$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/13f9e054-d61b-4ab7-8a6b-0da6e5c5d46e.cer File: 13f9e054-d61b-4ab7-8a6b-0da6e5c5d46e.cer (raw, json) Hash identifier: fP2DhxnPsossXCRFd5DNb9ohRHJWsJn3nW7JTHHQiRE= Subject key identifier: E7:46:C2:59:AD:8D:88:07:C8:58:55:8F:4A:BF:98:5E:A7:75:BA:85 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849DA3F70F3707EC27B5A655710 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/13f9e054-d61b-4ab7-8a6b-0da6e5c5d46e/13f9e054-d61b-4ab7-8a6b-0da6e5c5d46e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/13f9e054-d61b-4ab7-8a6b-0da6e5c5d46e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 May 2025 17:07:52 +0000 Certificate not after: Tue 17 Aug 2027 17:07:52 +0000 Subordinate resources: AS: 19184 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:3f:70:f3:70:7e:c2:7b:5a:65:57:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 14 17:07:52 2025 GMT Not After : Aug 17 17:07:52 2027 GMT Subject: CN=13f9e054-d61b-4ab7-8a6b-0da6e5c5d46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:da:df:47:ce:c7:94:e9:47:be:7b:ef:19:02: d6:90:e5:7d:aa:0c:77:aa:55:e8:1e:03:ce:15:b4: ff:2e:92:a5:21:76:73:3a:7c:a7:8d:4f:af:eb:ac: 9c:a8:de:cf:77:79:bf:c3:fe:f0:39:c0:37:d1:af: 21:da:14:ef:1c:8f:e7:74:ce:01:24:75:2c:98:a8: 84:5d:cd:ce:42:3b:db:2d:e8:27:ec:90:b1:ca:7c: 38:8d:c6:92:3d:51:05:57:61:38:88:74:26:f3:57: 78:7b:56:46:41:43:0c:9f:b3:26:e0:01:a7:b8:e0: 07:f4:2c:af:2d:e5:49:5c:05:ea:b5:60:6a:e5:87: 18:ec:5b:4b:b0:d0:5b:b4:7d:7f:21:bb:df:fb:b0: ed:0a:21:57:74:36:28:21:67:ae:d7:59:bf:2a:3f: f7:1d:63:af:64:d1:e1:b1:1a:f6:1f:c8:78:21:72: bb:b5:22:4b:86:1e:31:af:af:7a:d8:df:6d:06:d4: 5a:1b:04:0c:72:b3:fe:0b:ff:d5:62:7d:97:ab:14: fb:40:63:9c:08:07:a4:2e:23:17:a2:3a:c6:fb:f9: ce:20:e9:18:3c:14:18:70:87:6e:00:81:80:ac:9b: 49:6f:76:f6:01:b2:ab:63:f5:86:71:e3:39:ac:00: 73:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:46:C2:59:AD:8D:88:07:C8:58:55:8F:4A:BF:98:5E:A7:75:BA:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/13f9e054-d61b-4ab7-8a6b-0da6e5c5d46e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/13f9e054-d61b-4ab7-8a6b-0da6e5c5d46e/13f9e054-d61b-4ab7-8a6b-0da6e5c5d46e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 19184 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3e:a9:f2:b8:22:71:4b:3f:b3:bf:a9:a1:b5:4e:cf:90:4c: 9b:b9:06:e8:24:43:80:c0:fb:47:57:58:e2:53:65:5e:03:c3: 0c:eb:eb:2d:6a:30:ab:1c:b5:17:d9:19:91:33:0d:8e:cc:6e: 16:a1:cb:f4:f9:ca:2a:85:df:7c:96:44:c5:7f:d9:56:3e:07: 54:a0:e5:ea:1b:f8:a7:b5:6e:86:a8:ad:fc:2d:44:91:40:fc: d2:b0:19:bd:18:cb:84:f8:49:dc:11:1f:20:71:2d:6d:e5:ad: a9:b4:71:da:25:8c:4a:88:ac:7c:61:c4:db:be:c5:6e:b7:3c: 32:62:cb:20:82:af:96:f9:0f:f1:af:37:eb:a5:b2:ba:c3:57: ef:f6:73:f0:b4:a0:f9:fa:de:ad:75:e2:bb:ed:9a:af:3f:ae: 03:68:de:82:38:10:aa:33:20:ad:df:ff:07:69:11:b5:55:a0: c3:36:ed:6e:c3:b9:64:d6:76:0a:44:b1:9d:ba:d8:0c:24:a4: 34:af:e5:ae:82:d8:1e:7d:0e:ec:9a:9d:08:d4:cb:e9:54:09: 83:c5:17:1f:6a:60:22:7d:73:32:fa:8e:f4:b6:57:f6:2e:20: d2:66:21:c1:b8:e5:bd:43:92:5f:db:a6:f5:94:f9:94:80:49: b3:4c:27:ef -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEnaP3DzcH7Ce1plVxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxNDE3MDc1MloXDTI3MDgxNzE3MDc1MlowLzEtMCsGA1UEAxMk MTNmOWUwNTQtZDYxYi00YWI3LThhNmItMGRhNmU1YzVkNDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NrfR87HlOlHvnvvGQLWkOV9qgx3qlXoHgPO FbT/LpKlIXZzOnynjU+v66ycqN7Pd3m/w/7wOcA30a8h2hTvHI/ndM4BJHUsmKiE Xc3OQjvbLegn7JCxynw4jcaSPVEFV2E4iHQm81d4e1ZGQUMMn7Mm4AGnuOAH9Cyv LeVJXAXqtWBq5YcY7FtLsNBbtH1/Ibvf+7DtCiFXdDYoIWeu11m/Kj/3HWOvZNHh sRr2H8h4IXK7tSJLhh4xr6962N9tBtRaGwQMcrP+C//VYn2XqxT7QGOcCAekLiMX ojrG+/nOIOkYPBQYcIduAIGArJtJb3b2AbKrY/WGceM5rABzgQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFOdGwlmtjYgHyFhVj0q/mF6ndbqFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x M2Y5ZTA1NC1kNjFiLTRhYjctOGE2Yi0wZGE2ZTVjNWQ0NmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzEzZjllMDU0LWQ2MWItNGFiNy04 YTZiLTBkYTZlNWM1ZDQ2ZS8xM2Y5ZTA1NC1kNjFiLTRhYjctOGE2Yi0wZGE2ZTVj NWQ0NmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICSvAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAET6p8rgicUs/s7+pobVOz5BMm7kG 6CRDgMD7R1dY4lNlXgPDDOvrLWowqxy1F9kZkTMNjsxuFqHL9PnKKoXffJZExX/Z Vj4HVKDl6hv4p7Vuhqit/C1EkUD80rAZvRjLhPhJ3BEfIHEtbeWtqbRx2iWMSois fGHE277Fbrc8MmLLIIKvlvkP8a8366WyusNX7/Zz8LSg+frerXXiu+2arz+uA2je gjgQqjMgrd//B2kRtVWgwzbtbsO5ZNZ2CkSxnbrYDCSkNK/lroLYHn0O7JqdCNTL 6VQJg8UXH2pgIn1zMvqO9LZX9i4g0mYhwbjlvUOSX9um9ZT5lIBJs0wn7w== -----END CERTIFICATE-----Generated at Wed Jun 18 14:14:04 2025 by rpki-client