$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer File: a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer (raw, json) Hash identifier: FdYOMtF8rglfMrCMNSCD+0bSmmJGBibWBup6yOgOHAc= Subject key identifier: 41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848625E075E690CB598326DD8D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Dec 2024 01:45:33 +0000 Certificate not after: Mon 05 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 30484 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:62:5e:07:5e:69:0c:b5:98:32:6d:d8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 31 01:45:33 2024 GMT Not After : Apr 5 00:45:33 2027 GMT Subject: CN=a543a7f7-4aa0-4c84-8a59-004c26b0e5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:7a:98:2c:53:08:35:bf:3e:a3:9b:7a:74: 4a:6c:0a:c5:bc:18:90:93:69:6b:9a:99:df:6e:ab: 28:55:4f:40:73:7a:b2:21:4b:9b:7f:d1:55:ff:a1: 48:76:99:3b:ad:c9:7a:04:2a:52:71:b5:ea:5d:74: 9b:d4:49:f4:4a:45:e9:a0:eb:82:b1:c4:63:29:59: 31:72:f4:84:5b:bd:11:e7:54:8b:3f:e5:7f:66:d9: 41:17:4a:81:8a:5e:e3:3d:a8:55:06:e5:c4:24:80: 98:51:68:82:80:d2:fc:46:ca:6d:6b:a5:74:87:e5: 96:a3:9a:db:14:8f:2e:d8:f6:72:8b:67:9e:80:49: 6d:06:12:3c:ec:26:c5:59:41:a0:95:1d:20:63:16: b1:53:29:d3:7d:d2:e3:2a:72:f7:76:3b:f9:cb:bd: 68:12:1a:f9:2b:28:54:6f:3f:ad:ca:f8:1f:94:8f: de:26:81:45:eb:c7:5a:6f:ff:af:56:87:a3:07:e3: fd:4f:c7:6b:fd:6f:60:2e:9f:4a:8d:0d:85:c4:c8: df:46:13:c1:9e:a7:36:8a:8d:14:b0:0a:2b:ed:2c: 6b:cc:7f:9d:52:08:40:1c:d3:89:ea:c5:15:2f:4a: 02:f1:05:9e:1d:05:6b:0b:8a:53:b1:8e:13:a3:4d: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 30484 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4f:b9:72:19:4a:75:fe:b0:5e:27:15:1c:34:7c:08:ce:0a: d3:06:04:c1:50:94:7c:54:ac:c3:20:c4:3b:66:79:60:d5:2a: 29:a1:b0:ba:80:fd:b9:c6:d4:0a:84:b5:46:b9:1c:da:26:43: e7:8e:da:25:6f:bc:a4:a0:fb:d7:e3:7b:84:7e:1e:c7:41:8c: 6c:f2:22:29:99:80:c2:a9:5d:b5:2f:28:5a:1f:4f:cb:4a:f2: 83:92:f6:c7:f5:a5:57:ff:30:e3:72:91:fb:0a:75:bb:36:1e: 15:ac:51:9f:87:56:26:90:3f:de:7b:aa:21:6e:0c:2d:70:d6: 18:02:bf:20:9a:68:8d:1f:fa:b1:67:57:24:d0:d9:ed:19:fc: 71:ce:4e:2b:21:1a:06:49:a7:a7:2f:aa:9e:bf:73:cd:5b:cc: 5b:87:1c:eb:33:81:2b:1c:09:a2:2b:d3:64:c3:7c:95:90:d5: 9e:81:ae:17:e9:67:e2:85:b5:5c:95:71:6c:8e:81:20:dc:17: 8b:51:b1:51:df:08:c0:0d:da:68:e5:bf:8f:59:59:a4:99:4b: 47:66:7f:67:83:df:ba:09:35:7d:2e:f0:1e:aa:43:68:fe:f9: a7:05:03:d7:82:58:f3:d3:94:71:01:8f:62:7b:8d:32:b3:06: 4c:d3:95:a4 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEhiXgdeaQy1mDJt2NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MTIzMTAxNDUzM1oXDTI3MDQwNTAwNDUzM1owLzEtMCsGA1UEAxMk YTU0M2E3ZjctNGFhMC00Yzg0LThhNTktMDA0YzI2YjBlNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkd6mCxTCDW/PqObenRKbArFvBiQk2lrmpnf bqsoVU9Ac3qyIUubf9FV/6FIdpk7rcl6BCpScbXqXXSb1En0SkXpoOuCscRjKVkx cvSEW70R51SLP+V/ZtlBF0qBil7jPahVBuXEJICYUWiCgNL8Rspta6V0h+WWo5rb FI8u2PZyi2eegEltBhI87CbFWUGglR0gYxaxUynTfdLjKnL3djv5y71oEhr5KyhU bz+tyvgflI/eJoFF68dab/+vVoejB+P9T8dr/W9gLp9KjQ2FxMjfRhPBnqc2io0U sAor7SxrzH+dUghAHNOJ6sUVL0oC8QWeHQVrC4pTsY4To012BwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFEEgSG1AS7v/1mPiJJooc7DFAFvBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h NTQzYTdmNy00YWEwLTRjODQtOGE1OS0wMDRjMjZiMGU1YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2E1NDNhN2Y3LTRhYTAtNGM4NC04 YTU5LTAwNGMyNmIwZTViNi9hNTQzYTdmNy00YWEwLTRjODQtOGE1OS0wMDRjMjZi MGU1YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdxQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlU+5chlKdf6wXicVHDR8CM4K0wYE wVCUfFSswyDEO2Z5YNUqKaGwuoD9ucbUCoS1Rrkc2iZD547aJW+8pKD71+N7hH4e x0GMbPIiKZmAwqldtS8oWh9Py0ryg5L2x/WlV/8w43KR+wp1uzYeFaxRn4dWJpA/ 3nuqIW4MLXDWGAK/IJpojR/6sWdXJNDZ7Rn8cc5OKyEaBkmnpy+qnr9zzVvMW4cc 6zOBKxwJoivTZMN8lZDVnoGuF+ln4oW1XJVxbI6BINwXi1GxUd8IwA3aaOW/j1lZ pJlLR2Z/Z4Pfugk1fS7wHqpDaP75pwUD14JY89OUcQGPYnuNMrMGTNOVpA== -----END CERTIFICATE-----Generated at Mon Apr 28 15:07:21 2025 by rpki-client