$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b.cer File: 4bc2d813-8d01-4075-b634-fe23d86a0b9b.cer (raw, json) Hash identifier: 5Rsf0ntxkYZ63jIE1zWLb6Pn0Fda1aK9IO1H9isM1W4= Subject key identifier: BE:1F:2B:E9:4D:F8:71:B5:4A:0D:BC:6C:41:D7:87:59:FA:A0:55:F0 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285848780B348355E1B86ACC6A5F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 20:06:28 +0000 Certificate not after: Mon 12 Apr 2027 19:06:28 +0000 Subordinate resources: AS: 401575 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:78:0b:34:83:55:e1:b8:6a:cc:6a:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 7 20:06:28 2025 GMT Not After : Apr 12 19:06:28 2027 GMT Subject: CN=4bc2d813-8d01-4075-b634-fe23d86a0b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:86:57:87:c7:61:d2:27:ae:30:33:82:b1: 9a:a6:c1:aa:c4:0a:39:d6:49:39:43:08:1c:bd:ba: 24:5e:19:6e:5c:a7:f3:f8:b6:d0:a3:1d:a8:62:d1: b8:c6:e6:b0:15:64:87:36:07:21:1e:49:48:36:6c: 50:bb:12:6c:b3:20:d7:9e:9f:4f:c7:78:8b:aa:0b: de:66:0c:53:e7:a8:65:6c:e2:57:96:f6:17:e6:e6: de:e2:98:cc:93:be:eb:69:4c:14:3b:87:b4:8a:ad: 0c:88:96:f6:9c:1e:aa:73:84:54:06:53:27:3d:7c: 38:0a:30:ee:34:97:63:3e:ca:60:8e:8b:02:b0:48: 92:77:c5:13:8f:01:e0:68:eb:fe:21:6e:13:f8:b4: bb:8b:bc:02:24:e3:0f:f2:aa:d7:1f:87:93:cc:7c: 82:0a:af:3c:b9:9b:56:32:39:db:25:66:c4:6a:44: f8:98:ca:40:6d:94:29:95:aa:8b:73:09:1d:85:94: 09:1e:c1:c3:2b:68:ac:60:8d:bd:d3:87:1c:0c:71: 6b:de:21:d2:ae:8f:92:99:28:53:a3:ba:e7:03:52: 03:52:37:35:7b:02:f1:5f:58:12:af:04:89:ea:a4: 48:d0:90:8b:1f:b6:28:b4:f4:fc:cb:79:2b:c6:ae: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1F:2B:E9:4D:F8:71:B5:4A:0D:BC:6C:41:D7:87:59:FA:A0:55:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401575 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9d:84:6c:25:16:6e:7f:df:42:8e:ad:0d:94:0d:8b:0a:03: 22:d0:62:41:39:51:35:04:ae:bc:5d:78:43:ac:5e:05:30:b0: 14:01:55:09:e0:44:d6:45:42:cd:53:03:ce:5c:fa:d5:7c:11: 86:25:04:21:93:4a:2d:31:a3:e6:df:e6:fe:d3:e8:3c:4f:9a: 0c:d9:74:74:f8:e6:ac:9c:f0:93:a4:b7:ba:96:5f:5d:53:8a: f3:61:b9:d4:9a:57:ed:b0:ec:92:46:ab:72:78:e8:99:44:00: 78:a0:68:7b:e6:97:87:3e:d5:46:4b:01:21:9d:8a:00:65:ce: 9c:5d:25:73:da:6c:41:43:96:e1:9c:ae:6d:dc:e8:ab:10:df: e3:86:3b:7d:4e:59:26:bd:53:20:cf:31:75:2b:ab:ec:63:57: a8:a7:9e:7e:f1:89:14:83:e9:f5:46:ba:b9:57:54:04:b3:7e: ff:4a:0e:50:cd:24:48:03:9e:76:50:0b:ea:44:36:12:30:89: 8d:a7:29:b9:9d:13:68:11:bf:c4:76:f3:7d:0b:91:05:f8:76: 8f:29:10:4e:a4:c4:02:8d:9d:14:4e:4b:2d:67:7a:25:1e:63: d9:92:29:6c:0d:04:3a:10:fc:ad:c2:ea:76:be:02:36:dc:e3: ee:e2:cc:2a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEh4CzSDVeG4asxqX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDEwNzIwMDYyOFoXDTI3MDQxMjE5MDYyOFowLzEtMCsGA1UEAxMk NGJjMmQ4MTMtOGQwMS00MDc1LWI2MzQtZmUyM2Q4NmEwYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnaGV4fHYdInrjAzgrGapsGqxAo51kk5Qwgc vbokXhluXKfz+LbQox2oYtG4xuawFWSHNgchHklINmxQuxJssyDXnp9Px3iLqgve ZgxT56hlbOJXlvYX5ube4pjMk77raUwUO4e0iq0MiJb2nB6qc4RUBlMnPXw4CjDu NJdjPspgjosCsEiSd8UTjwHgaOv+IW4T+LS7i7wCJOMP8qrXH4eTzHyCCq88uZtW MjnbJWbEakT4mMpAbZQplaqLcwkdhZQJHsHDK2isYI2904ccDHFr3iHSro+SmShT o7rnA1IDUjc1ewLxX1gSrwSJ6qRI0JCLH7YotPT8y3krxq6l+wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFL4fK+lN+HG1Sg28bEHXh1n6oFXwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 YmMyZDgxMy04ZDAxLTQwNzUtYjYzNC1mZTIzZDg2YTBiOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRiYzJkODEzLThkMDEtNDA3NS1i NjM0LWZlMjNkODZhMGI5Yi80YmMyZDgxMy04ZDAxLTQwNzUtYjYzNC1mZTIzZDg2 YTBiOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiCnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC6dhGwlFm5/30KOrQ2UDYsKAyLQ YkE5UTUErrxdeEOsXgUwsBQBVQngRNZFQs1TA85c+tV8EYYlBCGTSi0xo+bf5v7T 6DxPmgzZdHT45qyc8JOkt7qWX11TivNhudSaV+2w7JJGq3J46JlEAHigaHvml4c+ 1UZLASGdigBlzpxdJXPabEFDluGcrm3c6KsQ3+OGO31OWSa9UyDPMXUrq+xjV6in nn7xiRSD6fVGurlXVASzfv9KDlDNJEgDnnZQC+pENhIwiY2nKbmdE2gRv8R2830L kQX4do8pEE6kxAKNnRROSy1neiUeY9mSKWwNBDoQ/K3C6na+Ajbc4+7izCo= -----END CERTIFICATE-----Generated at Wed Feb 5 12:48:21 2025 by rpki-client