$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.cer File: f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.cer (raw, json) Hash identifier: yCmEB7Uyh8I9cbnEeHQn/NYEjZ8DALgw+rKorlBDLpI= Subject key identifier: D0:D2:E6:F9:77:29:A5:F6:34:8E:29:40:D7:09:EA:66:EC:E5:8E:2E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858492C8D79F3AB62087F66A8C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Mar 2025 11:54:27 +0000 Certificate not after: Fri 30 Apr 2027 01:59:00 +0000 Subordinate resources: AS: 401447 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:8d:79:f3:ab:62:08:7f:66:a8:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 13 11:54:27 2025 GMT Not After : Apr 30 01:59:00 2027 GMT Subject: CN=f7cd42e0-760c-4a8e-a7a9-074b638e2eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:d7:df:6f:69:13:f0:fa:16:a8:1b:3e:e4: 90:7c:f5:ec:14:2b:ba:b2:1c:19:2e:9e:0a:92:d0: bf:3d:6f:f3:cc:e6:90:7e:1c:9f:ec:71:a2:f5:dd: 20:89:6c:72:d6:83:33:81:f3:bb:12:00:5f:07:f9: dc:65:53:63:66:76:bb:79:48:26:32:29:df:c0:97: 03:a4:d0:6b:3e:c9:ab:1c:1e:c1:a5:df:1f:92:16: 9a:70:2c:8d:ad:4f:35:91:fa:88:e6:48:86:35:8b: 21:1d:8a:8f:31:ac:de:df:90:73:24:2b:9e:ad:52: fc:d3:d4:35:fb:0a:3c:fb:9a:b8:b5:5e:ef:9d:5b: 7c:81:80:48:c9:59:c2:8d:cc:62:f7:fd:ff:3d:a2: 8c:b0:8c:de:66:be:d2:fe:81:0d:63:9f:1f:07:13: c5:c8:7f:38:3e:f3:9c:de:ae:e3:66:5b:6e:56:6c: 7c:e7:9f:90:0f:99:e4:d1:91:19:9c:7d:eb:a8:45: 60:ac:90:c5:93:e7:e8:7e:26:41:76:7c:6a:a6:f4: 21:d7:44:a3:b8:b7:42:ed:3b:12:57:b5:6f:90:86: 99:a2:7b:8d:0c:c5:a6:4a:6b:28:54:38:c6:cb:11: 35:14:85:53:4f:02:ca:56:0d:d9:d3:af:9a:39:6f: 76:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D2:E6:F9:77:29:A5:F6:34:8E:29:40:D7:09:EA:66:EC:E5:8E:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401447 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f2:f1:e6:fd:4a:d7:6a:46:47:21:cd:6e:47:1d:1f:64:d5: e7:98:d9:92:4a:70:59:a7:0e:5a:46:db:7d:fd:5d:eb:68:0a: 91:96:d4:06:24:f0:ed:5c:df:92:96:32:91:9c:2c:d4:d1:28: e9:8d:14:9d:e8:d3:53:50:66:cb:47:e4:69:02:5f:91:a7:f8: dd:37:47:bf:d8:73:8a:87:d3:3b:c2:7e:c9:ee:5e:81:60:c5: 89:4e:50:96:46:d5:3f:0c:d2:df:21:db:a5:5a:0b:23:34:a5: 1d:07:14:20:1e:11:36:d5:c5:54:33:dc:b6:a8:26:35:37:55: c3:41:67:31:4e:c6:1f:90:de:ee:05:b4:69:96:d7:a4:3f:1e: b2:ef:98:02:1d:ae:a2:c5:7e:a8:13:c7:99:e6:d0:78:3e:fe: d9:92:35:6e:6f:1d:00:20:f5:0d:15:c4:56:cd:a6:0f:1e:d8: fe:82:44:a5:49:63:3e:c9:c9:a1:12:58:20:84:f2:8d:ed:84: db:c2:2e:1f:7b:cd:07:02:ef:bc:15:51:13:31:dc:3c:b8:46: d1:34:ca:0a:16:0a:83:ee:75:52:72:d1:7e:03:51:a9:da:e7: da:f8:f2:f8:1a:d9:25:76:82:f2:69:f4:bd:a8:1c:e9:8c:f3: 02:fd:8c:6b -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEksjXnzq2IIf2aoxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxMzExNTQyN1oXDTI3MDQzMDAxNTkwMFowLzEtMCsGA1UEAxMk ZjdjZDQyZTAtNzYwYy00YThlLWE3YTktMDc0YjYzOGUyZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbHX329pE/D6FqgbPuSQfPXsFCu6shwZLp4K ktC/PW/zzOaQfhyf7HGi9d0giWxy1oMzgfO7EgBfB/ncZVNjZna7eUgmMinfwJcD pNBrPsmrHB7Bpd8fkhaacCyNrU81kfqI5kiGNYshHYqPMaze35BzJCuerVL809Q1 +wo8+5q4tV7vnVt8gYBIyVnCjcxi9/3/PaKMsIzeZr7S/oENY58fBxPFyH84PvOc 3q7jZltuVmx855+QD5nk0ZEZnH3rqEVgrJDFk+fofiZBdnxqpvQh10SjuLdC7TsS V7VvkIaZonuNDMWmSmsoVDjGyxE1FIVTTwLKVg3Z06+aOW925wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFNDS5vl3KaX2NI4pQNcJ6mbs5Y4uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m N2NkNDJlMC03NjBjLTRhOGUtYTdhOS0wNzRiNjM4ZTJlYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y3Y2Q0MmUwLTc2MGMtNGE4ZS1h N2E5LTA3NGI2MzhlMmViMy9mN2NkNDJlMC03NjBjLTRhOGUtYTdhOS0wNzRiNjM4 ZTJlYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiAnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ7y8eb9StdqRkchzW5HHR9k1eeY 2ZJKcFmnDlpG2339XetoCpGW1AYk8O1c35KWMpGcLNTRKOmNFJ3o01NQZstH5GkC X5Gn+N03R7/Yc4qH0zvCfsnuXoFgxYlOUJZG1T8M0t8h26VaCyM0pR0HFCAeETbV xVQz3LaoJjU3VcNBZzFOxh+Q3u4FtGmW16Q/HrLvmAIdrqLFfqgTx5nm0Hg+/tmS NW5vHQAg9Q0VxFbNpg8e2P6CRKVJYz7JyaESWCCE8o3thNvCLh97zQcC77wVURMx 3Dy4RtE0ygoWCoPudVJy0X4DUana59r48vga2SV2gvJp9L2oHOmM8wL9jGs= -----END CERTIFICATE-----Generated at Mon May 5 23:00:01 2025 by rpki-client