$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa4c827a-be85-437a-b6e3-539fdb5669eb.cer File: aa4c827a-be85-437a-b6e3-539fdb5669eb.cer (raw, json) Hash identifier: oJlGpshkzI6mAmcpAU3fXZPuv8MVtJxqPGod6NajXOs= Subject key identifier: 93:D6:77:BD:7E:83:61:A5:74:48:AB:CE:E6:44:74:74:5C:19:94:B2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285849123F1FD3C8AC720C282B0FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa4c827a-be85-437a-b6e3-539fdb5669eb/aa4c827a-be85-437a-b6e3-539fdb5669eb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa4c827a-be85-437a-b6e3-539fdb5669eb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 01:45:33 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 396877 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:3f:1f:d3:c8:ac:72:0c:28:2b:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 4 01:45:33 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=aa4c827a-be85-437a-b6e3-539fdb5669eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:23:7a:07:dd:74:32:05:bf:e6:39:5f:f9: 3c:e9:ba:a3:d1:48:6a:f4:f0:30:cc:d9:a4:6f:53: a8:99:e8:d3:32:d0:f0:79:20:f8:cb:53:91:d4:42: 51:dd:c0:d7:8a:c2:c2:58:a0:1c:4b:b2:8c:00:07: 3c:e9:b6:55:67:38:58:ef:5f:3b:81:73:b8:41:7f: 50:13:a9:7e:e1:08:4d:23:d5:93:6c:0d:2a:fb:16: da:f9:ee:d2:b7:bb:d1:15:57:02:4a:25:0d:de:02: ac:cd:cf:bb:3e:0f:26:a4:8c:b6:4e:a2:a6:54:28: 65:e1:1f:15:86:47:97:b1:79:ac:37:0a:9b:50:6e: eb:b4:6e:86:d4:fc:df:8d:d1:be:98:ec:a3:f1:d7: 88:17:70:60:a0:91:c7:4e:92:fa:42:4c:16:06:c6: 2c:cf:da:21:f4:9c:c2:e8:2e:8f:16:05:2e:20:a9: a4:e2:e7:fe:38:a9:37:6e:21:df:f8:28:af:4f:b6: e3:cf:a3:30:d3:98:31:04:53:17:7f:81:07:f2:a7: 61:91:f3:8f:fa:63:d4:ac:53:68:29:5a:ce:3d:e8: 67:42:a1:ab:8a:c5:d3:fd:dc:58:ca:70:d5:17:ef: 3c:04:b2:1f:d0:5b:2b:d3:32:82:9d:5e:a2:58:da: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D6:77:BD:7E:83:61:A5:74:48:AB:CE:E6:44:74:74:5C:19:94:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa4c827a-be85-437a-b6e3-539fdb5669eb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa4c827a-be85-437a-b6e3-539fdb5669eb/aa4c827a-be85-437a-b6e3-539fdb5669eb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396877 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d1:71:78:60:87:c0:7f:d3:79:b4:6a:26:c9:2b:77:dd:b1: 41:05:ad:14:9f:6c:c0:d9:7e:55:b7:db:7b:eb:d3:b3:31:91: a7:f5:67:22:ee:d5:d9:c8:c8:4c:35:9d:63:94:d7:76:a9:68: 19:0b:8f:88:05:e5:f4:b9:57:ff:ad:3b:24:f7:5d:7f:d8:50: a8:58:e2:0d:a3:e1:11:38:1a:ea:09:f6:19:07:d1:ed:29:72: bd:d4:0e:7b:15:d4:e6:22:d9:7f:53:fe:14:10:7d:c9:58:38: 4b:7f:9a:e2:de:3f:76:cd:a5:81:a4:96:17:46:35:a6:52:4a: 93:a6:ec:59:fe:28:84:c3:e5:bc:a6:72:5b:ff:92:85:de:63: 9f:c4:e3:0b:1f:64:c5:a9:fb:97:6f:ac:9d:6a:40:26:45:a0: 79:8a:1e:b1:a5:9e:a3:24:ea:33:93:9e:35:b0:17:a8:8d:0f: 6e:f8:9a:76:30:27:44:2c:21:38:dd:a3:63:f3:56:b6:1d:c0: 2e:12:2e:a4:d5:cc:9d:2c:49:10:83:3f:b3:8d:28:4d:d4:d9: 31:10:5d:18:30:dc:1a:d2:9f:0c:13:fd:3e:f7:f3:5a:f5:b8: 5d:08:61:fd:40:1f:55:67:8f:82:a4:b0:57:b4:1d:e7:c0:c7: 14:a4:d4:8c -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEkSPx/TyKxyDCgrD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMwNDAxNDUzM1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk YWE0YzgyN2EtYmU4NS00MzdhLWI2ZTMtNTM5ZmRiNTY2OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4AjegfddDIFv+Y5X/k86bqj0Uhq9PAwzNmk b1OomejTMtDweSD4y1OR1EJR3cDXisLCWKAcS7KMAAc86bZVZzhY7187gXO4QX9Q E6l+4QhNI9WTbA0q+xba+e7St7vRFVcCSiUN3gKszc+7Pg8mpIy2TqKmVChl4R8V hkeXsXmsNwqbUG7rtG6G1PzfjdG+mOyj8deIF3BgoJHHTpL6QkwWBsYsz9oh9JzC 6C6PFgUuIKmk4uf+OKk3biHf+CivT7bjz6Mw05gxBFMXf4EH8qdhkfOP+mPUrFNo KVrOPehnQqGrisXT/dxYynDVF+88BLIf0Fsr0zKCnV6iWNocPwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFJPWd71+g2GldEirzuZEdHRcGZSyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h YTRjODI3YS1iZTg1LTQzN2EtYjZlMy01MzlmZGI1NjY5ZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FhNGM4MjdhLWJlODUtNDM3YS1i NmUzLTUzOWZkYjU2NjllYi9hYTRjODI3YS1iZTg1LTQzN2EtYjZlMy01MzlmZGI1 NjY5ZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg5NMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAfRcXhgh8B/03m0aibJK3fdsUEF rRSfbMDZflW323vr07Mxkaf1ZyLu1dnIyEw1nWOU13apaBkLj4gF5fS5V/+tOyT3 XX/YUKhY4g2j4RE4GuoJ9hkH0e0pcr3UDnsV1OYi2X9T/hQQfclYOEt/muLeP3bN pYGklhdGNaZSSpOm7Fn+KITD5bymclv/koXeY5/E4wsfZMWp+5dvrJ1qQCZFoHmK HrGlnqMk6jOTnjWwF6iND274mnYwJ0QsITjdo2PzVrYdwC4SLqTVzJ0sSRCDP7ON KE3U2TEQXRgw3BrSnwwT/T7381r1uF0IYf1AH1Vnj4KksFe0HefAxxSk1Iw= -----END CERTIFICATE-----Generated at Fri Apr 4 16:06:43 2025 by rpki-client