$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566.cer File: 8a0d7057-2693-4b5b-b0e4-60b2f43e3566.cer (raw, json) Hash identifier: PTDfCj/4NcUTkZPnM/EZUYnjvK19/hx03KdpnG4W4I0= Subject key identifier: E7:B5:DF:7B:00:9A:D6:02:DF:FB:0C:64:FE:1F:B9:3A:BD:58:5F:40 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848A2151E63F94356AF31348F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566/8a0d7057-2693-4b5b-b0e4-60b2f43e3566.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jan 2025 21:30:23 +0000 Certificate not after: Tue 27 Apr 2027 20:30:23 +0000 Subordinate resources: AS: 35857 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:15:1e:63:f9:43:56:af:31:34:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 22 21:30:23 2025 GMT Not After : Apr 27 20:30:23 2027 GMT Subject: CN=8a0d7057-2693-4b5b-b0e4-60b2f43e3566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:9e:42:91:c5:08:a6:af:43:85:d2:11:da: a4:de:e7:b3:05:35:41:41:38:7a:f4:95:ff:0a:9b: 1a:e1:1f:a0:28:e3:6b:5a:e6:be:9b:2e:01:8b:c3: 9e:e0:e6:23:c2:09:eb:5d:4f:3e:04:6f:5b:16:93: cd:8e:61:02:68:a6:7b:8c:c6:32:04:3d:53:bb:ab: 4b:a4:2a:b2:45:fe:2b:8c:33:57:da:e3:b5:b7:cf: d0:30:54:b2:38:08:df:b1:3e:e8:fd:26:e8:d3:63: ba:c3:9b:33:2c:87:71:a2:92:36:fb:60:de:85:c8: 1b:49:8a:15:8d:a0:50:62:9d:de:54:aa:68:f3:5b: ac:1c:31:cf:b4:ef:de:27:cc:a3:aa:9c:6f:8d:96: 21:93:f2:a3:7f:51:82:11:f8:50:ae:75:d7:72:ec: 5e:3b:13:7c:7f:77:65:f1:29:ea:88:71:98:a3:c5: 72:68:b8:2f:a0:3d:6d:3d:d4:09:53:58:f2:b6:e6: 39:60:b6:a0:08:47:e6:15:df:62:c8:c0:01:91:15: 61:56:77:bb:c9:a0:06:8a:d6:da:96:6c:20:9c:b0: ed:b7:cf:55:aa:a6:bd:42:36:8b:95:84:a6:f1:c8: 7e:42:26:02:56:b8:ff:34:78:ab:ad:c1:48:be:0f: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B5:DF:7B:00:9A:D6:02:DF:FB:0C:64:FE:1F:B9:3A:BD:58:5F:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566/8a0d7057-2693-4b5b-b0e4-60b2f43e3566.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 35857 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:18:97:4f:93:13:92:0e:46:a8:be:3f:81:8c:7d:79:da:fc: 99:83:d7:c4:af:48:16:0c:18:fa:29:a9:fb:be:5d:bf:ed:01: c9:7a:d1:44:a3:4c:27:ca:f3:f6:f1:87:bc:e7:e4:44:d7:62: a6:c2:4f:f3:ee:4d:5e:2d:0e:2f:c1:ad:32:3c:2c:97:33:51: b1:fd:dc:4a:d0:92:5a:13:1c:60:e3:85:08:9b:58:bd:12:d6: 91:a9:2d:63:ee:40:6d:2f:61:59:9e:30:09:4a:1d:12:fe:7e: 64:ae:08:5a:90:78:77:84:87:d4:3c:41:2b:da:81:b5:4b:f0: 40:e6:4c:41:82:57:ba:5f:7b:84:34:db:eb:01:d5:25:24:3d: b2:89:9c:79:fd:83:f8:11:c9:a6:ef:ce:3f:85:d0:c1:89:18: cd:b1:5b:b6:d1:cf:64:ae:0e:40:50:93:88:de:78:70:54:3e: b5:4b:3a:d2:ad:a1:e9:fd:51:e2:58:d3:0c:c2:96:1f:3a:3f: 2c:d8:85:a7:c7:5d:13:a8:bc:c9:00:ee:73:da:f1:cc:c9:04: a2:22:4b:8b:81:47:1a:df:4e:fa:2a:b4:91:ae:c0:6b:8f:bb: dc:a2:52:d3:57:b4:1e:f4:16:36:ae:9f:72:dc:f0:74:c3:7c: de:18:17:d5 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEiiFR5j+UNWrzE0j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyMjIxMzAyM1oXDTI3MDQyNzIwMzAyM1owLzEtMCsGA1UEAxMk OGEwZDcwNTctMjY5My00YjViLWIwZTQtNjBiMmY0M2UzNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw96eQpHFCKavQ4XSEdqk3uezBTVBQTh69JX/ Cpsa4R+gKONrWua+my4Bi8Oe4OYjwgnrXU8+BG9bFpPNjmECaKZ7jMYyBD1Tu6tL pCqyRf4rjDNX2uO1t8/QMFSyOAjfsT7o/Sbo02O6w5szLIdxopI2+2DehcgbSYoV jaBQYp3eVKpo81usHDHPtO/eJ8yjqpxvjZYhk/Kjf1GCEfhQrnXXcuxeOxN8f3dl 8SnqiHGYo8VyaLgvoD1tPdQJU1jytuY5YLagCEfmFd9iyMABkRVhVne7yaAGitba lmwgnLDtt89Vqqa9QjaLlYSm8ch+QiYCVrj/NHirrcFIvg/c5wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFOe133sAmtYC3/sMZP4fuTq9WF9AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 YTBkNzA1Ny0yNjkzLTRiNWItYjBlNC02MGIyZjQzZTM1NjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhhMGQ3MDU3LTI2OTMtNGI1Yi1i MGU0LTYwYjJmNDNlMzU2Ni84YTBkNzA1Ny0yNjkzLTRiNWItYjBlNC02MGIyZjQz ZTM1NjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIwRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEUYl0+TE5IORqi+P4GMfXna/JmD 18SvSBYMGPopqfu+Xb/tAcl60USjTCfK8/bxh7zn5ETXYqbCT/PuTV4tDi/BrTI8 LJczUbH93ErQkloTHGDjhQibWL0S1pGpLWPuQG0vYVmeMAlKHRL+fmSuCFqQeHeE h9Q8QSvagbVL8EDmTEGCV7pfe4Q02+sB1SUkPbKJnHn9g/gRyabvzj+F0MGJGM2x W7bRz2SuDkBQk4jeeHBUPrVLOtKtoen9UeJY0wzClh86PyzYhafHXROovMkA7nPa 8czJBKIiS4uBRxrfTvoqtJGuwGuPu9yiUtNXtB70Fjaun3Lc8HTDfN4YF9U= -----END CERTIFICATE-----Generated at Sat May 10 04:07:56 2025 by rpki-client