$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742.cer File: a3e0e865-5971-4911-9ddd-2f226be27742.cer (raw, json) Hash identifier: uCJ7+MVSzbOtvVHeeTJn2Yuv81+M60pjuPaIxE943us= Subject key identifier: 73:F8:42:35:D8:89:4B:F4:B7:21:DC:6F:73:7D:EB:12:B4:AE:DE:19 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858492446CB59072E700B8ABCAB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742/a3e0e865-5971-4911-9ddd-2f226be27742.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Mar 2025 12:45:34 +0000 Certificate not after: Sun 13 Jun 2027 12:45:34 +0000 Subordinate resources: AS: 393907 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:46:cb:59:07:2e:70:0b:8a:bc:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 10 12:45:34 2025 GMT Not After : Jun 13 12:45:34 2027 GMT Subject: CN=a3e0e865-5971-4911-9ddd-2f226be27742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:c7:2b:78:b5:d2:3d:7e:cd:a4:3a:ce:e1: ce:65:8b:19:c5:68:8f:5e:d0:33:ee:1b:0d:3e:e2: 9c:66:2e:4d:29:9e:a3:7d:e3:36:52:45:9f:19:24: 4b:9f:73:0a:b1:7a:80:76:6f:88:f0:2a:58:9d:62: 47:83:7c:04:45:d5:b9:f1:d2:8f:d4:d9:5e:00:12: bc:2a:28:65:f3:ea:f2:dc:05:eb:46:e4:1a:95:d2: d8:65:03:09:85:16:0d:14:49:8a:20:2b:a2:60:cf: 30:8f:b8:ae:1f:7a:11:9b:39:c9:3a:62:6a:95:9d: 84:c0:a4:3d:c3:03:78:d4:b6:0d:b9:ef:b9:f1:f9: c9:e5:b2:0e:d9:88:a4:e2:ba:52:1e:91:76:5f:81: 89:90:e5:b7:7b:83:0e:5b:ad:b7:d3:5c:d7:df:04: f4:8b:d0:ac:ad:79:10:23:59:6f:ff:ac:32:cc:3d: 4e:19:84:44:45:7a:28:26:b6:95:99:a9:05:5d:19: f1:4e:67:9f:5f:14:83:c6:27:89:bd:b6:94:5a:a3: 3f:99:8a:14:a4:e6:ce:12:ad:dc:0a:9b:1a:25:c2: 43:09:24:19:a8:a6:10:87:f2:ad:39:75:b1:65:ae: 0d:44:e3:c2:35:70:13:9d:22:f8:2b:f0:56:ae:91: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F8:42:35:D8:89:4B:F4:B7:21:DC:6F:73:7D:EB:12:B4:AE:DE:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742/a3e0e865-5971-4911-9ddd-2f226be27742.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 393907 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ff:67:0b:43:e1:f6:20:d5:47:79:7c:25:c9:03:1c:e0:52: eb:d4:2a:02:ad:f6:e6:b8:95:4f:59:95:4a:c5:ce:0e:da:be: 5c:25:0c:6b:a8:69:0f:13:a9:a0:eb:c2:73:11:e6:e2:ec:02: 06:1b:3b:7f:65:56:ba:59:93:cb:fd:b3:e0:64:c5:c0:c1:cd: 92:50:bc:4e:bc:24:bc:ba:2f:58:85:cd:9e:44:37:7e:05:79: eb:d9:8e:f1:1e:b9:e5:8e:22:fc:3e:0a:76:83:a7:84:e8:b2: b2:c0:b6:7e:d2:7a:7a:2c:96:35:0c:22:36:7f:2b:ed:3c:3f: 55:a3:1a:ea:2d:51:e1:6c:ee:bd:6e:5f:fa:b9:b9:fb:75:c2: 47:12:1a:5e:77:0a:54:97:51:79:8a:ab:5d:63:ac:82:33:21: 1d:e7:59:48:c8:43:9d:3e:ca:f8:f2:29:bc:cc:05:4c:e0:59: a0:74:01:29:eb:97:ee:aa:d1:81:33:eb:55:b2:7a:b7:4e:32: 03:b6:8d:df:ad:77:80:df:2b:68:84:79:b1:24:9d:b8:b3:72: 15:0f:f6:65:1d:e3:ab:5f:ae:dd:bd:1f:5b:64:2d:7e:b4:a9: f9:6e:ad:9c:75:c2:0b:91:9d:af:df:40:97:4e:ad:13:8b:cc: a0:3a:0e:3b -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEkkRstZBy5wC4q8qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMxMDEyNDUzNFoXDTI3MDYxMzEyNDUzNFowLzEtMCsGA1UEAxMk YTNlMGU4NjUtNTk3MS00OTExLTlkZGQtMmYyMjZiZTI3NzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIzHK3i10j1+zaQ6zuHOZYsZxWiPXtAz7hsN PuKcZi5NKZ6jfeM2UkWfGSRLn3MKsXqAdm+I8CpYnWJHg3wERdW58dKP1NleABK8 Kihl8+ry3AXrRuQaldLYZQMJhRYNFEmKICuiYM8wj7iuH3oRmznJOmJqlZ2EwKQ9 wwN41LYNue+58fnJ5bIO2Yik4rpSHpF2X4GJkOW3e4MOW62301zX3wT0i9CsrXkQ I1lv/6wyzD1OGYRERXooJraVmakFXRnxTmefXxSDxieJvbaUWqM/mYoUpObOEq3c CpsaJcJDCSQZqKYQh/KtOXWxZa4NROPCNXATnSL4K/BWrpFCvwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFHP4QjXYiUv0tyHcb3N96xK0rt4ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h M2UwZTg2NS01OTcxLTQ5MTEtOWRkZC0yZjIyNmJlMjc3NDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2EzZTBlODY1LTU5NzEtNDkxMS05 ZGRkLTJmMjI2YmUyNzc0Mi9hM2UwZTg2NS01OTcxLTQ5MTEtOWRkZC0yZjIyNmJl Mjc3NDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgKzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABf/ZwtD4fYg1Ud5fCXJAxzgUuvU KgKt9ua4lU9ZlUrFzg7avlwlDGuoaQ8TqaDrwnMR5uLsAgYbO39lVrpZk8v9s+Bk xcDBzZJQvE68JLy6L1iFzZ5EN34FeevZjvEeueWOIvw+CnaDp4TosrLAtn7Senos ljUMIjZ/K+08P1WjGuotUeFs7r1uX/q5uft1wkcSGl53ClSXUXmKq11jrIIzIR3n WUjIQ50+yvjyKbzMBUzgWaB0ASnrl+6q0YEz61WyerdOMgO2jd+td4DfK2iEebEk nbizchUP9mUd46tfrt29H1tkLX60qflurZx1wguRna/fQJdOrROLzKA6Djs= -----END CERTIFICATE-----Generated at Thu Apr 3 02:55:10 2025 by rpki-client