$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer File: 8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer (raw, json) Hash identifier: 8r0Xe9Zs1Egal5/P3qOndW82MadDU1wkINO5MpNGuL4= Subject key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848C608352600B648778B69B448 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Feb 2025 18:33:29 +0000 Certificate not after: Mon 10 May 2027 17:33:29 +0000 Subordinate resources: AS: 394787 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:08:35:26:00:b6:48:77:8b:69:b4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 4 18:33:29 2025 GMT Not After : May 10 17:33:29 2027 GMT Subject: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:3f:74:24:b2:65:b7:04:0e:6a:a2:c0:be: 8c:ac:93:5e:43:cc:9a:11:5d:8a:97:a0:da:1f:08: 7a:46:87:29:81:be:18:ab:93:f8:90:da:1d:48:dd: 1d:41:4a:4f:2e:b5:1c:54:c5:e6:61:cf:89:37:50: 80:15:75:db:a7:43:bd:53:a2:8a:f2:67:49:da:b4: a8:50:57:d3:0e:0e:0d:4d:a8:f7:84:34:24:b8:56: 16:d6:9a:e7:72:e2:99:02:6b:e7:d5:f1:c2:f4:b3: fb:e5:56:d6:a2:db:11:31:e8:e9:e3:37:a2:da:4d: 03:02:66:b9:5c:9f:60:7d:09:88:fc:a4:98:63:4a: 0a:8b:98:90:7e:e7:77:cf:04:40:9c:f7:69:08:ed: 31:6e:a4:e2:d2:78:3d:9f:cf:cd:be:41:aa:7c:bf: 9c:6a:ae:5d:29:d5:39:bd:c5:3d:3a:ca:1c:70:eb: 27:7f:88:e5:d6:ad:93:6f:e3:f6:0b:a7:00:dc:58: 6a:31:10:36:f7:5a:2d:f7:36:db:c0:57:3f:09:a2: e5:ad:43:bb:40:27:c6:ea:8e:bc:57:06:25:8b:8c: 8f:d8:60:46:c2:bd:40:25:34:36:dc:22:b6:cd:40: 69:eb:7c:f7:d6:8d:b9:23:86:e5:e6:a7:28:42:9b: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 394787 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:6d:c8:7e:7d:e0:66:b9:87:6c:a1:0d:05:8f:15:c1:cf:a9: be:32:7a:e3:45:b3:ab:94:35:83:17:9e:89:b4:8b:9a:27:b3: c6:5f:74:41:bf:8e:96:dc:c6:f6:5d:c0:c3:50:aa:67:a7:af: 6f:08:a8:ad:95:b9:49:3b:d3:d9:67:6a:6c:fd:38:01:c1:1e: e5:23:34:be:ad:f5:ab:25:95:08:72:5f:73:00:ee:2b:13:0d: a6:5d:b2:f8:6a:c6:f5:d2:bd:c6:ec:fd:90:c7:2b:d7:c5:b8: 4a:5b:87:17:d3:84:bc:9d:c2:98:7c:eb:7f:92:a7:f1:78:b9: ed:15:84:cd:63:3e:02:37:ba:36:79:86:49:5a:a8:39:fc:7a: 94:44:a9:d9:92:86:05:ed:47:65:0b:54:21:b3:54:69:2d:93: 59:7e:f4:70:56:9b:fb:2d:fb:72:6c:df:32:1f:e7:0e:ab:a9: 95:da:80:92:33:03:61:05:3c:57:f6:c2:e0:a6:73:28:c7:65: 23:ab:93:52:2c:1a:1f:7d:e6:47:59:db:15:b9:0d:24:60:0e: e1:6c:a9:58:a9:5f:ab:2d:62:1c:26:b5:93:23:2c:2e:42:a1: 5b:27:6c:30:71:7e:86:69:f3:e6:df:27:39:e9:3c:9d:35:13: 0e:d7:03:3e -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEjGCDUmALZId4tptEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwNDE4MzMyOVoXDTI3MDUxMDE3MzMyOVowLzEtMCsGA1UEAxMk ODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMzMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXg/dCSyZbcEDmqiwL6MrJNeQ8yaEV2Kl6Da Hwh6Rocpgb4Yq5P4kNodSN0dQUpPLrUcVMXmYc+JN1CAFXXbp0O9U6KK8mdJ2rSo UFfTDg4NTaj3hDQkuFYW1prncuKZAmvn1fHC9LP75VbWotsRMejp4zei2k0DAma5 XJ9gfQmI/KSYY0oKi5iQfud3zwRAnPdpCO0xbqTi0ng9n8/NvkGqfL+caq5dKdU5 vcU9OsoccOsnf4jl1q2Tb+P2C6cA3FhqMRA291ot9zbbwFc/CaLlrUO7QCfG6o68 VwYli4yP2GBGwr1AJTQ23CK2zUBp63z31o25I4bl5qcoQpvZYwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFB57WNiOKWIcEzHCfyuSsJ2H8sJjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg2ODNmNGUxLTUxYjEtNGNiMi05 YTUxLWIwZjBjNDkzMzEwMC84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5 MzMxMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgYjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKVtyH594Ga5h2yhDQWPFcHPqb4y euNFs6uUNYMXnom0i5ons8ZfdEG/jpbcxvZdwMNQqmenr28IqK2VuUk709lnamz9 OAHBHuUjNL6t9asllQhyX3MA7isTDaZdsvhqxvXSvcbs/ZDHK9fFuEpbhxfThLyd wph863+Sp/F4ue0VhM1jPgI3ujZ5hklaqDn8epREqdmShgXtR2ULVCGzVGktk1l+ 9HBWm/st+3Js3zIf5w6rqZXagJIzA2EFPFf2wuCmcyjHZSOrk1IsGh995kdZ2xW5 DSRgDuFsqVipX6stYhwmtZMjLC5CoVsnbDBxfoZp8+bfJznpPJ01Ew7XAz4= -----END CERTIFICATE-----Generated at Fri Apr 4 19:31:53 2025 by rpki-client