$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03.cer File: 33f69806-aa5e-435d-a2a8-c80e5f6e4a03.cer (raw, json) Hash identifier: 5zNp7jnI1A4uuQyw5FG7Ad+St+2euFgz2fzOKm5zvVU= Subject key identifier: 77:53:42:B0:47:61:1C:8F:8D:7A:61:74:D4:86:0D:32:E3:6C:95:24 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285848E5942BE62A1EAAB87318AD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03/33f69806-aa5e-435d-a2a8-c80e5f6e4a03.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Feb 2025 01:45:32 +0000 Certificate not after: Sat 22 May 2027 00:45:32 +0000 Subordinate resources: AS: 54078 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:94:2b:e6:2a:1e:aa:b8:73:18:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 16 01:45:32 2025 GMT Not After : May 22 00:45:32 2027 GMT Subject: CN=33f69806-aa5e-435d-a2a8-c80e5f6e4a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:fb:9c:94:74:e6:5d:3c:35:c8:ac:85:4f: d6:87:83:bf:ec:7f:19:1d:2f:5c:ff:60:6c:12:91: 6d:ba:5b:04:7d:c9:30:5b:0b:ce:7f:06:5a:3f:10: 12:31:c3:8d:4f:31:7c:10:d6:f2:12:48:61:75:16: d9:c6:4f:b0:b9:5c:d3:4e:86:b7:c9:72:f6:99:c9: 22:af:be:d3:0c:db:03:94:fd:cb:16:74:b6:d0:90: 70:52:7c:27:4b:e6:d5:a6:43:9b:d9:d8:0d:86:1a: 8a:0f:94:e8:d2:f5:a9:61:05:34:94:ae:59:73:13: b8:e4:bb:50:63:f7:ef:40:6e:0d:4f:41:0e:66:47: ab:8f:d7:aa:e5:4a:72:d9:21:a2:90:c4:aa:40:a3: bf:20:dd:7b:7b:9e:8d:59:91:58:fe:9d:c9:91:62: 33:a1:8e:3c:32:17:cd:ee:10:5d:65:29:ae:d8:51: 2b:8e:4c:94:04:fe:ad:5f:82:0e:eb:06:a9:f0:2a: de:9b:34:ba:9e:ac:d1:3a:f7:31:c9:33:d4:a0:9a: 66:31:b7:b6:56:23:99:22:13:5c:d3:3b:8f:7a:a2: 6a:f3:3e:06:e7:46:8e:ef:9e:d7:3e:ed:b1:3d:72: b4:3d:9a:13:7f:26:05:d3:fb:50:00:b3:07:6d:51: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:53:42:B0:47:61:1C:8F:8D:7A:61:74:D4:86:0D:32:E3:6C:95:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03/33f69806-aa5e-435d-a2a8-c80e5f6e4a03.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 54078 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:17:7f:30:b8:97:25:43:e6:32:1c:a8:0d:89:c0:2f:e7:b9: 70:16:83:31:8a:ed:81:83:82:02:ff:db:2f:87:46:06:da:37: 29:cb:3b:cf:89:e2:22:ce:55:08:58:b9:d2:48:f6:ce:01:32: 21:aa:5b:3c:f0:26:58:60:b9:01:ac:0f:69:22:60:24:de:71: af:8f:0a:ca:a6:bb:53:ac:ca:ee:84:4a:76:4b:ed:e7:de:b5: 03:a8:bf:ab:7a:43:dd:8c:73:cb:bf:ed:80:7f:95:32:70:94: a6:f4:1f:51:52:a7:5a:11:d4:e2:7a:46:cd:f0:94:a0:6d:01: f2:d1:38:02:5e:7a:52:0d:44:5d:dc:ef:a4:b0:47:d9:80:03: a2:07:33:52:b7:5b:a4:52:aa:0c:b3:14:c6:ac:ff:27:ad:11: ce:82:5d:99:35:68:08:b4:fa:52:53:5a:f6:33:e9:1e:6c:42: ed:31:96:25:7a:9a:4c:40:ec:cc:c6:22:ed:8e:fd:4e:19:50: 72:7d:6d:e0:c5:ab:3c:53:95:8a:e6:e4:87:0b:39:e3:9d:39: 35:3e:89:70:88:6d:0c:c5:79:c4:02:69:58:8d:e1:91:21:79: 13:87:36:13:2d:51:ec:39:53:6f:79:22:29:0e:7a:59:89:a0: 39:d4:fc:c3 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEjllCvmKh6quHMYrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI1MDIxNjAxNDUzMloXDTI3MDUyMjAwNDUzMlowLzEtMCsGA1UEAxMk MzNmNjk4MDYtYWE1ZS00MzVkLWEyYTgtYzgwZTVmNmU0YTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Xz7nJR05l08NcishU/Wh4O/7H8ZHS9c/2Bs EpFtulsEfckwWwvOfwZaPxASMcONTzF8ENbyEkhhdRbZxk+wuVzTToa3yXL2mcki r77TDNsDlP3LFnS20JBwUnwnS+bVpkOb2dgNhhqKD5To0vWpYQU0lK5ZcxO45LtQ Y/fvQG4NT0EOZkerj9eq5Upy2SGikMSqQKO/IN17e56NWZFY/p3JkWIzoY48MhfN 7hBdZSmu2FErjkyUBP6tX4IO6wap8CremzS6nqzROvcxyTPUoJpmMbe2ViOZIhNc 0zuPeqJq8z4G50aO757XPu2xPXK0PZoTfyYF0/tQALMHbVGwlQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFHdTQrBHYRyPjXphdNSGDTLjbJUkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z M2Y2OTgwNi1hYTVlLTQzNWQtYTJhOC1jODBlNWY2ZTRhMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMzZjY5ODA2LWFhNWUtNDM1ZC1h MmE4LWM4MGU1ZjZlNGEwMy8zM2Y2OTgwNi1hYTVlLTQzNWQtYTJhOC1jODBlNWY2 ZTRhMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANM+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALIXfzC4lyVD5jIcqA2JwC/nuXAW gzGK7YGDggL/2y+HRgbaNynLO8+J4iLOVQhYudJI9s4BMiGqWzzwJlhguQGsD2ki YCTeca+PCsqmu1Osyu6ESnZL7efetQOov6t6Q92Mc8u/7YB/lTJwlKb0H1FSp1oR 1OJ6Rs3wlKBtAfLROAJeelINRF3c76SwR9mAA6IHM1K3W6RSqgyzFMas/yetEc6C XZk1aAi0+lJTWvYz6R5sQu0xliV6mkxA7MzGIu2O/U4ZUHJ9beDFqzxTlYrm5IcL OeOdOTU+iXCIbQzFecQCaViN4ZEheROHNhMtUew5U295IikOelmJoDnU/MM= -----END CERTIFICATE-----Generated at Fri Apr 4 16:00:47 2025 by rpki-client