$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e7100b5e-73c2-4b5b-a176-ba435c5b3356.cer File: e7100b5e-73c2-4b5b-a176-ba435c5b3356.cer (raw, json) Hash identifier: QIOHvC35zL9GKv4iw/MSPDeO4twOVZhCdbMeiKxWook= Subject key identifier: 97:2E:0A:67:62:B1:E7:97:D7:C4:85:64:DC:C3:B4:CE:1B:DC:2B:16 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584940B1C788D6A79B81399DF340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e7100b5e-73c2-4b5b-a176-ba435c5b3356/e7100b5e-73c2-4b5b-a176-ba435c5b3356.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e7100b5e-73c2-4b5b-a176-ba435c5b3356/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Mar 2025 17:03:46 +0000 Certificate not after: Wed 23 Jun 2027 17:03:46 +0000 Subordinate resources: AS: 16769 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:b1:c7:88:d6:a7:9b:81:39:9d:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 20 17:03:46 2025 GMT Not After : Jun 23 17:03:46 2027 GMT Subject: CN=e7100b5e-73c2-4b5b-a176-ba435c5b3356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:90:d4:b3:03:c2:cc:25:cf:8c:bf:dd:5c:ee: f5:30:7e:59:ba:8a:93:db:39:a9:d2:7f:16:a2:74: fc:1b:02:c9:76:b9:37:46:2c:c7:08:ea:27:df:bf: 8c:ef:4b:a0:2e:76:28:0e:16:0d:c6:8c:a4:fa:f5: 23:03:02:c1:7d:2f:e9:77:ac:8c:24:81:43:20:e0: 49:d5:9b:41:a0:58:67:bc:a0:04:c9:ea:ce:20:cf: d6:9e:86:15:e6:f7:df:f0:17:69:70:64:5f:52:b8: 64:69:91:9c:1b:9f:06:b3:4b:b8:22:99:20:ea:ac: e9:42:62:a9:47:38:73:72:e2:2a:e5:f8:e6:34:df: 37:c5:cf:45:df:f4:81:6f:07:b5:9e:b3:09:1e:c4: 66:dd:a4:e4:20:29:e9:f0:91:7f:4c:48:1e:cb:4e: 69:e8:00:15:4f:2b:38:b6:7b:29:05:94:11:b0:81: 24:ef:fb:42:11:69:42:f1:db:42:31:15:2e:07:0d: fb:a4:30:e0:83:64:07:5b:8d:fa:b4:08:a3:99:ba: c3:7b:26:9c:2d:71:8e:b8:0e:a9:02:74:1b:96:c2: 39:8b:d6:a9:35:74:1c:61:76:34:1b:33:c9:6f:70: ef:bf:54:c4:21:a1:e2:b2:6e:f8:54:dd:09:8f:c4: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2E:0A:67:62:B1:E7:97:D7:C4:85:64:DC:C3:B4:CE:1B:DC:2B:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e7100b5e-73c2-4b5b-a176-ba435c5b3356/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e7100b5e-73c2-4b5b-a176-ba435c5b3356/e7100b5e-73c2-4b5b-a176-ba435c5b3356.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 16769 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d9:44:aa:7f:f1:95:78:6d:72:6a:f9:4b:84:80:d1:b5:95: 7a:fa:5c:8b:4d:ed:d6:5f:9c:03:e2:82:6e:da:88:71:65:c8: 3d:34:3a:d5:08:90:86:a7:3a:f8:2c:16:03:80:8a:7e:a3:a8: c9:9d:f6:75:5f:6f:7a:ec:67:97:95:76:5e:7d:c8:af:be:61: 77:6e:b5:f6:0b:36:2f:a8:f6:3e:a7:cb:ca:d8:2c:80:c5:14: 14:91:4c:21:86:53:4b:f3:d5:3d:ea:f5:23:ac:63:32:e0:5e: 03:95:39:01:9f:ae:5b:10:ec:cb:c1:4d:57:2f:d5:6a:49:f7: ef:5a:63:00:2a:d8:49:30:04:ef:33:52:cc:b0:bf:8c:02:5b: 15:f0:e7:56:f7:d6:73:1c:29:35:ef:72:46:d8:26:15:7c:ab: ea:03:61:4f:a9:f4:fe:c0:98:56:c2:fb:f8:16:ca:61:5f:99: ef:d6:0c:07:39:ee:20:f6:7b:2b:97:ae:e7:b6:01:94:e7:59: c2:ed:8c:52:3e:6d:95:5f:1f:58:5a:0e:7e:0c:77:fd:2f:01: 76:34:bd:cb:db:2c:d5:ec:be:6e:0a:42:04:a2:e5:f7:60:72: 0a:33:3a:16:2f:07:93:e7:a1:19:dd:f7:2a:e9:be:24:1b:11: a1:c6:90:5e -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWElAsceI1qebgTmd80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMyMDE3MDM0NloXDTI3MDYyMzE3MDM0NlowLzEtMCsGA1UEAxMk ZTcxMDBiNWUtNzNjMi00YjViLWExNzYtYmE0MzVjNWIzMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5DUswPCzCXPjL/dXO71MH5ZuoqT2zmp0n8W onT8GwLJdrk3RizHCOon37+M70ugLnYoDhYNxoyk+vUjAwLBfS/pd6yMJIFDIOBJ 1ZtBoFhnvKAEyerOIM/WnoYV5vff8BdpcGRfUrhkaZGcG58Gs0u4Ipkg6qzpQmKp RzhzcuIq5fjmNN83xc9F3/SBbwe1nrMJHsRm3aTkICnp8JF/TEgey05p6AAVTys4 tnspBZQRsIEk7/tCEWlC8dtCMRUuBw37pDDgg2QHW436tAijmbrDeyacLXGOuA6p AnQblsI5i9apNXQcYXY0GzPJb3Dvv1TEIaHism74VN0Jj8T99QIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJcuCmdiseeX18SFZNzDtM4b3CsWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9l NzEwMGI1ZS03M2MyLTRiNWItYTE3Ni1iYTQzNWM1YjMzNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2U3MTAwYjVlLTczYzItNGI1Yi1h MTc2LWJhNDM1YzViMzM1Ni9lNzEwMGI1ZS03M2MyLTRiNWItYTE3Ni1iYTQzNWM1 YjMzNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQYEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOtlEqn/xlXhtcmr5S4SA0bWVevpc i03t1l+cA+KCbtqIcWXIPTQ61QiQhqc6+CwWA4CKfqOoyZ32dV9veuxnl5V2Xn3I r75hd2619gs2L6j2PqfLytgsgMUUFJFMIYZTS/PVPer1I6xjMuBeA5U5AZ+uWxDs y8FNVy/Vakn371pjACrYSTAE7zNSzLC/jAJbFfDnVvfWcxwpNe9yRtgmFXyr6gNh T6n0/sCYVsL7+BbKYV+Z79YMBznuIPZ7K5eu57YBlOdZwu2MUj5tlV8fWFoOfgx3 /S8BdjS9y9ss1ey+bgpCBKLl92ByCjM6Fi8Hk+ehGd33Kum+JBsRocaQXg== -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:21 2025 by rpki-client