$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer File: da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer (raw, json) Hash identifier: WaneQZY4X+Av72WRrlplyDp5bCKn3YMAuickH77OFCc= Subject key identifier: 00:CC:52:61:6D:30:39:FB:D2:41:2F:7F:64:D5:7E:7F:8C:9F:16:DC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848C538A106D383D5C706DF79B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Feb 2025 11:35:14 +0000 Certificate not after: Mon 10 May 2027 10:35:14 +0000 Subordinate resources: AS: 397441 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:38:a1:06:d3:83:d5:c7:06:df:79:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 4 11:35:14 2025 GMT Not After : May 10 10:35:14 2027 GMT Subject: CN=da5097c7-8b09-41b1-89c6-66fd84a2c3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:69:f6:22:18:cf:ae:86:4a:89:71:a5:d7: 15:11:4a:9b:44:9b:ff:de:aa:b9:ef:49:36:11:35: 98:cf:fc:c2:9a:25:7a:b8:01:ed:0e:87:52:df:d6: c9:78:3c:d2:0c:d0:73:0e:88:44:23:b3:e4:a1:53: 1a:ae:c5:bb:33:b9:2f:51:4e:41:f0:ef:c1:79:6c: e8:15:92:70:78:c6:bc:d4:b3:3e:99:d8:56:3f:8a: 0d:0a:5d:5f:92:11:87:dd:ea:4f:ee:57:bd:83:fa: 08:8a:56:c4:a0:45:a7:a8:31:2e:a7:1c:35:a1:e5: 0b:e0:0f:c9:4f:99:5e:1c:65:8b:db:1d:5f:0c:67: dd:8a:71:88:28:42:1c:d5:36:6a:0f:32:11:d6:54: 9a:ad:fa:55:66:38:5b:a4:02:b9:b5:aa:50:41:ab: 5e:20:58:a2:07:ab:5e:61:70:05:bf:ee:ad:41:13: d5:16:6c:ec:3a:25:08:0c:cd:10:c7:9d:76:36:4e: 11:8b:b3:1c:fa:85:c3:45:34:61:e4:c9:32:5f:03: c2:00:0c:94:8f:3e:ff:81:0f:7f:6e:7a:53:b5:3d: 83:3a:23:24:0d:92:29:91:53:bd:bd:4b:1a:2f:92: 80:5c:d2:26:18:fc:39:c5:25:49:31:f9:10:a8:40: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CC:52:61:6D:30:39:FB:D2:41:2F:7F:64:D5:7E:7F:8C:9F:16:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 397441 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:39:68:d7:d2:84:ee:e5:a3:ef:89:8a:cd:09:65:f3:bd:34: 47:78:a1:e3:0f:30:4d:58:5f:3e:d3:f5:ac:f2:a2:1f:ba:53: b8:e5:b8:01:94:06:86:83:71:12:66:69:be:e8:f2:6e:82:38: 24:77:95:9b:88:55:57:42:29:60:83:11:cf:48:80:1d:f4:b1: 18:33:cf:fe:1c:21:6a:b9:bb:6f:f1:1d:40:0d:37:2a:57:5a: 25:90:f4:0b:1a:3b:4b:79:ab:bd:fa:16:21:aa:bc:d0:ec:01: a0:2b:dc:42:e5:77:4a:75:41:dc:7a:10:ed:8e:71:48:da:1d: 67:e7:1c:b0:40:30:ad:5e:59:02:56:33:2a:d0:4c:6d:ab:62: 0e:21:cc:ee:5e:07:83:8a:e0:aa:79:ec:c7:dc:b9:13:e4:5e: d3:15:6e:9e:90:87:53:12:b0:b5:69:93:3a:32:ac:83:4b:fb: 63:3e:a7:d0:19:12:29:10:67:86:1f:a3:b9:45:67:60:5a:10: d0:f7:48:6e:9e:dd:4f:10:e9:fa:09:36:53:64:80:d7:51:f9: 9d:c7:c5:15:9c:04:1b:c7:72:d5:ea:3a:be:cc:b2:17:2a:b8: 89:7a:25:6d:6a:40:dd:3c:f6:57:39:31:1c:a0:23:9b:bd:f4: ca:8e:de:ab -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEjFOKEG04PVxwbfebAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwNDExMzUxNFoXDTI3MDUxMDEwMzUxNFowLzEtMCsGA1UEAxMk ZGE1MDk3YzctOGIwOS00MWIxLTg5YzYtNjZmZDg0YTJjM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1p9iIYz66GSolxpdcVEUqbRJv/3qq570k2 ETWYz/zCmiV6uAHtDodS39bJeDzSDNBzDohEI7PkoVMarsW7M7kvUU5B8O/BeWzo FZJweMa81LM+mdhWP4oNCl1fkhGH3epP7le9g/oIilbEoEWnqDEupxw1oeUL4A/J T5leHGWL2x1fDGfdinGIKEIc1TZqDzIR1lSarfpVZjhbpAK5tapQQateIFiiB6te YXAFv+6tQRPVFmzsOiUIDM0Qx512Nk4Ri7Mc+oXDRTRh5MkyXwPCAAyUjz7/gQ9/ bnpTtT2DOiMkDZIpkVO9vUsaL5KAXNImGPw5xSVJMfkQqEDQQQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFADMUmFtMDn70kEvf2TVfn+MnxbcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k YTUwOTdjNy04YjA5LTQxYjEtODljNi02NmZkODRhMmMzZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2RhNTA5N2M3LThiMDktNDFiMS04 OWM2LTY2ZmQ4NGEyYzNmNS9kYTUwOTdjNy04YjA5LTQxYjEtODljNi02NmZkODRh MmMzZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhCBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF85aNfShO7lo++Jis0JZfO9NEd4 oeMPME1YXz7T9azyoh+6U7jluAGUBoaDcRJmab7o8m6COCR3lZuIVVdCKWCDEc9I gB30sRgzz/4cIWq5u2/xHUANNypXWiWQ9AsaO0t5q736FiGqvNDsAaAr3ELld0p1 Qdx6EO2OcUjaHWfnHLBAMK1eWQJWMyrQTG2rYg4hzO5eB4OK4Kp57MfcuRPkXtMV bp6Qh1MSsLVpkzoyrINL+2M+p9AZEikQZ4Yfo7lFZ2BaEND3SG6e3U8Q6foJNlNk gNdR+Z3HxRWcBBvHctXqOr7MshcquIl6JW1qQN089lc5MRygI5u99MqO3qs= -----END CERTIFICATE-----Generated at Fri Apr 4 19:00:44 2025 by rpki-client