$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5.cer File: 6e093d22-0e04-4f30-8669-9e234d6b3fc5.cer (raw, json) Hash identifier: Cgr8VY3T6OaZijZpoh66zvQ2IbGTYkaplPdwv6QboPI= Subject key identifier: 35:B2:9C:DE:9D:FF:D4:93:E3:3F:58:84:EB:26:69:27:F5:10:7C:2C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848CB0EADBD64A300CFCE8F3F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/6e093d22-0e04-4f30-8669-9e234d6b3fc5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Feb 2025 13:45:33 +0000 Certificate not after: Wed 12 May 2027 12:45:33 +0000 Subordinate resources: AS: 395400 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:0e:ad:bd:64:a3:00:cf:ce:8f:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 6 13:45:33 2025 GMT Not After : May 12 12:45:33 2027 GMT Subject: CN=6e093d22-0e04-4f30-8669-9e234d6b3fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:75:ce:5f:81:9b:8c:fe:a1:ce:c9:ba:bc: 70:e7:56:46:d3:ca:1b:9c:b6:3e:9b:02:0b:d5:bd: 93:4b:b1:03:64:d9:e7:d2:7a:45:55:f7:50:49:75: c2:e5:74:89:e4:91:c4:fe:d6:66:cf:d1:c4:06:36: e4:06:b6:31:ff:a4:45:33:8c:ce:0d:35:11:23:b9: b0:05:3c:e7:c0:d6:ee:9a:66:c6:e9:1d:77:ff:9a: 77:15:9e:9b:bf:26:af:c8:29:77:0d:52:5d:39:b4: d1:04:b5:8d:9a:3e:ad:b9:43:23:a8:4b:b0:b0:04: af:4e:e1:76:68:c5:07:2a:eb:03:dd:0d:4c:c8:e3: 84:44:26:9b:98:d3:81:68:20:e0:cc:12:bd:e5:d9: c2:65:ee:e5:d7:1d:aa:b1:a4:4d:ed:8d:68:80:b1: d1:59:e4:12:f7:1c:fc:a1:8e:46:cc:33:46:f1:79: 27:10:fe:a2:38:34:4b:18:c3:cc:f9:5b:32:82:7a: d6:b8:34:6a:c9:fe:4d:d7:9d:c1:c2:a6:51:d4:05: 30:ba:9e:57:5b:0c:af:76:86:1c:1e:b0:d7:04:96: 7d:d1:77:2d:a7:e5:f7:cd:1e:2e:06:0e:47:f5:d0: fb:29:ea:f5:2e:99:a0:8b:d3:ba:5a:54:af:72:9d: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B2:9C:DE:9D:FF:D4:93:E3:3F:58:84:EB:26:69:27:F5:10:7C:2C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/6e093d22-0e04-4f30-8669-9e234d6b3fc5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395400 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0d:09:96:0a:68:94:2d:1c:f8:3d:5a:0c:42:6f:e6:85:ad: 5d:b8:06:0e:34:ca:1b:8b:12:87:b7:e1:d3:56:52:0e:7d:ed: e5:53:02:7d:fc:73:d1:98:14:2b:79:23:db:d8:b8:94:50:35: ff:c2:f4:b9:dc:08:cd:74:6a:39:ed:e8:20:2d:54:85:36:06: 2c:6b:54:e7:02:51:48:3a:05:f1:34:57:9b:45:d6:de:67:b7: 59:1b:a3:3e:64:6a:08:fb:60:79:17:67:c9:f4:5e:94:d0:52: 02:40:9c:46:66:e6:45:1b:96:20:c7:72:60:19:ef:e5:d5:27: b8:0c:eb:6c:d5:1e:b7:89:91:5d:dc:fb:00:9d:c9:9a:e7:ab: 7c:20:4f:9b:96:03:32:80:f2:32:a5:d6:2e:84:61:d9:98:e1: 30:5b:19:d9:5f:f0:40:95:ec:3c:8e:fc:4c:d7:8a:ee:50:94: 03:5c:cc:81:2a:28:7d:91:17:4c:b5:1d:5c:57:5f:f7:4f:62: 3c:49:30:de:53:0b:3b:d7:c2:da:cd:0e:85:b9:99:51:4a:f6: 6e:d7:82:4f:7f:e0:8b:46:5f:7a:89:03:c2:17:21:35:12:94: 23:1f:ad:05:fe:32:91:05:75:99:d6:1c:a3:93:d4:65:7e:2b: 0c:1e:a8:6a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEjLDq29ZKMAz86PP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIwNjEzNDUzM1oXDTI3MDUxMjEyNDUzM1owLzEtMCsGA1UEAxMk NmUwOTNkMjItMGUwNC00ZjMwLTg2NjktOWUyMzRkNmIzZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooB1zl+Bm4z+oc7Jurxw51ZG08obnLY+mwIL 1b2TS7EDZNnn0npFVfdQSXXC5XSJ5JHE/tZmz9HEBjbkBrYx/6RFM4zODTURI7mw BTznwNbummbG6R13/5p3FZ6bvyavyCl3DVJdObTRBLWNmj6tuUMjqEuwsASvTuF2 aMUHKusD3Q1MyOOERCabmNOBaCDgzBK95dnCZe7l1x2qsaRN7Y1ogLHRWeQS9xz8 oY5GzDNG8XknEP6iODRLGMPM+VsygnrWuDRqyf5N153BwqZR1AUwup5XWwyvdoYc HrDXBJZ90Xctp+X3zR4uBg5H9dD7Ker1Lpmgi9O6WlSvcp14dQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFDWynN6d/9ST4z9YhOsmaSf1EHwsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 ZTA5M2QyMi0wZTA0LTRmMzAtODY2OS05ZTIzNGQ2YjNmYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZlMDkzZDIyLTBlMDQtNGYzMC04 NjY5LTllMjM0ZDZiM2ZjNS82ZTA5M2QyMi0wZTA0LTRmMzAtODY2OS05ZTIzNGQ2 YjNmYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgiIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACENCZYKaJQtHPg9WgxCb+aFrV24 Bg40yhuLEoe34dNWUg597eVTAn38c9GYFCt5I9vYuJRQNf/C9LncCM10ajnt6CAt VIU2BixrVOcCUUg6BfE0V5tF1t5nt1kboz5kagj7YHkXZ8n0XpTQUgJAnEZm5kUb liDHcmAZ7+XVJ7gM62zVHreJkV3c+wCdyZrnq3wgT5uWAzKA8jKl1i6EYdmY4TBb Gdlf8ECV7DyO/EzXiu5QlANczIEqKH2RF0y1HVxXX/dPYjxJMN5TCzvXwtrNDoW5 mVFK9m7Xgk9/4ItGX3qJA8IXITUSlCMfrQX+MpEFdZnWHKOT1GV+KwweqGo= -----END CERTIFICATE-----Generated at Sun Apr 27 22:59:00 2025 by rpki-client