$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244.cer File: 57c43936-2f31-493c-b7a1-c53ab607a244.cer (raw, json) Hash identifier: LGKOECos6xmkxbb+aoh5DwnwufI8LzZppZ7K/d87jPI= Subject key identifier: DF:9D:87:90:DE:2B:0F:04:05:3C:1D:0D:AC:F4:BB:3C:18:FC:26:09 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848C149461F00D4314C912ED440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244/57c43936-2f31-493c-b7a1-c53ab607a244.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Feb 2025 01:45:32 +0000 Certificate not after: Sun 09 May 2027 00:45:32 +0000 Subordinate resources: AS: 20343 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:49:46:1f:00:d4:31:4c:91:2e:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 3 01:45:32 2025 GMT Not After : May 9 00:45:32 2027 GMT Subject: CN=57c43936-2f31-493c-b7a1-c53ab607a244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:92:21:94:a1:ba:6d:bf:0a:76:51:3a:f9: ca:10:57:ba:6b:b9:1b:e5:ee:7e:0a:93:eb:81:2f: fb:2b:d8:15:2c:f7:ba:22:d6:0e:a1:58:a9:17:3e: b6:11:c6:86:08:7b:4e:c2:d4:cd:e1:34:88:a9:97: 4e:d2:38:9b:58:28:97:75:5e:32:7a:e2:21:c3:ef: 47:c4:c0:a3:1e:8a:fa:e2:12:94:d6:47:e6:dc:f6: 58:4c:f4:db:e4:02:79:80:2b:32:3f:67:ca:10:22: 93:46:fb:7b:70:8d:ff:8f:9a:e6:10:59:83:eb:f8: 20:a3:b9:98:13:ac:49:d5:b3:44:6c:98:50:58:ec: 96:5b:7a:a1:76:50:64:26:38:b9:2d:13:61:73:fc: f7:e9:72:7e:fa:b9:df:00:f3:fc:6a:4f:0f:e7:c7: 9b:8b:55:b9:a4:a9:8e:8b:87:13:1f:8d:44:a0:a8: fb:42:22:8a:89:dd:57:76:b8:cd:5f:4d:91:dd:8c: 69:79:4d:e1:24:7f:81:ac:ba:ea:f9:d6:63:44:66: 58:c7:ac:e2:3b:25:84:55:18:b2:ea:e8:69:b9:06: bb:55:36:b0:56:bb:84:6e:15:2d:43:99:40:ac:1d: 3f:cd:84:96:1b:e8:14:6c:8b:90:a1:80:40:3b:dd: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9D:87:90:DE:2B:0F:04:05:3C:1D:0D:AC:F4:BB:3C:18:FC:26:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244/57c43936-2f31-493c-b7a1-c53ab607a244.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 20343 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:83:63:21:09:d7:bd:c9:3d:85:47:a8:07:22:07:12:c9:c9: fc:fc:0b:2c:e2:28:5c:e3:83:46:0e:d1:7e:2a:ed:a5:13:19: e9:08:5c:e6:dd:13:2e:e7:6c:43:75:53:c5:2a:de:07:7b:4a: 1c:5b:6e:f0:5c:20:c5:59:ff:d2:a8:fb:1e:c5:62:21:64:ef: bd:6f:d2:48:e5:b9:f5:5a:b4:96:43:77:64:2d:71:ac:0a:b3: 41:20:82:3e:16:b4:e1:af:53:35:11:4f:89:7d:f1:be:5e:54: b4:ef:ea:51:3d:7c:d8:05:2b:98:2f:3f:ef:e8:3e:9e:a8:08: 40:93:42:7c:bd:85:3d:66:ed:9e:89:6d:bf:6d:c4:25:a8:c1: 22:5c:7e:5b:ee:fd:ff:82:3e:c9:a5:3d:4a:3a:d9:be:7d:3d: fa:3b:54:6d:8c:b1:87:07:56:e5:04:ca:d9:a6:12:ce:64:93: 40:9c:6d:f4:ee:0e:ce:9c:bd:15:ba:27:cf:8c:e0:c0:4c:79: 23:d7:ac:38:92:89:f6:88:14:c8:52:96:88:78:00:31:98:f8: a3:d7:01:e8:b7:18:a3:6f:7e:76:75:9e:3f:be:46:37:b2:56: 14:68:75:f4:58:03:13:e7:c6:c6:cf:62:8d:4a:1c:45:be:6b: b7:2b:97:6b -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEjBSUYfANQxTJEu1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIwMzAxNDUzMloXDTI3MDUwOTAwNDUzMlowLzEtMCsGA1UEAxMk NTdjNDM5MzYtMmYzMS00OTNjLWI3YTEtYzUzYWI2MDdhMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9mSIZShum2/CnZROvnKEFe6a7kb5e5+CpPr gS/7K9gVLPe6ItYOoVipFz62EcaGCHtOwtTN4TSIqZdO0jibWCiXdV4yeuIhw+9H xMCjHor64hKU1kfm3PZYTPTb5AJ5gCsyP2fKECKTRvt7cI3/j5rmEFmD6/ggo7mY E6xJ1bNEbJhQWOyWW3qhdlBkJji5LRNhc/z36XJ++rnfAPP8ak8P58ebi1W5pKmO i4cTH41EoKj7QiKKid1XdrjNX02R3YxpeU3hJH+BrLrq+dZjRGZYx6ziOyWEVRiy 6uhpuQa7VTawVruEbhUtQ5lArB0/zYSWG+gUbIuQoYBAO90BJwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFN+dh5DeKw8EBTwdDaz0uzwY/CYJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 N2M0MzkzNi0yZjMxLTQ5M2MtYjdhMS1jNTNhYjYwN2EyNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU3YzQzOTM2LTJmMzEtNDkzYy1i N2ExLWM1M2FiNjA3YTI0NC81N2M0MzkzNi0yZjMxLTQ5M2MtYjdhMS1jNTNhYjYw N2EyNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICT3cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlYNjIQnXvck9hUeoByIHEsnJ/PwL LOIoXOODRg7RfirtpRMZ6Qhc5t0TLudsQ3VTxSreB3tKHFtu8FwgxVn/0qj7HsVi IWTvvW/SSOW59Vq0lkN3ZC1xrAqzQSCCPha04a9TNRFPiX3xvl5UtO/qUT182AUr mC8/7+g+nqgIQJNCfL2FPWbtnoltv23EJajBIlx+W+79/4I+yaU9SjrZvn09+jtU bYyxhwdW5QTK2aYSzmSTQJxt9O4Ozpy9Fbonz4zgwEx5I9esOJKJ9ogUyFKWiHgA MZj4o9cB6LcYo29+dnWeP75GN7JWFGh19FgDE+fGxs9ijUocRb5rtyuXaw== -----END CERTIFICATE-----Generated at Sun May 4 16:48:43 2025 by rpki-client