$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/20296616-a423-46a4-82fd-ed6df98a8021.cer File: 20296616-a423-46a4-82fd-ed6df98a8021.cer (raw, json) Hash identifier: mJVimZtSdK1WWbA8ElFobZV4EaB30bIgQio35p3R7wY= Subject key identifier: B0:D6:EC:FB:7F:76:EE:D5:D0:F8:A2:1A:A2:9C:D1:89:E3:6C:F8:9E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848E1ABD6E498798595709EA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/20296616-a423-46a4-82fd-ed6df98a8021/20296616-a423-46a4-82fd-ed6df98a8021.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/20296616-a423-46a4-82fd-ed6df98a8021/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Feb 2025 16:10:00 +0000 Certificate not after: Thu 20 May 2027 15:10:00 +0000 Subordinate resources: AS: 10871 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:ab:d6:e4:98:79:85:95:70:9e:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 14 16:10:00 2025 GMT Not After : May 20 15:10:00 2027 GMT Subject: CN=20296616-a423-46a4-82fd-ed6df98a8021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:c9:ca:14:f8:9c:92:c8:c8:12:77:00:2f: 0a:40:45:7e:7f:04:7f:aa:3c:3e:48:f2:81:3b:56: 3f:93:d6:33:fc:5d:f2:59:66:23:0a:4e:aa:8a:d5: 35:7e:2f:91:27:38:c5:3f:5d:72:1c:2a:cf:16:06: 7e:b7:f9:49:ec:25:0d:a0:de:d7:f0:cb:de:7a:8d: b1:51:e7:98:ab:98:18:0b:f2:ff:d4:7d:58:dc:b4: 23:3e:79:aa:17:d3:fb:c1:51:70:47:03:38:77:2c: ea:10:9e:95:ce:48:6a:58:7c:ea:5e:91:42:3b:46: c9:b6:f2:b9:ac:d8:37:c9:b5:25:4c:e5:29:32:d5: 91:35:9a:ae:3c:b8:cf:79:d6:3b:c7:74:94:fb:cb: 0b:93:a4:14:7f:32:27:59:87:92:dd:94:47:a1:b2: 86:72:39:df:46:60:6d:3a:17:1f:6e:fe:0e:d9:da: 62:e0:44:21:8e:3a:92:f5:1c:d8:85:f7:03:4a:f9: c4:67:b2:6d:66:bc:f0:44:d7:24:44:b9:d5:af:d4: 60:d0:2f:0c:c9:a4:4b:65:90:c0:7c:32:09:1f:13: 02:a6:77:2d:0e:6b:93:2f:be:82:7b:22:e7:d6:99: 7a:03:68:c3:a7:87:19:09:11:43:b7:90:9f:6c:d3: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D6:EC:FB:7F:76:EE:D5:D0:F8:A2:1A:A2:9C:D1:89:E3:6C:F8:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/20296616-a423-46a4-82fd-ed6df98a8021/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/20296616-a423-46a4-82fd-ed6df98a8021/20296616-a423-46a4-82fd-ed6df98a8021.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 10871 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:91:7a:61:76:5c:23:93:a8:a5:ef:94:b9:54:47:61:7a:aa: 9a:8e:6d:57:f5:2c:29:bf:20:98:2f:62:30:d4:f6:c1:fd:c2: a2:e7:01:51:92:df:0d:6a:fa:04:6c:f7:c2:c6:d7:cb:39:51: 68:15:78:51:ca:37:df:c9:69:56:ab:a2:7f:11:c7:ee:06:23: f8:5f:f8:90:0a:d8:07:24:64:03:91:5f:d5:d7:f2:16:9e:1f: 72:d8:9b:9a:17:d0:1f:ae:4c:3b:cb:35:18:05:66:d5:a4:55: f0:d5:73:21:13:5c:fd:e6:13:f8:94:2c:90:63:e3:42:73:a9: 56:b7:c5:1e:00:1e:9a:bb:a5:f0:93:59:38:92:68:68:1d:9c: 10:ef:63:f9:dd:11:05:26:e4:f4:84:76:22:73:2d:b3:d1:4d: 57:31:33:95:6c:1b:dc:44:46:74:d2:c3:7e:31:65:30:ec:18: 12:b1:40:f6:84:9a:3d:f4:8c:86:36:f3:8d:b1:36:71:70:27: 90:34:24:a5:95:d2:c6:45:df:f9:6a:20:2d:88:36:6a:78:ec: 7a:9e:a1:72:2c:2d:8e:01:d6:aa:e0:68:ce:69:f7:13:e8:af: 04:81:2a:31:81:be:9c:9c:b9:32:0c:d4:1f:c0:a6:86:10:fe: 7e:32:47:f6 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEjhq9bkmHmFlXCeqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxNDE2MTAwMFoXDTI3MDUyMDE1MTAwMFowLzEtMCsGA1UEAxMk MjAyOTY2MTYtYTQyMy00NmE0LTgyZmQtZWQ2ZGY5OGE4MDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ/JyhT4nJLIyBJ3AC8KQEV+fwR/qjw+SPKB O1Y/k9Yz/F3yWWYjCk6qitU1fi+RJzjFP11yHCrPFgZ+t/lJ7CUNoN7X8Mveeo2x UeeYq5gYC/L/1H1Y3LQjPnmqF9P7wVFwRwM4dyzqEJ6VzkhqWHzqXpFCO0bJtvK5 rNg3ybUlTOUpMtWRNZquPLjPedY7x3SU+8sLk6QUfzInWYeS3ZRHobKGcjnfRmBt Ohcfbv4O2dpi4EQhjjqS9RzYhfcDSvnEZ7JtZrzwRNckRLnVr9Rg0C8MyaRLZZDA fDIJHxMCpnctDmuTL76CeyLn1pl6A2jDp4cZCRFDt5CfbNNOXQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFLDW7Pt/du7V0PiiGqKc0YnjbPieMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y MDI5NjYxNi1hNDIzLTQ2YTQtODJmZC1lZDZkZjk4YTgwMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzIwMjk2NjE2LWE0MjMtNDZhNC04 MmZkLWVkNmRmOThhODAyMS8yMDI5NjYxNi1hNDIzLTQ2YTQtODJmZC1lZDZkZjk4 YTgwMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICKncwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf5F6YXZcI5Oope+UuVRHYXqqmo5t V/UsKb8gmC9iMNT2wf3CoucBUZLfDWr6BGz3wsbXyzlRaBV4Uco338lpVquifxHH 7gYj+F/4kArYByRkA5Ff1dfyFp4fctibmhfQH65MO8s1GAVm1aRV8NVzIRNc/eYT +JQskGPjQnOpVrfFHgAemrul8JNZOJJoaB2cEO9j+d0RBSbk9IR2InMts9FNVzEz lWwb3ERGdNLDfjFlMOwYErFA9oSaPfSMhjbzjbE2cXAnkDQkpZXSxkXf+WogLYg2 anjsep6hciwtjgHWquBozmn3E+ivBIEqMYG+nJy5MgzUH8CmhhD+fjJH9g== -----END CERTIFICATE-----Generated at Fri Apr 4 19:22:16 2025 by rpki-client