$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253.cer File: bcb5b54f-1a4d-4baf-89e1-873ab351e253.cer (raw, json) Hash identifier: u3QrcLgSZSPGU5fwP8alrT/6AmPWsXzCPbFRAn1HzL8= Subject key identifier: 1F:53:7A:B7:8B:4A:61:CD:A1:6B:D5:D1:6B:F8:C6:AA:2E:0C:C0:C2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848751058769845C2D846D02FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/bcb5b54f-1a4d-4baf-89e1-873ab351e253.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jan 2025 18:29:24 +0000 Certificate not after: Sun 11 Apr 2027 17:29:24 +0000 Subordinate resources: AS: 396250 IP: 2607:e940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:10:58:76:98:45:c2:d8:46:d0:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 6 18:29:24 2025 GMT Not After : Apr 11 17:29:24 2027 GMT Subject: CN=bcb5b54f-1a4d-4baf-89e1-873ab351e253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:33:f6:e5:81:3d:77:f8:93:f5:52:51:4a: 17:92:36:d8:93:4d:24:26:ad:44:6e:aa:01:66:5d: aa:73:fa:cc:05:1d:a8:1e:b8:a6:06:a1:34:71:3e: 07:88:75:2e:00:53:8b:01:53:2b:49:69:c1:69:b1: 9a:ee:01:0a:fe:30:df:b6:b9:7a:e7:3f:98:d7:ab: 63:79:03:82:eb:27:ea:eb:bd:20:f6:65:65:13:1d: 97:9c:d2:7c:93:ae:28:9a:a8:82:b1:32:89:35:02: c9:c5:0b:88:8c:62:2b:07:d4:e0:52:32:6c:2c:2d: 6e:50:0e:d8:4e:3d:db:09:52:ab:f0:41:40:a1:7b: fb:cf:f9:3d:46:18:d6:8a:fa:14:ed:e6:1c:73:f8: 86:57:87:a8:c2:57:d7:b6:df:26:7f:9f:7e:8f:66: 89:e9:c5:9d:5e:1d:6b:cb:00:fb:bd:7f:fd:75:e7: 1b:cb:b6:bd:9d:50:4f:36:7c:b9:c0:89:79:6f:ec: 97:0c:dd:1c:c5:59:ef:0f:52:fa:6f:44:19:c6:9c: 97:26:02:fe:b2:b7:21:30:89:3a:7f:e7:f1:0a:64: 72:48:e6:0a:6b:b7:d4:27:c2:aa:85:54:16:1d:6f: a0:25:5e:0e:84:18:a7:be:a4:f0:b9:68:51:d8:fb: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:53:7A:B7:8B:4A:61:CD:A1:6B:D5:D1:6B:F8:C6:AA:2E:0C:C0:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb5b54f-1a4d-4baf-89e1-873ab351e253/bcb5b54f-1a4d-4baf-89e1-873ab351e253.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2607:e940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396250 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9b:65:d1:62:a0:6d:50:b7:63:f5:0d:b5:80:f3:bb:64:c7: fe:7a:23:1e:f5:ce:51:a4:ae:d7:a3:cd:87:a3:ab:74:e1:67: 30:bf:e9:8d:b4:42:e7:b8:1f:d0:32:0b:c2:23:92:6b:14:23: 1f:74:0d:37:93:2d:54:77:31:d2:6c:6c:21:f1:51:5d:12:d9: bf:01:f9:fa:aa:b9:2f:6b:f3:bd:ef:6d:13:d9:fd:12:a5:12: ef:ae:69:2f:a1:b8:97:3f:84:e0:bb:bd:95:a6:be:eb:3f:5c: e6:a1:94:62:27:5c:ee:9a:5f:5e:8d:78:26:a1:10:fc:6d:71: 34:ca:d0:06:8f:d3:2b:81:3a:d0:05:dc:44:5b:61:85:78:0a: c4:d4:1e:ba:07:61:3f:03:26:4c:96:2b:f0:d1:d7:51:03:ff: 27:5f:63:b9:51:fa:e0:b6:ba:37:fe:e3:6b:38:42:aa:1f:5e: 39:7f:12:ab:65:99:15:52:37:b4:d4:d1:0e:9c:3b:3e:86:e2: 52:71:89:d8:32:04:2e:d6:5e:d8:fb:8e:13:b2:ab:43:1d:f6: c0:59:1e:6d:43:91:71:af:29:67:45:6c:d9:bf:69:b4:1c:85: 4f:c3:cb:f6:e3:d7:5a:67:73:db:24:61:2a:68:c1:c5:dd:e4: e5:49:28:5b -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEh1EFh2mEXC2EbQL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwNjE4MjkyNFoXDTI3MDQxMTE3MjkyNFowLzEtMCsGA1UEAxMk YmNiNWI1NGYtMWE0ZC00YmFmLTg5ZTEtODczYWIzNTFlMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaoz9uWBPXf4k/VSUUoXkjbYk00kJq1EbqoB Zl2qc/rMBR2oHrimBqE0cT4HiHUuAFOLAVMrSWnBabGa7gEK/jDftrl65z+Y16tj eQOC6yfq670g9mVlEx2XnNJ8k64omqiCsTKJNQLJxQuIjGIrB9TgUjJsLC1uUA7Y Tj3bCVKr8EFAoXv7z/k9RhjWivoU7eYcc/iGV4eowlfXtt8mf59+j2aJ6cWdXh1r ywD7vX/9decby7a9nVBPNny5wIl5b+yXDN0cxVnvD1L6b0QZxpyXJgL+srchMIk6 f+fxCmRySOYKa7fUJ8KqhVQWHW+gJV4OhBinvqTwuWhR2Ptu2wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFB9TereLSmHNoWvV0Wv4xqouDMDCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Y2I1YjU0Zi0xYTRkLTRiYWYtODllMS04NzNhYjM1MWUyNTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JjYjViNTRmLTFhNGQtNGJhZi04 OWUxLTg3M2FiMzUxZTI1My9iY2I1YjU0Zi0xYTRkLTRiYWYtODllMS04NzNhYjM1 MWUyNTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB+lAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYL2jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQArm2XRYqBtULdj9Q21gPO7ZMf+eiMe9c5RpK7Xo82Ho6t0 4Wcwv+mNtELnuB/QMgvCI5JrFCMfdA03ky1UdzHSbGwh8VFdEtm/Afn6qrkva/O9 720T2f0SpRLvrmkvobiXP4Tgu72Vpr7rP1zmoZRiJ1zuml9ejXgmoRD8bXE0ytAG j9MrgTrQBdxEW2GFeArE1B66B2E/AyZMlivw0ddRA/8nX2O5Ufrgtro3/uNrOEKq H145fxKrZZkVUje01NEOnDs+huJScYnYMgQu1l7Y+44TsqtDHfbAWR5tQ5Fxryln RWzZv2m0HIVPw8v249daZ3PbJGEqaMHF3eTlSShb -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:24 2025 by rpki-client