$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9.cer File: 6896b71f-993e-47d1-b0ee-f538a9dc89f9.cer (raw, json) Hash identifier: XW2TOj3l0vVpGWLiiFfmGiE1ziQkpMDmSOXGIBoJHn0= Subject key identifier: D0:A9:A6:DB:40:AD:D7:A4:1B:C5:6E:DE:1B:B1:02:CC:F5:74:DE:8C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584991A1AA1DD442DC2640F6B240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9/6896b71f-993e-47d1-b0ee-f538a9dc89f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 16:51:46 +0000 Certificate not after: Thu 22 Jul 2027 16:51:46 +0000 Subordinate resources: AS: 401681 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:a1:aa:1d:d4:42:dc:26:40:f6:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 18 16:51:46 2025 GMT Not After : Jul 22 16:51:46 2027 GMT Subject: CN=6896b71f-993e-47d1-b0ee-f538a9dc89f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:51:85:2c:72:a6:be:1c:9d:80:0d:5f:8c:f9: c9:de:dd:24:7c:04:f6:00:87:b7:40:4d:a0:ae:12: e4:12:87:fe:b1:cd:c9:33:8b:0b:52:05:fd:df:e9: 7f:02:b6:1b:78:fe:6f:e9:40:0d:d8:03:4f:0d:dd: 5a:c8:63:12:fb:c4:f0:d9:3c:75:99:e4:ba:d0:c9: 18:05:39:3c:e7:00:bb:17:58:71:8a:3c:15:8f:66: 24:86:34:06:0c:c8:d0:61:d8:55:52:4e:a1:22:4a: 7d:0b:a9:fc:42:1a:06:21:ef:7d:bf:5b:fb:bf:2e: 59:0e:d2:56:aa:be:cf:03:a2:c3:00:ef:01:9a:1b: 29:ed:6e:94:6b:70:ee:c4:d6:2b:38:ac:02:6b:d1: 02:16:2c:f9:48:e3:68:2f:aa:40:7e:20:76:b5:8b: 39:60:81:a9:f4:53:c5:14:4a:82:b8:62:c1:a0:5c: b7:c4:7b:02:20:fb:0c:ea:80:32:04:4b:72:ab:7c: f8:e4:c6:ab:5c:13:a3:d7:99:ff:08:74:d0:b0:a8: c8:f1:9c:54:d7:34:b1:3d:dc:b1:e8:d3:2d:84:c8: a1:7a:ef:b9:7b:5a:54:c3:0a:26:df:3c:d7:aa:e9: 2e:aa:15:09:87:c2:c9:46:69:56:ad:76:5b:78:86: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A9:A6:DB:40:AD:D7:A4:1B:C5:6E:DE:1B:B1:02:CC:F5:74:DE:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6896b71f-993e-47d1-b0ee-f538a9dc89f9/6896b71f-993e-47d1-b0ee-f538a9dc89f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401681 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6b:5f:ef:be:38:d1:9c:75:39:9a:77:66:ee:52:b8:f4:56: 54:a7:27:18:39:24:a9:a4:6a:0f:b7:7f:2a:c4:c0:3b:3c:11: a9:25:d5:9f:6a:75:12:94:5c:60:d1:e5:91:cf:56:30:cf:70: d3:2d:8d:0a:e8:f1:6c:6a:ef:e9:eb:0b:82:24:07:82:3c:fa: cc:21:2e:07:0e:3e:48:cc:58:24:5e:20:85:fa:85:c7:35:05: ee:38:c5:19:79:ee:a0:2e:c7:13:60:82:60:97:35:b2:01:03: ba:08:4d:03:0e:66:8b:70:ec:c4:bb:70:b3:58:6e:fe:2a:fa: 51:50:58:de:3c:e7:b6:bc:30:1d:3d:19:61:88:bf:3d:62:77: a6:e5:0c:62:77:03:30:7e:ee:d5:1a:d6:15:7a:f0:29:45:ad: ae:ae:f5:df:38:69:d9:0d:16:cf:91:05:58:12:ab:81:21:5c: 80:8b:74:c6:f4:63:e2:3c:89:ea:41:5e:44:fd:e0:7a:b7:c7: 3a:92:2c:6b:d7:c2:01:56:29:df:78:c5:de:c1:eb:7e:b3:ab: db:ae:fc:af:06:49:05:4c:40:75:ac:0b:b3:9c:08:2f:86:3c: cb:20:72:ab:ea:fd:b3:9f:fe:d7:cf:55:4b:a2:de:4b:aa:0d: c6:0b:ee:99 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEmRoaod1ELcJkD2skAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxODE2NTE0NloXDTI3MDcyMjE2NTE0NlowLzEtMCsGA1UEAxMk Njg5NmI3MWYtOTkzZS00N2QxLWIwZWUtZjUzOGE5ZGM4OWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlGFLHKmvhydgA1fjPnJ3t0kfAT2AIe3QE2g rhLkEof+sc3JM4sLUgX93+l/ArYbeP5v6UAN2ANPDd1ayGMS+8Tw2Tx1meS60MkY BTk85wC7F1hxijwVj2YkhjQGDMjQYdhVUk6hIkp9C6n8QhoGIe99v1v7vy5ZDtJW qr7PA6LDAO8Bmhsp7W6Ua3DuxNYrOKwCa9ECFiz5SONoL6pAfiB2tYs5YIGp9FPF FEqCuGLBoFy3xHsCIPsM6oAyBEtyq3z45MarXBOj15n/CHTQsKjI8ZxU1zSxPdyx 6NMthMiheu+5e1pUwwom3zzXqukuqhUJh8LJRmlWrXZbeIZDvwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFNCppttArdekG8Vu3huxAsz1dN6MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 ODk2YjcxZi05OTNlLTQ3ZDEtYjBlZS1mNTM4YTlkYzg5ZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzY4OTZiNzFmLTk5M2UtNDdkMS1i MGVlLWY1MzhhOWRjODlmOS82ODk2YjcxZi05OTNlLTQ3ZDEtYjBlZS1mNTM4YTlk Yzg5ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiERMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAZrX+++ONGcdTmad2buUrj0VlSn Jxg5JKmkag+3fyrEwDs8Eakl1Z9qdRKUXGDR5ZHPVjDPcNMtjQro8Wxq7+nrC4Ik B4I8+swhLgcOPkjMWCReIIX6hcc1Be44xRl57qAuxxNggmCXNbIBA7oITQMOZotw 7MS7cLNYbv4q+lFQWN4857a8MB09GWGIvz1id6blDGJ3AzB+7tUa1hV68ClFra6u 9d84adkNFs+RBVgSq4EhXICLdMb0Y+I8iepBXkT94Hq3xzqSLGvXwgFWKd94xd7B 636zq9uu/K8GSQVMQHWsC7OcCC+GPMsgcqvq/bOf/tfPVUui3kuqDcYL7pk= -----END CERTIFICATE-----Generated at Sat Apr 26 21:32:21 2025 by rpki-client