$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7.cer File: f01a9c28-73c8-4599-9a8d-d975ddebc5a7.cer (raw, json) Hash identifier: rIik2XGwbos5Q7T44uSL/Ci2KRkqG396WKQ4Ouu6BKg= Subject key identifier: 32:2F:3F:C4:11:16:1F:79:49:DC:CD:5A:15:6F:F3:E6:07:F6:DA:A1 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858499AECDD2D3EEADC24DAFF0440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7/f01a9c28-73c8-4599-9a8d-d975ddebc5a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Apr 2025 00:45:33 +0000 Certificate not after: Mon 26 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 31996 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:ec:dd:2d:3e:ea:dc:24:da:ff:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 22 00:45:33 2025 GMT Not After : Jul 26 00:45:33 2027 GMT Subject: CN=f01a9c28-73c8-4599-9a8d-d975ddebc5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:97:a4:04:e8:d6:a3:26:c1:17:66:a6:e7: 72:ef:c6:df:38:1b:ec:37:54:c7:af:88:02:31:80: 00:ae:8e:bf:93:ed:5f:22:be:06:12:0d:42:2f:85: 42:01:30:55:41:71:c0:d8:91:19:25:57:ff:a9:d1: 8d:3b:c3:4c:e0:27:49:25:d1:ce:af:f9:15:1b:aa: ba:fc:bf:d9:76:54:f7:40:47:ff:fa:9a:99:0d:0a: ca:38:34:60:4e:ba:80:7b:4b:cd:8c:c9:fc:4c:f5: fa:86:6f:22:5e:77:e8:0b:ba:41:18:30:30:70:64: 16:03:fc:32:31:e6:4a:04:5b:81:20:c4:39:ce:aa: bd:d4:78:bb:21:20:57:bd:7e:99:38:0d:91:71:4e: 8f:42:66:09:2a:76:7d:d7:ce:6d:bb:d4:d7:23:61: 37:41:69:24:e7:90:e5:e7:dc:db:c6:33:7b:91:e4: dd:cf:ca:a9:06:47:15:58:a2:9b:d0:d4:ab:96:ea: 5c:af:0c:3f:ae:4c:55:82:2d:7a:c9:59:05:a8:0b: 52:35:d1:04:dd:57:10:a6:0f:10:74:ad:36:4c:04: 0c:37:3f:93:d8:ee:bf:d0:46:49:a8:b9:a8:21:bd: 7e:3b:40:8f:ba:ba:9d:b3:0a:a2:45:51:ba:4d:ee: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2F:3F:C4:11:16:1F:79:49:DC:CD:5A:15:6F:F3:E6:07:F6:DA:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f01a9c28-73c8-4599-9a8d-d975ddebc5a7/f01a9c28-73c8-4599-9a8d-d975ddebc5a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 31996 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:80:5c:4b:f5:7e:28:a1:9f:45:d5:ac:d6:3b:bc:e2:7e:7e: 8b:24:7f:e9:54:b9:50:e0:ea:fb:fb:01:65:b6:de:df:b3:3c: 2a:9d:01:93:a6:6e:a3:e2:14:d9:75:eb:d9:4f:62:b8:9d:0f: 2d:1c:9f:16:61:55:32:cc:b2:df:cb:7d:aa:90:05:02:fc:be: 4c:df:be:1e:65:8c:9a:3e:79:6b:0f:46:12:f6:24:da:30:e0: a1:c0:65:90:7c:50:bb:0e:71:6c:90:8e:22:c2:d1:3c:0e:5c: 21:53:32:e7:88:a4:75:91:2b:67:18:73:12:13:98:65:29:bd: e9:78:4c:a5:6b:0b:fc:aa:f0:1f:56:3b:19:18:80:eb:2c:bb: 42:d1:5f:0a:ae:21:5b:95:72:3d:f8:b0:f9:c8:e0:f0:7f:a1: 27:d5:e8:0d:cf:9e:06:f0:be:90:cf:ed:95:81:67:db:37:2a: 58:c5:90:f8:09:cd:93:fb:05:f7:ed:19:0c:1c:f9:89:25:3f: 6f:46:f0:67:f2:6f:ff:71:85:49:fa:6b:b1:f8:62:b5:ec:54: f4:52:71:5f:9a:7d:0d:67:f0:3c:0a:75:81:26:e2:99:50:0f: b6:31:71:a7:9a:18:03:c4:32:fb:e9:1b:9c:a0:94:0c:10:50: 67:8d:8a:8b -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEma7N0tPurcJNr/BEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyMjAwNDUzM1oXDTI3MDcyNjAwNDUzM1owLzEtMCsGA1UEAxMk ZjAxYTljMjgtNzNjOC00NTk5LTlhOGQtZDk3NWRkZWJjNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/2XpATo1qMmwRdmpudy78bfOBvsN1THr4gC MYAAro6/k+1fIr4GEg1CL4VCATBVQXHA2JEZJVf/qdGNO8NM4CdJJdHOr/kVG6q6 /L/ZdlT3QEf/+pqZDQrKODRgTrqAe0vNjMn8TPX6hm8iXnfoC7pBGDAwcGQWA/wy MeZKBFuBIMQ5zqq91Hi7ISBXvX6ZOA2RcU6PQmYJKnZ9185tu9TXI2E3QWkk55Dl 59zbxjN7keTdz8qpBkcVWKKb0NSrlupcrww/rkxVgi16yVkFqAtSNdEE3VcQpg8Q dK02TAQMNz+T2O6/0EZJqLmoIb1+O0CPurqdswqiRVG6Te4GPwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFDIvP8QRFh95SdzNWhVv8+YH9tqhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m MDFhOWMyOC03M2M4LTQ1OTktOWE4ZC1kOTc1ZGRlYmM1YTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2YwMWE5YzI4LTczYzgtNDU5OS05 YThkLWQ5NzVkZGViYzVhNy9mMDFhOWMyOC03M2M4LTQ1OTktOWE4ZC1kOTc1ZGRl YmM1YTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfPwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFIBcS/V+KKGfRdWs1ju84n5+iyR/ 6VS5UODq+/sBZbbe37M8Kp0Bk6Zuo+IU2XXr2U9iuJ0PLRyfFmFVMsyy38t9qpAF Avy+TN++HmWMmj55aw9GEvYk2jDgocBlkHxQuw5xbJCOIsLRPA5cIVMy54ikdZEr ZxhzEhOYZSm96XhMpWsL/KrwH1Y7GRiA6yy7QtFfCq4hW5VyPfiw+cjg8H+hJ9Xo Dc+eBvC+kM/tlYFn2zcqWMWQ+AnNk/sF9+0ZDBz5iSU/b0bwZ/Jv/3GFSfprsfhi texU9FJxX5p9DWfwPAp1gSbimVAPtjFxp5oYA8Qy++kbnKCUDBBQZ42Kiw== -----END CERTIFICATE-----Generated at Sun Apr 27 01:18:23 2025 by rpki-client