$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer File: 3a86f711-5e97-4a68-9b21-940a312b854a.cer (raw, json) Hash identifier: u7voDykbUOJm/Myh1JXui5mU27SESdRePRTVqvDsQAA= Subject key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584988B636FE558BAE3374D48D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Apr 2025 12:10:54 +0000 Certificate not after: Mon 19 Jul 2027 12:10:54 +0000 Subordinate resources: AS: 401343 IP: 204.130.200.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:b6:36:fe:55:8b:ae:33:74:d4:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 15 12:10:54 2025 GMT Not After : Jul 19 12:10:54 2027 GMT Subject: CN=3a86f711-5e97-4a68-9b21-940a312b854a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:8c:2c:f5:dc:0c:fd:61:01:d5:e9:40:2a: 49:0c:f7:e7:20:77:b7:8c:bf:06:bf:45:b7:32:85: 6c:6e:0b:9f:86:c9:f1:a8:be:cd:79:9f:66:ea:b8: 81:3d:95:40:e8:7c:96:cd:61:60:2f:b7:73:1a:cc: 99:45:a7:ad:b4:cf:8f:53:c7:e9:8f:16:e7:80:51: c9:bb:6e:8a:4e:21:31:00:4c:cc:40:63:bd:93:83: 2c:dc:73:33:c8:ce:b6:79:6e:cf:fe:6d:0c:41:44: 31:ab:d3:7c:34:86:bf:93:32:67:ff:38:90:87:76: ba:41:99:1c:f5:0d:b5:4b:1b:0f:b0:57:57:eb:9f: 02:26:5b:e5:71:82:c0:e8:a0:03:b4:5f:3a:92:49: 84:41:02:df:88:f2:7a:64:07:9a:08:d3:a2:15:2d: 8f:03:11:55:78:3c:12:22:77:71:a6:d5:ee:d6:d6: 4b:dd:f3:a4:70:95:08:82:c6:36:5e:f4:1f:51:c5: 3f:05:68:3a:4c:5a:e2:f5:23:45:c2:02:48:39:11: 73:d3:55:72:2d:87:e5:21:7a:96:10:05:4d:40:98: 7b:7c:30:b8:06:75:05:05:01:79:c6:10:83:03:6d: 15:2a:40:15:03:10:c9:65:74:dc:56:d7:2f:cd:ce: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.130.200.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401343 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ac:71:87:0f:59:b1:ec:e1:2a:0f:65:c7:f4:12:30:55:77: c4:16:b2:fd:31:98:b6:84:ce:54:d2:26:d7:6d:74:13:6f:06: 68:2c:17:fd:a2:d5:c5:f5:ea:16:0b:45:46:9d:3f:7b:3a:8e: f7:30:09:9e:61:01:34:d0:8a:7d:cf:5d:a8:9b:c3:77:91:44: b4:aa:75:43:a9:5a:ff:be:fe:9a:17:4f:49:79:c8:72:48:60: 42:ad:82:60:d3:18:9a:f1:4b:a0:02:bc:c6:90:35:0a:5e:b8: a9:d3:c5:7b:a2:c9:d4:f7:16:44:10:f3:df:1a:dd:a7:60:eb: fa:39:6d:2f:6d:c7:89:7c:ff:c2:f6:b4:23:11:ea:79:b7:9b: 15:f5:52:56:07:96:a1:0d:75:af:17:4d:6b:e0:6d:07:db:0c: c4:6b:43:39:86:4a:65:61:d8:be:ae:3f:42:86:64:80:02:8d: 31:ba:f4:a5:88:e4:d4:5c:63:d9:cf:05:9e:2b:0e:df:a9:2b: a3:a6:c6:4f:b5:58:57:93:e9:50:6c:95:c2:0e:31:25:75:f6: 86:19:b5:08:fa:17:56:9e:9c:09:52:a9:02:27:c1:39:6e:e1: e2:10:49:93:db:9d:87:78:be:6f:14:f1:0b:87:a8:7a:ea:00: d6:88:f3:f7 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEmItjb+VYuuM3TUjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxNTEyMTA1NFoXDTI3MDcxOTEyMTA1NFowLzEtMCsGA1UEAxMk M2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4NTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KCMLPXcDP1hAdXpQCpJDPfnIHe3jL8Gv0W3 MoVsbgufhsnxqL7NeZ9m6riBPZVA6HyWzWFgL7dzGsyZRaettM+PU8fpjxbngFHJ u26KTiExAEzMQGO9k4Ms3HMzyM62eW7P/m0MQUQxq9N8NIa/kzJn/ziQh3a6QZkc 9Q21SxsPsFdX658CJlvlcYLA6KADtF86kkmEQQLfiPJ6ZAeaCNOiFS2PAxFVeDwS IndxptXu1tZL3fOkcJUIgsY2XvQfUcU/BWg6TFri9SNFwgJIORFz01VyLYflIXqW EAVNQJh7fDC4BnUFBQF5xhCDA20VKkAVAxDJZXTcVtcvzc5TUQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNP298fVyy9A6t5IJ5o1xaoREfhVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z YTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNhODZmNzExLTVlOTctNGE2OC05 YjIxLTk0MGEzMTJiODU0YS8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEy Yjg1NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMgsgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh+/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHWscYcPWbHs4SoPZcf0EjBVd8QWsv0xmLaEzlTSJtdtdBNv BmgsF/2i1cX16hYLRUadP3s6jvcwCZ5hATTQin3PXaibw3eRRLSqdUOpWv++/poX T0l5yHJIYEKtgmDTGJrxS6ACvMaQNQpeuKnTxXuiydT3FkQQ898a3adg6/o5bS9t x4l8/8L2tCMR6nm3mxX1UlYHlqENda8XTWvgbQfbDMRrQzmGSmVh2L6uP0KGZIAC jTG69KWI5NRcY9nPBZ4rDt+pK6Omxk+1WFeT6VBslcIOMSV19oYZtQj6F1aenAlS qQInwTlu4eIQSZPbnYd4vm8U8QuHqHrqANaI8/c= -----END CERTIFICATE-----Generated at Tue May 13 02:26:18 2025 by rpki-client