$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae.cer File: 4de3fae5-9a77-43c6-9f06-0287f1e08fae.cer (raw, json) Hash identifier: Sz+/LHISyFOzRHuS2utH0jXhexhNMDUY3gzj35ufqVs= Subject key identifier: FF:F4:00:BD:82:75:AE:4A:22:16:EA:90:0F:D2:3B:42:3B:18:83:4F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584998222F527CB84062D95D31C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/4de3fae5-9a77-43c6-9f06-0287f1e08fae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Apr 2025 00:45:34 +0000 Certificate not after: Sun 25 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 26046 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:22:2f:52:7c:b8:40:62:d9:5d:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 21 00:45:34 2025 GMT Not After : Jul 25 00:45:34 2027 GMT Subject: CN=4de3fae5-9a77-43c6-9f06-0287f1e08fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:fc:d5:87:1f:2f:4e:23:b0:ad:c6:fb:dc: 76:fe:56:1d:d3:89:b0:a2:7f:55:e9:ca:91:4b:97: 87:55:92:2a:ed:cb:d0:ba:07:d4:3c:73:fa:1e:c3: e0:e9:69:75:66:88:a9:ca:da:de:5f:bb:dc:a7:78: f2:33:3e:d3:75:bf:87:f0:21:67:2c:34:1a:0a:c3: c1:9b:81:27:de:0a:3f:85:e5:56:85:14:c6:ab:28: 8c:51:3e:58:b1:d7:93:e3:27:59:4c:71:db:c9:63: 49:5b:2f:e8:51:5d:ab:f6:05:92:20:90:ac:fa:a3: 7b:19:fc:f6:87:95:99:bf:00:7e:c7:9b:ac:8b:2e: 83:11:aa:c4:a7:5d:c1:84:97:c2:43:c6:3a:fe:dc: 9f:c9:59:42:da:aa:73:4e:4b:71:c3:a7:c1:fb:27: 28:f6:58:e8:c6:44:e2:02:18:d4:4c:a9:a5:d3:74: d4:8e:d1:9b:f5:6b:d2:4a:3d:1f:b0:79:15:53:38: 9d:14:26:c7:2d:be:9d:a7:0a:70:75:fd:6c:c0:70: 60:3e:c3:4b:34:c8:f6:b1:4c:25:d2:96:08:4d:b5: 8e:78:a5:39:86:97:b7:1f:15:c9:cd:88:de:ac:17: 30:43:c4:42:28:b8:87:d8:04:51:4e:8f:c8:1a:3c: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F4:00:BD:82:75:AE:4A:22:16:EA:90:0F:D2:3B:42:3B:18:83:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/4de3fae5-9a77-43c6-9f06-0287f1e08fae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 26046 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9e:77:55:2e:a3:c5:59:85:04:33:c1:d9:18:e0:41:08:63: ea:89:77:21:54:9a:29:63:b0:d2:2f:2c:65:b8:61:f6:c5:05: ab:4b:e6:bc:b8:f0:ff:63:29:20:79:03:55:4d:4f:2d:ba:9f: d7:18:dd:ea:fd:f0:7b:04:ab:70:9f:f8:67:8e:d6:2e:2c:36: d4:31:30:c7:9a:ed:83:af:58:9a:9d:fa:29:9a:cc:ac:b7:eb: e1:06:87:41:6e:78:38:a4:f8:14:a1:2f:f5:f5:54:a8:f1:39: 62:70:b9:0a:ed:72:c0:bf:47:91:aa:b7:a6:76:62:d5:00:7a: 51:71:69:42:6e:6a:26:e1:19:9b:a6:36:90:43:9c:7a:ea:52: 46:02:73:7c:10:65:c7:20:b4:3e:98:f1:83:09:49:f3:75:96: 4c:2b:fb:d1:42:a8:ae:01:68:fb:f4:46:4c:0e:f6:c9:27:93: 76:d7:c7:16:ba:cd:80:db:c1:70:b0:d8:ec:4c:83:22:9e:2b: 18:27:a0:9f:0c:8c:2c:40:a0:d5:91:1b:71:8e:09:0b:bd:2b: aa:1b:20:8f:e1:16:4b:f6:41:63:5f:4b:5f:58:ea:69:7b:06: 20:d0:1e:1e:29:98:5a:9a:ee:49:1a:28:2f:5e:95:45:c8:6b: 4b:5b:8b:5d -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEmYIi9SfLhAYtldMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDQyMTAwNDUzNFoXDTI3MDcyNTAwNDUzNFowLzEtMCsGA1UEAxMk NGRlM2ZhZTUtOWE3Ny00M2M2LTlmMDYtMDI4N2YxZTA4ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7H81YcfL04jsK3G+9x2/lYd04mwon9V6cqR S5eHVZIq7cvQugfUPHP6HsPg6Wl1ZoipytreX7vcp3jyMz7Tdb+H8CFnLDQaCsPB m4En3go/heVWhRTGqyiMUT5YsdeT4ydZTHHbyWNJWy/oUV2r9gWSIJCs+qN7Gfz2 h5WZvwB+x5usiy6DEarEp13BhJfCQ8Y6/tyfyVlC2qpzTktxw6fB+yco9ljoxkTi AhjUTKml03TUjtGb9WvSSj0fsHkVUzidFCbHLb6dpwpwdf1swHBgPsNLNMj2sUwl 0pYITbWOeKU5hpe3HxXJzYjerBcwQ8RCKLiH2ARRTo/IGjz+kwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFP/0AL2Cda5KIhbqkA/SO0I7GINPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 ZGUzZmFlNS05YTc3LTQzYzYtOWYwNi0wMjg3ZjFlMDhmYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRkZTNmYWU1LTlhNzctNDNjNi05 ZjA2LTAyODdmMWUwOGZhZS80ZGUzZmFlNS05YTc3LTQzYzYtOWYwNi0wMjg3ZjFl MDhmYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZb4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAC553VS6jxVmFBDPB2RjgQQhj6ol3 IVSaKWOw0i8sZbhh9sUFq0vmvLjw/2MpIHkDVU1PLbqf1xjd6v3wewSrcJ/4Z47W Liw21DEwx5rtg69Ymp36KZrMrLfr4QaHQW54OKT4FKEv9fVUqPE5YnC5Cu1ywL9H kaq3pnZi1QB6UXFpQm5qJuEZm6Y2kEOceupSRgJzfBBlxyC0PpjxgwlJ83WWTCv7 0UKorgFo+/RGTA72ySeTdtfHFrrNgNvBcLDY7EyDIp4rGCegnwyMLECg1ZEbcY4J C70rqhsgj+EWS/ZBY19LX1jqaXsGINAeHimYWpruSRooL16VRchrS1uLXQ== -----END CERTIFICATE-----Generated at Sun Apr 27 20:20:12 2025 by rpki-client