$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer File: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer (raw, json) Hash identifier: yOMNHvDenNrm9iYBqIzSuFprkHs59QXY8QCBTrI2Wyk= Subject key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858493B44A375CD9AA3A8BE4A8100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 18:24:49 +0000 Certificate not after: Mon 21 Jun 2027 18:24:49 +0000 Subordinate resources: AS: 25968 IP: 2620:7b::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:44:a3:75:cd:9a:a3:a8:be:4a:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 18 18:24:49 2025 GMT Not After : Jun 21 18:24:49 2027 GMT Subject: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:32:58:f5:99:3b:e4:24:0b:f5:e3:3a:e5: 79:39:4c:e7:02:2f:f6:af:c8:2e:d4:cf:37:f7:19: 46:a5:c8:f5:a9:b3:70:3b:85:f4:fc:23:a8:23:95: 0a:48:8c:ed:ec:da:71:3f:bf:f7:41:84:0c:4e:57: 70:61:a5:74:e8:39:32:f9:a0:b4:88:b3:ce:bb:67: f8:79:a3:0d:58:a5:f9:f0:26:e4:40:5e:a6:bd:38: b5:a0:1a:d8:37:34:93:c1:f3:fc:11:80:27:97:3a: a6:ff:b9:82:c6:0f:9d:23:9b:79:92:7d:a9:28:d8: 07:89:7e:4a:24:0e:16:3c:19:5a:c5:6f:67:97:77: 70:73:7f:26:01:d2:cd:9c:5c:9c:6a:09:b4:1d:64: a1:9f:03:c0:b7:c6:b2:8e:37:2c:d1:6e:83:56:71: 48:e1:cd:de:da:86:d3:a5:85:7a:7d:db:ed:bd:c2: 0c:e8:08:93:a5:84:9b:e1:44:cc:08:47:9f:bd:36: 31:95:64:21:10:fb:5a:8d:b6:92:3a:fe:3d:19:a7: ab:81:01:54:85:7b:ae:77:ff:94:2c:40:86:5c:c3: 95:5b:9e:2b:f6:3d:05:e7:63:8f:f8:31:b1:5d:ea: 4d:10:0d:66:57:6b:b4:1f:fa:08:68:e9:d4:f1:1a: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2620:7b::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25968 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ea:a4:c3:bd:a2:27:90:35:4a:68:19:81:4a:c4:33:f4:09: c6:52:d2:fc:2f:60:be:41:01:f4:5b:1b:a0:63:3c:1e:f5:8b: 60:92:10:86:35:7b:23:be:4b:67:c6:d3:24:9b:c2:85:9b:35: af:43:2d:3e:b5:5b:94:6c:79:fe:0c:27:88:70:2c:b3:99:c7: 8e:97:d5:5a:6f:a8:81:f0:2f:ff:dd:48:86:21:a9:4a:a6:77: 10:96:01:71:da:4f:ec:0e:5c:b9:22:7d:28:95:7a:c5:58:3b: a1:7a:e2:6e:ad:55:b8:e4:91:6d:11:2f:24:e0:bd:c8:65:b6: d8:be:f5:73:0a:a8:03:94:b0:e4:47:84:08:d4:c5:f9:2e:b4: fa:cb:ab:3f:fa:12:cb:99:f4:19:23:8d:d9:1c:73:6f:fb:ec: aa:09:69:05:e1:fd:6e:c1:3a:48:4d:85:00:bb:21:7e:56:5b: 19:af:64:0a:36:95:06:f3:26:7a:62:56:19:31:8d:30:24:bd: 1b:40:49:91:77:91:c4:11:19:7f:f5:5e:04:b3:29:b8:c2:f6: 31:8e:ee:33:ad:5f:51:b6:d7:23:29:e3:9a:41:32:76:96:20: c1:68:14:ac:97:3e:02:c5:b0:26:d3:e6:d7:62:7d:3b:1f:6f: 9b:07:6c:8c -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEk7RKN1zZqjqL5KgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxODE4MjQ0OVoXDTI3MDYyMTE4MjQ0OVowLzEtMCsGA1UEAxMk MzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4AyWPWZO+QkC/XjOuV5OUznAi/2r8gu1M83 9xlGpcj1qbNwO4X0/COoI5UKSIzt7NpxP7/3QYQMTldwYaV06Dky+aC0iLPOu2f4 eaMNWKX58CbkQF6mvTi1oBrYNzSTwfP8EYAnlzqm/7mCxg+dI5t5kn2pKNgHiX5K JA4WPBlaxW9nl3dwc38mAdLNnFycagm0HWShnwPAt8ayjjcs0W6DVnFI4c3e2obT pYV6fdvtvcIM6AiTpYSb4UTMCEefvTYxlWQhEPtajbaSOv49GaergQFUhXuud/+U LECGXMOVW54r9j0F52OP+DGxXepNEA1mV2u0H/oIaOnU8RqNEwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFBGE8jMduyUp9TE6aLmPGf8CCu9WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z Mjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzMyNzhlNzA4LWQxMjgtNDc5MC1h OGUzLTFlMGY0YTFhNmY0YS8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGEx YTZmNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAB7AAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICZXAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAieqkw72iJ5A1SmgZgUrEM/QJxlLS/C9gvkEB9FsboGM8 HvWLYJIQhjV7I75LZ8bTJJvChZs1r0MtPrVblGx5/gwniHAss5nHjpfVWm+ogfAv /91IhiGpSqZ3EJYBcdpP7A5cuSJ9KJV6xVg7oXribq1VuOSRbREvJOC9yGW22L71 cwqoA5Sw5EeECNTF+S60+surP/oSy5n0GSON2Rxzb/vsqglpBeH9bsE6SE2FALsh flZbGa9kCjaVBvMmemJWGTGNMCS9G0BJkXeRxBEZf/VeBLMpuML2MY7uM61fUbbX IynjmkEydpYgwWgUrJc+AsWwJtPm12J9Ox9vmwdsjA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:21 2025 by rpki-client