$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/536ac415-b2e8-4c36-af03-568ee676ecb0.cer File: 536ac415-b2e8-4c36-af03-568ee676ecb0.cer (raw, json) Hash identifier: xpVZg2t/tLrchCQUmWsplDSufxdB/+X4Ff78tzY9qCE= Subject key identifier: C9:D4:B0:A9:F5:DD:0B:97:40:8A:C3:88:C1:BB:38:90:E4:04:7F:A3 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848C6DEA6361F292448D8CAF000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/536ac415-b2e8-4c36-af03-568ee676ecb0/536ac415-b2e8-4c36-af03-568ee676ecb0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/536ac415-b2e8-4c36-af03-568ee676ecb0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Feb 2025 01:45:33 +0000 Certificate not after: Tue 11 May 2027 00:45:33 +0000 Subordinate resources: AS: 395681 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:de:a6:36:1f:29:24:48:d8:ca:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 5 01:45:33 2025 GMT Not After : May 11 00:45:33 2027 GMT Subject: CN=536ac415-b2e8-4c36-af03-568ee676ecb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:f3:5a:8c:6a:73:2b:9b:ae:c7:60:19:b9: 70:0e:5e:5f:2c:e9:68:de:53:a0:4c:c6:aa:e7:85: 95:59:81:30:2e:16:db:0a:f1:2f:17:11:2c:f1:38: 48:b8:3b:72:7f:26:ec:55:27:9a:b3:d6:0e:c5:7e: 14:de:24:16:70:2b:c1:de:f7:04:c3:37:6f:17:d5: d2:98:71:f0:bf:8f:c0:28:73:93:de:2c:f0:4c:eb: 58:68:6d:f3:49:86:0a:86:05:4a:68:78:9e:e4:1c: 4e:97:08:ce:23:72:ca:ee:86:0c:86:76:f1:b8:16: 73:86:ef:ab:02:9b:cc:a6:a1:66:60:e8:4d:8b:84: b4:2a:0a:da:b4:af:3f:ae:b8:0d:ed:0e:af:6b:f8: da:b3:7c:f1:e0:31:1f:62:df:82:c6:21:f8:99:c9: 79:0d:a2:1c:d8:68:c4:84:cc:68:ed:3b:30:17:1a: e6:49:24:bf:d8:1a:f6:a1:05:1b:5e:d9:b5:1b:f8: d3:15:f6:2a:17:9a:9b:6f:e3:e2:24:52:d8:4a:90: cf:d6:0e:80:75:f1:55:ba:92:b4:d3:be:78:ab:54: 7e:c9:b8:97:81:85:41:0b:13:80:99:c8:09:85:46: 9d:6c:e9:01:aa:f8:79:1b:0a:5c:7a:ea:10:32:f9: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D4:B0:A9:F5:DD:0B:97:40:8A:C3:88:C1:BB:38:90:E4:04:7F:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/536ac415-b2e8-4c36-af03-568ee676ecb0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/536ac415-b2e8-4c36-af03-568ee676ecb0/536ac415-b2e8-4c36-af03-568ee676ecb0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395681 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9b:55:36:e1:86:91:2b:2f:3d:4a:13:92:fb:c3:d9:a7:9d: 37:d9:d1:48:23:44:e6:6a:e3:10:54:63:85:4b:6d:2e:12:3b: a0:71:e5:b3:38:ce:d0:fc:91:2c:91:43:de:76:62:f0:69:4e: 06:5c:f5:c0:37:8e:af:eb:90:ce:a1:95:92:9c:33:51:c6:95: 08:f8:89:55:59:53:21:ae:b7:2f:13:ee:d4:b2:98:c2:c1:78: 6b:6a:b3:55:c8:50:98:0d:3c:21:f8:f6:fb:2b:27:58:53:8c: 31:df:e2:37:13:14:9e:62:d2:3f:f7:7e:41:90:7e:c5:da:cc: 36:79:f0:96:69:16:09:96:68:94:6e:a8:d7:bf:62:05:9c:55: a4:2d:a7:3c:8c:8f:b5:ad:6b:03:08:37:91:68:c1:f5:e8:21: aa:2d:78:ca:b1:dd:e7:86:ac:4c:de:b1:a8:a5:55:ba:26:57: bc:1a:fc:5d:de:0e:c8:ec:ef:d8:e7:49:dc:15:3c:60:ce:71: 02:40:dd:ea:45:26:f5:c9:8e:ee:9f:a4:9c:9e:77:69:a8:13: 55:78:99:8a:4c:27:c1:18:d3:60:14:56:20:6d:44:71:19:91: 70:a0:5d:1b:db:96:9b:10:8b:d1:5f:91:03:d2:c4:b8:ad:e5: d4:6d:8a:1a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEjG3qY2HykkSNjK8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIwNTAxNDUzM1oXDTI3MDUxMTAwNDUzM1owLzEtMCsGA1UEAxMk NTM2YWM0MTUtYjJlOC00YzM2LWFmMDMtNTY4ZWU2NzZlY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFvzWoxqcyubrsdgGblwDl5fLOlo3lOgTMaq 54WVWYEwLhbbCvEvFxEs8ThIuDtyfybsVSeas9YOxX4U3iQWcCvB3vcEwzdvF9XS mHHwv4/AKHOT3izwTOtYaG3zSYYKhgVKaHie5BxOlwjOI3LK7oYMhnbxuBZzhu+r ApvMpqFmYOhNi4S0KgratK8/rrgN7Q6va/jas3zx4DEfYt+CxiH4mcl5DaIc2GjE hMxo7TswFxrmSSS/2Br2oQUbXtm1G/jTFfYqF5qbb+PiJFLYSpDP1g6AdfFVupK0 0754q1R+ybiXgYVBCxOAmcgJhUadbOkBqvh5GwpceuoQMvn/EwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFMnUsKn13QuXQIrDiMG7OJDkBH+jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 MzZhYzQxNS1iMmU4LTRjMzYtYWYwMy01NjhlZTY3NmVjYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzUzNmFjNDE1LWIyZTgtNGMzNi1h ZjAzLTU2OGVlNjc2ZWNiMC81MzZhYzQxNS1iMmU4LTRjMzYtYWYwMy01NjhlZTY3 NmVjYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgmhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGCbVTbhhpErLz1KE5L7w9mnnTfZ 0UgjROZq4xBUY4VLbS4SO6Bx5bM4ztD8kSyRQ952YvBpTgZc9cA3jq/rkM6hlZKc M1HGlQj4iVVZUyGuty8T7tSymMLBeGtqs1XIUJgNPCH49vsrJ1hTjDHf4jcTFJ5i 0j/3fkGQfsXazDZ58JZpFgmWaJRuqNe/YgWcVaQtpzyMj7WtawMIN5FowfXoIaot eMqx3eeGrEzesailVbomV7wa/F3eDsjs79jnSdwVPGDOcQJA3epFJvXJju6fpJye d2moE1V4mYpMJ8EY02AUViBtRHEZkXCgXRvblpsQi9FfkQPSxLit5dRtiho= -----END CERTIFICATE-----Generated at Tue Apr 29 19:57:39 2025 by rpki-client