$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.cer File: fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.cer (raw, json) Hash identifier: zDDeBcplOYTgU0SEnxTw6ucVlPuuT95s9715yCA7W5c= Subject key identifier: 4A:1C:2C:D7:AC:8C:F9:15:BE:8D:9A:33:35:F8:8A:C5:4F:E6:5A:78 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858493936EC0B740B07508AF0AE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Mar 2025 00:45:33 +0000 Certificate not after: Mon 21 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 396425 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:36:ec:0b:74:0b:07:50:8a:f0:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 18 00:45:33 2025 GMT Not After : Jun 21 00:45:33 2027 GMT Subject: CN=fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:84:5f:56:09:0b:ee:b2:cf:85:dc:0a:d9: c5:68:f4:3c:0c:43:28:38:3b:37:a7:24:4c:fa:36: 0d:eb:3d:0a:59:2d:30:0a:73:51:3c:6f:8a:b9:02: 57:8a:9d:f2:01:de:37:1d:48:f3:13:e6:dc:b0:2e: 8c:f0:6e:27:db:38:47:fd:dc:29:66:b3:44:7a:c6: 0a:91:e2:6d:81:6c:f2:b8:b7:5d:38:cc:8b:55:21: 9e:62:dd:9d:11:60:d8:ed:a9:a2:a1:c7:c8:d1:9f: 53:06:1c:84:5b:d0:95:73:76:94:22:5d:18:30:29: 1e:b0:bb:0e:c8:20:d7:3c:c5:68:b5:e0:8e:9b:97: 77:4d:44:71:bf:26:f5:c4:ae:df:d6:3b:92:5f:ea: 6f:b7:da:96:f8:f5:ac:41:26:a4:63:83:5b:34:75: 02:7c:cb:da:45:7b:e1:45:2d:7b:35:7c:f1:cc:81: 3a:95:13:d1:8d:25:16:6d:6a:c7:65:a5:f0:53:ac: 2e:2e:99:ed:ed:c1:79:35:5d:2c:fe:87:59:62:9e: 33:ff:36:df:4a:69:7b:9e:b8:59:09:2a:7c:df:01: e1:37:b8:f4:dc:5c:f8:d5:2d:16:32:2e:22:4f:bd: 1b:97:b0:a2:0e:93:5c:f9:e6:f2:6d:97:b8:8a:bd: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1C:2C:D7:AC:8C:F9:15:BE:8D:9A:33:35:F8:8A:C5:4F:E6:5A:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396425 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f4:7a:3c:5e:30:7f:c1:97:8e:71:75:de:6d:50:7d:d4:e4: 41:30:8e:b0:b7:c0:a9:90:14:3a:e7:6d:49:a6:b8:df:00:09: a3:be:83:4a:f5:5d:91:86:45:66:15:9c:60:51:ca:26:98:2e: 16:10:2d:83:93:5c:e9:24:c7:9f:ad:36:f0:79:f5:9e:1e:fa: 92:3e:d0:4f:91:95:0e:5b:a3:cb:05:fa:d1:4f:a0:d8:50:f7: 68:21:c0:69:23:7f:f4:98:50:95:a9:85:d2:0e:14:f8:08:ee: a3:bf:0f:15:f6:92:03:0f:09:7b:6c:69:4b:5e:25:9e:12:7e: b1:28:77:97:cf:9e:2a:2e:7f:11:d9:85:4b:2c:7e:be:86:90: 16:ad:4e:d6:fd:4c:86:08:1c:84:70:05:39:8c:c6:b2:64:23: 6a:98:67:41:98:c6:14:a9:c9:ef:16:2d:c2:c5:dd:03:d1:50: f9:5e:45:22:29:2b:61:dc:53:93:91:5f:5c:3f:d7:97:58:1c: 93:1b:d2:fc:8d:04:b9:9c:1a:e4:c4:ab:ff:b8:f2:f6:f8:d2: f6:ab:c5:bb:92:70:a7:36:08:77:90:b1:26:23:9d:0f:de:81: b6:40:7d:b1:12:a5:60:86:46:b1:5a:d6:3a:6d:14:28:cd:c1: 6c:99:62:d2 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEk5NuwLdAsHUIrwroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDMxODAwNDUzM1oXDTI3MDYyMTAwNDUzM1owLzEtMCsGA1UEAxMk ZmI1YmRjYjItNDc5Mi00NDVmLWI3YTYtNzVjY2JhOGJiMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB2EX1YJC+6yz4XcCtnFaPQ8DEMoODs3pyRM +jYN6z0KWS0wCnNRPG+KuQJXip3yAd43HUjzE+bcsC6M8G4n2zhH/dwpZrNEesYK keJtgWzyuLddOMyLVSGeYt2dEWDY7amiocfI0Z9TBhyEW9CVc3aUIl0YMCkesLsO yCDXPMVoteCOm5d3TURxvyb1xK7f1juSX+pvt9qW+PWsQSakY4NbNHUCfMvaRXvh RS17NXzxzIE6lRPRjSUWbWrHZaXwU6wuLpnt7cF5NV0s/odZYp4z/zbfSml7nrhZ CSp83wHhN7j03Fz41S0WMi4iT70bl7CiDpNc+ebybZe4ir1z1QIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFEocLNesjPkVvo2aMzX4isVP5lp4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m YjViZGNiMi00NzkyLTQ0NWYtYjdhNi03NWNjYmE4YmIwYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2ZiNWJkY2IyLTQ3OTItNDQ1Zi1i N2E2LTc1Y2NiYThiYjBjNy9mYjViZGNiMi00NzkyLTQ0NWYtYjdhNi03NWNjYmE4 YmIwYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgyJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKb0ejxeMH/Bl45xdd5tUH3U5EEw jrC3wKmQFDrnbUmmuN8ACaO+g0r1XZGGRWYVnGBRyiaYLhYQLYOTXOkkx5+tNvB5 9Z4e+pI+0E+RlQ5bo8sF+tFPoNhQ92ghwGkjf/SYUJWphdIOFPgI7qO/DxX2kgMP CXtsaUteJZ4SfrEod5fPnioufxHZhUssfr6GkBatTtb9TIYIHIRwBTmMxrJkI2qY Z0GYxhSpye8WLcLF3QPRUPleRSIpK2HcU5ORX1w/15dYHJMb0vyNBLmcGuTEq/+4 8vb40varxbuScKc2CHeQsSYjnQ/egbZAfbESpWCGRrFa1jptFCjNwWyZYtI= -----END CERTIFICATE-----Generated at Thu Apr 10 14:18:24 2025 by rpki-client