$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9.cer File: b89079f3-1ef5-4439-acbe-c02752ca44c9.cer (raw, json) Hash identifier: dPdd2GplsRiqP/cjp6HX+hDvGmw7MWTF6D7Fy4lq0ys= Subject key identifier: 1A:07:61:0C:E5:F6:B4:F3:A9:D6:1A:DC:97:52:B9:FC:EB:D1:34:53 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848C616F4217F02E0FE226BB640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9/b89079f3-1ef5-4439-acbe-c02752ca44c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Feb 2025 19:03:11 +0000 Certificate not after: Mon 10 May 2027 18:03:11 +0000 Subordinate resources: AS: 394583 AS: 397433 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:16:f4:21:7f:02:e0:fe:22:6b:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 4 19:03:11 2025 GMT Not After : May 10 18:03:11 2027 GMT Subject: CN=b89079f3-1ef5-4439-acbe-c02752ca44c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:8f:d1:da:86:70:14:c1:fa:7a:25:bd:48: 8c:8b:c2:75:ee:df:75:36:7e:e4:1e:85:d1:36:35: 04:77:8f:6c:f2:a9:45:45:a2:8e:ce:c7:a1:4f:a3: c1:6e:84:8a:20:0c:95:4f:1c:98:f1:2b:51:16:7e: 0b:5a:7d:2a:15:51:6f:75:cc:d4:eb:87:d8:6a:2a: 20:25:4b:8d:d4:fa:eb:c9:81:f5:21:44:18:4f:78: e5:15:d4:d8:f9:28:cf:69:db:47:6b:61:d8:3f:38: c4:e2:ef:93:4d:74:10:ec:3a:dd:a1:ce:25:6a:aa: 0f:69:6e:db:0b:a0:1f:1a:36:80:2a:3e:3a:a3:dc: 1e:c9:c9:19:40:0d:0d:f6:7a:83:2b:77:d6:94:e3: ca:47:26:ec:bd:7f:3f:f5:5c:d7:2d:eb:93:fe:ec: bc:dc:84:72:ea:82:47:f2:cf:20:62:93:6d:f4:4f: a5:52:d3:21:c6:74:0b:14:97:6d:38:ab:a9:46:b9: 69:34:a8:80:a1:11:3d:16:05:79:f3:66:01:c1:91: bd:ab:e6:c0:fd:1a:22:6d:80:a4:29:2f:87:b3:ac: 40:d8:cb:b5:e4:e1:f2:25:52:d9:56:3c:b2:4d:01: 3e:8e:b1:ee:2b:e0:49:01:97:11:e1:00:6b:8d:0b: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:07:61:0C:E5:F6:B4:F3:A9:D6:1A:DC:97:52:B9:FC:EB:D1:34:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89079f3-1ef5-4439-acbe-c02752ca44c9/b89079f3-1ef5-4439-acbe-c02752ca44c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 394583 397433 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e1:0a:98:a1:67:55:c8:75:2c:ea:a2:eb:a0:e6:e2:f9:0a: 26:1b:57:1e:f9:58:3c:e8:f6:ad:cd:00:e6:b3:52:ce:ad:ac: 5d:bf:1c:1e:88:e4:8b:4f:27:e3:e5:b6:f1:27:c4:64:1c:8d: d3:de:3a:46:98:d2:1d:4a:25:ac:75:5a:b5:60:a1:32:f1:9a: 66:29:db:a9:60:b8:86:59:ed:8b:ad:7f:ba:a2:a6:06:a4:0a: fe:2a:41:fe:c9:40:2b:7f:8c:c4:db:16:d7:eb:f5:30:d4:42: a6:a2:73:b6:76:8e:bb:d4:3b:53:59:e3:32:0c:8e:03:83:ef: d5:c2:3b:ce:cc:ee:93:ca:e3:37:e4:06:f7:60:3d:fb:b6:2c: 14:53:33:e0:13:01:bc:72:53:28:db:74:ae:33:8d:b2:a3:46: 7c:a1:e3:76:49:c6:22:c4:9a:bf:5e:91:c6:5b:4d:57:21:c9: 3b:1a:1a:08:9c:b7:68:a2:21:21:ba:f9:ab:78:40:a1:d5:83: 48:08:e3:1a:f0:dc:e6:4b:28:74:5c:68:3c:01:47:1b:9e:21: d6:bf:aa:23:e1:f3:91:9b:c5:4b:fb:b2:be:5f:ee:f0:86:49: 0f:d2:40:57:2e:f8:59:14:17:b2:98:5d:5c:b6:27:ef:7d:bf: 6f:0e:53:a0 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEjGFvQhfwLg/iJrtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwNDE5MDMxMVoXDTI3MDUxMDE4MDMxMVowLzEtMCsGA1UEAxMk Yjg5MDc5ZjMtMWVmNS00NDM5LWFjYmUtYzAyNzUyY2E0NGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZOP0dqGcBTB+nolvUiMi8J17t91Nn7kHoXR NjUEd49s8qlFRaKOzsehT6PBboSKIAyVTxyY8StRFn4LWn0qFVFvdczU64fYaiog JUuN1PrryYH1IUQYT3jlFdTY+SjPadtHa2HYPzjE4u+TTXQQ7Drdoc4laqoPaW7b C6AfGjaAKj46o9weyckZQA0N9nqDK3fWlOPKRybsvX8/9VzXLeuT/uy83IRy6oJH 8s8gYpNt9E+lUtMhxnQLFJdtOKupRrlpNKiAoRE9FgV582YBwZG9q+bA/RoibYCk KS+Hs6xA2Mu15OHyJVLZVjyyTQE+jrHuK+BJAZcR4QBrjQuvswIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBoHYQzl9rTzqdYa3JdSufzr0TRTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i ODkwNzlmMy0xZWY1LTQ0MzktYWNiZS1jMDI3NTJjYTQ0YzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I4OTA3OWYzLTFlZjUtNDQzOS1h Y2JlLWMwMjc1MmNhNDRjOS9iODkwNzlmMy0xZWY1LTQ0MzktYWNiZS1jMDI3NTJj YTQ0YzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQgBAf8EEDAOoAwwCgIDBgVXAgMGEHkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN+EKmKFnVch1LOqi66Dm 4vkKJhtXHvlYPOj2rc0A5rNSzq2sXb8cHojki08n4+W28SfEZByN0946RpjSHUol rHVatWChMvGaZinbqWC4hlnti61/uqKmBqQK/ipB/slAK3+MxNsW1+v1MNRCpqJz tnaOu9Q7U1njMgyOA4Pv1cI7zszuk8rjN+QG92A9+7YsFFMz4BMBvHJTKNt0rjON sqNGfKHjdknGIsSav16RxltNVyHJOxoaCJy3aKIhIbr5q3hAodWDSAjjGvDc5kso dFxoPAFHG54h1r+qI+HzkZvFS/uyvl/u8IZJD9JAVy74WRQXsphdXLYn732/bw5T oA== -----END CERTIFICATE-----Generated at Sun Jun 15 05:14:49 2025 by rpki-client