$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615.cer File: c2ba26e3-e462-4c49-ad31-7dde2268b615.cer (raw, json) Hash identifier: eARPGiqrAXKfdIyHpOB+3YxEOVD+N+NHvQOXKCFv6xQ= Subject key identifier: 73:98:01:5E:A6:CE:48:BF:99:89:7A:F2:98:17:FA:A0:0D:F8:A1:C5 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285842CFAC9B2A6E69A796A53BF400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615/c2ba26e3-e462-4c49-ad31-7dde2268b615.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Aug 2023 00:45:22 +0000 Certificate not after: Mon 10 Nov 2025 01:45:22 +0000 Subordinate resources: AS: 18728 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:cf:ac:9b:2a:6e:69:a7:96:a5:3b:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 8 00:45:22 2023 GMT Not After : Nov 10 01:45:22 2025 GMT Subject: CN=c2ba26e3-e462-4c49-ad31-7dde2268b615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:ba:ea:4a:f3:e4:f2:cd:c7:b0:fd:00:16: 71:7d:5d:28:fa:df:11:08:f5:4b:64:46:92:a1:b1: 4e:f6:a8:ca:ac:c5:2c:7d:14:48:ac:5a:5e:d6:29: a1:04:82:0a:13:3e:2c:f7:9a:a3:57:45:0d:d8:31: 73:1d:9b:52:eb:67:dc:73:ad:43:15:cf:f5:85:b1: ed:31:5d:3c:4a:56:d1:55:5b:af:ef:ff:cc:f4:7a: b4:8f:5e:d2:94:4a:e1:95:c1:32:a6:ac:20:68:1f: 5c:60:10:eb:4b:fc:99:3d:50:14:6c:d9:85:fe:1d: c0:8a:b3:71:74:b5:23:46:1c:b9:22:eb:b5:b1:66: af:04:1e:a9:6f:67:11:32:21:a3:68:47:d9:f0:f8: cd:45:5a:b5:a0:d3:d8:15:a5:97:ba:d7:5d:71:df: fa:b8:ab:3d:4f:32:86:a4:34:0e:c8:aa:58:63:df: 18:5d:72:0f:8a:94:a3:27:51:21:8b:42:c8:c9:b3: 7e:79:e6:91:e1:dd:56:d9:a3:9e:bb:00:13:02:c5: 4e:8b:d8:b4:2f:1b:70:f3:e4:55:70:af:3c:cd:35: a0:fd:81:78:f0:98:1f:77:ac:f6:51:6b:a6:27:c3: 08:07:66:49:a7:97:db:61:90:f4:f4:3d:94:5b:ad: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:98:01:5E:A6:CE:48:BF:99:89:7A:F2:98:17:FA:A0:0D:F8:A1:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615/c2ba26e3-e462-4c49-ad31-7dde2268b615.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 18728 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:99:ee:2a:4f:57:b4:66:14:3a:33:a9:07:53:6e:22:d1:04: 3d:8c:93:5f:9c:88:43:e6:32:db:2e:f2:e1:80:9d:ba:47:89: 50:3e:a6:7b:e0:21:3c:68:c6:3a:83:72:b6:28:2b:6c:9e:ae: 02:13:24:18:f7:90:ea:a6:9d:9f:ab:1e:3e:b4:61:99:00:27: c3:e5:29:76:41:9f:c5:44:b8:4e:7d:bb:62:9e:56:00:3f:6e: 84:27:0c:1f:59:58:d4:ef:2c:25:07:0e:16:93:09:0f:1d:bf: 05:ac:f5:0d:88:47:62:61:f9:be:6a:27:91:0e:e2:e2:5d:ea: e2:e6:8e:26:82:9f:14:a9:1b:12:8f:8e:7d:54:6c:cc:4c:1d: 3e:12:79:8c:e1:49:06:07:6c:e9:9f:f5:dd:83:06:df:bb:58: 2e:97:68:e4:25:60:ee:79:53:80:e8:7d:4e:17:53:5c:9e:dc: 08:7a:5f:9e:f6:f6:9e:2d:f8:5f:ac:a5:e5:fc:1f:74:e1:93: 50:be:f6:01:1a:7e:af:48:d5:6f:45:a5:e9:c5:59:bc:6a:75: c5:84:9a:8f:c7:20:ea:ba:e9:d7:82:b0:6c:6c:30:5d:82:96: 8e:a2:b2:5d:ee:5a:48:05:9e:f8:11:32:9f:62:d2:9e:bc:1d: 88:ec:35:6a -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWELPrJsqbmmnlqU79AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDgwODAwNDUyMloXDTI1MTExMDAxNDUyMlowLzEtMCsGA1UEAxMk YzJiYTI2ZTMtZTQ2Mi00YzQ5LWFkMzEtN2RkZTIyNjhiNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2S66krz5PLNx7D9ABZxfV0o+t8RCPVLZEaS obFO9qjKrMUsfRRIrFpe1imhBIIKEz4s95qjV0UN2DFzHZtS62fcc61DFc/1hbHt MV08SlbRVVuv7//M9Hq0j17SlErhlcEypqwgaB9cYBDrS/yZPVAUbNmF/h3AirNx dLUjRhy5Iuu1sWavBB6pb2cRMiGjaEfZ8PjNRVq1oNPYFaWXutddcd/6uKs9TzKG pDQOyKpYY98YXXIPipSjJ1Ehi0LIybN+eeaR4d1W2aOeuwATAsVOi9i0Lxtw8+RV cK88zTWg/YF48Jgfd6z2UWumJ8MIB2ZJp5fbYZD09D2UW63PSQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFHOYAV6mzki/mYl68pgX+qAN+KHFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j MmJhMjZlMy1lNDYyLTRjNDktYWQzMS03ZGRlMjI2OGI2MTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2MyYmEyNmUzLWU0NjItNGM0OS1h ZDMxLTdkZGUyMjY4YjYxNS9jMmJhMjZlMy1lNDYyLTRjNDktYWQzMS03ZGRlMjI2 OGI2MTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICSSgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhJnuKk9XtGYUOjOpB1NuItEEPYyT X5yIQ+Yy2y7y4YCdukeJUD6me+AhPGjGOoNytigrbJ6uAhMkGPeQ6qadn6sePrRh mQAnw+UpdkGfxUS4Tn27Yp5WAD9uhCcMH1lY1O8sJQcOFpMJDx2/Baz1DYhHYmH5 vmonkQ7i4l3q4uaOJoKfFKkbEo+OfVRszEwdPhJ5jOFJBgds6Z/13YMG37tYLpdo 5CVg7nlTgOh9ThdTXJ7cCHpfnvb2ni34X6yl5fwfdOGTUL72ARp+r0jVb0Wl6cVZ vGp1xYSaj8cg6rrp14KwbGwwXYKWjqKyXe5aSAWe+BEyn2LSnrwdiOw1ag== -----END CERTIFICATE-----Generated at Sun May 5 01:26:08 2024 by rpki-client on console-ams.rpki-client.org