$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.cer File: 2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.cer (raw, json) Hash identifier: SjBIlThhtMUaxEfIGcQjyakXkgfYEF0LfsJVAvvNIyw= Subject key identifier: 15:6A:0C:DF:F9:DD:AF:A3:ED:3F:C7:FA:1F:B9:E8:AF:C0:79:E6:2A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858487E48DD13F8A8F78417A80900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Jan 2025 01:45:33 +0000 Certificate not after: Thu 15 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 932 AS: 6134 AS: 54467 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:48:dd:13:f8:a8:f7:84:17:a8:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 10 01:45:33 2025 GMT Not After : Apr 15 00:45:33 2027 GMT Subject: CN=2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:23:90:be:20:27:9f:5c:12:bc:69:39:96: 84:1a:51:dc:99:b7:f9:42:3d:e5:56:56:c3:6b:88: a1:9d:5c:53:cc:0c:e6:26:8a:46:fd:3e:23:17:b8: 57:d9:13:6e:d1:40:ed:6f:00:f6:18:6a:78:97:d1: ce:29:57:96:89:83:70:c9:0f:f6:02:e4:f7:60:e5: 0a:e7:65:cf:7a:4a:13:35:b0:0e:3d:53:65:8a:b3: fe:d2:7e:05:84:43:bf:4c:fb:2e:10:c2:cf:6b:c9: e4:96:6a:63:72:89:0a:6b:8c:75:3b:02:75:63:50: cf:c7:b4:41:4a:70:f8:18:3c:67:e2:ff:43:74:76: 3b:c3:59:b1:44:e0:e0:04:e8:10:df:80:c7:b6:03: 73:72:00:da:8b:59:cf:d1:b2:eb:f6:84:84:66:e2: 8a:7c:83:ea:ee:25:18:4a:46:c2:85:75:c6:d0:1f: 37:28:e6:5c:b6:ba:42:e1:3b:1f:b4:84:a4:5d:a9: 12:07:45:cd:25:3b:88:7e:0f:44:9b:ae:4b:43:62: 15:f4:2c:be:2e:5e:a1:4b:2b:be:66:67:63:07:26: a9:df:ba:5e:8b:eb:d9:71:5c:00:f7:91:33:c0:58: 62:58:75:49:4d:a7:db:77:74:58:51:6a:6a:69:a9: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6A:0C:DF:F9:DD:AF:A3:ED:3F:C7:FA:1F:B9:E8:AF:C0:79:E6:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 932 6134 54467 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:cd:49:ad:c0:f1:f0:96:43:27:9c:b9:3a:a7:55:26:77:6c: a7:b1:f0:0e:78:29:b2:e0:ee:9c:2a:db:3a:3b:1c:33:2d:97: 41:b3:52:67:17:f6:bc:0c:9f:51:ef:b6:12:c4:ca:1e:5d:2d: d5:30:3d:b3:17:d6:e6:6a:52:06:8d:05:68:fe:72:a6:b8:de: 4a:46:43:4e:6c:b9:33:58:a7:72:e1:9c:fb:8c:33:6e:b0:cb: 43:76:b1:7c:96:a9:47:4e:3c:23:65:60:d7:da:85:62:72:32: e1:71:31:d5:af:46:c9:be:e5:94:d8:8b:24:b0:82:35:2d:a6: a4:b2:7e:e3:4f:89:7f:2f:33:74:70:1b:88:61:58:ba:37:27: 15:48:e1:6a:84:40:92:a4:a6:ae:29:86:b4:9a:8e:d9:4a:e4: 28:b3:27:cc:2a:48:2c:2d:52:b5:61:f7:b2:6f:85:ef:ed:05: f1:54:c5:48:df:94:9c:4d:1f:d9:28:ed:44:8d:04:2c:39:a9: b0:5e:b7:2b:2b:5a:ff:f1:18:0d:04:59:77:20:05:88:4b:16: 5a:91:5c:85:29:e0:d7:c9:72:4d:b5:66:c2:af:cb:2b:01:19: 35:62:f2:31:2c:27:87:23:0c:df:ba:56:2a:38:e2:03:c7:5e: 62:0e:d1:4b -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEh+SN0T+Kj3hBeoCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDExMDAxNDUzM1oXDTI3MDQxNTAwNDUzM1owLzEtMCsGA1UEAxMk MmJjZTFkYmUtZjczYS00NmVkLThiNzYtYjJmZDUxZWNhZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+8jkL4gJ59cErxpOZaEGlHcmbf5Qj3lVlbD a4ihnVxTzAzmJopG/T4jF7hX2RNu0UDtbwD2GGp4l9HOKVeWiYNwyQ/2AuT3YOUK 52XPekoTNbAOPVNlirP+0n4FhEO/TPsuEMLPa8nklmpjcokKa4x1OwJ1Y1DPx7RB SnD4GDxn4v9DdHY7w1mxRODgBOgQ34DHtgNzcgDai1nP0bLr9oSEZuKKfIPq7iUY SkbChXXG0B83KOZctrpC4TsftISkXakSB0XNJTuIfg9Em65LQ2IV9Cy+Ll6hSyu+ ZmdjByap37pei+vZcVwA95EzwFhiWHVJTafbd3RYUWpqaanhjQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFBVqDN/53a+j7T/H+h+56K/AeeYqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y YmNlMWRiZS1mNzNhLTQ2ZWQtOGI3Ni1iMmZkNTFlY2FmYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJiY2UxZGJlLWY3M2EtNDZlZC04 Yjc2LWIyZmQ1MWVjYWZiYy8yYmNlMWRiZS1mNzNhLTQ2ZWQtOGI3Ni1iMmZkNTFl Y2FmYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIgYIKwYBBQUH AQgBAf8EEzARoA8wDQICA6QCAhf2AgMA1MMwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADs1JrcDx8JZDJ5y5 OqdVJndsp7HwDngpsuDunCrbOjscMy2XQbNSZxf2vAyfUe+2EsTKHl0t1TA9sxfW 5mpSBo0FaP5yprjeSkZDTmy5M1incuGc+4wzbrDLQ3axfJapR048I2Vg19qFYnIy 4XEx1a9Gyb7llNiLJLCCNS2mpLJ+40+Jfy8zdHAbiGFYujcnFUjhaoRAkqSmrimG tJqO2UrkKLMnzCpILC1StWH3sm+F7+0F8VTFSN+UnE0f2SjtRI0ELDmpsF63Kyta //EYDQRZdyAFiEsWWpFchSng18lyTbVmwq/LKwEZNWLyMSwnhyMM37pWKjjiA8de Yg7RSw== -----END CERTIFICATE-----Generated at Sun Apr 27 00:23:00 2025 by rpki-client