$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer File: afa71238-3202-40f6-8fdd-d9505c5a8635.cer (raw, json) Hash identifier: e/EyvR1Ltq844/CdZPoqpqYy5hn/PzgtraTCnruYcts= Subject key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848DC7D81A6AF53AE8A8172FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 19:37:36 +0000 Certificate not after: Tue 18 May 2027 18:37:36 +0000 Subordinate resources: AS: 401523 IP: 2620:d0:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dc:7d:81:a6:af:53:ae:8a:81:72:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 12 19:37:36 2025 GMT Not After : May 18 18:37:36 2027 GMT Subject: CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a1:c3:b1:8a:3e:a8:46:52:4e:c3:6e:3f:d1: d2:4c:25:db:bf:ef:c6:b9:34:15:70:7d:c2:27:94: 9c:bd:c1:fe:41:cb:0e:ea:2f:ba:41:ad:68:4f:34: fb:4c:eb:84:0c:b5:39:7f:7e:d9:fb:88:41:70:d5: 8c:5a:de:a3:54:ae:4a:45:3c:31:24:af:68:64:9a: 24:d1:ed:11:8e:8f:7a:f9:20:ee:37:46:34:f4:69: 04:ee:b9:88:4e:88:60:26:15:e5:c0:ee:c0:3e:02: 00:96:5d:31:28:19:68:ef:2c:bb:50:41:65:6d:03: 3d:23:ad:41:aa:f6:12:ca:cd:9c:51:1c:f0:f8:48: 66:a9:1a:bf:3b:ae:e4:d7:05:8d:5b:ae:4b:aa:6c: 0e:f8:a8:3a:9f:b5:09:d5:08:b6:5e:e8:ea:c9:73: 23:dc:f5:eb:84:6c:55:57:da:25:81:84:ce:e8:f4: 6a:e8:f1:fb:90:c2:66:f9:aa:27:49:d7:45:77:2f: f3:93:f0:2c:2d:7e:15:00:90:a2:28:92:8e:09:3b: c0:13:a1:9a:fa:2b:bb:c0:94:51:ce:34:a2:72:d0: 6b:6b:59:08:a6:b1:63:b0:4e:fc:37:f5:e8:5e:2b: fa:99:09:4a:3a:ed:0a:6b:f7:1a:ae:8e:ce:36:0f: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2620:d0:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401523 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c1:cd:dc:4b:90:93:84:4e:57:72:bc:82:bf:e3:d4:1a:62: f0:ad:8e:7a:5f:29:42:1f:1e:e8:60:8b:af:e5:e0:b5:86:46: 7c:5b:af:6c:28:cf:bf:23:09:b9:b0:1f:bf:ac:15:42:c3:e1: 73:22:3c:31:e8:1a:10:a8:da:47:20:03:20:4b:f6:8d:d0:45: 99:84:91:7e:1b:cf:2f:1c:91:13:d7:56:c1:0f:44:31:b0:09: 49:94:61:1f:43:01:b0:bc:a9:d5:90:bf:a4:17:fb:58:c3:cd: f7:41:06:c9:ee:0f:ff:4c:a1:0d:16:b1:64:7c:b9:18:2d:75: b8:a6:f1:50:57:ba:1e:d0:14:f4:56:0f:92:73:d1:60:18:f6: 70:00:f9:12:7a:e8:f3:f7:b5:c2:9a:91:1e:e0:3e:e1:25:e3: 15:23:5f:5b:ff:bc:58:ec:ff:0c:05:9f:b5:49:0b:a3:79:c7: 9f:1a:17:ba:e7:56:58:4d:58:9a:5d:a5:b5:d1:15:e5:60:5b: 4c:b7:3f:e6:61:2a:fa:e3:4f:80:04:31:35:59:5d:63:53:de: 9d:33:a7:ac:7f:6d:9a:64:92:b5:59:e8:16:49:6c:3d:8c:fe: 59:75:e5:9e:21:1c:9f:51:72:ef:69:f0:a8:cb:19:4d:b7:6e: 7c:89:10:85 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEjcfYGmr1OuioFy/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMjE5MzczNloXDTI3MDUxODE4MzczNlowLzEtMCsGA1UEAxMk YWZhNzEyMzgtMzIwMi00MGY2LThmZGQtZDk1MDVjNWE4NjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KHDsYo+qEZSTsNuP9HSTCXbv+/GuTQVcH3C J5ScvcH+QcsO6i+6Qa1oTzT7TOuEDLU5f37Z+4hBcNWMWt6jVK5KRTwxJK9oZJok 0e0Rjo96+SDuN0Y09GkE7rmITohgJhXlwO7APgIAll0xKBlo7yy7UEFlbQM9I61B qvYSys2cURzw+EhmqRq/O67k1wWNW65LqmwO+Kg6n7UJ1Qi2XujqyXMj3PXrhGxV V9olgYTO6PRq6PH7kMJm+aonSddFdy/zk/AsLX4VAJCiKJKOCTvAE6Ga+iu7wJRR zjSictBra1kIprFjsE78N/XoXiv6mQlKOu0Ka/caro7ONg/3ZwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFFv2YZ3EylQKIfKRXeLOnvgeuHmPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h ZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1YTg2MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FmYTcxMjM4LTMyMDItNDBmNi04 ZmRkLWQ5NTA1YzVhODYzNS9hZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1 YTg2MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADQ4AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiBzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAGLBzdxLkJOETldyvIK/49QaYvCtjnpfKUIfHuhgi6/l 4LWGRnxbr2woz78jCbmwH7+sFULD4XMiPDHoGhCo2kcgAyBL9o3QRZmEkX4bzy8c kRPXVsEPRDGwCUmUYR9DAbC8qdWQv6QX+1jDzfdBBsnuD/9MoQ0WsWR8uRgtdbim 8VBXuh7QFPRWD5Jz0WAY9nAA+RJ66PP3tcKakR7gPuEl4xUjX1v/vFjs/wwFn7VJ C6N5x58aF7rnVlhNWJpdpbXRFeVgW0y3P+ZhKvrjT4AEMTVZXWNT3p0zp6x/bZpk krVZ6BZJbD2M/ll15Z4hHJ9Rcu9p8KjLGU23bnyJEIU= -----END CERTIFICATE-----Generated at Fri Apr 4 19:28:33 2025 by rpki-client