$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer File: e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer (raw, json) Hash identifier: 89feI04QLkE2a6ulOQMfGAqiFPwtB0ab3EVVDB/IEtw= Subject key identifier: D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858493AA0C39EEC434EB42B1E0240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 12:54:38 +0000 Certificate not after: Mon 21 Jun 2027 12:54:38 +0000 Subordinate resources: AS: 399003 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a0:c3:9e:ec:43:4e:b4:2b:1e:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 18 12:54:38 2025 GMT Not After : Jun 21 12:54:38 2027 GMT Subject: CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:67:fc:09:34:31:e3:11:c3:db:22:6f:0c: a3:6f:2f:af:9e:09:19:ee:84:ee:da:41:50:f9:37: ad:52:a4:18:12:52:f2:73:af:80:9d:17:35:33:7a: a8:6b:51:ff:d0:14:25:f7:81:06:54:d8:7f:30:7e: e8:d5:a6:95:1c:a0:67:c9:e3:47:d2:3f:79:5b:69: 63:53:f5:70:66:66:69:4c:11:d1:e1:3f:1e:70:de: ce:aa:64:e8:71:04:b1:27:d7:5a:ae:df:ad:d4:bb: fb:c2:20:2d:f5:ff:96:2e:3e:6a:10:87:3a:15:b2: e6:cf:2b:c2:b6:b9:a5:ad:3a:4e:b6:d3:d5:2b:ad: 59:7e:65:ce:6d:f4:53:38:4e:26:2f:7d:29:d5:da: 42:62:79:48:b7:06:85:9f:9e:32:ae:2b:23:53:5f: 5a:e8:4f:fd:69:20:1a:3c:df:e4:6e:e0:b8:e9:d4: d6:97:bb:bb:db:95:cf:74:06:14:f4:a4:18:85:5c: c0:c3:6e:4a:70:b5:e7:b1:91:8d:45:c4:16:d9:b9: 4a:a0:95:04:31:6d:49:bc:3e:1d:47:60:e7:63:7c: 11:46:88:e6:0b:80:8e:d1:8c:37:40:21:75:3b:c0: 03:93:ed:28:11:50:df:b1:36:5b:14:1e:73:fb:00: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399003 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:79:f2:29:72:39:f4:0c:b8:03:7c:ac:1b:83:7a:4a:c1:58: 63:02:a7:29:4b:52:31:44:27:7d:28:e3:f8:ea:38:75:95:e7: ed:b2:aa:87:9c:93:dc:08:bb:7e:e6:84:42:f4:3a:35:e5:80: 25:17:49:08:9f:23:36:14:18:b3:3a:ce:47:23:05:62:df:b6: 4a:b9:1d:8d:f3:21:fb:e0:3f:a5:9d:3b:f3:87:4e:17:f3:2b: a9:df:8f:c7:e9:68:df:32:25:ea:b1:75:8f:26:3b:9b:37:a0: ff:18:e8:6c:10:2a:c0:b0:d2:b1:84:85:71:6f:fe:c0:b0:c3: 89:01:65:35:a5:1d:10:17:6f:15:37:67:b5:10:ef:f8:85:33: e2:79:ac:ac:f1:e5:f5:fb:70:b7:ec:ef:e9:95:a8:42:50:f3: dd:f8:f4:a8:20:26:9d:01:cc:c6:55:8b:83:4d:6d:29:69:fe: ec:57:2f:ea:c7:fa:89:46:02:d7:12:46:f7:8c:21:99:11:0e: c9:76:0a:c4:0c:51:1c:3f:41:34:de:6d:a5:02:25:24:50:22: d3:64:97:b7:20:f5:c6:29:6a:52:05:89:a2:d5:9e:b8:ce:9c: 6f:8c:e0:8f:e8:05:ae:07:9f:8d:88:56:37:49:ed:e0:ae:ba: 20:64:27:f8 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEk6oMOe7ENOtCseAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxODEyNTQzOFoXDTI3MDYyMTEyNTQzOFowLzEtMCsGA1UEAxMk ZTlkZDcwYTctYTZmNS00OTc1LTljMjMtMGFiMTIzNmU2MDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iZn/Ak0MeMRw9sibwyjby+vngkZ7oTu2kFQ +TetUqQYElLyc6+AnRc1M3qoa1H/0BQl94EGVNh/MH7o1aaVHKBnyeNH0j95W2lj U/VwZmZpTBHR4T8ecN7OqmTocQSxJ9dart+t1Lv7wiAt9f+WLj5qEIc6FbLmzyvC trmlrTpOttPVK61ZfmXObfRTOE4mL30p1dpCYnlItwaFn54yrisjU19a6E/9aSAa PN/kbuC46dTWl7u725XPdAYU9KQYhVzAw25KcLXnsZGNRcQW2blKoJUEMW1JvD4d R2DnY3wRRojmC4CO0Yw3QCF1O8ADk+0oEVDfsTZbFB5z+wBOZwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFNESR+H/UQ4aXuWy/A89nfsugJWJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l OWRkNzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIxMjM2ZTYwMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2U5ZGQ3MGE3LWE2ZjUtNDk3NS05 YzIzLTBhYjEyMzZlNjAyYi9lOWRkNzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIxMjM2 ZTYwMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhabMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKt58ilyOfQMuAN8rBuDekrBWGMC pylLUjFEJ30o4/jqOHWV5+2yqoeck9wIu37mhEL0OjXlgCUXSQifIzYUGLM6zkcj BWLftkq5HY3zIfvgP6WdO/OHThfzK6nfj8fpaN8yJeqxdY8mO5s3oP8Y6GwQKsCw 0rGEhXFv/sCww4kBZTWlHRAXbxU3Z7UQ7/iFM+J5rKzx5fX7cLfs7+mVqEJQ8934 9KggJp0BzMZVi4NNbSlp/uxXL+rH+olGAtcSRveMIZkRDsl2CsQMURw/QTTebaUC JSRQItNkl7cg9cYpalIFiaLVnrjOnG+M4I/oBa4Hn42IVjdJ7eCuuiBkJ/g= -----END CERTIFICATE-----Generated at Wed May 7 06:24:05 2025 by rpki-client