$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0.cer File: b586df36-3c71-4c6f-974d-2c9545c25eb0.cer (raw, json) Hash identifier: BICNmpITnrdI5t8zQZgp/vBig4D873W+ZC+S835EwxY= Subject key identifier: 68:AB:98:AC:87:47:4A:49:7C:C5:C2:06:7B:E0:29:E8:7F:D2:EF:AA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858491594CBFAC62243E6808A3F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 06:25:36 +0000 Certificate not after: Tue 08 Jun 2027 05:25:36 +0000 Subordinate resources: AS: 25972 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:94:cb:fa:c6:22:43:e6:80:8a:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 5 06:25:36 2025 GMT Not After : Jun 8 05:25:36 2027 GMT Subject: CN=b586df36-3c71-4c6f-974d-2c9545c25eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:13:d0:27:91:cc:fb:d0:cb:ac:2b:99:6e: d3:72:e5:10:4e:c4:ae:b4:7d:f0:88:00:7a:f3:e8: 09:41:c0:ae:34:1a:df:bd:bb:06:14:b3:23:bd:63: 51:e0:a0:70:9c:20:1e:e8:58:a9:a5:de:26:c9:93: 0d:20:96:f3:af:c0:05:c1:1d:c7:01:14:a8:1a:65: 34:00:8b:53:e8:f8:7a:87:15:d2:fa:96:84:24:17: 1d:1a:a2:2c:71:59:64:5a:c5:41:7a:b3:46:3b:76: 58:ee:09:0f:0f:8d:ce:5b:b7:9b:45:09:8f:ed:c2: 33:78:3a:4e:a8:b5:9d:02:0d:46:bf:fe:cc:7d:77: f3:0f:18:d5:72:06:52:93:29:0f:3a:2b:99:80:23: 45:b8:8e:a0:c4:9f:1e:e3:09:76:6e:48:a4:a8:1f: 0b:7e:76:4b:33:b3:d5:fe:86:1c:50:81:43:42:ef: 82:21:25:1d:b0:78:0d:8a:36:a2:1c:00:2b:7f:37: 9a:17:82:de:5f:04:af:e4:45:68:f5:b4:15:6d:20: f0:0d:76:0b:a8:17:6f:4b:2c:fa:87:d4:bd:5c:71: 83:04:4d:4f:f0:fd:68:8b:40:f1:3d:3b:d1:de:f5: bb:d4:47:58:2c:3c:8b:f4:82:66:44:75:65:9f:4a: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AB:98:AC:87:47:4A:49:7C:C5:C2:06:7B:E0:29:E8:7F:D2:EF:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b586df36-3c71-4c6f-974d-2c9545c25eb0/b586df36-3c71-4c6f-974d-2c9545c25eb0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 25972 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:30:f2:73:5c:3d:18:55:08:f7:b6:da:e6:ee:f1:68:cd:18: e2:97:4e:9e:43:c0:cc:03:db:6e:fa:f7:39:8d:5d:ee:a3:3f: 82:db:2a:4e:cc:b1:4e:53:5e:47:5b:87:30:40:15:46:05:94: 4b:72:a2:fa:a1:64:50:b2:ee:bd:04:64:ef:31:17:a7:5d:c7: 8b:22:dd:22:f4:0f:29:c4:ca:4b:45:45:db:01:60:23:d0:a2: 72:49:3f:44:c3:bd:5e:fd:4d:03:13:2e:ff:6e:95:d8:cb:b0: cd:ee:ab:3d:b9:05:c3:69:a4:80:59:2d:1d:86:0a:2e:92:f9: 98:bd:b3:3c:7c:13:6c:03:92:86:29:1f:e4:f2:6b:87:2a:db: 26:ce:e8:1d:6d:6c:bd:bc:7c:52:89:8b:5c:1c:02:f6:93:d1: 32:a1:7b:d2:c8:5c:28:8c:dc:4f:85:46:a9:1e:ba:cb:0b:46: 90:59:e3:66:dd:9f:f2:96:8f:ac:2a:ae:ce:21:c9:a3:81:fc: 50:5d:22:69:88:eb:e1:e1:1e:75:f6:29:52:50:a8:0d:31:e4: ce:45:8d:0b:46:4d:1b:0f:11:3b:98:aa:38:41:4d:04:58:79: 3e:45:ba:e8:1c:dc:a9:84:bb:9f:85:9f:86:9e:52:22:4a:65: dd:6f:1b:07 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEkVlMv6xiJD5oCKP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNTA2MjUzNloXDTI3MDYwODA1MjUzNlowLzEtMCsGA1UEAxMk YjU4NmRmMzYtM2M3MS00YzZmLTk3NGQtMmM5NTQ1YzI1ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPIT0CeRzPvQy6wrmW7TcuUQTsSutH3wiAB6 8+gJQcCuNBrfvbsGFLMjvWNR4KBwnCAe6Fippd4myZMNIJbzr8AFwR3HARSoGmU0 AItT6Ph6hxXS+paEJBcdGqIscVlkWsVBerNGO3ZY7gkPD43OW7ebRQmP7cIzeDpO qLWdAg1Gv/7MfXfzDxjVcgZSkykPOiuZgCNFuI6gxJ8e4wl2bkikqB8LfnZLM7PV /oYcUIFDQu+CISUdsHgNijaiHAArfzeaF4LeXwSv5EVo9bQVbSDwDXYLqBdvSyz6 h9S9XHGDBE1P8P1oi0DxPTvR3vW71EdYLDyL9IJmRHVln0r4NQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFGirmKyHR0pJfMXCBnvgKeh/0u+qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NTg2ZGYzNi0zYzcxLTRjNmYtOTc0ZC0yYzk1NDVjMjVlYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I1ODZkZjM2LTNjNzEtNGM2Zi05 NzRkLTJjOTU0NWMyNWViMC9iNTg2ZGYzNi0zYzcxLTRjNmYtOTc0ZC0yYzk1NDVj MjVlYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZXQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWjDyc1w9GFUI97ba5u7xaM0Y4pdO nkPAzAPbbvr3OY1d7qM/gtsqTsyxTlNeR1uHMEAVRgWUS3Ki+qFkULLuvQRk7zEX p13HiyLdIvQPKcTKS0VF2wFgI9Cickk/RMO9Xv1NAxMu/26V2Muwze6rPbkFw2mk gFktHYYKLpL5mL2zPHwTbAOShikf5PJrhyrbJs7oHW1svbx8UomLXBwC9pPRMqF7 0shcKIzcT4VGqR66ywtGkFnjZt2f8paPrCquziHJo4H8UF0iaYjr4eEedfYpUlCo DTHkzkWNC0ZNGw8RO5iqOEFNBFh5PkW66BzcqYS7n4Wfhp5SIkpl3W8bBw== -----END CERTIFICATE-----Generated at Fri Apr 4 19:10:43 2025 by rpki-client