$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6.cer File: e4f378bb-02a9-45e4-973f-ed01a76dc2e6.cer (raw, json) Hash identifier: XFcAQvV3MJ9n329VcN2m6TzoUPNM3DHFUgu/vE5vqeg= Subject key identifier: 3D:5B:67:E6:54:D4:8C:E4:57:FB:57:9E:B7:21:5F:B9:95:56:BA:53 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285849017F03BB7851A89D70B61800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/e4f378bb-02a9-45e4-973f-ed01a76dc2e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 01:45:33 +0000 Certificate not after: Tue 01 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 23244 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:7f:03:bb:78:51:a8:9d:70:b6:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Feb 26 01:45:33 2025 GMT Not After : Jun 1 00:45:33 2027 GMT Subject: CN=e4f378bb-02a9-45e4-973f-ed01a76dc2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:9d:48:2c:52:50:d8:db:bb:64:8c:5b:26: 6a:e3:80:73:bf:65:fa:1c:43:b5:d9:b7:7c:a4:32: 3c:44:13:d7:a1:f6:d5:dc:4b:2e:b5:de:ec:a2:89: 6e:8a:73:3a:28:69:a4:62:29:1a:69:99:21:4f:42: 08:43:ec:d6:c9:e5:b9:8d:ab:7a:f5:9f:41:53:74: 7c:91:60:5d:00:91:42:21:9a:ae:99:20:c3:c8:53: 50:1f:06:a5:14:e9:f9:31:7c:9e:a7:0e:73:b3:f0: ad:5a:c0:81:66:0a:79:b8:84:4b:a5:cc:78:70:d1: bf:8b:99:fe:a0:ab:6e:3b:31:63:49:d4:16:1b:df: 20:b8:eb:aa:65:7a:fb:c8:ae:ec:31:e1:58:19:64: 5f:88:f3:08:27:8a:bd:55:08:1d:71:b8:ea:bc:dd: e2:ab:92:9f:99:6c:11:cd:39:e4:d2:23:66:ad:83: 8a:e2:c3:8d:26:d7:3c:2d:9c:7d:cb:f6:e3:4a:20: 53:83:ab:91:3f:36:e6:8d:13:52:76:c9:e7:fc:25: 5a:c8:76:29:a0:36:8a:30:ae:43:c2:07:18:8c:37: d4:f8:05:51:c8:77:d2:24:53:5d:67:53:09:93:44: 73:db:ac:e3:b7:0d:12:69:74:30:a1:19:80:cf:17: f3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5B:67:E6:54:D4:8C:E4:57:FB:57:9E:B7:21:5F:B9:95:56:BA:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4f378bb-02a9-45e4-973f-ed01a76dc2e6/e4f378bb-02a9-45e4-973f-ed01a76dc2e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 23244 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b3:76:39:db:d9:25:62:27:be:5d:d1:9a:82:90:14:42:47: 63:32:78:b4:b5:63:79:3f:58:7b:19:4e:44:68:43:a0:42:4e: 3e:07:b7:e2:9c:73:4c:40:93:ac:6a:f7:09:c0:f0:aa:67:56: d4:fd:6d:39:b6:87:e3:c8:00:6c:95:21:1b:42:d3:88:a3:4d: e0:d8:de:8f:92:50:42:08:60:48:ed:99:6e:10:9f:12:f6:b5: fc:43:40:04:3a:77:f3:a8:96:3e:ea:30:ef:d5:3f:37:7a:59: 77:97:9d:8d:c4:42:70:c3:8d:6b:4c:06:e0:f4:07:6e:14:92: 4d:c7:fe:1d:df:8e:10:df:18:73:43:ba:f9:d1:ed:41:cc:fb: b2:9d:d5:98:19:07:56:51:1d:18:17:1a:eb:9c:8c:52:42:a9: 3b:1d:e1:08:af:5f:3b:e5:2d:ac:03:1b:39:9f:0e:76:ef:58: b6:03:f3:13:6e:36:50:00:3d:49:5a:72:80:15:64:5e:79:c9: 60:8b:8c:05:5d:f2:35:f0:26:66:40:db:f5:97:23:f2:1b:08: 81:1b:45:1d:12:3f:cc:ee:84:86:d4:93:a6:bf:65:56:a3:b4: be:f3:25:5f:ad:6a:42:18:3a:30:bf:a3:5e:70:0f:d1:b8:2c: 6d:e4:2e:2a -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEkBfwO7eFGonXC2GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDIyNjAxNDUzM1oXDTI3MDYwMTAwNDUzM1owLzEtMCsGA1UEAxMk ZTRmMzc4YmItMDJhOS00NWU0LTk3M2YtZWQwMWE3NmRjMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i6dSCxSUNjbu2SMWyZq44Bzv2X6HEO12bd8 pDI8RBPXofbV3Esutd7sooluinM6KGmkYikaaZkhT0IIQ+zWyeW5jat69Z9BU3R8 kWBdAJFCIZqumSDDyFNQHwalFOn5MXyepw5zs/CtWsCBZgp5uIRLpcx4cNG/i5n+ oKtuOzFjSdQWG98guOuqZXr7yK7sMeFYGWRfiPMIJ4q9VQgdcbjqvN3iq5KfmWwR zTnk0iNmrYOK4sONJtc8LZx9y/bjSiBTg6uRPzbmjRNSdsnn/CVayHYpoDaKMK5D wgcYjDfU+AVRyHfSJFNdZ1MJk0Rz26zjtw0SaXQwoRmAzxfzsQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFD1bZ+ZU1IzkV/tXnrchX7mVVrpTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9l NGYzNzhiYi0wMmE5LTQ1ZTQtOTczZi1lZDAxYTc2ZGMyZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2U0ZjM3OGJiLTAyYTktNDVlNC05 NzNmLWVkMDFhNzZkYzJlNi9lNGYzNzhiYi0wMmE5LTQ1ZTQtOTczZi1lZDAxYTc2 ZGMyZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICWswwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk7N2OdvZJWInvl3RmoKQFEJHYzJ4 tLVjeT9YexlORGhDoEJOPge34pxzTECTrGr3CcDwqmdW1P1tObaH48gAbJUhG0LT iKNN4Njej5JQQghgSO2ZbhCfEva1/ENABDp386iWPuow79U/N3pZd5edjcRCcMON a0wG4PQHbhSSTcf+Hd+OEN8Yc0O6+dHtQcz7sp3VmBkHVlEdGBca65yMUkKpOx3h CK9fO+UtrAMbOZ8Odu9YtgPzE242UAA9SVpygBVkXnnJYIuMBV3yNfAmZkDb9Zcj 8hsIgRtFHRI/zO6EhtSTpr9lVqO0vvMlX61qQhg6ML+jXnAP0bgsbeQuKg== -----END CERTIFICATE-----Generated at Sun May 4 19:22:49 2025 by rpki-client