$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer File: 21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer (raw, json) Hash identifier: O0ZNE1zC5B0U5gx+Kf+MYuY2tL+b9xb7k4Nhk6MjsVA= Subject key identifier: 6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849123F1FCA0929D6E90180C540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 01:45:33 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 14573 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:3f:1f:ca:09:29:d6:e9:01:80:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 4 01:45:33 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:79:b1:f0:49:48:b1:2b:c8:93:04:74:d8: d7:91:09:78:ee:be:78:fb:49:bf:39:28:45:c8:a7: 49:24:8a:cb:f5:84:59:58:bf:0e:19:fe:7f:4d:bb: ed:02:ce:b7:84:ae:69:a7:f9:72:7e:06:a5:bf:4e: dc:72:56:8b:b1:2f:b7:85:43:ab:95:10:9f:58:2a: 8b:43:2d:23:45:bd:49:12:34:b2:40:9c:bf:15:72: df:5c:be:8a:36:16:59:ee:e1:93:17:01:12:0c:0f: de:0a:4f:d6:46:b8:54:ca:1b:d2:6a:ec:fd:8f:a4: a8:5d:49:d1:c4:50:8b:f0:90:2d:3f:18:ac:35:f4: 32:00:f9:ef:83:32:5d:78:af:8b:1b:82:b0:f5:00: 57:81:ba:81:12:17:37:96:01:51:ed:79:f7:00:26: e0:82:f6:29:ce:b3:7c:8a:43:25:a4:de:70:2c:d6: b4:32:da:77:9f:f3:89:37:ed:06:46:8d:14:28:ea: bc:73:0f:03:41:6d:98:02:46:da:58:cf:37:37:78: 32:ad:39:74:c0:cb:b4:d7:c7:a0:69:99:4e:c9:ca: df:82:ff:18:36:d0:03:be:df:4b:37:82:a2:d7:f3: c1:d3:bd:7c:b3:0e:4a:26:e0:72:da:ef:4e:37:ed: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14573 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3b:36:f0:03:c1:58:1d:cc:ae:46:9c:20:5c:d3:ae:33:6b: 92:06:62:65:16:a7:24:4d:86:f2:6c:13:7a:6c:32:57:a8:97: 81:22:74:90:bf:e0:6e:00:50:92:d6:59:1c:2e:b0:35:d9:64: 89:0c:0d:49:b2:f4:87:9a:fc:2a:63:67:b1:2f:b8:2a:eb:aa: f5:d6:65:5e:b9:0d:6a:32:c4:20:14:9f:0a:d9:18:62:de:05: 07:24:44:6f:0b:cc:01:e4:dc:b4:a5:fc:56:01:07:44:fd:80: 01:2d:d3:8c:8b:25:e7:a9:ad:bc:60:a1:e9:10:35:0e:63:a7: ed:5b:bb:e1:64:a5:f1:8a:1a:4a:47:70:37:74:16:fb:21:e3: 4a:27:16:ee:38:cb:08:2f:7f:0f:7f:27:fa:d2:fc:97:96:f1: 47:50:03:15:8a:9b:df:9a:25:43:d6:c5:d6:a7:0a:4a:f9:61: 9d:75:c1:f7:49:07:67:ac:2d:08:76:6e:3a:29:76:57:3c:56: 97:70:4e:f5:db:54:0a:6c:20:9d:e1:57:37:4e:de:1a:cc:eb: c1:3c:36:71:96:e3:d7:c2:47:b0:69:38:63:dd:bc:ac:7f:de: 13:07:77:8a:16:21:1f:cf:16:2c:c5:34:16:1f:91:28:60:8d: 73:23:9d:7f -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEkSPx/KCSnW6QGAxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwNDAxNDUzM1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk MjFiZDBhN2QtNmQ4OS00MzhmLWJhOGEtOGNlMTYxZTk3ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJ5sfBJSLEryJMEdNjXkQl47r54+0m/OShF yKdJJIrL9YRZWL8OGf5/TbvtAs63hK5pp/lyfgalv07cclaLsS+3hUOrlRCfWCqL Qy0jRb1JEjSyQJy/FXLfXL6KNhZZ7uGTFwESDA/eCk/WRrhUyhvSauz9j6SoXUnR xFCL8JAtPxisNfQyAPnvgzJdeK+LG4Kw9QBXgbqBEhc3lgFR7Xn3ACbggvYpzrN8 ikMlpN5wLNa0Mtp3n/OJN+0GRo0UKOq8cw8DQW2YAkbaWM83N3gyrTl0wMu018eg aZlOycrfgv8YNtADvt9LN4Ki1/PB0718sw5KJuBy2u9ON+0vJQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFG+F9MerCuyBotT3TRQFoPTBV3mMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y MWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFlOTdkMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzIxYmQwYTdkLTZkODktNDM4Zi1i YThhLThjZTE2MWU5N2QzOS8yMWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFl OTdkMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICOO0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGzs28APBWB3MrkacIFzTrjNrkgZi ZRanJE2G8mwTemwyV6iXgSJ0kL/gbgBQktZZHC6wNdlkiQwNSbL0h5r8KmNnsS+4 Kuuq9dZlXrkNajLEIBSfCtkYYt4FByREbwvMAeTctKX8VgEHRP2AAS3TjIsl56mt vGCh6RA1DmOn7Vu74WSl8YoaSkdwN3QW+yHjSicW7jjLCC9/D38n+tL8l5bxR1AD FYqb35olQ9bF1qcKSvlhnXXB90kHZ6wtCHZuOil2VzxWl3BO9dtUCmwgneFXN07e GszrwTw2cZbj18JHsGk4Y928rH/eEwd3ihYhH88WLMU0Fh+RKGCNcyOdfw== -----END CERTIFICATE-----Generated at Mon Apr 28 03:39:05 2025 by rpki-client