$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer File: de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer (raw, json) Hash identifier: 5Ey7vY1lW7XNjvTOFyXtG0pRcIce0pnznnAkMv1z5Yk= Subject key identifier: 7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B4F9F12B683256853EEE2940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 15:56:00 +0000 Certificate not after: Tue 04 May 2027 14:56:00 +0000 Subordinate resources: AS: 13864 IP: 199.180.52.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:f9:f1:2b:68:32:56:85:3e:ee:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 29 15:56:00 2025 GMT Not After : May 4 14:56:00 2027 GMT Subject: CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:95:9c:6e:c4:3b:ed:7c:f1:b4:bc:11:2e: d1:ad:53:4f:d4:ca:54:bc:af:ee:6e:17:d0:b4:e0: b1:a9:1a:e6:db:f1:b1:d3:91:a5:76:21:e1:c5:21: a4:5d:af:d0:66:05:69:c7:d0:9c:db:50:a4:ae:38: bc:ad:fc:15:99:4f:13:99:2e:05:6b:3e:c9:ba:1f: 16:f5:82:42:38:9d:0a:bc:bc:17:3c:94:61:89:10: 68:3a:ae:52:c3:61:dc:8e:91:1e:bb:81:38:1d:7e: 0f:23:cb:59:5e:e4:e7:61:3b:5d:73:38:dd:30:be: b2:a1:bc:8f:b7:90:e1:c8:f4:54:be:3d:e5:80:73: a2:0f:de:09:a5:a3:8c:bc:24:45:0d:8d:bd:91:cf: d5:63:9a:03:ec:49:e0:75:b3:78:52:d8:31:0f:19: 41:94:6e:7d:a2:1a:5d:93:16:23:0a:31:cc:34:40: ad:00:ec:59:ee:78:5a:60:7b:5c:1a:09:74:1b:49: e4:7d:eb:85:38:6b:b1:de:71:8d:cd:39:4c:34:5d: bd:5c:da:d1:fa:d5:59:b0:5d:5d:8c:8c:ac:0d:e6: 00:1c:15:6f:47:40:05:6e:c6:6c:3b:23:55:f4:5c: cf:e0:c3:0e:64:60:67:a7:05:99:bc:51:c1:75:45: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.180.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13864 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e2:f9:89:9b:5b:65:67:8b:05:69:14:44:be:52:15:4b:8f: a4:af:35:b5:61:e4:fb:df:7d:a0:21:c5:bb:ac:4c:9a:8c:67: d6:54:8c:1d:22:63:52:c5:17:9a:bd:35:12:03:d0:bb:4e:07: aa:40:8f:0d:c8:3f:76:f5:9b:39:0c:0e:2d:c1:2f:65:30:12: 6e:6a:c7:32:04:8d:95:af:de:8b:75:32:73:84:a5:ea:96:5c: ef:31:af:30:96:5d:88:ce:aa:b6:19:fc:06:ef:2f:29:74:5c: 99:d3:90:8b:36:f9:01:3a:9e:dd:2b:38:64:fd:89:40:51:d5: f8:5c:bb:8d:c1:be:e6:be:d0:44:b8:d2:7f:4f:18:ce:16:5a: 9b:67:58:8b:2c:75:de:e1:cc:e0:46:83:2f:85:00:21:19:16: 6b:fc:20:27:f8:60:b5:44:05:ce:90:50:47:46:dd:01:71:f9: f1:ed:f7:46:eb:ad:c4:85:99:4a:14:fd:33:da:9f:ed:07:58: dd:f9:be:bb:46:b7:6e:e0:4c:3b:9f:bf:f2:0f:b0:ba:c8:c1: 2e:c2:19:b4:ff:33:80:b0:c4:aa:6e:a7:0b:5a:4d:00:7c:2b: c0:e2:7e:aa:09:b0:c4:07:db:71:d4:e1:d6:3b:a3:e3:7b:9a: 4d:f7:81:77 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEi0+fEraDJWhT7uKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyOTE1NTYwMFoXDTI3MDUwNDE0NTYwMFowLzEtMCsGA1UEAxMk ZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4MzQtNTc0ZTliYjJlODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPGVnG7EO+188bS8ES7RrVNP1MpUvK/ubhfQ tOCxqRrm2/Gx05GldiHhxSGkXa/QZgVpx9Cc21Ckrji8rfwVmU8TmS4Faz7Juh8W 9YJCOJ0KvLwXPJRhiRBoOq5Sw2HcjpEeu4E4HX4PI8tZXuTnYTtdczjdML6yobyP t5DhyPRUvj3lgHOiD94JpaOMvCRFDY29kc/VY5oD7EngdbN4UtgxDxlBlG59ohpd kxYjCjHMNECtAOxZ7nhaYHtcGgl0G0nkfeuFOGux3nGNzTlMNF29XNrR+tVZsF1d jIysDeYAHBVvR0AFbsZsOyNV9FzP4MMOZGBnpwWZvFHBdUWfbQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHtvJgqRMce8pQKBCsDavahvRFGyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k ZTFiYzgwZi01ZDU3LTRiOTYtODgzNC01NzRlOWJiMmU4MmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2RlMWJjODBmLTVkNTctNGI5Ni04 ODM0LTU3NGU5YmIyZTgyZC9kZTFiYzgwZi01ZDU3LTRiOTYtODgzNC01NzRlOWJi MmU4MmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHtDQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC NigwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAEeL5iZtbZWeLBWkURL5SFUuPpK81tWHk+999oCHFu6xMmoxn 1lSMHSJjUsUXmr01EgPQu04HqkCPDcg/dvWbOQwOLcEvZTASbmrHMgSNla/ei3Uy c4Sl6pZc7zGvMJZdiM6qthn8Bu8vKXRcmdOQizb5ATqe3Ss4ZP2JQFHV+Fy7jcG+ 5r7QRLjSf08YzhZam2dYiyx13uHM4EaDL4UAIRkWa/wgJ/hgtUQFzpBQR0bdAXH5 8e33RuutxIWZShT9M9qf7QdY3fm+u0a3buBMO5+/8g+wusjBLsIZtP8zgLDEqm6n C1pNAHwrwOJ+qgmwxAfbcdTh1juj43uaTfeBdw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:16 2025 by rpki-client