$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb.cer File: d900f6ff-5951-411a-94f6-c99157d899eb.cer (raw, json) Hash identifier: VYLPkCMhoh70C/lTnxhOfTZ+bqHzZWTjABrhG98SqaA= Subject key identifier: 1F:43:DD:01:E2:CE:BF:C1:51:9A:E8:C2:3B:B5:F1:AA:44:04:CD:43 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848FD43F6CBE38150FE98DDF280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb/d900f6ff-5951-411a-94f6-c99157d899eb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Feb 2025 13:23:20 +0000 Certificate not after: Sun 30 May 2027 12:23:20 +0000 Subordinate resources: AS: 55227 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:43:f6:cb:e3:81:50:fe:98:dd:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 24 13:23:20 2025 GMT Not After : May 30 12:23:20 2027 GMT Subject: CN=d900f6ff-5951-411a-94f6-c99157d899eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:72:26:85:5a:53:4b:40:54:aa:53:e7:e9: d0:0a:37:4c:21:6e:6a:7c:30:f3:67:e5:3e:85:f6: 15:61:f6:e3:e1:d5:89:69:66:94:41:71:28:82:6e: a9:60:04:09:09:d5:e3:9b:45:52:f0:1f:c7:f6:30: 30:a5:aa:72:80:3e:7d:ad:fb:93:28:ff:49:43:e0: ee:d2:98:08:30:0f:db:47:d0:4a:96:08:36:ad:d7: c8:10:f5:2c:34:7e:3f:03:5b:a9:6f:cf:fe:6b:94: 81:dc:c7:ab:c3:fb:39:0e:ce:a8:5a:78:68:b6:28: 7c:ad:a9:1b:6a:86:3a:49:e6:bc:7d:4f:97:64:75: 52:a3:f0:6a:62:09:48:fb:24:ad:5c:20:11:83:8d: 6b:e7:93:16:4b:b0:3b:93:41:85:a7:c7:40:1a:35: 85:f1:ee:0f:c4:ad:63:9e:f5:4f:52:ed:1c:99:7d: 11:7d:c4:02:c4:80:46:86:99:e4:de:5b:06:cf:b9: 45:b2:53:70:9a:90:74:4b:38:b6:d8:2c:0e:6a:d8: da:cb:12:0a:8f:83:28:24:37:ab:05:13:c4:d0:15: c4:5b:8d:ba:bd:3e:07:ec:ac:d8:80:66:21:78:35: 72:3c:b4:8e:69:94:b5:6e:15:dc:12:48:66:b4:b0: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:DD:01:E2:CE:BF:C1:51:9A:E8:C2:3B:B5:F1:AA:44:04:CD:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb/d900f6ff-5951-411a-94f6-c99157d899eb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 55227 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:87:f9:59:ac:e7:ad:20:1b:62:88:95:30:64:c3:22:88:6a: fb:53:75:ee:39:b1:33:74:95:f5:5c:06:b2:3a:ca:70:63:6d: 53:bb:15:71:0f:5f:c7:71:54:cf:2e:4b:39:c5:b0:d8:09:04: 4b:6c:a1:f6:47:6e:2d:91:17:e0:87:9b:2e:79:85:0d:7d:77: f2:9c:d2:35:d4:b8:82:3d:bd:a1:d2:42:de:e5:a5:72:13:34: 53:d5:95:e3:03:ea:43:cc:cf:d6:26:7a:0e:cd:eb:47:1f:38: 7b:86:89:55:00:95:24:f9:d3:6e:fe:8b:ea:e2:2c:b2:09:2c: 4a:5e:f1:ab:8e:03:6b:4a:6d:3c:0e:4f:e4:d5:2d:d5:9a:99: f3:49:69:fb:f9:ce:cb:25:03:47:56:2f:be:7d:c9:76:6f:87: 2e:51:76:fe:97:73:09:44:55:90:5c:9e:e6:3a:51:0b:0a:fc: dc:73:ec:26:eb:09:96:2c:f1:81:bf:ad:c1:39:b3:a2:ea:3c: 32:ea:c9:ef:54:62:82:89:d7:5d:da:9a:7d:22:e2:bd:dc:3a: fc:5f:a7:b5:bf:a9:2b:83:c3:9f:6c:04:dc:ab:ee:1b:d1:63: 61:63:ea:ea:c1:14:76:b6:83:db:38:48:78:c4:1d:55:76:9c: 24:fd:b4:1d -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEj9Q/bL44FQ/pjd8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNDEzMjMyMFoXDTI3MDUzMDEyMjMyMFowLzEtMCsGA1UEAxMk ZDkwMGY2ZmYtNTk1MS00MTFhLTk0ZjYtYzk5MTU3ZDg5OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshRyJoVaU0tAVKpT5+nQCjdMIW5qfDDzZ+U+ hfYVYfbj4dWJaWaUQXEogm6pYAQJCdXjm0VS8B/H9jAwpapygD59rfuTKP9JQ+Du 0pgIMA/bR9BKlgg2rdfIEPUsNH4/A1upb8/+a5SB3Merw/s5Ds6oWnhotih8rakb aoY6Sea8fU+XZHVSo/BqYglI+yStXCARg41r55MWS7A7k0GFp8dAGjWF8e4PxK1j nvVPUu0cmX0RfcQCxIBGhpnk3lsGz7lFslNwmpB0Szi22CwOatjayxIKj4MoJDer BRPE0BXEW426vT4H7KzYgGYheDVyPLSOaZS1bhXcEkhmtLA2XwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFB9D3QHizr/BUZrowju18apEBM1DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k OTAwZjZmZi01OTUxLTQxMWEtOTRmNi1jOTkxNTdkODk5ZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q5MDBmNmZmLTU5NTEtNDExYS05 NGY2LWM5OTE1N2Q4OTllYi9kOTAwZjZmZi01OTUxLTQxMWEtOTRmNi1jOTkxNTdk ODk5ZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANe7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKCH+Vms560gG2KIlTBkwyKIavtT de45sTN0lfVcBrI6ynBjbVO7FXEPX8dxVM8uSznFsNgJBEtsofZHbi2RF+CHmy55 hQ19d/Kc0jXUuII9vaHSQt7lpXITNFPVleMD6kPMz9Ymeg7N60cfOHuGiVUAlST5 027+i+riLLIJLEpe8auOA2tKbTwOT+TVLdWamfNJafv5zsslA0dWL759yXZvhy5R dv6XcwlEVZBcnuY6UQsK/Nxz7CbrCZYs8YG/rcE5s6LqPDLqye9UYoKJ113amn0i 4r3cOvxfp7W/qSuDw59sBNyr7hvRY2Fj6urBFHa2g9s4SHjEHVV2nCT9tB0= -----END CERTIFICATE-----Generated at Sat Apr 5 02:59:21 2025 by rpki-client