$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480.cer File: 6fda2ee4-1d24-48e9-9e22-00ce91419480.cer (raw, json) Hash identifier: Y724TcQF46mPzKj2d8rI1jIkY9pyVc4jqbZ6arMAuhA= Subject key identifier: 12:0C:B7:F4:12:BE:94:E6:73:06:27:A4:2F:EB:9B:AC:F5:C2:45:17 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858491509D11BB359DAA97E2C9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480/6fda2ee4-1d24-48e9-9e22-00ce91419480.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 01:45:34 +0000 Certificate not after: Tue 08 Jun 2027 00:45:34 +0000 Subordinate resources: AS: 399750 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:09:d1:1b:b3:59:da:a9:7e:2c:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 5 01:45:34 2025 GMT Not After : Jun 8 00:45:34 2027 GMT Subject: CN=6fda2ee4-1d24-48e9-9e22-00ce91419480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:62:a0:a2:e1:ae:b9:cf:8d:31:91:02:39:78: ba:3d:f6:80:c9:e6:fa:fc:9c:31:dd:95:ac:22:a1: a7:dc:db:41:f3:c7:07:af:e2:ab:5a:2b:a3:10:19: 72:63:e6:99:ef:ac:59:ec:be:62:4c:0e:3e:f2:b0: ce:d7:28:9a:05:f2:ce:f2:a0:dd:c5:d9:b5:f4:b1: 32:f6:0e:3f:98:db:08:c1:9c:8c:aa:eb:db:4c:8b: 15:ff:e7:cf:e1:f4:28:b9:cc:83:87:8e:b4:f3:52: 8a:84:2b:8b:cb:b6:71:ea:84:e9:a3:31:49:ed:f6: 3f:05:22:32:55:85:3d:0c:ff:34:5d:a2:3b:cd:03: 50:c9:68:8d:17:84:03:8f:bd:88:8f:9b:0d:c3:6f: ea:57:36:0b:93:90:36:84:f8:a3:11:b1:13:ba:e7: f4:2f:a5:e1:d7:c4:3b:9d:3e:04:65:98:6c:dc:0a: 97:d1:3e:e8:9d:31:64:ce:dd:cb:84:be:b3:0f:f6: 64:11:55:eb:65:44:64:bc:6b:c2:a3:42:91:ad:10: 87:38:fa:f3:82:e4:cf:fb:ed:65:db:63:3d:f3:ee: 64:2f:9c:13:4a:e0:d2:dd:54:f2:3f:4e:12:7b:8d: 76:aa:5f:87:a1:a2:d4:28:bd:fe:1f:d6:ab:15:43: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0C:B7:F4:12:BE:94:E6:73:06:27:A4:2F:EB:9B:AC:F5:C2:45:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480/6fda2ee4-1d24-48e9-9e22-00ce91419480.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399750 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ca:58:c8:74:69:d6:f8:1c:18:12:1e:0c:ad:6e:c1:f6:61: e5:12:a6:83:b6:ed:6b:5c:83:70:e4:35:99:f4:ae:7e:b6:17: f2:12:37:14:d2:5f:b6:66:b5:2f:4d:5f:ea:77:3a:56:7e:8d: 1b:ff:cb:f3:60:8e:ab:31:e7:0b:36:27:20:cd:4f:aa:b0:e5: 6e:b2:39:5d:ed:b1:66:02:79:9f:c2:65:f0:6c:74:e0:2c:ae: 10:bf:6a:f0:1d:a6:5e:04:73:29:dd:fb:62:ef:af:b1:be:ba: ac:46:d6:36:ba:85:71:f0:2a:42:71:fc:51:9c:45:12:c8:9e: 1e:4f:c4:45:da:db:ee:99:82:2a:d7:f0:a6:b9:a5:60:7c:89: df:30:4e:e2:35:37:fb:53:1f:51:7e:a6:5b:80:fe:c8:8c:7b: 7c:81:5e:ed:01:48:b4:18:0d:86:8e:92:56:39:95:dc:b6:4f: b3:54:bc:2a:b0:59:49:55:e3:77:6f:d7:b1:60:29:62:7b:e1: 3b:b4:57:6a:c4:f9:1f:0d:f1:ed:ef:b9:36:d9:a3:f2:ed:bc: 97:16:bd:40:bb:e5:c6:69:c1:35:6d:5e:57:6e:ff:62:77:66: 78:6e:b0:f3:76:f0:e6:51:36:65:59:e2:95:22:2c:10:bf:bf: be:70:22:71 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEkVCdEbs1naqX4skAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMwNTAxNDUzNFoXDTI3MDYwODAwNDUzNFowLzEtMCsGA1UEAxMk NmZkYTJlZTQtMWQyNC00OGU5LTllMjItMDBjZTkxNDE5NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GKgouGuuc+NMZECOXi6PfaAyeb6/Jwx3ZWs IqGn3NtB88cHr+KrWiujEBlyY+aZ76xZ7L5iTA4+8rDO1yiaBfLO8qDdxdm19LEy 9g4/mNsIwZyMquvbTIsV/+fP4fQoucyDh46081KKhCuLy7Zx6oTpozFJ7fY/BSIy VYU9DP80XaI7zQNQyWiNF4QDj72Ij5sNw2/qVzYLk5A2hPijEbETuuf0L6Xh18Q7 nT4EZZhs3AqX0T7onTFkzt3LhL6zD/ZkEVXrZURkvGvCo0KRrRCHOPrzguTP++1l 22M98+5kL5wTSuDS3VTyP04Se412ql+HoaLUKL3+H9arFUM/BwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFBIMt/QSvpTmcwYnpC/rm6z1wkUXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 ZmRhMmVlNC0xZDI0LTQ4ZTktOWUyMi0wMGNlOTE0MTk0ODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZmZGEyZWU0LTFkMjQtNDhlOS05 ZTIyLTAwY2U5MTQxOTQ4MC82ZmRhMmVlNC0xZDI0LTQ4ZTktOWUyMi0wMGNlOTE0 MTk0ODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhmGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABLKWMh0adb4HBgSHgytbsH2YeUS poO27Wtcg3DkNZn0rn62F/ISNxTSX7ZmtS9NX+p3OlZ+jRv/y/Ngjqsx5ws2JyDN T6qw5W6yOV3tsWYCeZ/CZfBsdOAsrhC/avAdpl4Ecynd+2Lvr7G+uqxG1ja6hXHw KkJx/FGcRRLInh5PxEXa2+6ZgirX8Ka5pWB8id8wTuI1N/tTH1F+pluA/siMe3yB Xu0BSLQYDYaOklY5ldy2T7NUvCqwWUlV43dv17FgKWJ74Tu0V2rE+R8N8e3vuTbZ o/LtvJcWvUC75cZpwTVtXldu/2J3ZnhusPN28OZRNmVZ4pUiLBC/v75wInE= -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:58 2025 by rpki-client