$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa.cer File: 400f897b-cbdc-42bf-b01d-7b9b45f7fbfa.cer (raw, json) Hash identifier: VCqwv+wPiZr0vtENGB2gC4DmQ3zVhr8/zAeKbvmnvrg= Subject key identifier: A1:75:8C:D1:FA:E9:1C:43:FA:10:C2:75:2E:29:29:AB:42:6D:32:03 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848A72900B58D4FFE7249926580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jan 2025 17:09:30 +0000 Certificate not after: Thu 29 Apr 2027 16:09:30 +0000 Subordinate resources: AS: 27447 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a7:29:00:b5:8d:4f:fe:72:49:92:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 24 17:09:30 2025 GMT Not After : Apr 29 16:09:30 2027 GMT Subject: CN=400f897b-cbdc-42bf-b01d-7b9b45f7fbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:70:f3:fc:3b:49:f5:21:c2:9a:ce:68:fd: 51:ae:54:1f:71:b3:35:5f:f0:49:54:09:aa:8f:e8: cd:00:7d:6a:f7:b5:ed:05:ef:6e:00:a8:4f:39:dd: dc:1d:ca:1c:31:66:97:c9:4f:ec:67:8d:8b:fb:d1: da:26:d6:a0:a7:ba:3e:ed:5f:e2:1f:b5:1f:31:c1: 8e:39:eb:63:aa:42:52:1d:63:35:fd:2d:12:84:db: d1:74:b6:8e:c2:c0:7b:a1:62:5a:af:7b:5b:08:d7: ff:46:8a:a9:8a:74:8b:ae:e4:96:c1:7a:0a:58:ed: 43:ce:d0:bd:51:86:cf:da:18:f8:21:60:71:4c:76: 9d:cd:d7:78:6e:10:2b:c8:b5:1f:19:c5:6d:33:1a: 31:92:a5:08:73:a7:7f:a3:39:e0:26:d6:d5:86:9d: 56:47:e2:3b:89:4c:91:e3:8d:ee:a0:a9:ff:ba:92: 72:f3:07:72:95:53:66:6d:99:da:da:7a:14:ab:9f: 05:35:a3:86:ab:a2:f8:50:60:04:7e:43:c3:ee:04: bd:92:12:02:ab:04:94:1d:61:2e:3a:4e:21:7e:24: 4b:c3:6d:b5:8f:d4:5b:7e:7b:72:ba:ad:43:a9:86: 35:29:5f:e3:91:41:77:17:cc:d5:79:f6:8e:c8:85: ec:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:75:8C:D1:FA:E9:1C:43:FA:10:C2:75:2E:29:29:AB:42:6D:32:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa/400f897b-cbdc-42bf-b01d-7b9b45f7fbfa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 27447 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a8:b0:2d:2e:9b:b0:77:63:c3:7f:ba:75:87:63:0d:4d:e1: 70:d5:e7:34:a8:01:09:63:ba:e6:5b:2d:87:e8:4e:39:4a:a7: 68:c6:b2:78:2a:e2:3c:16:19:5b:35:39:e9:41:fb:2b:e8:66: 03:cd:16:b4:b8:0e:0b:e3:13:a9:80:e3:c8:61:c7:97:8f:53: f2:57:d9:39:50:73:a5:f4:f1:fe:16:b5:30:f6:e1:55:ad:07: d0:03:5d:f3:77:fb:48:99:54:f5:43:44:60:d0:9f:85:14:94: 14:3a:3b:91:97:77:4b:97:fa:eb:aa:f6:7e:c6:67:fe:36:9e: f3:82:b1:95:61:a6:cc:72:13:40:14:17:04:8e:14:45:ea:fe: e0:bb:1d:cc:ee:3c:7f:a8:f9:71:62:0b:f9:4d:ef:c5:55:82: 99:3e:3a:c7:9c:5b:7b:7b:00:3d:c2:4d:98:21:0c:24:25:88: a0:6b:84:ef:47:1a:e7:5d:ed:ea:9b:ff:f3:8f:3c:a9:8c:e9: d6:d5:53:2a:b1:a7:ab:5c:90:a3:45:0e:72:49:2e:dc:79:a2: ed:92:bb:c7:19:62:ad:bb:bc:83:f6:29:2f:fd:93:0f:39:73: 01:63:7d:db:25:e8:2d:d4:4e:a8:3e:e4:a6:f3:31:3c:54:cf: a5:e8:30:b4 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEinKQC1jU/+ckmSZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyNDE3MDkzMFoXDTI3MDQyOTE2MDkzMFowLzEtMCsGA1UEAxMk NDAwZjg5N2ItY2JkYy00MmJmLWIwMWQtN2I5YjQ1ZjdmYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhohw8/w7SfUhwprOaP1RrlQfcbM1X/BJVAmq j+jNAH1q97XtBe9uAKhPOd3cHcocMWaXyU/sZ42L+9HaJtagp7o+7V/iH7UfMcGO OetjqkJSHWM1/S0ShNvRdLaOwsB7oWJar3tbCNf/RoqpinSLruSWwXoKWO1DztC9 UYbP2hj4IWBxTHadzdd4bhAryLUfGcVtMxoxkqUIc6d/ozngJtbVhp1WR+I7iUyR 443uoKn/upJy8wdylVNmbZna2noUq58FNaOGq6L4UGAEfkPD7gS9khICqwSUHWEu Ok4hfiRLw221j9Rbfntyuq1DqYY1KV/jkUF3F8zVefaOyIXs+wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFKF1jNH66RxD+hDCdS4pKatCbTIDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 MDBmODk3Yi1jYmRjLTQyYmYtYjAxZC03YjliNDVmN2ZiZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQwMGY4OTdiLWNiZGMtNDJiZi1i MDFkLTdiOWI0NWY3ZmJmYS80MDBmODk3Yi1jYmRjLTQyYmYtYjAxZC03YjliNDVm N2ZiZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICazcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfaiwLS6bsHdjw3+6dYdjDU3hcNXn NKgBCWO65lsth+hOOUqnaMayeCriPBYZWzU56UH7K+hmA80WtLgOC+MTqYDjyGHH l49T8lfZOVBzpfTx/ha1MPbhVa0H0ANd83f7SJlU9UNEYNCfhRSUFDo7kZd3S5f6 66r2fsZn/jae84KxlWGmzHITQBQXBI4URer+4LsdzO48f6j5cWIL+U3vxVWCmT46 x5xbe3sAPcJNmCEMJCWIoGuE70ca513t6pv/8488qYzp1tVTKrGnq1yQo0UOckku 3Hmi7ZK7xxlirbu8g/YpL/2TDzlzAWN92yXoLdROqD7kpvMxPFTPpegwtA== -----END CERTIFICATE-----Generated at Thu Apr 3 02:53:43 2025 by rpki-client