$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f.cer File: abbdeaa7-55c4-447a-a755-22eb5208650f.cer (raw, json) Hash identifier: BspwaTbDHhzNAdmKg6ayJh+QDRjkZE5+5J+1cLO+PIs= Subject key identifier: C3:F3:9A:62:47:E0:0F:CE:1B:93:57:97:D2:0C:38:23:7C:3C:96:20 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858487B7E2DBF5E241F0288C85080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f/abbdeaa7-55c4-447a-a755-22eb5208650f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jan 2025 01:45:33 +0000 Certificate not after: Wed 14 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 1411 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:7e:2d:bf:5e:24:1f:02:88:c8:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 9 01:45:33 2025 GMT Not After : Apr 14 00:45:33 2027 GMT Subject: CN=abbdeaa7-55c4-447a-a755-22eb5208650f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:cf:0b:81:04:ec:f5:21:22:a3:71:19:ff: 47:11:4c:23:32:9a:1c:ad:19:c1:a1:a5:f9:7c:0e: ab:ac:e4:79:0b:dc:48:27:80:56:b7:27:41:73:bb: 9a:97:89:78:db:d7:b9:7a:c7:9d:7b:ed:e1:36:bd: 39:4b:2b:61:85:13:36:d2:d5:74:b9:2b:8d:3c:e3: 3d:33:eb:e6:f8:82:0b:4d:71:e1:ab:18:00:b3:1c: 3e:c1:2b:af:7d:6b:49:e9:17:8d:fa:77:5f:50:c3: c1:a3:0a:dd:46:a4:51:fb:3d:3f:98:f2:a1:f1:f8: e1:70:88:db:dc:e0:06:be:33:46:97:21:e3:73:b3: 38:8d:9d:bd:03:9c:68:c9:7c:8a:71:f7:6f:76:51: d3:f0:4f:14:a4:8f:62:80:76:dd:d5:44:03:cd:6a: 91:c5:60:f3:22:39:cc:96:dd:3c:52:74:de:93:6a: fa:bd:60:0e:f4:e9:57:7a:5d:32:0c:59:87:90:0c: f5:dc:b9:20:ca:c1:f0:22:a2:86:4f:a5:13:3b:9b: f6:79:a6:91:1b:7b:cf:a8:3c:fe:75:d3:35:0e:c1: ce:1e:cf:3f:e6:88:42:b5:b5:f6:5f:b1:f0:06:dd: 58:46:f0:a5:39:14:87:a2:27:77:fe:1c:60:cf:67: d8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F3:9A:62:47:E0:0F:CE:1B:93:57:97:D2:0C:38:23:7C:3C:96:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abbdeaa7-55c4-447a-a755-22eb5208650f/abbdeaa7-55c4-447a-a755-22eb5208650f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 1411 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:87:b4:03:4c:c0:b8:f9:c5:ec:24:8f:5f:65:15:59:d9:a6: 3e:b3:35:81:c8:82:f0:6e:ae:54:4e:41:f4:b0:00:de:70:d2: 1e:9c:5e:91:20:9d:7d:db:09:66:3c:a2:a7:56:a2:6b:5e:ca: 48:22:3d:2b:04:de:f2:ed:39:0e:0f:32:a7:c3:ae:a5:c1:78: 5f:6c:83:46:c2:86:f5:e6:63:03:76:23:37:97:eb:4c:14:a5: cd:ad:e9:09:91:bf:6e:b5:a7:56:5e:03:52:1a:08:c5:56:0d: 4f:b2:26:5e:16:e4:77:de:90:6c:ee:1a:ef:39:22:34:b3:a7: 3c:ad:24:e9:3e:b0:df:0d:ec:83:86:eb:56:14:30:db:9a:5f: 4e:27:a3:d9:c1:29:f6:47:0d:63:67:7a:9a:4a:2c:a6:85:58: bb:be:2c:9c:05:8f:fe:1f:93:be:f2:91:3f:79:e4:eb:96:f4: 55:23:66:45:1a:66:d3:8f:82:12:28:eb:d1:28:aa:4d:a6:22: 12:b9:3d:68:2f:06:e8:dd:6b:9e:96:c7:a2:65:b7:78:dc:12: 75:e7:51:a9:24:06:74:1b:75:d1:be:8f:e1:87:ac:0c:3e:8a: 92:1a:dd:5b:b3:6f:05:ae:f4:5e:d7:a9:fb:a9:e3:8d:0e:d3: ec:95:d3:16 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEh7fi2/XiQfAojIUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEwOTAxNDUzM1oXDTI3MDQxNDAwNDUzM1owLzEtMCsGA1UEAxMk YWJiZGVhYTctNTVjNC00NDdhLWE3NTUtMjJlYjUyMDg2NTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuijPC4EE7PUhIqNxGf9HEUwjMpocrRnBoaX5 fA6rrOR5C9xIJ4BWtydBc7ual4l429e5esede+3hNr05SythhRM20tV0uSuNPOM9 M+vm+IILTXHhqxgAsxw+wSuvfWtJ6ReN+ndfUMPBowrdRqRR+z0/mPKh8fjhcIjb 3OAGvjNGlyHjc7M4jZ29A5xoyXyKcfdvdlHT8E8UpI9igHbd1UQDzWqRxWDzIjnM lt08UnTek2r6vWAO9OlXel0yDFmHkAz13LkgysHwIqKGT6UTO5v2eaaRG3vPqDz+ ddM1DsHOHs8/5ohCtbX2X7HwBt1YRvClORSHoid3/hxgz2fYCwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFMPzmmJH4A/OG5NXl9IMOCN8PJYgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h YmJkZWFhNy01NWM0LTQ0N2EtYTc1NS0yMmViNTIwODY1MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2FiYmRlYWE3LTU1YzQtNDQ3YS1h NzU1LTIyZWI1MjA4NjUwZi9hYmJkZWFhNy01NWM0LTQ0N2EtYTc1NS0yMmViNTIw ODY1MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICBYMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUYe0A0zAuPnF7CSPX2UVWdmmPrM1 gciC8G6uVE5B9LAA3nDSHpxekSCdfdsJZjyip1aia17KSCI9KwTe8u05Dg8yp8Ou pcF4X2yDRsKG9eZjA3YjN5frTBSlza3pCZG/brWnVl4DUhoIxVYNT7ImXhbkd96Q bO4a7zkiNLOnPK0k6T6w3w3sg4brVhQw25pfTiej2cEp9kcNY2d6mkospoVYu74s nAWP/h+TvvKRP3nk65b0VSNmRRpm04+CEijr0SiqTaYiErk9aC8G6N1rnpbHomW3 eNwSdedRqSQGdBt10b6P4YesDD6KkhrdW7NvBa70Xtep+6njjQ7T7JXTFg== -----END CERTIFICATE-----Generated at Thu Apr 3 02:52:54 2025 by rpki-client