$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer File: 1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer (raw, json) Hash identifier: K9rgDnp+Nh6cky1KIOWINulRz2QzntqOpdDGynQl/uI= Subject key identifier: AB:C5:CC:98:D3:E4:52:08:F7:D7:DF:4D:0C:F1:A0:6F:7D:19:8E:25 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858494BD9AFE91A5FB3C54D6CBFA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 16:58:04 +0000 Certificate not after: Sun 27 Jun 2027 16:58:04 +0000 Subordinate resources: AS: 22390 AS: 26662 AS: 395958 -- 395959 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:d9:af:e9:1a:5f:b3:c5:4d:6c:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 24 16:58:04 2025 GMT Not After : Jun 27 16:58:04 2027 GMT Subject: CN=1c3c82f0-740b-49fe-8af2-e3786af86e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:15:d2:41:c8:46:1c:c8:20:fe:75:0c:36: e2:1c:7c:75:2d:70:b0:33:cc:f8:ed:c0:a0:4c:81: ae:51:9a:fc:a5:cb:c5:52:fd:56:ab:e9:35:3e:27: 0f:05:03:d8:56:df:73:3d:de:f7:00:9d:0c:18:d6: dd:38:8a:e8:c7:c9:70:7c:6f:19:33:44:f6:33:5f: f0:07:6f:a4:f2:8d:ec:2c:06:64:4a:04:50:3f:3b: dc:71:ac:39:f3:de:e2:71:cd:d5:e3:e4:cd:c0:e7: 76:a2:21:4a:05:0c:65:5e:62:e8:22:29:b2:2c:49: f5:7c:0c:5b:c1:39:31:96:f1:1e:0a:94:ad:f4:3f: ae:1b:98:17:b6:71:fe:e7:1e:61:c4:f7:fa:f3:29: 1d:22:46:cd:a2:4e:70:90:d0:ff:ae:21:94:95:70: b1:b3:db:04:26:9c:eb:36:99:fe:8e:8a:fc:9d:25: 49:d4:1f:6e:a1:14:56:d8:d3:07:1d:8a:96:9e:d4: 37:75:14:4a:67:ac:22:9d:81:4c:9b:eb:48:35:b9: 6f:8c:60:32:b7:5f:fb:3b:2f:76:79:45:cf:7c:fc: 6f:f1:69:95:a5:56:87:55:b6:ff:a1:d1:2b:25:c8: 24:6d:b7:6f:f7:db:a6:61:cf:c4:68:be:3d:aa:5b: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C5:CC:98:D3:E4:52:08:F7:D7:DF:4D:0C:F1:A0:6F:7D:19:8E:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 22390 26662 395958-395959 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f3:cd:b3:74:bf:54:d9:86:d3:55:8a:d7:86:86:ea:94:e4: 7c:13:9a:7c:2b:17:0d:48:01:5f:ce:fa:72:1e:23:51:89:f5: dd:ed:b7:1f:c1:28:f8:f7:45:60:9b:21:42:eb:be:65:a2:44: d5:99:12:bc:78:bc:b9:34:46:b4:50:26:08:83:46:fc:cf:ea: 62:97:81:9c:c6:dd:70:ab:35:bc:e9:31:85:a6:d7:57:93:35: f0:79:52:48:66:63:93:04:75:8c:91:75:98:a0:91:c6:a7:82: 5c:b8:c0:82:0e:99:3f:2f:db:0a:34:26:dc:38:5e:f3:e4:b2: f0:c3:7e:71:32:ba:7b:3b:44:7f:bc:e1:54:32:4b:bf:1a:76: 09:14:36:a1:50:ab:03:27:13:04:70:c3:cc:0c:95:77:7b:f4: 9e:02:1e:1e:1b:dd:f1:9d:25:df:58:5b:8d:24:f3:37:33:84: dd:1e:fe:1a:b9:b6:a6:db:d1:f0:7c:cf:23:f2:df:9b:f4:ad: a0:7a:10:35:5c:d2:1b:4c:64:b1:ff:09:9c:06:fd:9a:00:38: f7:77:e6:6a:a4:c2:03:08:08:9f:d4:27:73:3b:6b:08:54:e4: 8c:b3:18:98:b8:42:52:78:14:2d:bb:45:db:9b:73:59:98:ac: d8:c6:b3:44 -----BEGIN CERTIFICATE----- MIIG9zCCBd+gAwIBAgIUAQ0Mn0MoWElL2a/pGl+zxU1sv6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNDE2NTgwNFoXDTI3MDYyNzE2NTgwNFowLzEtMCsGA1UEAxMk MWMzYzgyZjAtNzQwYi00OWZlLThhZjItZTM3ODZhZjg2ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQV0kHIRhzIIP51DDbiHHx1LXCwM8z47cCg TIGuUZr8pcvFUv1Wq+k1PicPBQPYVt9zPd73AJ0MGNbdOIrox8lwfG8ZM0T2M1/w B2+k8o3sLAZkSgRQPzvccaw5897icc3V4+TNwOd2oiFKBQxlXmLoIimyLEn1fAxb wTkxlvEeCpSt9D+uG5gXtnH+5x5hxPf68ykdIkbNok5wkND/riGUlXCxs9sEJpzr Npn+jor8nSVJ1B9uoRRW2NMHHYqWntQ3dRRKZ6winYFMm+tINblvjGAyt1/7Oy92 eUXPfPxv8WmVpVaHVbb/odErJcgkbbdv99umYc/EaL49qluMXQIDAQABo4IECTCC BAUwHQYDVR0OBBYEFKvFzJjT5FII99ffTQzxoG99GY4lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x YzNjODJmMC03NDBiLTQ5ZmUtOGFmMi1lMzc4NmFmODZlM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzFjM2M4MmYwLTc0MGItNDlmZS04 YWYyLWUzNzg2YWY4NmUzYS8xYzNjODJmMC03NDBiLTQ5ZmUtOGFmMi1lMzc4NmFm ODZlM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKQYIKwYBBQUH AQgBAf8EGjAYoBYwFAICV3YCAmgmMAoCAwYKtgIDBgq3MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHrzzbN0 v1TZhtNViteGhuqU5HwTmnwrFw1IAV/O+nIeI1GJ9d3ttx/BKPj3RWCbIULrvmWi RNWZErx4vLk0RrRQJgiDRvzP6mKXgZzG3XCrNbzpMYWm11eTNfB5UkhmY5MEdYyR dZigkcangly4wIIOmT8v2wo0Jtw4XvPksvDDfnEyuns7RH+84VQyS78adgkUNqFQ qwMnEwRww8wMlXd79J4CHh4b3fGdJd9YW40k8zczhN0e/hq5tqbb0fB8zyPy35v0 raB6EDVc0htMZLH/CZwG/ZoAOPd35mqkwgMICJ/UJ3M7awhU5IyzGJi4QlJ4FC27 Rdubc1mYrNjGs0Q= -----END CERTIFICATE-----Generated at Thu Apr 10 11:17:44 2025 by rpki-client