$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.cer File: cf174adc-ec77-409b-8966-d3eb3d0bcc8e.cer (raw, json) Hash identifier: s8LzbPKnlNMHXD4VGJ//rEJJo8N0A/xlZw4rFB4CtrM= Subject key identifier: 9F:D1:BA:46:A5:F1:06:75:8C:3C:EE:05:44:BD:33:B6:62:E6:8F:F9 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849CC6E125B76C0936F1726F380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 May 2025 18:20:31 +0000 Certificate not after: Thu 12 Aug 2027 18:20:31 +0000 Subordinate resources: AS: 30387 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:6e:12:5b:76:c0:93:6f:17:26:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 9 18:20:31 2025 GMT Not After : Aug 12 18:20:31 2027 GMT Subject: CN=cf174adc-ec77-409b-8966-d3eb3d0bcc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:50:bc:be:91:45:48:0c:e7:24:f9:cb:8e: cd:56:26:2e:bd:41:ad:48:05:8f:97:b5:cf:92:63: 7f:db:f3:c1:ad:e0:c2:91:44:ea:62:55:11:5e:60: 0a:a9:98:69:dc:30:5b:27:ae:06:f4:6d:9e:33:55: 38:59:a7:4a:cc:43:52:f7:4c:fe:c8:e1:58:2d:6c: b7:97:87:76:4f:1d:91:55:7b:1f:5a:a2:21:29:f5: 29:21:87:33:76:c6:94:38:cc:89:f4:8c:81:da:b4: 9e:7c:57:26:b1:5d:11:a9:1c:53:e0:09:1a:9e:f2: 41:1f:e7:38:24:39:7c:ea:0d:68:5d:f6:91:30:55: 56:62:4c:4a:48:f4:61:db:5b:43:9c:87:00:9e:cc: 6b:10:30:25:a6:f9:c1:5b:31:78:29:61:f1:7d:a4: 24:1e:22:1f:be:44:25:ba:2d:47:4d:32:bd:96:40: 9c:96:9f:3f:a0:54:af:c6:40:7b:18:9f:d3:d5:49: d1:5d:32:a9:b0:5c:13:07:e4:80:35:1e:6c:e6:1c: 6a:b4:7f:55:e1:2c:ce:a6:02:d2:da:11:50:dd:04: 7e:c0:24:1a:51:11:11:dd:20:da:82:36:79:f6:9b: 83:0c:9b:1e:9d:60:88:2a:b0:97:c6:15:d1:18:93: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D1:BA:46:A5:F1:06:75:8C:3C:EE:05:44:BD:33:B6:62:E6:8F:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf174adc-ec77-409b-8966-d3eb3d0bcc8e/cf174adc-ec77-409b-8966-d3eb3d0bcc8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 30387 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f9:cd:dd:4c:a4:21:d0:df:5b:22:93:4a:5f:a4:6d:73:8e: 56:cc:d5:20:8a:b5:85:a0:8d:8a:62:cb:68:0a:07:e1:d5:68: a8:42:66:f1:09:d1:30:f2:b0:b4:56:e6:80:04:a4:fb:f7:a0: 98:58:06:ba:1c:3d:b6:75:12:4c:ef:d0:ac:49:c9:2f:09:fc: 98:6f:02:d6:31:a8:26:19:a9:53:43:15:57:82:9b:aa:21:7e: bf:83:3b:4d:f4:dc:50:f0:11:57:b5:65:7e:da:6b:a1:fe:eb: 29:a0:5a:51:ac:4e:5b:50:4b:a5:27:d4:64:37:aa:e3:64:8b: 58:50:aa:40:a8:d0:c4:8d:82:94:c6:b7:6d:61:53:4c:eb:e6: f7:a5:59:d4:9e:a8:7b:f1:0e:11:d1:8a:a5:2e:ed:e7:6f:62: 0f:cb:ba:41:8e:66:90:4a:d0:40:af:c5:44:5d:2d:4d:60:07: 73:d7:27:ae:6d:2d:0f:b5:b3:5e:db:2c:fa:c6:cb:56:49:74: 5f:70:c2:e5:3f:bd:cd:ba:b6:a3:2f:63:6f:1c:07:5a:48:e1: a7:fa:27:8b:84:f6:1e:36:47:bc:0f:7e:6f:69:f1:3a:76:5a: 43:24:8b:56:c4:89:7a:6a:bf:aa:15:59:01:f2:9d:d7:3c:7a: a5:c5:2e:15 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEnMbhJbdsCTbxcm84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwOTE4MjAzMVoXDTI3MDgxMjE4MjAzMVowLzEtMCsGA1UEAxMk Y2YxNzRhZGMtZWM3Ny00MDliLTg5NjYtZDNlYjNkMGJjYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5pQvL6RRUgM5yT5y47NViYuvUGtSAWPl7XP kmN/2/PBreDCkUTqYlURXmAKqZhp3DBbJ64G9G2eM1U4WadKzENS90z+yOFYLWy3 l4d2Tx2RVXsfWqIhKfUpIYczdsaUOMyJ9IyB2rSefFcmsV0RqRxT4AkanvJBH+c4 JDl86g1oXfaRMFVWYkxKSPRh21tDnIcAnsxrEDAlpvnBWzF4KWHxfaQkHiIfvkQl ui1HTTK9lkCclp8/oFSvxkB7GJ/T1UnRXTKpsFwTB+SANR5s5hxqtH9V4SzOpgLS 2hFQ3QR+wCQaURER3SDagjZ59puDDJsenWCIKrCXxhXRGJP8wwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJ/Rukal8QZ1jDzuBUS9M7Zi5o/5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j ZjE3NGFkYy1lYzc3LTQwOWItODk2Ni1kM2ViM2QwYmNjOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2NmMTc0YWRjLWVjNzctNDA5Yi04 OTY2LWQzZWIzZDBiY2M4ZS9jZjE3NGFkYy1lYzc3LTQwOWItODk2Ni1kM2ViM2Qw YmNjOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdrMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAfnN3UykIdDfWyKTSl+kbXOOVszV IIq1haCNimLLaAoH4dVoqEJm8QnRMPKwtFbmgASk+/egmFgGuhw9tnUSTO/QrEnJ Lwn8mG8C1jGoJhmpU0MVV4KbqiF+v4M7TfTcUPARV7Vlftprof7rKaBaUaxOW1BL pSfUZDeq42SLWFCqQKjQxI2ClMa3bWFTTOvm96VZ1J6oe/EOEdGKpS7t529iD8u6 QY5mkErQQK/FRF0tTWAHc9cnrm0tD7WzXtss+sbLVkl0X3DC5T+9zbq2oy9jbxwH Wkjhp/oni4T2HjZHvA9+b2nxOnZaQySLVsSJemq/qhVZAfKd1zx6pcUuFQ== -----END CERTIFICATE-----Generated at Mon May 12 17:21:41 2025 by rpki-client