$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e.cer File: 5455b5bf-2f35-4f56-9135-7682adb23b7e.cer (raw, json) Hash identifier: hP5NfDra9rNhPzmkgiHebFOi1kn9zFaNGbfgE38Mf68= Subject key identifier: 0C:94:88:60:3E:11:A2:36:46:7D:97:10:2C:26:00:4B:3B:A4:F8:1A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285849A20843FBEDF5909109A4E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e/5455b5bf-2f35-4f56-9135-7682adb23b7e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Apr 2025 13:51:26 +0000 Certificate not after: Tue 02 Feb 2027 19:21:51 +0000 Subordinate resources: AS: 57974 AS: 401452 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:08:43:fb:ed:f5:90:91:09:a4:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Apr 24 13:51:26 2025 GMT Not After : Feb 2 19:21:51 2027 GMT Subject: CN=5455b5bf-2f35-4f56-9135-7682adb23b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:77:0d:d6:d4:40:0f:5b:9b:2c:b9:8c:e1: 83:5d:7e:be:4f:41:af:5b:58:4e:c1:28:06:a5:a7: 02:78:fb:93:67:3c:e8:88:5f:fd:7c:72:ae:c4:a6: 03:aa:a9:21:d3:3c:07:96:21:14:ce:f0:c6:9d:ff: 22:f9:20:c3:f1:59:17:6b:f7:20:28:36:ba:21:3b: 09:47:af:db:53:bf:44:bf:ec:cd:e2:da:88:be:9c: 45:cf:fd:2c:a9:5b:2c:a8:e8:de:b3:b7:85:5c:2c: 06:17:0c:7b:11:97:bd:58:f4:20:ab:3b:c2:2b:c1: 32:1d:2f:98:ba:c6:07:f8:4f:c0:db:16:63:ae:01: 6c:37:f6:e0:e5:71:f3:24:1c:dd:32:9c:6c:94:9d: b9:c4:88:c1:5f:95:b9:9d:a2:2a:8c:ce:23:08:02: 85:1c:4c:4e:2c:06:cf:eb:81:1d:99:42:13:74:20: a5:d8:20:c6:aa:5d:94:03:7e:20:82:bf:99:f1:08: 4e:25:df:61:fa:00:2f:ec:2c:25:5f:44:fd:6a:c1: 69:bb:22:8f:b3:b5:8e:38:23:27:02:56:2d:65:3a: 63:9a:25:84:b4:93:95:a1:d2:24:85:2c:4d:97:ec: da:d7:39:75:a1:99:a3:ab:77:5e:bb:cd:11:41:b4: 47:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:94:88:60:3E:11:A2:36:46:7D:97:10:2C:26:00:4B:3B:A4:F8:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e/5455b5bf-2f35-4f56-9135-7682adb23b7e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 57974 401452 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:66:04:ef:73:0e:98:7a:f5:3f:bc:c8:df:62:50:f7:32:99: 77:44:6a:e4:9b:b4:6a:17:4e:8e:97:35:76:ec:b3:7b:f2:1c: 3b:20:cd:30:dd:cb:a2:81:73:1b:49:69:a2:c3:e4:19:82:0a: 65:71:db:9a:61:16:bf:4a:2b:8a:f7:03:52:e7:4f:57:7c:7d: 30:ec:57:d5:e4:2e:ef:96:2a:22:dc:87:04:30:03:39:37:16: 87:b1:af:27:ad:4d:77:5b:28:62:68:4f:60:a7:1e:df:c8:3e: 88:db:fa:25:f7:e0:03:68:1e:ab:c7:b4:3c:c2:96:bf:e4:e1: 71:9f:5c:ee:d5:8b:90:c5:2a:76:43:79:db:96:91:30:d0:84: f6:a3:47:0d:74:ea:92:25:3d:76:99:3b:f3:bf:b0:32:0c:61: 94:25:75:65:b5:d2:cf:70:f1:a5:a7:13:8e:88:f0:37:75:c4: 02:bd:46:23:26:73:21:b7:49:20:61:ae:7e:4a:99:f3:6f:93: dc:a3:c7:8b:81:34:71:a5:36:43:4a:18:36:a5:d0:80:00:48: c5:e8:20:c9:89:5c:0a:62:f4:58:56:c0:c5:e1:b8:9b:e8:9f: 30:94:46:96:e5:e5:34:fe:e1:59:d1:d7:f1:f1:b0:b5:30:cd: 47:79:0a:f3 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmiCEP77fWQkQmk5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDQyNDEzNTEyNloXDTI3MDIwMjE5MjE1MVowLzEtMCsGA1UEAxMk NTQ1NWI1YmYtMmYzNS00ZjU2LTkxMzUtNzY4MmFkYjIzYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc93DdbUQA9bmyy5jOGDXX6+T0GvW1hOwSgG pacCePuTZzzoiF/9fHKuxKYDqqkh0zwHliEUzvDGnf8i+SDD8VkXa/cgKDa6ITsJ R6/bU79Ev+zN4tqIvpxFz/0sqVssqOjes7eFXCwGFwx7EZe9WPQgqzvCK8EyHS+Y usYH+E/A2xZjrgFsN/bg5XHzJBzdMpxslJ25xIjBX5W5naIqjM4jCAKFHExOLAbP 64EdmUITdCCl2CDGql2UA34ggr+Z8QhOJd9h+gAv7CwlX0T9asFpuyKPs7WOOCMn AlYtZTpjmiWEtJOVodIkhSxNl+za1zl1oZmjq3deu80RQbRH1QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAyUiGA+EaI2Rn2XECwmAEs7pPgaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 NDU1YjViZi0yZjM1LTRmNTYtOTEzNS03NjgyYWRiMjNiN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzU0NTViNWJmLTJmMzUtNGY1Ni05 MTM1LTc2ODJhZGIyM2I3ZS81NDU1YjViZi0yZjM1LTRmNTYtOTEzNS03NjgyYWRi MjNiN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQgBAf8EEDAOoAwwCgIDAOJ2AgMGICwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAA2YE73MOmHr1P7zI32JQ 9zKZd0Rq5Ju0ahdOjpc1duyze/IcOyDNMN3LooFzG0lposPkGYIKZXHbmmEWv0or ivcDUudPV3x9MOxX1eQu75YqItyHBDADOTcWh7GvJ61Nd1soYmhPYKce38g+iNv6 JffgA2geq8e0PMKWv+ThcZ9c7tWLkMUqdkN525aRMNCE9qNHDXTqkiU9dpk787+w MgxhlCV1ZbXSz3DxpacTjojwN3XEAr1GIyZzIbdJIGGufkqZ82+T3KPHi4E0caU2 Q0oYNqXQgABIxeggyYlcCmL0WFbAxeG4m+ifMJRGluXlNP7hWdHX8fGwtTDNR3kK 8w== -----END CERTIFICATE-----Generated at Tue Apr 29 11:31:52 2025 by rpki-client