$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d.cer File: b40c2924-46ab-45b3-a20b-b3799429913d.cer (raw, json) Hash identifier: GsIj8HRahwRclGsqcjsodW30SajgsEqmYzNZTT/KRbw= Subject key identifier: 6D:A5:DC:08:F2:86:3C:17:75:D4:0D:B6:08:98:55:64:C1:42:E3:70 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584843A88096251B9CEB74B4E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d/b40c2924-46ab-45b3-a20b-b3799429913d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Dec 2024 01:45:33 +0000 Certificate not after: Thu 25 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 29787 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:43:a8:80:96:25:1b:9c:eb:74:b4:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Dec 20 01:45:33 2024 GMT Not After : Mar 25 00:45:33 2027 GMT Subject: CN=b40c2924-46ab-45b3-a20b-b3799429913d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ff:c8:31:8c:97:9a:1d:8c:f1:a2:be:8a:45: 8f:76:18:ea:82:4c:08:7a:0a:51:12:86:63:81:fd: f9:2f:cf:9e:e2:e9:6e:3e:7a:99:90:b1:31:8d:a2: 0b:5a:9e:e4:11:82:88:b0:ae:bb:4f:7b:24:ce:7e: cb:f7:cd:c8:a3:f2:c7:2f:58:71:30:a9:37:e5:33: 86:aa:4d:28:6b:b5:94:97:b1:44:e0:c6:41:5e:4c: d0:0a:95:0d:da:6b:28:1c:3a:23:4f:fc:25:c5:dc: e2:09:bf:d4:75:83:83:53:07:82:b4:e3:63:05:57: 82:f9:5d:c6:56:af:f2:db:8d:b0:cc:a0:06:f3:56: 81:9e:40:bc:c9:66:93:87:b4:1d:be:8b:56:32:ab: c9:de:30:c4:ad:ab:60:97:c0:6e:da:0e:cd:bb:bd: a9:38:b5:1c:3a:27:43:af:db:40:56:e2:8f:76:46: c0:d1:55:14:fa:8b:f2:34:1d:f9:53:3d:ce:56:2c: 4f:bd:36:ef:2c:fc:85:ec:36:5f:93:1e:cd:7f:a3: 96:c9:19:f0:3e:00:9e:39:5d:b4:25:b7:ed:81:61: d9:39:a7:38:76:07:82:5b:21:f1:d1:5e:2b:c2:d3: 85:c5:8f:09:c5:dc:0a:d1:4e:ed:3d:bb:35:84:3b: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A5:DC:08:F2:86:3C:17:75:D4:0D:B6:08:98:55:64:C1:42:E3:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d/b40c2924-46ab-45b3-a20b-b3799429913d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 29787 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c5:29:a8:f7:ed:6c:92:82:78:71:19:b8:8a:32:1d:e5:7d: cc:2f:58:64:43:ac:dd:50:14:27:1b:4a:2b:b0:72:03:61:ec: 31:f3:44:1c:6a:85:fd:90:92:bb:b6:47:e5:45:8c:26:e6:b0: bd:4a:89:b9:c5:c2:86:4a:d8:88:2e:f3:1c:d9:40:46:46:be: 4e:12:0b:64:63:c4:e0:65:c8:cc:5b:ab:49:f7:09:ef:67:86: 1e:08:e2:de:b1:7b:65:b0:51:ce:59:e8:80:53:22:50:83:9d: 94:58:0d:b7:73:32:1c:c2:2e:4d:10:d5:78:3d:e5:29:b0:d9: 0e:8e:4f:75:15:40:86:14:ea:0b:b7:8e:a8:e0:f0:94:76:a4: c9:3a:bf:dd:52:1b:4f:79:ca:d0:2b:9d:4e:ee:07:91:fc:29: 25:6e:76:e0:0d:ad:8a:88:d8:2a:ff:d9:6b:03:e3:4e:c3:8c: bf:93:1b:9d:e4:eb:96:96:6d:61:fd:45:a1:ae:15:15:fe:bb: 1f:0f:ed:d1:43:be:57:39:45:a2:11:c0:c2:56:d4:31:e8:c8: 31:24:2c:8d:5c:3c:ef:63:bd:0f:9f:07:d4:bf:00:15:65:4b: 99:27:1a:e0:d4:5f:f2:cd:ca:84:50:ba:b7:ca:69:ee:f2:61: b2:21:2e:dd -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEhDqICWJRuc63S05AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MTIyMDAxNDUzM1oXDTI3MDMyNTAwNDUzM1owLzEtMCsGA1UEAxMk YjQwYzI5MjQtNDZhYi00NWIzLWEyMGItYjM3OTk0Mjk5MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf/IMYyXmh2M8aK+ikWPdhjqgkwIegpREoZj gf35L8+e4uluPnqZkLExjaILWp7kEYKIsK67T3skzn7L983Io/LHL1hxMKk35TOG qk0oa7WUl7FE4MZBXkzQCpUN2msoHDojT/wlxdziCb/UdYODUweCtONjBVeC+V3G Vq/y242wzKAG81aBnkC8yWaTh7QdvotWMqvJ3jDEratgl8Bu2g7Nu72pOLUcOidD r9tAVuKPdkbA0VUU+ovyNB35Uz3OVixPvTbvLPyF7DZfkx7Nf6OWyRnwPgCeOV20 JbftgWHZOac4dgeCWyHx0V4rwtOFxY8JxdwK0U7tPbs1hDsPLQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFG2l3AjyhjwXddQNtgiYVWTBQuNwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i NDBjMjkyNC00NmFiLTQ1YjMtYTIwYi1iMzc5OTQyOTkxM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2I0MGMyOTI0LTQ2YWItNDViMy1h MjBiLWIzNzk5NDI5OTEzZC9iNDBjMjkyNC00NmFiLTQ1YjMtYTIwYi1iMzc5OTQy OTkxM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdFswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAt8UpqPftbJKCeHEZuIoyHeV9zC9Y ZEOs3VAUJxtKK7ByA2HsMfNEHGqF/ZCSu7ZH5UWMJuawvUqJucXChkrYiC7zHNlA Rka+ThILZGPE4GXIzFurSfcJ72eGHgji3rF7ZbBRzlnogFMiUIOdlFgNt3MyHMIu TRDVeD3lKbDZDo5PdRVAhhTqC7eOqODwlHakyTq/3VIbT3nK0CudTu4HkfwpJW52 4A2tiojYKv/ZawPjTsOMv5MbneTrlpZtYf1Foa4VFf67Hw/t0UO+VzlFohHAwlbU MejIMSQsjVw872O9D58H1L8AFWVLmSca4NRf8s3KhFC6t8pp7vJhsiEu3Q== -----END CERTIFICATE-----Generated at Fri Apr 4 16:22:37 2025 by rpki-client