$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e.cer File: f5248dde-d307-4c48-8e01-6ae16aba8b6e.cer (raw, json) Hash identifier: i5gQ5sfRODcLEoY6AxCNPqtMrpmtoZCmdSLkLCIKj5Y= Subject key identifier: 4E:10:76:0D:13:45:E0:3E:CD:AD:2B:BF:91:D4:71:03:9C:20:4A:28 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584937A3A694AA50F90B7A818A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e/f5248dde-d307-4c48-8e01-6ae16aba8b6e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Mar 2025 11:13:01 +0000 Certificate not after: Sun 20 Jun 2027 11:13:01 +0000 Subordinate resources: AS: 36605 IP: 2602:f6c5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:a3:a6:94:aa:50:f9:0b:7a:81:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 17 11:13:01 2025 GMT Not After : Jun 20 11:13:01 2027 GMT Subject: CN=f5248dde-d307-4c48-8e01-6ae16aba8b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:d5:bd:9b:8b:68:49:83:40:c4:a3:c9:43: 2a:e3:3c:ca:ff:30:63:88:c5:aa:aa:9f:08:9c:8a: 6b:14:34:f3:02:70:07:f4:df:af:d0:eb:31:db:01: 9e:37:cf:8a:b6:0d:fe:97:c3:81:ca:3e:85:27:af: e4:c4:05:20:f2:25:15:6f:68:eb:f4:e0:fc:c2:dd: df:39:c3:7c:0f:9c:39:48:2d:e7:85:c9:53:43:69: 8a:12:4a:69:fb:99:8b:ab:72:5b:f4:31:a0:3b:5d: 92:8b:fd:d4:d9:99:24:62:2b:41:f2:cd:3f:af:c1: e6:7a:5b:f2:41:74:e1:9d:8f:d1:af:6c:81:23:b3: 58:f4:6a:35:81:5e:b1:23:55:5b:9f:d6:1e:51:ee: d0:b6:e8:92:33:90:fe:df:23:ee:95:0d:15:5a:45: a3:f1:19:02:3c:f1:b5:fd:7c:2b:72:72:b5:b2:64: 2a:40:16:66:dd:64:a5:ff:a1:de:82:e4:11:17:4b: 65:a7:7f:c1:ee:0c:1f:c9:83:99:7d:80:21:df:c5: 1b:6c:7c:05:d7:69:00:c3:f0:f0:02:a9:81:d2:a4: 4e:0e:fa:4f:88:6d:a6:1d:88:78:c3:85:34:d7:a0: 48:f3:19:41:77:be:e6:35:32:14:82:6f:d0:1f:95: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:10:76:0D:13:45:E0:3E:CD:AD:2B:BF:91:D4:71:03:9C:20:4A:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e/f5248dde-d307-4c48-8e01-6ae16aba8b6e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6c5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36605 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b2:42:4b:1c:20:08:c6:64:7f:cb:de:48:ab:02:1c:57:7a: ab:45:b7:6a:ed:0c:cc:75:dc:fc:89:ac:04:2e:a8:7e:b9:ec: 8f:80:90:a3:3e:1a:ae:1c:1a:a3:90:26:ce:60:10:af:92:dd: c8:dc:58:58:b1:44:26:3a:48:95:0e:f8:2c:1c:68:be:0f:da: d6:a2:87:7e:43:f5:6a:3d:1e:c0:91:8b:b2:1a:11:3c:47:bb: 10:16:00:11:f7:b4:2d:6c:5e:7b:36:ea:b2:e6:e0:ef:b7:63: f5:c5:98:35:20:b2:25:67:b9:e7:0e:7a:b0:d7:d1:da:d8:b8: 74:9e:b0:cf:58:23:b7:b4:c0:d5:ca:d5:84:d4:59:56:a0:57: fb:e4:5e:a7:13:26:b2:f1:69:fa:33:ea:b2:72:7e:a8:2b:b3: 36:10:dd:af:c9:aa:dd:9d:e1:f1:3d:d3:4e:e6:d9:58:c4:25: 65:5d:63:91:e7:29:03:27:99:0e:88:94:68:60:e1:9c:7b:9e: 6e:b4:ad:6b:19:dc:28:f3:ba:47:7f:c9:16:98:38:44:e7:5f: 53:e6:d7:e4:36:86:72:85:06:d7:39:aa:c1:1b:fc:c1:e3:ce: e3:78:97:0a:3c:d1:94:e7:cb:ad:e2:01:b4:c2:c0:e0:2d:62: 37:67:56:f7 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEk3o6aUqlD5C3qBioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxNzExMTMwMVoXDTI3MDYyMDExMTMwMVowLzEtMCsGA1UEAxMk ZjUyNDhkZGUtZDMwNy00YzQ4LThlMDEtNmFlMTZhYmE4YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqTVvZuLaEmDQMSjyUMq4zzK/zBjiMWqqp8I nIprFDTzAnAH9N+v0Osx2wGeN8+Ktg3+l8OByj6FJ6/kxAUg8iUVb2jr9OD8wt3f OcN8D5w5SC3nhclTQ2mKEkpp+5mLq3Jb9DGgO12Si/3U2ZkkYitB8s0/r8Hmelvy QXThnY/Rr2yBI7NY9Go1gV6xI1Vbn9YeUe7QtuiSM5D+3yPulQ0VWkWj8RkCPPG1 /XwrcnK1smQqQBZm3WSl/6HeguQRF0tlp3/B7gwfyYOZfYAh38UbbHwF12kAw/Dw AqmB0qRODvpPiG2mHYh4w4U016BI8xlBd77mNTIUgm/QH5XDUwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFE4Qdg0TReA+za0rv5HUcQOcIEooMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m NTI0OGRkZS1kMzA3LTRjNDgtOGUwMS02YWUxNmFiYThiNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y1MjQ4ZGRlLWQzMDctNGM0OC04 ZTAxLTZhZTE2YWJhOGI2ZS9mNTI0OGRkZS1kMzA3LTRjNDgtOGUwMS02YWUxNmFi YThiNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvbFADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAjv0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACbJCSxwgCMZkf8veSKsCHFd6q0W3au0MzHXc/ImsBC6o frnsj4CQoz4arhwao5AmzmAQr5LdyNxYWLFEJjpIlQ74LBxovg/a1qKHfkP1aj0e wJGLshoRPEe7EBYAEfe0LWxeezbqsubg77dj9cWYNSCyJWe55w56sNfR2ti4dJ6w z1gjt7TA1crVhNRZVqBX++RepxMmsvFp+jPqsnJ+qCuzNhDdr8mq3Z3h8T3TTubZ WMQlZV1jkecpAyeZDoiUaGDhnHuebrStaxncKPO6R3/JFpg4ROdfU+bX5DaGcoUG 1zmqwRv8wePO43iXCjzRlOfLreIBtMLA4C1iN2dW9w== -----END CERTIFICATE-----Generated at Fri Apr 4 19:16:12 2025 by rpki-client