$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93.cer File: e141f9d6-8504-48ca-bc47-c44959796c93.cer (raw, json) Hash identifier: u10TkqI1hdPc7X6Ejjm62ZcH2B4pXPZ6xRhaCiS/6CM= Subject key identifier: 6F:78:E7:8A:5C:E8:93:52:9C:E5:16:2E:03:55:F0:23:BC:C1:74:47 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848ECD7C84CB8FA0271BEB83010 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/e141f9d6-8504-48ca-bc47-c44959796c93.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 16:12:26 +0000 Certificate not after: Wed 19 May 2027 13:50:38 +0000 Subordinate resources: AS: 33063 IP: 2604:3e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:d7:c8:4c:b8:fa:02:71:be:b8:30:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 18 16:12:26 2025 GMT Not After : May 19 13:50:38 2027 GMT Subject: CN=e141f9d6-8504-48ca-bc47-c44959796c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:6e:d8:1f:f9:c5:c6:62:5b:c0:ef:31:fe: 84:73:c8:1b:64:02:69:09:2e:f6:f0:4f:38:99:3a: 1e:6a:f5:71:29:9f:f1:eb:f8:f9:98:14:8a:31:84: e7:86:74:37:89:ee:a5:12:75:39:1d:52:c9:44:22: f9:6b:83:c1:82:17:05:58:c8:27:09:0f:2c:61:cf: 1b:6d:97:c6:5c:5e:51:43:1c:a9:9c:5c:9d:42:6e: fe:fa:c8:14:2f:4a:41:f7:83:c4:59:83:01:3e:90: 62:26:29:67:95:78:ba:7a:17:9e:f2:8e:87:0d:88: 3b:6c:10:1a:f5:0c:39:c7:f5:c6:92:e5:c3:0c:0a: e9:71:7c:a0:41:95:30:d3:fb:af:cb:5b:5b:c6:2a: 5e:d8:3c:01:c3:d2:2d:80:a2:38:5b:22:3b:4c:9e: 11:1d:f1:d0:d7:88:75:ee:25:2a:9c:ed:c8:1e:68: 31:21:bd:cc:57:59:20:6d:6a:11:cb:bc:b3:44:c2: 4f:9a:6f:70:da:3b:a6:9b:bc:d2:3c:5f:d7:13:34: 30:9c:c3:12:66:f1:93:73:de:11:08:03:d8:36:ed: ee:67:df:45:90:4c:4d:14:48:71:34:f3:24:fc:b9: 2a:c5:97:04:1e:84:ce:96:34:67:da:a4:f5:08:bf: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:78:E7:8A:5C:E8:93:52:9C:E5:16:2E:03:55:F0:23:BC:C1:74:47 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e141f9d6-8504-48ca-bc47-c44959796c93/e141f9d6-8504-48ca-bc47-c44959796c93.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2604:3e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33063 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1f:b6:69:3d:c4:39:02:2a:93:5d:90:f5:22:31:45:0e:c0: 0b:91:9d:89:7a:a3:63:d0:2f:62:70:a8:fd:28:72:3b:c5:9c: 1f:95:6a:6d:b6:5d:0d:ef:b7:0e:30:17:ff:e2:cf:30:2c:b9: 08:2d:06:db:80:8d:4a:36:74:a2:69:51:3e:59:0f:a1:bb:5c: 92:6d:03:a8:57:17:0e:c8:4b:9e:ea:c6:36:71:c7:54:a0:a5: d2:37:19:1e:11:6d:e9:b5:db:42:23:19:4c:23:31:37:57:c5: b6:04:fc:29:8e:08:a0:30:1a:c3:5a:37:71:5d:d3:93:e4:6b: d7:a8:41:95:04:80:ec:ef:7e:52:75:03:a4:2a:19:2a:bb:41: b7:86:5c:ad:97:01:1c:31:bc:cf:5b:3b:23:77:3c:18:e5:c8: e9:18:e1:9f:2b:6e:31:80:ad:ea:a5:b8:70:f5:08:e6:9a:4e: 57:03:f5:90:37:7d:a3:6e:7a:2e:58:4f:0d:71:64:15:41:27: 01:be:fa:58:2c:4c:3e:33:36:f6:54:ce:bd:0c:fb:80:25:d6: de:29:ed:87:a1:3c:f9:a0:77:e0:2f:ec:9c:2b:84:93:e7:fc: f0:84:df:5b:56:5a:9f:0e:e9:7c:e9:16:99:9b:79:68:26:08: ed:92:14:1c -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEjs18hMuPoCcb64MBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxODE2MTIyNloXDTI3MDUxOTEzNTAzOFowLzEtMCsGA1UEAxMk ZTE0MWY5ZDYtODUwNC00OGNhLWJjNDctYzQ0OTU5Nzk2YzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJVu2B/5xcZiW8DvMf6Ec8gbZAJpCS728E84 mToeavVxKZ/x6/j5mBSKMYTnhnQ3ie6lEnU5HVLJRCL5a4PBghcFWMgnCQ8sYc8b bZfGXF5RQxypnFydQm7++sgUL0pB94PEWYMBPpBiJilnlXi6ehee8o6HDYg7bBAa 9Qw5x/XGkuXDDArpcXygQZUw0/uvy1tbxipe2DwBw9ItgKI4WyI7TJ4RHfHQ14h1 7iUqnO3IHmgxIb3MV1kgbWoRy7yzRMJPmm9w2jumm7zSPF/XEzQwnMMSZvGTc94R CAPYNu3uZ99FkExNFEhxNPMk/LkqxZcEHoTOljRn2qT1CL/BIQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFG9454pc6JNSnOUWLgNV8CO8wXRHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l MTQxZjlkNi04NTA0LTQ4Y2EtYmM0Ny1jNDQ5NTk3OTZjOTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2UxNDFmOWQ2LTg1MDQtNDhjYS1i YzQ3LWM0NDk1OTc5NmM5My9lMTQxZjlkNi04NTA0LTQ4Y2EtYmM0Ny1jNDQ5NTk3 OTZjOTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBAPgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCBJzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBKH7ZpPcQ5AiqTXZD1IjFFDsALkZ2JeqNj0C9icKj9KHI7 xZwflWpttl0N77cOMBf/4s8wLLkILQbbgI1KNnSiaVE+WQ+hu1ySbQOoVxcOyEue 6sY2ccdUoKXSNxkeEW3ptdtCIxlMIzE3V8W2BPwpjgigMBrDWjdxXdOT5GvXqEGV BIDs735SdQOkKhkqu0G3hlytlwEcMbzPWzsjdzwY5cjpGOGfK24xgK3qpbhw9Qjm mk5XA/WQN32jbnouWE8NcWQVQScBvvpYLEw+Mzb2VM69DPuAJdbeKe2HoTz5oHfg L+ycK4ST5/zwhN9bVlqfDul86RaZm3loJgjtkhQc -----END CERTIFICATE-----Generated at Fri Apr 4 19:33:45 2025 by rpki-client