$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea.cer File: fe3ef598-e802-4fab-a220-9d90cd5b74ea.cer (raw, json) Hash identifier: AgI7yfbSzFAv/FCpPH1avfHLFCWGkWTFPRVpLIIkf2k= Subject key identifier: AE:B9:B7:C1:4F:27:6A:D9:9C:C0:CD:25:76:0B:66:A7:72:65:53:82 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849754E7E728226C3987C6C4CE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/fe3ef598-e802-4fab-a220-9d90cd5b74ea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Apr 2025 13:21:33 +0000 Certificate not after: Mon 12 Jul 2027 13:21:33 +0000 Subordinate resources: AS: 393936 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:4e:7e:72:82:26:c3:98:7c:6c:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 8 13:21:33 2025 GMT Not After : Jul 12 13:21:33 2027 GMT Subject: CN=fe3ef598-e802-4fab-a220-9d90cd5b74ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:7d:6a:ce:60:04:95:f8:20:5c:ff:f4:c4: b3:17:dd:75:d8:fa:8d:a5:37:a2:53:b6:ac:57:cf: e0:39:c8:48:40:43:ba:ca:27:94:e4:63:20:1f:bf: 1d:de:e6:03:8c:15:6a:19:ce:0f:b1:c8:25:bf:09: d9:ec:60:03:19:b2:c2:e3:2a:ad:1b:10:c1:e0:2e: df:32:74:bb:85:45:06:38:43:b8:c1:af:d2:bf:a4: e4:24:b7:46:f2:9d:04:b1:7a:46:89:e5:a6:69:9b: a4:00:46:14:98:ad:57:fa:68:68:27:4a:15:bc:80: 68:6f:44:dc:8b:de:c6:f1:09:25:52:32:39:eb:7f: 8b:dd:6b:8c:7e:16:d2:27:e4:93:4c:1c:16:8a:60: 84:6b:85:4e:52:25:4e:e9:dd:15:72:a4:69:46:28: cc:12:84:e0:3a:91:c9:bd:54:b2:96:96:95:46:d6: aa:90:ac:fc:95:7a:54:8c:12:da:e2:2d:02:79:be: 65:05:f3:7c:86:7a:2c:9c:f5:08:e0:05:28:59:d7: c1:96:ac:f4:d9:9b:bd:ee:46:2f:fd:5d:bc:bf:66: bf:94:f4:95:0d:89:3d:b3:43:4d:59:e4:69:0c:6a: ba:22:ad:63:ff:15:ad:c3:08:57:fe:20:bc:78:67: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:B7:C1:4F:27:6A:D9:9C:C0:CD:25:76:0B:66:A7:72:65:53:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fe3ef598-e802-4fab-a220-9d90cd5b74ea/fe3ef598-e802-4fab-a220-9d90cd5b74ea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 393936 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f3:4f:f9:a5:71:d0:df:db:87:3d:31:b6:03:19:7a:fd:cf: 84:84:5e:8f:55:c9:ab:6e:ae:81:9b:30:1e:f2:97:73:6d:0a: cd:4a:b6:21:8a:45:0c:1b:83:c3:66:5b:fd:c3:8f:e4:04:6c: ed:54:f5:12:c2:c3:a3:6f:93:ad:45:77:d0:26:9e:8b:21:ef: f8:2a:57:40:57:86:d6:4a:c0:ab:56:52:b6:43:1b:c0:84:28: 23:99:47:68:31:6e:3d:d8:d2:c7:d1:ff:1a:4d:67:40:58:d4: cd:61:9c:21:e1:ef:85:ee:b7:d8:8d:af:61:4d:87:05:94:30: 60:ba:07:1e:fe:98:59:0b:d8:3b:c9:8f:8d:a2:7f:c7:d0:87: 5f:b0:e2:ec:b6:bf:4a:70:c3:3a:26:07:c6:85:b1:14:47:c0: c3:0a:ec:b5:87:9c:80:32:be:02:ba:0a:b7:0c:a4:71:0b:39: 46:3a:d6:f0:fd:15:dc:6a:85:91:ec:43:9d:63:a6:b4:dd:4a: 9d:66:43:30:af:20:80:7b:67:fa:7d:ac:2d:f2:30:d8:99:ae: ec:1f:87:e4:00:57:60:d3:15:c7:2a:b8:db:b0:4c:63:8c:41: d7:c3:e5:d9:bf:31:33:5e:da:2f:24:c3:f1:e1:46:5b:85:49: b9:97:ca:0d -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEl1Tn5ygibDmHxsTOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwODEzMjEzM1oXDTI3MDcxMjEzMjEzM1owLzEtMCsGA1UEAxMk ZmUzZWY1OTgtZTgwMi00ZmFiLWEyMjAtOWQ5MGNkNWI3NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAR9as5gBJX4IFz/9MSzF9112PqNpTeiU7as V8/gOchIQEO6yieU5GMgH78d3uYDjBVqGc4PscglvwnZ7GADGbLC4yqtGxDB4C7f MnS7hUUGOEO4wa/Sv6TkJLdG8p0EsXpGieWmaZukAEYUmK1X+mhoJ0oVvIBob0Tc i97G8QklUjI563+L3WuMfhbSJ+STTBwWimCEa4VOUiVO6d0VcqRpRijMEoTgOpHJ vVSylpaVRtaqkKz8lXpUjBLa4i0Ceb5lBfN8hnosnPUI4AUoWdfBlqz02Zu97kYv /V28v2a/lPSVDYk9s0NNWeRpDGq6Iq1j/xWtwwhX/iC8eGcQWwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFK65t8FPJ2rZnMDNJXYLZqdyZVOCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m ZTNlZjU5OC1lODAyLTRmYWItYTIyMC05ZDkwY2Q1Yjc0ZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZlM2VmNTk4LWU4MDItNGZhYi1h MjIwLTlkOTBjZDViNzRlYS9mZTNlZjU5OC1lODAyLTRmYWItYTIyMC05ZDkwY2Q1 Yjc0ZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgLQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI7zT/mlcdDf24c9MbYDGXr9z4SE Xo9VyaturoGbMB7yl3NtCs1KtiGKRQwbg8NmW/3Dj+QEbO1U9RLCw6Nvk61Fd9Am nosh7/gqV0BXhtZKwKtWUrZDG8CEKCOZR2gxbj3Y0sfR/xpNZ0BY1M1hnCHh74Xu t9iNr2FNhwWUMGC6Bx7+mFkL2DvJj42if8fQh1+w4uy2v0pwwzomB8aFsRRHwMMK 7LWHnIAyvgK6CrcMpHELOUY61vD9FdxqhZHsQ51jprTdSp1mQzCvIIB7Z/p9rC3y MNiZruwfh+QAV2DTFccquNuwTGOMQdfD5dm/MTNe2i8kw/HhRluFSbmXyg0= -----END CERTIFICATE-----Generated at Sun Apr 27 04:04:41 2025 by rpki-client