$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b.cer File: 6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b.cer (raw, json) Hash identifier: poiDWVorx+cTVzReg3GTADU7ew2+xxGIKYPJg2WCQ6A= Subject key identifier: 8B:14:0D:44:A4:01:79:C7:13:D6:07:82:39:7C:9E:52:40:B1:93:16 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584976A1FAC37C93A9CC8E2DE720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 00:45:34 +0000 Certificate not after: Tue 13 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 14411 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a1:fa:c3:7c:93:a9:cc:8e:2d:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 9 00:45:34 2025 GMT Not After : Jul 13 00:45:34 2027 GMT Subject: CN=6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:01:f3:05:34:f7:17:26:43:93:37:3f:36: 57:3d:73:17:4f:5d:38:2d:9b:77:48:da:c8:6d:70: e1:3c:37:c9:a6:1f:f7:7b:32:12:88:1d:4f:44:93: b0:b1:ca:20:0c:3b:d8:f0:6f:d7:6e:ea:16:9c:48: 51:95:23:d5:aa:ce:55:6f:30:0e:19:84:bf:ab:af: 6b:fc:cb:69:ae:4f:03:73:cd:ef:f2:24:cd:d5:30: ba:00:c3:16:3a:b2:3f:a7:d0:13:e6:4b:23:3c:b7: 10:4c:45:cf:d8:c1:54:f0:71:94:df:73:fe:fd:b3: 93:e5:d8:05:89:6c:9a:4a:01:b6:6b:ae:35:c9:88: 0b:ab:e3:9f:1b:44:b6:a9:df:bf:eb:96:8d:6e:3f: 4f:d6:af:f2:94:41:f8:2d:d0:99:b2:7d:19:d4:6e: df:e0:06:c0:aa:4a:29:9a:3e:93:46:bc:6f:4d:d3: d5:88:93:c6:5e:df:42:dc:35:f3:e9:87:e6:51:7c: 04:3a:18:56:eb:a6:cf:11:ca:9e:8c:ff:a3:75:a3: 78:76:24:b5:4d:64:99:28:de:6a:57:e0:29:f6:b7: 12:fc:cf:34:a1:73:e7:33:46:8b:57:2f:59:94:fe: fe:71:f0:07:f5:70:be:5b:74:20:5c:57:72:e1:e7: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:14:0D:44:A4:01:79:C7:13:D6:07:82:39:7C:9E:52:40:B1:93:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b/6422ec6c-b5b5-4aee-aaa0-d9e794cb5a2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14411 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1d:5e:ce:52:52:c1:73:e4:6a:98:4b:67:85:08:7d:df:1e: de:02:c2:c9:d5:cd:d4:c9:7f:14:50:c0:5a:12:9b:59:57:d6: 25:54:18:9d:d0:cd:87:a8:49:64:80:a8:dc:dd:cb:7a:70:e7: 62:43:a7:06:32:97:84:95:12:93:3b:47:cf:b0:7e:bd:23:09: 98:21:14:a5:ea:cd:94:27:6c:e5:13:47:89:2f:2b:d3:52:71: 38:56:68:7b:5a:3e:7f:a1:a2:82:d4:f5:98:b1:ae:d7:d1:ad: c7:2c:29:b5:03:45:75:68:ec:d0:51:f4:e9:b7:a6:83:f4:62: c7:ff:13:9f:4d:1e:81:5d:60:a2:93:82:5f:e8:69:84:b3:c5: 26:9a:54:53:2f:59:0e:d7:d7:ac:8e:f5:5d:a9:f7:cb:3e:86: 35:d3:9e:3d:74:22:3c:8d:2b:43:f3:ae:a5:ee:e3:6b:32:29: 4c:a9:41:0e:ae:ad:eb:92:73:b3:46:89:35:10:c2:3b:67:85: 3e:b6:fa:d0:6b:d0:64:e2:d8:f5:c0:c1:89:5d:d8:e4:b6:37: e3:56:cb:4c:ad:fe:6f:84:01:fd:9f:4d:a0:ca:93:ed:e8:42: 4f:4e:be:10:67:d0:de:1b:a8:12:91:f9:4f:c7:cf:24:9e:fb: 9a:a1:07:c4 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEl2ofrDfJOpzI4t5yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDQwOTAwNDUzNFoXDTI3MDcxMzAwNDUzNFowLzEtMCsGA1UEAxMk NjQyMmVjNmMtYjViNS00YWVlLWFhYTAtZDllNzk0Y2I1YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMkB8wU09xcmQ5M3PzZXPXMXT104LZt3SNrI bXDhPDfJph/3ezISiB1PRJOwscogDDvY8G/XbuoWnEhRlSPVqs5VbzAOGYS/q69r /Mtprk8Dc83v8iTN1TC6AMMWOrI/p9AT5ksjPLcQTEXP2MFU8HGU33P+/bOT5dgF iWyaSgG2a641yYgLq+OfG0S2qd+/65aNbj9P1q/ylEH4LdCZsn0Z1G7f4AbAqkop mj6TRrxvTdPViJPGXt9C3DXz6YfmUXwEOhhW66bPEcqejP+jdaN4diS1TWSZKN5q V+Ap9rcS/M80oXPnM0aLVy9ZlP7+cfAH9XC+W3QgXFdy4ef8oQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFIsUDUSkAXnHE9YHgjl8nlJAsZMWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82 NDIyZWM2Yy1iNWI1LTRhZWUtYWFhMC1kOWU3OTRjYjVhMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzY0MjJlYzZjLWI1YjUtNGFlZS1h YWEwLWQ5ZTc5NGNiNWEyYi82NDIyZWM2Yy1iNWI1LTRhZWUtYWFhMC1kOWU3OTRj YjVhMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICOEswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcB1ezlJSwXPkaphLZ4UIfd8e3gLC ydXN1Ml/FFDAWhKbWVfWJVQYndDNh6hJZICo3N3LenDnYkOnBjKXhJUSkztHz7B+ vSMJmCEUperNlCds5RNHiS8r01JxOFZoe1o+f6GigtT1mLGu19GtxywptQNFdWjs 0FH06bemg/Rix/8Tn00egV1gopOCX+hphLPFJppUUy9ZDtfXrI71Xan3yz6GNdOe PXQiPI0rQ/Oupe7jazIpTKlBDq6t65Jzs0aJNRDCO2eFPrb60GvQZOLY9cDBiV3Y 5LY341bLTK3+b4QB/Z9NoMqT7ehCT06+EGfQ3huoEpH5T8fPJJ77mqEHxA== -----END CERTIFICATE-----Generated at Sun Apr 27 02:05:44 2025 by rpki-client