$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1.cer File: fe8fe7db-84d3-4265-b371-b311f1aea1a1.cer (raw, json) Hash identifier: 67F+3OmSzQjN825hcZKGU6uwFFhLP77jE+UzLACwaAE= Subject key identifier: BA:45:F3:42:B5:62:D7:97:8C:C8:A5:AA:E2:B5:D2:39:C6:EB:0A:75 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849604C816137692AE882E13C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1/fe8fe7db-84d3-4265-b371-b311f1aea1a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 00:45:34 +0000 Certificate not after: Mon 05 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 26567 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:4c:81:61:37:69:2a:e8:82:e1:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 1 00:45:34 2025 GMT Not After : Jul 5 00:45:34 2027 GMT Subject: CN=fe8fe7db-84d3-4265-b371-b311f1aea1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:f0:da:ed:76:e0:44:ea:23:3b:72:7b:8b: e3:7d:72:07:70:1f:aa:86:ee:b3:41:1a:d1:c4:e3: 4b:69:53:0e:42:65:e7:87:57:e4:26:6c:8b:db:19: a4:70:d4:f1:fe:ae:a2:6a:89:15:c2:01:82:69:f1: 82:5f:50:36:72:e4:11:88:7c:56:b6:86:55:2b:2e: 8b:c3:42:43:7b:fc:79:0e:04:d8:56:b8:5b:67:57: 13:b1:f1:a5:c5:5a:2d:b2:c7:3f:af:da:c3:82:fe: 4f:b3:de:30:4f:fd:3c:44:37:a0:b6:1b:64:a1:b9: 4d:bd:70:fe:0c:c1:f2:11:53:64:94:c3:2b:c3:0a: e7:17:ff:e9:45:e2:5f:67:91:a3:40:69:69:28:f7: 66:5d:0a:33:92:ce:cc:06:5a:8d:0e:be:ce:29:3d: 4d:5a:45:b7:01:27:78:82:fa:66:b5:be:4c:f2:22: f4:5f:fa:82:6e:a6:9b:ab:4d:7d:c8:5a:85:76:72: b5:c3:59:ae:7a:80:a2:23:f3:eb:c0:ba:95:49:11: 67:c8:f5:5a:46:7f:97:6d:d4:c2:6f:81:a8:98:ab: ce:69:31:c0:96:eb:b3:07:37:9f:c1:38:aa:7b:3c: 9a:16:15:60:0e:1c:27:35:d8:ad:e8:28:ab:ed:eb: f3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:45:F3:42:B5:62:D7:97:8C:C8:A5:AA:E2:B5:D2:39:C6:EB:0A:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1/fe8fe7db-84d3-4265-b371-b311f1aea1a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 26567 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:3a:23:3e:45:cd:c4:20:cd:e8:bc:7e:07:7b:13:b4:80:c4: 24:bb:46:a8:ff:42:38:da:f6:5a:36:b1:d4:85:04:aa:01:fe: b3:05:b7:f1:21:09:bb:3f:89:36:76:6a:b6:23:e9:7f:6b:14: f3:41:13:bd:94:c4:5a:e5:85:15:28:e4:76:43:2f:d5:e5:c1: 2f:35:89:f7:03:b1:03:61:eb:ad:e3:53:c2:af:87:60:8e:60: 56:66:c5:9b:f8:50:36:bd:cf:ef:fd:d9:29:79:32:60:1e:77: 3a:e3:a3:18:1d:31:6c:3c:b5:e2:9b:ed:d8:a6:12:72:e9:60: 90:9a:36:d4:91:42:d0:c3:69:ba:b0:c8:01:d1:09:b8:75:4e: 2d:e5:3d:c3:63:47:c1:89:d8:88:8c:2b:8b:f2:43:04:fe:49: c7:50:73:3e:61:79:c1:34:cc:eb:b9:7b:0c:cd:58:c1:3c:7a: 6b:6f:00:05:1f:45:a3:63:6e:3d:53:36:3b:6e:3f:fd:68:ec: 5f:e5:e4:02:a2:75:61:0c:c1:80:8c:80:9d:2f:f8:68:2b:52: 78:73:c4:b0:cf:c9:77:fe:c5:0b:35:54:51:fe:29:46:0c:a0: 08:6f:c0:a5:a7:0c:ae:24:cf:08:3c:e4:c4:1d:50:de:2d:01: 1f:de:b6:25 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWElgTIFhN2kq6ILhPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQwMTAwNDUzNFoXDTI3MDcwNTAwNDUzNFowLzEtMCsGA1UEAxMk ZmU4ZmU3ZGItODRkMy00MjY1LWIzNzEtYjMxMWYxYWVhMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCXw2u124ETqIztye4vjfXIHcB+qhu6zQRrR xONLaVMOQmXnh1fkJmyL2xmkcNTx/q6iaokVwgGCafGCX1A2cuQRiHxWtoZVKy6L w0JDe/x5DgTYVrhbZ1cTsfGlxVotssc/r9rDgv5Ps94wT/08RDegthtkoblNvXD+ DMHyEVNklMMrwwrnF//pReJfZ5GjQGlpKPdmXQozks7MBlqNDr7OKT1NWkW3ASd4 gvpmtb5M8iL0X/qCbqabq019yFqFdnK1w1mueoCiI/PrwLqVSRFnyPVaRn+XbdTC b4GomKvOaTHAluuzBzefwTiqezyaFhVgDhwnNdit6Cir7evzQQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFLpF80K1YteXjMilquK10jnG6wp1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m ZThmZTdkYi04NGQzLTQyNjUtYjM3MS1iMzExZjFhZWExYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZlOGZlN2RiLTg0ZDMtNDI2NS1i MzcxLWIzMTFmMWFlYTFhMS9mZThmZTdkYi04NGQzLTQyNjUtYjM3MS1iMzExZjFh ZWExYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZ8cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlDojPkXNxCDN6Lx+B3sTtIDEJLtG qP9CONr2Wjax1IUEqgH+swW38SEJuz+JNnZqtiPpf2sU80ETvZTEWuWFFSjkdkMv 1eXBLzWJ9wOxA2HrreNTwq+HYI5gVmbFm/hQNr3P7/3ZKXkyYB53OuOjGB0xbDy1 4pvt2KYSculgkJo21JFC0MNpurDIAdEJuHVOLeU9w2NHwYnYiIwri/JDBP5Jx1Bz PmF5wTTM67l7DM1YwTx6a28ABR9Fo2NuPVM2O24//WjsX+XkAqJ1YQzBgIyAnS/4 aCtSeHPEsM/Jd/7FCzVUUf4pRgygCG/ApacMriTPCDzkxB1Q3i0BH962JQ== -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:05 2025 by rpki-client