$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913.cer File: 12b92218-52d8-4bb2-b0a7-4532fe8b5913.cer (raw, json) Hash identifier: cttF4xG8/aDpwhoGZIG4G+irBvrflBOLVh3l0/SWZxQ= Subject key identifier: 20:DE:0E:4D:BF:16:03:58:86:A0:EF:BF:90:7A:D0:30:5B:F3:45:36 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584938FE63CD8A943D4512A5BC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913/12b92218-52d8-4bb2-b0a7-4532fe8b5913.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Mar 2025 22:51:39 +0000 Certificate not after: Sun 20 Jun 2027 22:51:39 +0000 Subordinate resources: AS: 396448 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:38:fe:63:cd:8a:94:3d:45:12:a5:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 17 22:51:39 2025 GMT Not After : Jun 20 22:51:39 2027 GMT Subject: CN=12b92218-52d8-4bb2-b0a7-4532fe8b5913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:e0:14:2d:a4:ae:0e:6a:6a:f0:b3:99:20: d5:2d:69:60:1b:2a:7b:73:7e:f0:e8:fe:3b:e8:8a: f2:a5:6d:07:b6:aa:05:13:1a:3b:9a:f7:f4:6e:4a: f0:06:f9:0b:c5:ba:1d:7c:5c:99:1b:2e:4c:d5:7f: 1e:64:a7:9b:f0:c9:14:74:b5:bb:6f:6f:98:63:91: ab:f7:24:62:20:0d:cf:a6:0f:cf:9e:d7:84:dd:02: 53:d7:86:69:27:d6:a5:b2:a6:d3:b7:a2:fa:c2:ff: 9f:4b:2f:b3:d4:6d:2d:af:5a:5b:7d:dc:2d:ba:a0: a1:82:20:45:ee:19:29:c8:cb:9d:15:f9:3e:4f:76: 22:2a:d3:fb:c5:26:c6:e8:90:b6:4c:d6:aa:7f:a0: 70:bc:9d:13:12:94:3d:9b:89:6f:93:e3:56:78:a2: 98:a0:1b:09:1b:7d:6a:ca:c2:70:90:61:70:b1:37: a1:cb:4e:5f:39:f3:8a:27:50:83:34:99:d7:fe:12: 79:35:5e:f1:30:e7:93:28:f2:99:da:82:6e:59:49: 07:d7:85:13:da:99:b4:c6:3c:c3:7e:f6:77:e3:c9: 4c:15:46:c7:56:a9:58:ab:a1:38:d1:a4:58:0d:c6: ad:9c:99:98:b1:ab:5d:0e:75:03:3d:1e:ab:ba:89: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DE:0E:4D:BF:16:03:58:86:A0:EF:BF:90:7A:D0:30:5B:F3:45:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/12b92218-52d8-4bb2-b0a7-4532fe8b5913/12b92218-52d8-4bb2-b0a7-4532fe8b5913.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396448 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:82:87:df:53:ed:1e:0f:e4:93:d1:37:91:9f:9a:0f:80:82: 26:f4:cd:b8:62:d0:ee:34:9d:aa:48:b0:15:4a:ee:7b:6f:71: 17:9f:e7:dd:2b:1e:fc:4e:fb:59:5a:bf:5a:22:b9:85:31:d4: b6:b7:58:16:ee:f0:da:7a:76:a6:d5:a1:86:40:94:75:01:3a: 4b:2b:01:8d:40:b9:a4:9c:04:df:b2:f1:b2:85:cc:c8:b9:02: 39:9c:52:63:2b:5e:88:e6:c6:51:1a:02:31:cd:67:01:d8:5f: 1d:16:fe:2a:bc:7f:c9:55:e2:be:14:62:40:a6:db:00:50:de: 5a:99:9a:fb:81:c0:8a:4e:b8:1c:23:82:4d:03:c9:43:43:c1: 2c:ce:98:b0:a2:fd:51:79:36:b8:02:d8:35:0b:7a:9b:c7:a1: 41:53:01:dd:78:f8:97:ba:79:a4:90:37:61:d6:0b:aa:f5:2e: e3:e5:80:60:ba:4a:b3:c0:d6:cf:d2:1c:fb:59:14:82:84:05: 76:76:39:ed:3e:dc:b1:11:fe:57:33:a9:5f:7f:b1:1c:0a:ff: 62:61:fe:46:bf:ca:77:eb:c2:a2:8e:d5:e7:28:9f:db:ca:fd: b5:54:c0:f6:71:a4:89:74:b0:61:e5:1c:e0:35:c6:c5:b1:68: e8:34:81:ff -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEk4/mPNipQ9RRKlvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDMxNzIyNTEzOVoXDTI3MDYyMDIyNTEzOVowLzEtMCsGA1UEAxMk MTJiOTIyMTgtNTJkOC00YmIyLWIwYTctNDUzMmZlOGI1OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLrgFC2krg5qavCzmSDVLWlgGyp7c37w6P47 6IrypW0HtqoFExo7mvf0bkrwBvkLxbodfFyZGy5M1X8eZKeb8MkUdLW7b2+YY5Gr 9yRiIA3Ppg/PnteE3QJT14ZpJ9alsqbTt6L6wv+fSy+z1G0tr1pbfdwtuqChgiBF 7hkpyMudFfk+T3YiKtP7xSbG6JC2TNaqf6BwvJ0TEpQ9m4lvk+NWeKKYoBsJG31q ysJwkGFwsTehy05fOfOKJ1CDNJnX/hJ5NV7xMOeTKPKZ2oJuWUkH14UT2pm0xjzD fvZ348lMFUbHVqlYq6E40aRYDcatnJmYsatdDnUDPR6ruom2pwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFCDeDk2/FgNYhqDvv5B60DBb80U2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x MmI5MjIxOC01MmQ4LTRiYjItYjBhNy00NTMyZmU4YjU5MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzEyYjkyMjE4LTUyZDgtNGJiMi1i MGE3LTQ1MzJmZThiNTkxMy8xMmI5MjIxOC01MmQ4LTRiYjItYjBhNy00NTMyZmU4 YjU5MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgygMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA2Ch99T7R4P5JPRN5Gfmg+Agib0 zbhi0O40napIsBVK7ntvcRef590rHvxO+1lav1oiuYUx1La3WBbu8Np6dqbVoYZA lHUBOksrAY1AuaScBN+y8bKFzMi5AjmcUmMrXojmxlEaAjHNZwHYXx0W/iq8f8lV 4r4UYkCm2wBQ3lqZmvuBwIpOuBwjgk0DyUNDwSzOmLCi/VF5NrgC2DULepvHoUFT Ad14+Je6eaSQN2HWC6r1LuPlgGC6SrPA1s/SHPtZFIKEBXZ2Oe0+3LER/lczqV9/ sRwK/2Jh/ka/ynfrwqKO1econ9vK/bVUwPZxpIl0sGHlHOA1xsWxaOg0gf8= -----END CERTIFICATE-----Generated at Sun May 4 17:15:50 2025 by rpki-client