$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a.cer File: 2834b5a1-c928-431a-9adf-e4de23e7245a.cer (raw, json) Hash identifier: tVdPOUHDi7oXRiFyIpzb5CeY+N7QkTELctetRlvgJjU= Subject key identifier: AE:5D:D2:AD:9C:60:02:04:B1:77:E3:F3:78:0C:81:5D:46:D4:E2:88 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584883DE39E95D3EBC0CED260D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jan 2025 01:45:31 +0000 Certificate not after: Sat 17 Apr 2027 00:45:31 +0000 Subordinate resources: AS: 14031 AS: 401015 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:de:39:e9:5d:3e:bc:0c:ed:26:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 12 01:45:31 2025 GMT Not After : Apr 17 00:45:31 2027 GMT Subject: CN=2834b5a1-c928-431a-9adf-e4de23e7245a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:5f:15:a0:df:51:ab:f4:93:96:5d:e3:ef: 99:37:74:af:ba:71:41:e5:41:e7:2c:ed:8d:02:b7: d0:a5:76:4d:21:d0:c1:47:f3:2f:e9:03:70:ac:d6: 55:c6:6c:7f:c8:d9:08:55:2b:54:f2:ac:a7:1a:77: dc:d4:78:a4:8b:c8:08:72:d2:f7:a5:6d:6f:7e:84: 7e:63:38:7d:1c:ec:c8:d7:79:d6:03:d4:35:af:96: 22:b1:73:c6:f5:b3:73:bb:3a:93:a8:91:bc:48:64: 64:97:69:60:8b:e3:e4:47:d4:42:6d:74:2d:c2:2d: 3d:98:54:7f:e7:93:7b:b6:19:f0:31:87:fe:35:1a: e8:5e:b2:8a:43:87:4d:7c:5b:5b:9f:f2:12:1e:9a: 40:89:af:b8:1e:56:3f:14:a2:a6:6c:42:1e:94:ae: 82:8d:d8:a4:b5:89:46:a5:6c:9e:72:48:c5:46:f2: d4:68:2d:14:eb:e1:69:4b:ee:7a:ce:6b:44:74:fd: 69:75:b7:2c:b7:82:dc:ff:8d:86:fb:db:02:bb:c1: 6d:65:13:6e:f6:b6:79:47:7b:fb:38:2a:d9:30:11: 4a:f4:bf:98:68:3a:5f:21:3f:1a:e9:83:5b:a4:2f: 4d:eb:b8:23:2f:c8:10:fd:2d:12:c6:4d:2b:c7:6c: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5D:D2:AD:9C:60:02:04:B1:77:E3:F3:78:0C:81:5D:46:D4:E2:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14031 401015 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:44:6e:ea:e9:51:f9:28:31:de:3b:49:a7:bb:9a:b6:6b:5f: 43:a4:3d:69:12:a5:cf:49:9c:d0:a5:62:53:86:8e:ce:54:d5: b6:47:5b:d9:31:e4:79:bb:03:10:82:ab:30:4a:75:15:f7:1a: 57:5b:54:93:28:db:b8:e6:b9:ba:b7:be:ad:f7:69:0a:ed:3a: 5b:1c:c2:48:ac:27:ec:71:a8:c6:90:da:f7:20:f9:13:09:1d: d3:b3:3a:21:37:19:f7:46:1d:65:cc:43:06:79:9f:3c:25:c8: 53:17:bf:06:b0:1f:88:20:06:f5:ee:9c:03:f9:fd:5e:b4:ef: ec:cd:2b:ec:86:0e:85:ed:82:29:78:1f:a1:59:e6:f5:4a:ea: 8d:2a:11:3c:a2:8c:58:4e:01:66:07:21:e6:39:32:14:b5:95: ad:cc:63:c3:e9:be:8f:77:23:66:79:3b:97:20:a3:45:77:d3: 03:02:9a:ad:23:0c:55:c9:88:fd:89:97:61:67:db:d0:96:d5: d5:62:9b:b9:19:2d:72:24:d9:6c:de:5a:4c:81:c1:67:a4:4c: e4:d5:32:90:ba:7a:67:b5:f0:65:2e:4f:b0:ca:48:ec:ef:cf: b7:0e:69:62:7e:f6:0e:55:80:8e:42:88:0f:bf:8d:a4:c6:f5: e0:e4:91:d8 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEiD3jnpXT68DO0mDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDExMjAxNDUzMVoXDTI3MDQxNzAwNDUzMVowLzEtMCsGA1UEAxMk MjgzNGI1YTEtYzkyOC00MzFhLTlhZGYtZTRkZTIzZTcyNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3pfFaDfUav0k5Zd4++ZN3SvunFB5UHnLO2N ArfQpXZNIdDBR/Mv6QNwrNZVxmx/yNkIVStU8qynGnfc1Hiki8gIctL3pW1vfoR+ Yzh9HOzI13nWA9Q1r5YisXPG9bNzuzqTqJG8SGRkl2lgi+PkR9RCbXQtwi09mFR/ 55N7thnwMYf+NRroXrKKQ4dNfFtbn/ISHppAia+4HlY/FKKmbEIelK6CjdiktYlG pWyeckjFRvLUaC0U6+FpS+56zmtEdP1pdbcst4Lc/42G+9sCu8FtZRNu9rZ5R3v7 OCrZMBFK9L+YaDpfIT8a6YNbpC9N67gjL8gQ/S0Sxk0rx2zOiQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFK5d0q2cYAIEsXfj83gMgV1G1OKIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y ODM0YjVhMS1jOTI4LTQzMWEtOWFkZi1lNGRlMjNlNzI0NWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI4MzRiNWExLWM5MjgtNDMxYS05 YWRmLWU0ZGUyM2U3MjQ1YS8yODM0YjVhMS1jOTI4LTQzMWEtOWFkZi1lNGRlMjNl NzI0NWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQgBAf8EDzANoAswCQICNs8CAwYedzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArRG7q6VH5KDHeO0mnu5q2 a19DpD1pEqXPSZzQpWJTho7OVNW2R1vZMeR5uwMQgqswSnUV9xpXW1STKNu45rm6 t76t92kK7TpbHMJIrCfscajGkNr3IPkTCR3TszohNxn3Rh1lzEMGeZ88JchTF78G sB+IIAb17pwD+f1etO/szSvshg6F7YIpeB+hWeb1SuqNKhE8ooxYTgFmByHmOTIU tZWtzGPD6b6PdyNmeTuXIKNFd9MDApqtIwxVyYj9iZdhZ9vQltXVYpu5GS1yJNls 3lpMgcFnpEzk1TKQunpntfBlLk+wykjs78+3DmlifvYOVYCOQogPv42kxvXg5JHY -----END CERTIFICATE-----Generated at Thu Apr 3 02:42:43 2025 by rpki-client