$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/415085bd-30ce-4e44-b889-f465fdd14828.cer File: 415085bd-30ce-4e44-b889-f465fdd14828.cer (raw, json) Hash identifier: FVhOY4WUX/azVeMfMc04115ByqWi/kW+dZYIgLXWrco= Subject key identifier: 35:54:B3:D1:C3:EC:F0:99:B1:C8:AB:DE:DC:54:0A:69:0F:4F:AF:2C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849A5080EC722B27EF34DC74700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/415085bd-30ce-4e44-b889-f465fdd14828/415085bd-30ce-4e44-b889-f465fdd14828.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/415085bd-30ce-4e44-b889-f465fdd14828/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Apr 2025 15:38:26 +0000 Certificate not after: Thu 29 Jul 2027 15:38:26 +0000 Subordinate resources: AS: 397505 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:08:0e:c7:22:b2:7e:f3:4d:c7:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 25 15:38:26 2025 GMT Not After : Jul 29 15:38:26 2027 GMT Subject: CN=415085bd-30ce-4e44-b889-f465fdd14828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:9e:7d:77:67:0e:2d:67:a6:f2:9c:b5:59: 0c:ed:0a:6d:4e:89:7a:4e:98:27:ca:6f:06:49:6e: a8:22:48:6a:90:3d:b8:90:e1:04:7b:96:8b:30:3a: 30:40:d0:e6:b5:1d:55:e0:9c:fc:6f:c2:e4:12:e0: b4:dc:20:20:d8:1d:76:f0:b5:54:05:15:0a:e1:c8: 94:2b:35:c1:d5:ef:33:af:a3:b5:04:05:d6:ae:a3: 2b:e8:8c:ed:09:fb:e1:c3:c7:51:56:8d:7f:80:73: 85:42:7f:77:98:6d:03:c3:84:49:f2:c5:ca:2e:03: d4:99:af:72:b4:c2:ce:3a:85:ee:7f:0d:32:c2:c9: 67:5e:4d:10:37:b0:fa:3b:ab:e4:32:a5:b1:9e:6d: 86:3b:da:ea:72:73:3f:fb:0c:7c:e1:f2:78:eb:03: 00:49:21:81:e3:40:10:90:c2:84:2d:96:91:0a:a3: b0:3e:97:fb:43:c3:93:2f:fa:6f:6f:24:86:27:54: 7a:19:58:73:43:3d:a9:36:08:16:46:6e:71:f0:b5: ea:27:51:7a:3a:6f:57:a1:6d:21:a8:83:4c:96:e8: 4f:7c:e4:81:e4:3f:0d:57:4d:45:85:a5:12:31:2a: 1e:19:3e:3c:f0:d3:9c:b0:7f:54:4f:f5:7e:16:df: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:54:B3:D1:C3:EC:F0:99:B1:C8:AB:DE:DC:54:0A:69:0F:4F:AF:2C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/415085bd-30ce-4e44-b889-f465fdd14828/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/415085bd-30ce-4e44-b889-f465fdd14828/415085bd-30ce-4e44-b889-f465fdd14828.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 397505 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d7:41:45:6b:ed:d8:28:85:98:88:89:6d:6f:26:b2:4b:49: f1:68:02:d8:b3:b6:fb:33:54:b8:01:64:f2:db:cd:42:ea:33: d6:82:9b:97:31:7b:56:e5:b5:31:ed:73:8c:55:a0:f2:9a:37: ed:69:c9:f2:63:74:a0:5f:4f:25:34:9b:71:30:49:63:54:31: 57:42:85:06:ef:55:b2:5e:fa:df:1e:81:5b:02:47:8a:55:df: c1:24:3d:2d:de:65:d0:98:91:e7:99:4d:22:68:60:9c:9f:5e: 0c:f0:33:ba:51:17:59:9c:d3:6e:d9:40:c7:b2:07:8f:57:75: a2:70:7a:10:08:7f:40:7f:2f:e6:a1:a6:bc:58:fa:df:20:c8: e1:d5:bf:b9:c1:2d:78:49:03:6a:c7:bb:f0:8f:ed:0b:16:85: c1:2f:76:73:42:bc:dd:a5:bb:1c:20:22:0e:bc:df:e1:b5:bf: 18:7d:c8:9f:ef:49:23:2b:44:68:4a:f1:b7:bd:a8:39:26:8d: 08:4a:d7:79:eb:3d:34:1c:3f:3c:6f:ab:7f:92:5c:a9:67:e7: d0:6d:91:ee:b3:9b:8f:3a:0f:bf:f8:bf:fa:3f:1f:b0:f1:53: a1:20:34:f4:b3:a3:d4:3a:30:5f:bb:a2:93:3c:ac:80:6f:ec: 39:c8:fc:9d -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEmlCA7HIrJ+803HRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyNTE1MzgyNloXDTI3MDcyOTE1MzgyNlowLzEtMCsGA1UEAxMk NDE1MDg1YmQtMzBjZS00ZTQ0LWI4ODktZjQ2NWZkZDE0ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA2efXdnDi1npvKctVkM7QptTol6Tpgnym8G SW6oIkhqkD24kOEEe5aLMDowQNDmtR1V4Jz8b8LkEuC03CAg2B128LVUBRUK4ciU KzXB1e8zr6O1BAXWrqMr6IztCfvhw8dRVo1/gHOFQn93mG0Dw4RJ8sXKLgPUma9y tMLOOoXufw0ywslnXk0QN7D6O6vkMqWxnm2GO9rqcnM/+wx84fJ46wMASSGB40AQ kMKELZaRCqOwPpf7Q8OTL/pvbySGJ1R6GVhzQz2pNggWRm5x8LXqJ1F6Om9XoW0h qINMluhPfOSB5D8NV01FhaUSMSoeGT488NOcsH9UT/V+Ft8pNQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFDVUs9HD7PCZscir3txUCmkPT68sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 MTUwODViZC0zMGNlLTRlNDQtYjg4OS1mNDY1ZmRkMTQ4MjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQxNTA4NWJkLTMwY2UtNGU0NC1i ODg5LWY0NjVmZGQxNDgyOC80MTUwODViZC0zMGNlLTRlNDQtYjg4OS1mNDY1ZmRk MTQ4MjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhDBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACjXQUVr7dgohZiIiW1vJrJLSfFo AtiztvszVLgBZPLbzULqM9aCm5cxe1bltTHtc4xVoPKaN+1pyfJjdKBfTyU0m3Ew SWNUMVdChQbvVbJe+t8egVsCR4pV38EkPS3eZdCYkeeZTSJoYJyfXgzwM7pRF1mc 027ZQMeyB49XdaJwehAIf0B/L+ahprxY+t8gyOHVv7nBLXhJA2rHu/CP7QsWhcEv dnNCvN2luxwgIg683+G1vxh9yJ/vSSMrRGhK8be9qDkmjQhK13nrPTQcPzxvq3+S XKln59Btke6zm486D7/4v/o/H7DxU6EgNPSzo9Q6MF+7opM8rIBv7DnI/J0= -----END CERTIFICATE-----Generated at Fri May 2 03:02:21 2025 by rpki-client