$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c.cer File: a8396c32-f694-4a12-a5be-592b3fa5246c.cer (raw, json) Hash identifier: NdwXELZjmjQc4lQQ07mLRz7Ze3rlFktwsELEtu7MR9A= Subject key identifier: 47:C4:23:D1:6B:EC:9A:46:D6:60:01:CE:8D:99:4F:0C:13:62:B2:42 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487FEC4EA2C10E30CD4A524114 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c/a8396c32-f694-4a12-a5be-592b3fa5246c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Jan 2025 15:50:41 +0000 Certificate not after: Thu 15 Apr 2027 14:50:41 +0000 Subordinate resources: AS: 18476 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:ec:4e:a2:c1:0e:30:cd:4a:52:41:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 10 15:50:41 2025 GMT Not After : Apr 15 14:50:41 2027 GMT Subject: CN=a8396c32-f694-4a12-a5be-592b3fa5246c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:77:c5:07:09:d6:0a:f0:82:e1:c0:c3:51:ad: 53:8e:e5:9f:46:6f:0c:94:dd:d0:74:a8:87:57:55: df:17:bc:a0:5c:d9:e8:2d:02:cf:a2:35:63:3e:63: d9:98:89:22:a9:e9:53:fb:80:e3:db:e1:5e:cd:7c: 9d:79:88:ab:58:f6:0b:7b:8b:5e:2e:fc:44:c7:d3: 5f:14:02:2b:6f:06:73:68:8b:55:36:53:4e:80:b9: 9c:ba:9d:fd:3e:34:ec:04:25:35:7d:4d:06:fc:7d: 33:d8:d7:7e:ea:66:04:8d:5d:73:bb:f3:98:d3:ba: 4c:1b:1e:93:ec:4e:0d:01:d2:5b:d6:0d:28:02:70: 59:32:3d:7c:b6:b2:b3:08:03:c2:01:b7:bc:9a:ad: 1c:5e:e6:c3:d4:68:23:4a:52:93:22:d6:3e:4f:42: ad:c6:4d:d8:6a:a5:58:d8:81:9f:be:6f:87:87:7f: 39:5f:39:cc:63:87:ca:d8:b6:de:2c:eb:bd:fb:61: d8:ca:25:5e:ee:5b:15:7f:44:fb:53:31:02:92:87: 72:a6:5a:75:36:17:65:c8:ff:24:6e:4c:a7:47:c8: 36:41:12:88:de:38:46:f3:4a:60:5e:59:1b:31:40: c4:d4:07:7d:41:0b:29:dd:1d:f2:75:3d:ed:fb:90: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C4:23:D1:6B:EC:9A:46:D6:60:01:CE:8D:99:4F:0C:13:62:B2:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c/a8396c32-f694-4a12-a5be-592b3fa5246c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 18476 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:af:19:ff:bf:26:29:38:cc:66:73:41:60:a6:f7:36:09:f4: 7d:8f:0a:18:94:81:cc:84:e9:11:14:85:8a:f4:d9:35:c9:24: 7b:52:d8:99:91:4c:06:b3:fb:b6:63:47:f6:1b:e7:7c:48:a6: e1:26:c1:25:70:0e:ae:9c:51:35:6f:5d:d7:81:88:f9:43:96: b1:62:93:2a:e5:2d:28:56:28:8c:18:bd:0c:50:03:47:59:a8: f2:67:bd:b8:c0:f1:8e:06:76:db:04:d4:2f:b8:20:3b:85:ca: 3d:b4:95:1a:dc:62:fa:0d:16:d5:7e:0f:6e:20:b9:e4:eb:c5: ae:9a:7b:ff:3c:6e:77:2b:c1:70:ea:1d:22:e8:34:ef:a8:75: 4b:16:07:00:fc:00:1b:48:98:8f:a4:71:8d:4d:a5:c3:58:11: 24:74:25:2f:dd:b0:dc:6f:96:b9:d2:42:e8:6a:e8:cb:d5:71: c4:c3:68:80:55:93:97:e7:44:9e:14:38:48:16:84:27:99:16: 4e:b7:4a:3f:69:86:f3:12:93:8b:ac:03:03:b3:c7:d8:c9:5c: 39:29:4c:8f:a6:54:12:b6:2f:8f:3a:45:29:ed:a9:b3:ba:5e: 0d:f6:98:86:9d:93:b7:b2:27:cb:42:96:2b:a9:c4:b0:fc:c6: a6:41:d4:3a -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEh/7E6iwQ4wzUpSQRQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDExMDE1NTA0MVoXDTI3MDQxNTE0NTA0MVowLzEtMCsGA1UEAxMk YTgzOTZjMzItZjY5NC00YTEyLWE1YmUtNTkyYjNmYTUyNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HfFBwnWCvCC4cDDUa1TjuWfRm8MlN3QdKiH V1XfF7ygXNnoLQLPojVjPmPZmIkiqelT+4Dj2+FezXydeYirWPYLe4teLvxEx9Nf FAIrbwZzaItVNlNOgLmcup39PjTsBCU1fU0G/H0z2Nd+6mYEjV1zu/OY07pMGx6T 7E4NAdJb1g0oAnBZMj18trKzCAPCAbe8mq0cXubD1GgjSlKTItY+T0Ktxk3YaqVY 2IGfvm+Hh385XznMY4fK2LbeLOu9+2HYyiVe7lsVf0T7UzECkodyplp1NhdlyP8k bkynR8g2QRKI3jhG80pgXlkbMUDE1Ad9QQsp3R3ydT3t+5C33wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFEfEI9Fr7JpG1mABzo2ZTwwTYrJCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h ODM5NmMzMi1mNjk0LTRhMTItYTViZS01OTJiM2ZhNTI0NmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2E4Mzk2YzMyLWY2OTQtNGExMi1h NWJlLTU5MmIzZmE1MjQ2Yy9hODM5NmMzMi1mNjk0LTRhMTItYTViZS01OTJiM2Zh NTI0NmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICSCwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj68Z/78mKTjMZnNBYKb3Ngn0fY8K GJSBzITpERSFivTZNckke1LYmZFMBrP7tmNH9hvnfEim4SbBJXAOrpxRNW9d14GI +UOWsWKTKuUtKFYojBi9DFADR1mo8me9uMDxjgZ22wTUL7ggO4XKPbSVGtxi+g0W 1X4PbiC55OvFrpp7/zxudyvBcOodIug076h1SxYHAPwAG0iYj6RxjU2lw1gRJHQl L92w3G+WudJC6Groy9VxxMNogFWTl+dEnhQ4SBaEJ5kWTrdKP2mG8xKTi6wDA7PH 2MlcOSlMj6ZUErYvjzpFKe2ps7peDfaYhp2Tt7Iny0KWK6nEsPzGpkHUOg== -----END CERTIFICATE-----Generated at Thu May 8 00:50:11 2025 by rpki-client