$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2.cer File: 8ef65c6b-019c-42a7-a13b-f51faf49a9b2.cer (raw, json) Hash identifier: 2hmeJEQHpO3vrghMEE5/hryL1Un1VYxKY7UD4G7l0+U= Subject key identifier: 05:07:25:08:E8:CE:34:F9:38:14:F6:A0:B6:05:57:92:B4:FF:3E:7E Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858487B7E2E4F9330F84D2F8B1B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/8ef65c6b-019c-42a7-a13b-f51faf49a9b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jan 2025 01:45:33 +0000 Certificate not after: Wed 14 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 36506 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:7e:2e:4f:93:30:f8:4d:2f:8b:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jan 9 01:45:33 2025 GMT Not After : Apr 14 00:45:33 2027 GMT Subject: CN=8ef65c6b-019c-42a7-a13b-f51faf49a9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5c:89:5f:cb:20:11:3a:58:28:c3:4d:f9:31: 98:77:71:06:5d:07:14:0a:30:78:9b:b7:7a:05:47: 66:51:a0:0a:8f:bc:07:e7:57:7c:c1:7f:f0:18:33: 0a:f1:66:f2:41:c9:a8:f8:78:88:6a:9b:4f:f7:dc: 53:07:97:6c:40:9d:6d:8e:51:8b:c1:bd:c6:15:df: 17:55:3e:1d:9a:af:aa:e2:b3:35:e6:b1:15:0c:f7: b8:d7:ee:a0:ce:d6:7d:2b:21:69:e4:2d:0a:6d:2c: 88:95:60:6d:72:fd:01:a6:fd:72:28:69:3f:e2:c9: eb:13:cd:57:60:6d:6f:c1:56:58:84:f3:c6:d6:e2: da:97:eb:a3:24:fe:9b:25:06:55:60:f0:eb:41:de: 1d:a1:d3:4c:2f:59:9b:9b:0c:8f:75:c8:9a:02:b0: ac:27:0d:af:40:49:ef:56:98:9c:76:1c:01:94:ab: fe:97:b6:39:3f:7c:01:cc:41:3c:24:c4:9f:5c:58: 4f:47:08:92:b5:5f:a8:d9:94:c6:34:11:e9:88:d3: d0:0b:24:ff:c8:e2:82:4c:82:0a:23:ef:57:f1:16: e0:2c:54:08:b8:c5:4b:59:b0:ee:44:7a:6f:c5:2a: 20:49:67:c6:89:fa:cf:30:6b:9f:c1:36:13:f2:53: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:07:25:08:E8:CE:34:F9:38:14:F6:A0:B6:05:57:92:B4:FF:3E:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/8ef65c6b-019c-42a7-a13b-f51faf49a9b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 36506 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:aa:9f:68:26:0f:54:91:3a:89:f8:88:cc:36:67:c1:04:8f: cc:6f:b9:4e:65:ce:22:37:0c:11:66:e6:b6:e7:2b:0a:57:7b: f6:b9:d5:3d:36:e3:18:f4:c5:f1:61:45:e2:b7:59:f7:07:dd: 25:7c:dc:df:e0:96:06:37:bc:58:57:d3:95:65:12:d0:b1:f1: 2b:39:1a:64:ac:5f:27:3b:48:0d:d4:cd:fb:2c:6a:13:0a:ab: 65:b5:45:66:98:f7:e8:ee:2b:2e:ca:4d:e3:13:97:fa:72:11: 09:a3:bb:54:0e:d6:8f:58:1d:d4:04:57:c7:4e:af:ff:a2:4d: 2d:c1:d8:92:bf:a6:bd:b2:35:4b:b4:f1:96:f8:4f:4b:d3:5f: db:6c:75:72:6c:d3:42:11:7a:81:20:6c:80:5a:35:49:8e:c5: 6b:24:66:7b:80:56:d2:0c:79:13:52:98:d9:e6:60:7d:57:40: 62:c1:cb:6a:db:dc:2f:bf:ef:95:01:18:9a:ae:74:b5:3b:c5: b6:80:af:7f:6b:f8:da:30:18:80:d0:13:61:4b:5e:47:44:80: f2:55:8f:43:63:7e:57:45:d6:28:62:3a:fb:72:e5:67:e8:7f: 3c:20:e7:e8:f1:32:3e:f5:27:97:44:cd:98:0a:9e:cd:ca:ee: a8:5f:8f:ad -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEh7fi5PkzD4TS+LG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDEwOTAxNDUzM1oXDTI3MDQxNDAwNDUzM1owLzEtMCsGA1UEAxMk OGVmNjVjNmItMDE5Yy00MmE3LWExM2ItZjUxZmFmNDlhOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilyJX8sgETpYKMNN+TGYd3EGXQcUCjB4m7d6 BUdmUaAKj7wH51d8wX/wGDMK8WbyQcmo+HiIaptP99xTB5dsQJ1tjlGLwb3GFd8X VT4dmq+q4rM15rEVDPe41+6gztZ9KyFp5C0KbSyIlWBtcv0Bpv1yKGk/4snrE81X YG1vwVZYhPPG1uLal+ujJP6bJQZVYPDrQd4dodNML1mbmwyPdciaArCsJw2vQEnv VpicdhwBlKv+l7Y5P3wBzEE8JMSfXFhPRwiStV+o2ZTGNBHpiNPQCyT/yOKCTIIK I+9X8RbgLFQIuMVLWbDuRHpvxSogSWfGifrPMGufwTYT8lOOhwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFAUHJQjozjT5OBT2oLYFV5K0/z5+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84 ZWY2NWM2Yi0wMTljLTQyYTctYTEzYi1mNTFmYWY0OWE5YjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzhlZjY1YzZiLTAxOWMtNDJhNy1h MTNiLWY1MWZhZjQ5YTliMi84ZWY2NWM2Yi0wMTljLTQyYTctYTEzYi1mNTFmYWY0 OWE5YjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAI6aMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGqqn2gmD1SROon4iMw2Z8EEj8xv uU5lziI3DBFm5rbnKwpXe/a51T024xj0xfFhReK3WfcH3SV83N/glgY3vFhX05Vl EtCx8Ss5GmSsXyc7SA3UzfssahMKq2W1RWaY9+juKy7KTeMTl/pyEQmju1QO1o9Y HdQEV8dOr/+iTS3B2JK/pr2yNUu08Zb4T0vTX9tsdXJs00IReoEgbIBaNUmOxWsk ZnuAVtIMeRNSmNnmYH1XQGLBy2rb3C+/75UBGJqudLU7xbaAr39r+NowGIDQE2FL XkdEgPJVj0NjfldF1ihiOvty5Wfofzwg5+jxMj71J5dEzZgKns3K7qhfj60= -----END CERTIFICATE-----Generated at Mon May 5 05:15:31 2025 by rpki-client