$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer File: a58da523-4991-493a-95ce-ff1c2b97244a.cer (raw, json) Hash identifier: kEbT5LcqDy+hdHWBFfxSk/k0p3oVEUzdjZyt2LP1GPk= Subject key identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858499C6E70D67848E9238A191F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Apr 2025 13:42:27 +0000 Certificate not after: Mon 26 Jul 2027 09:44:51 +0000 Subordinate resources: AS: 18753 IP: 199.34.97.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:6e:70:d6:78:48:e9:23:8a:19:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 22 13:42:27 2025 GMT Not After : Jul 26 09:44:51 2027 GMT Subject: CN=a58da523-4991-493a-95ce-ff1c2b97244a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:17:12:40:41:c8:7a:b4:c8:cb:62:33:77: 53:6a:8d:39:f2:20:76:1b:d4:11:b3:37:53:05:d9: ab:03:ab:98:55:4a:d4:c6:a5:ec:1b:df:99:eb:71: 9a:4d:33:2d:ce:90:92:f2:24:69:ff:52:d1:7f:d2: db:50:9f:85:0a:ee:13:7e:8e:7a:8c:81:48:39:76: 4f:0e:02:44:96:f9:0a:b3:4f:e1:50:bf:17:36:d7: 53:47:b1:49:1c:b0:b3:dd:53:7e:5a:48:a8:01:69: ef:9b:0c:50:69:fe:71:ba:a8:6d:79:98:b7:c0:01: ea:74:6a:c2:d4:24:5a:d9:5e:ff:06:90:1e:c5:f2: d7:d0:27:b1:14:b6:0e:1d:18:86:10:e9:ee:7b:9d: b9:e6:e3:91:18:5f:58:ae:b0:2e:60:e8:ec:d7:56: 44:c2:ab:72:16:d3:16:c6:08:78:13:78:b4:cc:52: 41:29:e4:42:9b:e9:a2:71:f3:12:35:d3:a6:40:7d: e0:7c:f5:5d:14:53:8c:6a:0a:89:23:04:c3:ce:05: 43:5c:56:d1:4a:d1:8e:b1:bd:58:63:9a:05:e6:10: 92:0a:89:96:91:79:95:4c:d6:ed:5a:e0:03:ce:e9: 6d:55:fb:11:d8:02:1a:48:79:bd:a9:96:36:13:7c: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.34.97.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18753 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:85:f9:f1:fc:b6:a3:bb:fa:bd:78:13:db:be:fa:9c:9b:a9: 07:ae:a8:7e:5a:61:3b:99:2e:53:3a:53:62:10:27:f5:fd:5b: 7f:07:87:04:4f:53:22:5a:75:ed:78:11:fd:84:cd:7b:ca:aa: 69:28:67:73:fe:a7:ae:71:ef:88:38:1d:de:c1:c4:b2:fb:85: 25:d6:f4:66:e9:b7:97:b8:fb:83:1a:5e:23:18:c4:26:f2:3a: 78:6d:4f:b5:5f:d5:51:c8:c7:5f:c8:5c:04:26:51:eb:a4:2a: a0:a3:3e:43:23:e1:26:24:67:10:a8:b6:d7:01:4c:d9:62:cb: f4:6b:94:e9:0d:46:69:9b:a6:c8:88:eb:46:35:7a:a0:56:6b: 0f:e5:cb:89:71:a8:dd:a3:6a:89:8c:f8:58:a7:6c:65:b7:b5: ed:5a:1b:5e:7d:b7:7f:4c:83:57:0e:51:d7:c0:0e:2e:6f:75: f4:2a:6c:b2:f1:46:82:d4:09:94:da:a0:44:32:ff:1d:0b:fe: 88:54:c8:9c:98:12:9e:26:0a:89:02:11:0e:a4:5f:8a:09:0f: 67:13:98:70:43:55:7c:7f:5d:8a:d4:36:44:13:2f:e3:4b:f7: 6a:02:48:fe:3e:23:87:62:47:00:97:97:9e:cd:3c:8e:52:54: d4:64:8a:f7 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEmcbnDWeEjpI4oZH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyMjEzNDIyN1oXDTI3MDcyNjA5NDQ1MVowLzEtMCsGA1UEAxMk YTU4ZGE1MjMtNDk5MS00OTNhLTk1Y2UtZmYxYzJiOTcyNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxMXEkBByHq0yMtiM3dTao058iB2G9QRszdT BdmrA6uYVUrUxqXsG9+Z63GaTTMtzpCS8iRp/1LRf9LbUJ+FCu4Tfo56jIFIOXZP DgJElvkKs0/hUL8XNtdTR7FJHLCz3VN+WkioAWnvmwxQaf5xuqhteZi3wAHqdGrC 1CRa2V7/BpAexfLX0CexFLYOHRiGEOnue5255uORGF9YrrAuYOjs11ZEwqtyFtMW xgh4E3i0zFJBKeRCm+micfMSNdOmQH3gfPVdFFOMagqJIwTDzgVDXFbRStGOsb1Y Y5oF5hCSComWkXmVTNbtWuADzultVfsR2AIaSHm9qZY2E3wIHwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHDMYrJTEVzqF2NM1kfnQFvzXAIKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h NThkYTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFjMmI5NzI0NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2E1OGRhNTIzLTQ5OTEtNDkzYS05 NWNlLWZmMWMyYjk3MjQ0YS9hNThkYTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFjMmI5 NzI0NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHImEwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SUEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAIYX58fy2o7v6vXgT2776nJupB66oflphO5kuUzpTYhAn9f1b fweHBE9TIlp17XgR/YTNe8qqaShnc/6nrnHviDgd3sHEsvuFJdb0Zum3l7j7gxpe IxjEJvI6eG1PtV/VUcjHX8hcBCZR66QqoKM+QyPhJiRnEKi21wFM2WLL9GuU6Q1G aZumyIjrRjV6oFZrD+XLiXGo3aNqiYz4WKdsZbe17VobXn23f0yDVw5R18AOLm91 9CpssvFGgtQJlNqgRDL/HQv+iFTInJgSniYKiQIRDqRfigkPZxOYcENVfH9ditQ2 RBMv40v3agJI/j4jh2JHAJeXns08jlJU1GSK9w== -----END CERTIFICATE-----Generated at Fri May 2 15:39:42 2025 by rpki-client