$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.cer File: 1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.cer (raw, json) Hash identifier: kwap3YdXL+qi6tLev5CTE7leNDCOBhh+jSNdGWBEz0s= Subject key identifier: 09:CE:CB:55:BF:45:B3:7A:BA:28:DE:59:D4:62:33:4D:CF:AB:69:B1 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848493DE0BA3F2785C5C101B4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Dec 2024 01:45:34 +0000 Certificate not after: Sat 27 Mar 2027 00:45:34 +0000 Subordinate resources: AS: 22828 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:3d:e0:ba:3f:27:85:c5:c1:01:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 22 01:45:34 2024 GMT Not After : Mar 27 00:45:34 2027 GMT Subject: CN=1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:f1:90:01:d9:1e:de:33:80:11:85:94:62: 63:9d:ba:72:9e:6a:a5:2c:24:4e:7f:67:c3:d0:c8: 36:18:2c:6c:e9:26:fa:c8:d6:33:3c:90:e5:e9:d0: b9:e8:7a:3d:d6:35:76:7a:1e:b3:fc:a2:65:d3:9f: 8f:d2:b4:ea:cf:0a:68:9d:bc:38:fa:ce:c6:0b:29: 8d:74:f6:0f:21:5e:b6:49:24:72:31:74:24:84:79: ee:31:02:2b:14:0a:92:a2:fc:bf:57:97:dc:ee:5f: 24:9f:0b:dc:65:90:63:d4:b5:0c:a6:0e:10:09:02: e4:f2:ac:bf:ee:3a:9f:1b:48:ee:72:b0:d6:3a:5f: 7d:ee:4b:c7:e4:a8:4d:e1:1c:09:3e:cc:eb:77:35: d1:bd:72:86:95:2c:b2:1f:c1:db:cd:75:60:3c:6e: a3:c7:32:79:cd:56:83:12:e4:a2:4b:75:54:31:93: b3:4d:c2:fe:92:1d:10:6e:28:28:70:97:1d:b2:d9: 35:9e:1a:7b:e2:64:7b:0b:20:89:19:e6:3a:d5:33: 59:70:61:ce:8d:97:31:8b:e5:81:de:f0:18:e5:3d: e3:5a:81:fd:cf:a6:8a:be:c1:59:f3:b0:10:7e:80: 1c:0d:1e:14:75:be:9c:94:b8:37:b4:73:8b:0d:8c: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CE:CB:55:BF:45:B3:7A:BA:28:DE:59:D4:62:33:4D:CF:AB:69:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 22828 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:93:ec:04:ec:0a:69:16:ed:12:00:6b:58:ac:df:5d:c1:1a: ed:34:33:73:9c:a4:b3:6a:7e:46:c4:40:69:6f:79:62:d6:ea: c0:32:44:d3:63:9e:00:c2:cf:e8:ff:3d:f2:a1:cb:8c:a8:df: c9:43:89:78:85:ac:91:5d:e3:87:95:7b:67:3b:74:f2:69:75: c1:76:a7:e9:12:92:53:14:c4:ea:0b:25:7e:f6:4d:32:b2:6a: c9:a4:f5:3d:04:8f:c2:7f:59:69:02:ff:8a:63:57:62:cc:1a: 20:8e:84:63:bc:ec:09:e7:c5:34:6f:37:b0:8b:5b:a2:d2:32: 31:7d:4b:b1:17:a3:c9:af:c0:9d:f9:79:c2:7c:21:66:25:7a: 79:c9:24:2d:3c:0e:f2:d8:d5:bc:01:7b:fe:39:db:8e:73:8d: 2f:b2:3a:7f:bf:15:57:36:ff:a4:4c:35:80:4f:2e:30:d3:e0: fd:38:7b:bd:0b:1d:c5:f8:81:5e:43:b3:47:e0:64:8a:df:b7: b5:de:25:db:b4:f0:2e:63:9a:fa:20:b8:a8:18:17:ad:51:99: 71:24:0e:8f:74:9d:f5:d6:ba:2e:26:4c:ff:2d:52:57:28:08: 37:f2:2f:77:2f:2d:9b:7a:30:48:54:21:c7:3a:41:e8:9e:a3: 3e:ca:b7:36 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEhJPeC6PyeFxcEBtKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIyMjAxNDUzNFoXDTI3MDMyNzAwNDUzNFowLzEtMCsGA1UEAxMk MWNjNGNiN2YtNWU3NC00YmU0LWIxZjgtNDE2NWJmOGMyOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy7xkAHZHt4zgBGFlGJjnbpynmqlLCROf2fD 0Mg2GCxs6Sb6yNYzPJDl6dC56Ho91jV2eh6z/KJl05+P0rTqzwponbw4+s7GCymN dPYPIV62SSRyMXQkhHnuMQIrFAqSovy/V5fc7l8knwvcZZBj1LUMpg4QCQLk8qy/ 7jqfG0jucrDWOl997kvH5KhN4RwJPszrdzXRvXKGlSyyH8HbzXVgPG6jxzJ5zVaD EuSiS3VUMZOzTcL+kh0QbigocJcdstk1nhp74mR7CyCJGeY61TNZcGHOjZcxi+WB 3vAY5T3jWoH9z6aKvsFZ87AQfoAcDR4Udb6clLg3tHOLDYyZXwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFAnOy1W/RbN6uijeWdRiM03Pq2mxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x Y2M0Y2I3Zi01ZTc0LTRiZTQtYjFmOC00MTY1YmY4YzI5YWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFjYzRjYjdmLTVlNzQtNGJlNC1i MWY4LTQxNjViZjhjMjlhYS8xY2M0Y2I3Zi01ZTc0LTRiZTQtYjFmOC00MTY1YmY4 YzI5YWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICWSwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK5PsBOwKaRbtEgBrWKzfXcEa7TQz c5yks2p+RsRAaW95YtbqwDJE02OeAMLP6P898qHLjKjfyUOJeIWskV3jh5V7Zzt0 8ml1wXan6RKSUxTE6gslfvZNMrJqyaT1PQSPwn9ZaQL/imNXYswaII6EY7zsCefF NG83sItbotIyMX1LsRejya/Anfl5wnwhZiV6eckkLTwO8tjVvAF7/jnbjnONL7I6 f78VVzb/pEw1gE8uMNPg/Th7vQsdxfiBXkOzR+Bkit+3td4l27TwLmOa+iC4qBgX rVGZcSQOj3Sd9da6LiZM/y1SVygIN/Ivdy8tm3owSFQhxzpB6J6jPsq3Ng== -----END CERTIFICATE-----Generated at Sat Apr 5 02:27:41 2025 by rpki-client