$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a.cer File: 85dd82c5-5f88-45b7-afc5-f84290d7414a.cer (raw, json) Hash identifier: 3kaaQzUkZ9DOMvtkc6VxOhfz0VF/Z+YD4S8SjJU0R1M= Subject key identifier: 9E:D0:CE:29:05:52:E4:E9:65:72:03:5C:34:6A:00:B6:BE:43:F3:4B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584961F3018B8FA8AF64D598BA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 14:56:52 +0000 Certificate not after: Mon 05 Jul 2027 14:56:52 +0000 Subordinate resources: AS: 17119 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:f3:01:8b:8f:a8:af:64:d5:98:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 1 14:56:52 2025 GMT Not After : Jul 5 14:56:52 2027 GMT Subject: CN=85dd82c5-5f88-45b7-afc5-f84290d7414a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:88:39:59:b9:c4:f6:14:b5:7d:29:4a:c5: 4e:56:84:0f:3b:a0:15:cb:6b:d2:86:74:50:86:e1: e0:7a:c7:c1:75:c2:d2:01:7c:48:c4:ac:5f:d3:b9: 84:ca:49:70:57:19:e5:ae:b9:60:b3:a0:c7:64:e8: f7:23:e2:28:82:e4:8c:c3:ca:9c:fd:c0:75:ee:4c: c5:5d:40:3c:9d:ac:ee:96:43:fb:b3:f2:91:97:4f: fa:4b:b2:5c:06:21:87:5e:ca:99:5f:ed:c2:2b:87: 88:5a:4e:20:7c:26:63:b1:9c:ea:55:09:da:38:fc: b9:be:97:a9:7d:de:7e:c4:3e:46:13:62:60:9c:8b: 96:08:04:fd:25:40:72:14:4f:af:aa:66:fe:51:4e: 51:76:14:5e:e7:65:14:e3:ae:49:b2:19:c8:ae:64: 5e:c9:93:c8:79:70:14:9c:7e:82:92:d9:08:88:25: 15:8e:9e:e8:ff:13:04:8f:d4:b2:54:9a:e7:80:a3: e6:dd:5e:24:4a:64:6f:dc:d7:f4:45:5f:86:a5:43: 67:83:7a:42:c2:94:4b:96:59:d5:e3:9c:84:21:41: 7e:b6:c6:f4:d2:05:e3:5c:f4:8d:f0:56:71:e6:70: 2a:68:1a:c9:68:73:b4:71:a2:31:f5:c1:36:ad:c0: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D0:CE:29:05:52:E4:E9:65:72:03:5C:34:6A:00:B6:BE:43:F3:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 17119 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:59:bb:38:ab:2b:21:d9:5e:03:9e:bc:3a:7f:85:ce:db:1e: 42:43:d4:c0:34:c0:d0:f4:7c:b9:cb:20:94:e6:25:40:7e:65: 71:c2:ea:2d:69:e1:e1:7e:c7:02:6d:72:54:53:39:76:85:eb: aa:0e:ad:73:90:c5:6e:f3:b9:03:7c:c5:93:c6:8c:ac:ca:17: 9a:e9:3f:5e:f8:06:a9:f1:5f:39:49:49:20:04:95:64:98:c1: ae:68:e5:83:2e:50:db:68:ca:d2:da:49:c3:6a:51:b8:38:d9: c4:ec:48:db:5e:75:ac:e4:06:86:07:a3:5f:fc:e2:7f:3c:18: 9f:c9:ae:14:ae:cb:28:b3:04:88:c1:46:b6:d4:e2:9d:5b:7b: 01:9c:97:35:ba:e1:1a:99:d2:f9:3d:81:e5:5a:aa:2f:e5:f0: 80:44:9a:12:13:2f:ef:7e:a7:37:30:d5:00:a7:84:cf:03:5d: 2b:00:9b:4d:84:71:dc:b7:44:31:92:69:8f:43:af:0d:00:be: a6:28:d9:92:4e:e5:6c:50:66:c9:bd:31:88:60:ba:aa:6a:90: 8f:d8:58:ef:9a:06:ba:e6:d6:8d:e1:25:d9:4d:0f:22:e3:e7: 9f:5c:fd:40:9b:30:60:22:01:c5:58:02:30:cc:dd:70:b7:b9: 3c:67:88:ca -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWElh8wGLj6ivZNWYugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwMTE0NTY1MloXDTI3MDcwNTE0NTY1MlowLzEtMCsGA1UEAxMk ODVkZDgyYzUtNWY4OC00NWI3LWFmYzUtZjg0MjkwZDc0MTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoauIOVm5xPYUtX0pSsVOVoQPO6AVy2vShnRQ huHgesfBdcLSAXxIxKxf07mEyklwVxnlrrlgs6DHZOj3I+IoguSMw8qc/cB17kzF XUA8nazulkP7s/KRl0/6S7JcBiGHXsqZX+3CK4eIWk4gfCZjsZzqVQnaOPy5vpep fd5+xD5GE2JgnIuWCAT9JUByFE+vqmb+UU5RdhRe52UU465JshnIrmReyZPIeXAU nH6CktkIiCUVjp7o/xMEj9SyVJrngKPm3V4kSmRv3Nf0RV+GpUNng3pCwpRLllnV 45yEIUF+tsb00gXjXPSN8FZx5nAqaBrJaHO0caIx9cE2rcDlawIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJ7QzikFUuTpZXIDXDRqALa+Q/NLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 NWRkODJjNS01Zjg4LTQ1YjctYWZjNS1mODQyOTBkNzQxNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzg1ZGQ4MmM1LTVmODgtNDViNy1h ZmM1LWY4NDI5MGQ3NDE0YS84NWRkODJjNS01Zjg4LTQ1YjctYWZjNS1mODQyOTBk NzQxNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQt8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYVm7OKsrIdleA568On+FztseQkPU wDTA0PR8ucsglOYlQH5lccLqLWnh4X7HAm1yVFM5doXrqg6tc5DFbvO5A3zFk8aM rMoXmuk/XvgGqfFfOUlJIASVZJjBrmjlgy5Q22jK0tpJw2pRuDjZxOxI2151rOQG hgejX/zifzwYn8muFK7LKLMEiMFGttTinVt7AZyXNbrhGpnS+T2B5VqqL+XwgESa EhMv736nNzDVAKeEzwNdKwCbTYRx3LdEMZJpj0OvDQC+pijZkk7lbFBmyb0xiGC6 qmqQj9hY75oGuubWjeEl2U0PIuPnn1z9QJswYCIBxVgCMMzdcLe5PGeIyg== -----END CERTIFICATE-----Generated at Sun Apr 27 04:31:59 2025 by rpki-client