDKKGApTN3 U3X9SiOrii+1FD2UBQGZJQfZ4ElhTmyxWJoX95pRLs7hTU+878lJCAVwTygNpieK A4qMcugceFOL3vdNQ2C2frsN2wcNGTw/9f2vpwcghjX4hp2IrwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFHV52KMhMs2glKzzgl/U27UsqwR0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l YjFkZTQwYy1iYzI4LTQ2YTYtOTE4NC1kZGM1ZGExZjI3ZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ViMWRlNDBjLWJjMjgtNDZhNi05 MTg0LWRkYzVkYTFmMjdlMy9lYjFkZTQwYy1iYzI4LTQ2YTYtOTE4NC1kZGM1ZGEx ZjI3ZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmIAFNADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJDrDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB+7VFr3QVfa+mYj4h6kJ6ZCD2RazmEELhmnOYrcIymZC9D UReN49uE2f1UntTAoHtePFS2y2JfUPMZMoYCre4PtP2wZDpQtoHhN45p8U2ViSEp ERkd/+DacocJZXDhpcK/sXd+WBFXwBV/pj1Sy0+4Nq443n1l8z1iif8E9GiEwKb2 maw7uaOTKG/2DlPWOKpPccvU01b/UZWdZLPJWUoF8sYR9+sYmKSarbEojy8G7JAS P/+49P78cqwojpxV9Hyb20p8MEIrgJtpIFMgREJBNoGUQIfy3BMWaN0jIxTJMhUk HgWtgnMCDxDyAMAcRb8xFLZpd2TxhbAG1qc5U6b8 -----END CERTIFICATE-----Generated at Sun Oct 26 00:37:54 2025 by rpki-client