$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce.cer File: 77f46e12-3017-4d5d-8a8d-3f77476d79ce.cer (raw, json) Hash identifier: hsVXFve+JVok+tFV07R/VuaV4HF8AkNU2+mleW+lcTU= Subject key identifier: B9:19:BF:27:12:13:0E:2C:A6:5C:06:91:C1:8F:FC:AF:21:98:CA:FC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848FDCF636E46E27798C842AC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/77f46e12-3017-4d5d-8a8d-3f77476d79ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Feb 2025 18:04:16 +0000 Certificate not after: Sun 30 May 2027 17:04:16 +0000 Subordinate resources: AS: 19173 IP: 2620:d2:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:cf:63:6e:46:e2:77:98:c8:42:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 24 18:04:16 2025 GMT Not After : May 30 17:04:16 2027 GMT Subject: CN=77f46e12-3017-4d5d-8a8d-3f77476d79ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:56:f3:52:84:0d:36:ac:f3:4b:d4:4d:91: 6e:e6:f3:10:d1:76:e0:e1:36:2c:e6:eb:60:0a:52: b2:90:85:16:a5:10:32:1d:62:43:8d:42:c1:cc:65: 2c:00:43:0c:a6:a4:4c:45:c8:d4:9a:15:8e:b2:cf: b3:71:9c:5a:59:e7:97:89:57:28:c0:96:95:df:c0: 27:01:44:46:6e:be:77:7b:20:f0:30:f6:f7:bc:6f: 34:19:fb:ad:81:62:74:ef:91:4d:d5:b4:ea:6f:dc: 62:8e:ca:f6:14:b8:a9:30:1a:db:51:b6:71:78:75: 07:c5:a3:75:9b:f9:85:b4:23:81:12:99:4d:a4:c3: 50:ea:41:0d:67:26:e2:07:37:6c:f2:00:e4:f8:d9: 39:e0:18:52:c1:fe:2f:d7:e4:de:29:a0:97:be:cf: 85:6a:35:00:7e:d6:31:4e:65:8a:63:01:23:52:cb: f0:18:61:02:a1:dd:2c:4c:cd:74:87:d2:0b:cf:dd: 9a:2e:d2:7f:03:f1:72:5b:ea:cb:37:34:7c:01:e0: 37:a9:48:84:1d:f1:6e:11:3f:c9:9d:8d:09:4e:90: c0:12:48:4b:e9:eb:4a:72:0d:bd:a2:b7:cd:e7:fe: 95:b5:95:1c:83:d9:8d:4a:da:33:c4:87:62:08:e6: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:19:BF:27:12:13:0E:2C:A6:5C:06:91:C1:8F:FC:AF:21:98:CA:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/77f46e12-3017-4d5d-8a8d-3f77476d79ce/77f46e12-3017-4d5d-8a8d-3f77476d79ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2620:d2:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19173 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:31:ed:76:5b:b2:34:dd:23:f9:28:20:ed:1a:c1:71:25:78: b7:7a:e3:14:fa:6f:22:94:f4:e6:6f:53:11:18:d1:0e:2b:b9: 3d:fc:7f:18:3a:99:cc:6e:92:84:f3:4f:73:c5:5a:b0:9e:38: 27:50:5a:34:16:5e:7f:ed:66:94:2b:21:f3:75:0d:f9:61:8c: 38:6b:12:51:ec:49:57:22:8a:f3:a2:1e:f1:cf:93:2a:49:6f: 34:08:f5:ed:3d:aa:3f:68:7b:fd:63:af:03:44:5f:a0:69:b9: d1:e4:37:d7:56:3e:d4:31:02:ab:c2:14:c6:81:51:b3:0e:68: c1:11:d3:01:83:51:51:59:f6:de:60:23:0d:bf:7e:3a:4c:2c: ff:47:2c:d7:bf:0d:3f:57:b4:f3:bb:0b:a5:e5:90:6e:6e:7a: 8e:68:54:c6:1d:e9:8a:07:8e:f2:5b:33:d9:cd:ca:74:9a:6f: dc:98:c3:2f:ac:81:b5:06:5a:59:92:1a:71:83:40:65:ed:0c: 9f:59:90:2e:41:42:a1:b8:80:de:fc:4f:0c:fe:02:1a:07:d6: f9:db:62:19:8b:51:df:46:8c:56:ca:06:08:a6:04:4e:29:1e: a8:23:c6:a6:a3:11:6f:5a:1c:0c:3a:b9:43:3e:4f:94:fb:eb: 58:ac:e4:d8 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEj9z2NuRuJ3mMhCrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNDE4MDQxNloXDTI3MDUzMDE3MDQxNlowLzEtMCsGA1UEAxMk NzdmNDZlMTItMzAxNy00ZDVkLThhOGQtM2Y3NzQ3NmQ3OWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zFW81KEDTas80vUTZFu5vMQ0Xbg4TYs5utg ClKykIUWpRAyHWJDjULBzGUsAEMMpqRMRcjUmhWOss+zcZxaWeeXiVcowJaV38An AURGbr53eyDwMPb3vG80GfutgWJ075FN1bTqb9xijsr2FLipMBrbUbZxeHUHxaN1 m/mFtCOBEplNpMNQ6kENZybiBzds8gDk+Nk54BhSwf4v1+TeKaCXvs+FajUAftYx TmWKYwEjUsvwGGECod0sTM10h9ILz92aLtJ/A/FyW+rLNzR8AeA3qUiEHfFuET/J nY0JTpDAEkhL6etKcg29orfN5/6VtZUcg9mNStozxIdiCObBbwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFLkZvycSEw4splwGkcGP/K8hmMr8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 N2Y0NmUxMi0zMDE3LTRkNWQtOGE4ZC0zZjc3NDc2ZDc5Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc3ZjQ2ZTEyLTMwMTctNGQ1ZC04 YThkLTNmNzc0NzZkNzljZS83N2Y0NmUxMi0zMDE3LTRkNWQtOGE4ZC0zZjc3NDc2 ZDc5Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADSoAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICSuUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAIjHtdluyNN0j+Sgg7RrBcSV4t3rjFPpvIpT05m9TERjR Diu5Pfx/GDqZzG6ShPNPc8VasJ44J1BaNBZef+1mlCsh83UN+WGMOGsSUexJVyKK 86Ie8c+TKklvNAj17T2qP2h7/WOvA0RfoGm50eQ311Y+1DECq8IUxoFRsw5owRHT AYNRUVn23mAjDb9+Okws/0cs178NP1e087sLpeWQbm56jmhUxh3pigeO8lsz2c3K dJpv3JjDL6yBtQZaWZIacYNAZe0Mn1mQLkFCobiA3vxPDP4CGgfW+dtiGYtR30aM VsoGCKYETikeqCPGpqMRb1ocDDq5Qz5PlPvrWKzk2A== -----END CERTIFICATE-----Generated at Thu May 8 14:43:36 2025 by rpki-client