$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141.cer File: 333ac4ed-50fb-4488-8a6c-c5740bdf4141.cer (raw, json) Hash identifier: tOJzqt8HtgxZ4CWC3+pTP3m8wDnFERaQx1PuCOIy3H0= Subject key identifier: 60:54:06:88:89:88:96:E7:7A:77:5C:E2:65:63:96:0D:24:70:FC:F4 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848B1EE857D3BC73B8DDDF4A280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141/333ac4ed-50fb-4488-8a6c-c5740bdf4141.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jan 2025 13:45:33 +0000 Certificate not after: Mon 03 May 2027 12:45:33 +0000 Subordinate resources: AS: 396856 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:ee:85:7d:3b:c7:3b:8d:dd:f4:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 28 13:45:33 2025 GMT Not After : May 3 12:45:33 2027 GMT Subject: CN=333ac4ed-50fb-4488-8a6c-c5740bdf4141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:d4:7d:17:6b:24:dd:37:5f:9e:75:48:36: 7a:f3:dd:02:fa:e2:81:16:44:8b:0c:2e:f4:70:26: 26:1d:85:4a:6d:7e:f0:1c:e1:56:99:6c:b6:a6:17: d8:62:64:ca:8c:d3:c6:0f:1c:75:4e:04:4d:78:2d: de:a7:55:a3:ba:bd:78:97:b6:58:43:b6:c0:a5:62: 96:d6:7a:3d:4f:21:36:e9:57:01:0f:2c:e3:63:34: 82:2a:0f:c9:7e:9c:ce:9e:cf:19:6b:96:f6:a7:f7: b0:17:f3:fe:38:22:c5:68:4b:3c:17:de:31:00:4a: 05:03:b1:ed:ad:7f:a5:cc:8b:33:32:65:26:76:a6: 4d:8c:4a:5e:11:1f:35:1a:b6:91:0d:ca:b0:49:f2: f7:d4:43:62:d2:67:1c:1e:c6:73:9c:13:20:dc:cb: ec:90:91:a6:f2:ac:8f:19:72:7f:42:5e:5b:13:39: 6a:6d:c1:0e:06:9d:0e:d3:02:20:d7:c5:af:89:98: 68:31:7d:67:5e:6e:fa:1e:9d:21:2b:7b:31:80:38: 2a:90:44:45:1b:8a:84:55:0b:ca:a6:ab:3a:32:2d: 47:91:2f:f8:ac:8b:23:a7:86:46:2d:d7:db:a5:33: ed:2f:40:7b:81:06:94:51:c1:e3:22:13:5b:14:7a: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:54:06:88:89:88:96:E7:7A:77:5C:E2:65:63:96:0D:24:70:FC:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/333ac4ed-50fb-4488-8a6c-c5740bdf4141/333ac4ed-50fb-4488-8a6c-c5740bdf4141.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396856 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e8:de:af:90:66:1b:6b:e1:d0:da:0a:c2:1a:ba:70:5c:7b: a0:cf:84:1b:52:e1:b3:06:27:9d:33:8c:5f:bb:9b:b0:31:47: a0:e4:53:e1:bf:dc:8a:56:a9:68:7c:e3:62:e0:f1:3d:cf:1b: 2c:67:9e:aa:86:b6:97:42:56:16:3b:70:7b:1e:27:60:f1:77: 85:3e:95:88:4f:be:1b:ca:e8:cd:0e:3a:17:b0:bd:66:aa:c5: 05:a6:9a:2a:d1:72:7c:f0:ef:cd:22:6e:52:51:30:3b:bf:fa: 34:e1:b3:67:17:eb:f0:5f:4b:60:3c:34:c3:cc:43:dd:51:29: 00:39:e0:e3:4a:b8:d1:06:77:23:8b:ae:54:4e:8e:25:f9:be: e2:47:9c:f8:86:9b:b9:92:b1:89:fe:38:fa:68:8c:31:e8:e0: a8:96:a6:36:0c:f6:2d:b4:9e:7d:cb:45:05:90:24:49:bc:34: 32:31:09:cd:d4:36:4b:99:1c:fc:56:55:78:21:0c:3c:74:b0: 05:5f:11:ab:f8:82:d9:fa:22:7a:33:2b:11:51:06:24:ca:de: 90:e3:d3:f8:ed:1e:e4:27:a3:37:f3:73:bd:a4:da:cd:77:d6: 1e:8d:24:55:a9:93:86:f0:e2:ce:3a:8f:9a:09:7a:77:50:f5: d7:5f:06:f6 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEix7oV9O8c7jd30ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyODEzNDUzM1oXDTI3MDUwMzEyNDUzM1owLzEtMCsGA1UEAxMk MzMzYWM0ZWQtNTBmYi00NDg4LThhNmMtYzU3NDBiZGY0MTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCDUfRdrJN03X551SDZ6890C+uKBFkSLDC70 cCYmHYVKbX7wHOFWmWy2phfYYmTKjNPGDxx1TgRNeC3ep1Wjur14l7ZYQ7bApWKW 1no9TyE26VcBDyzjYzSCKg/JfpzOns8Za5b2p/ewF/P+OCLFaEs8F94xAEoFA7Ht rX+lzIszMmUmdqZNjEpeER81GraRDcqwSfL31ENi0mccHsZznBMg3MvskJGm8qyP GXJ/Ql5bEzlqbcEOBp0O0wIg18WviZhoMX1nXm76Hp0hK3sxgDgqkERFG4qEVQvK pqs6Mi1HkS/4rIsjp4ZGLdfbpTPtL0B7gQaUUcHjIhNbFHrzjwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFGBUBoiJiJbnendc4mVjlg0kcPz0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z MzNhYzRlZC01MGZiLTQ0ODgtOGE2Yy1jNTc0MGJkZjQxNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzMzM2FjNGVkLTUwZmItNDQ4OC04 YTZjLWM1NzQwYmRmNDE0MS8zMzNhYzRlZC01MGZiLTQ0ODgtOGE2Yy1jNTc0MGJk ZjQxNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg44MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFbo3q+QZhtr4dDaCsIaunBce6DP hBtS4bMGJ50zjF+7m7AxR6DkU+G/3IpWqWh842Lg8T3PGyxnnqqGtpdCVhY7cHse J2Dxd4U+lYhPvhvK6M0OOhewvWaqxQWmmirRcnzw780iblJRMDu/+jThs2cX6/Bf S2A8NMPMQ91RKQA54ONKuNEGdyOLrlROjiX5vuJHnPiGm7mSsYn+OPpojDHo4KiW pjYM9i20nn3LRQWQJEm8NDIxCc3UNkuZHPxWVXghDDx0sAVfEav4gtn6InozKxFR BiTK3pDj0/jtHuQnozfzc72k2s131h6NJFWpk4bw4s46j5oJendQ9ddfBvY= -----END CERTIFICATE-----Generated at Thu Apr 3 02:53:43 2025 by rpki-client