$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.cer File: bdfa3ca4-6c5e-4035-8d21-51d1607b8714.cer (raw, json) Hash identifier: QS6eVwv8bbzxlWa2WJX6RpC7siToItI/67ivl3sa8XA= Subject key identifier: 33:07:DE:1E:ED:52:29:BF:DC:8A:48:06:B1:37:43:95:3D:BD:85:35 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584632A7CE67D97F48E5C1CDDCA4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Jun 2024 14:01:32 +0000 Certificate not after: Wed 16 Sep 2026 14:01:32 +0000 Subordinate resources: AS: 401172 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:32:a7:ce:67:d9:7f:48:e5:c1:cd:dc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jun 13 14:01:32 2024 GMT Not After : Sep 16 14:01:32 2026 GMT Subject: CN=bdfa3ca4-6c5e-4035-8d21-51d1607b8714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:ad:6a:3a:91:fb:1b:20:4d:fc:a0:91:63: 87:d8:e3:46:c1:76:64:d3:2b:93:88:41:b1:15:b9: f8:af:17:4a:3c:e4:34:77:66:4f:cb:2f:4c:ff:6a: dd:0f:7c:aa:1e:be:4b:06:db:aa:d2:16:6a:1f:fd: 55:07:98:8f:60:64:71:cc:59:ee:7e:ec:f3:19:26: 20:40:a8:54:46:1f:e2:86:22:2a:b8:83:3d:ba:25: e0:8d:17:84:97:7d:68:dd:49:20:5f:33:a9:5d:91: 30:9b:94:fa:c5:fb:50:87:73:97:93:39:a6:8b:59: f0:90:e0:fa:06:df:93:73:96:d6:ea:59:76:d8:37: 06:55:a3:e9:9f:cb:b3:26:55:43:5b:ea:c3:93:c8: 33:89:92:8f:77:1d:4f:24:f7:f7:59:0f:4a:7b:fa: 89:a4:69:53:7a:cf:b0:b7:e6:6f:f3:cd:4c:5d:86: 18:8e:44:91:d8:3c:83:0c:f0:c8:32:b1:47:ee:9c: 85:e2:6e:af:f3:b2:59:97:d5:11:6d:1a:b3:83:e4: bd:90:39:72:f1:d5:4f:b4:b7:a4:58:cd:2e:7a:29: f7:cb:ce:7a:ed:4e:53:56:8f:36:a6:da:3f:41:21: 64:29:2d:39:7e:20:1e:ae:d2:5e:2d:29:16:9c:04: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:DE:1E:ED:52:29:BF:DC:8A:48:06:B1:37:43:95:3D:BD:85:35 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401172 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:bd:56:1c:6b:3f:fa:e2:21:2d:fb:a6:4c:54:f4:4f:75:15: 4f:94:e1:30:a7:53:e5:68:c0:48:c8:ac:a7:52:32:d5:53:76: d3:c7:ee:72:87:73:c0:aa:7c:47:7f:ed:47:09:f8:a5:cb:f5: 98:c5:32:96:86:e0:94:19:db:56:6a:55:a0:81:69:dc:6c:a7: 2a:5f:74:5a:78:37:29:f8:f3:3a:2c:7c:33:6a:28:74:0e:02: 96:f3:a8:2e:7f:3a:92:64:7b:e8:00:d2:8c:6f:2f:e6:3e:14: 03:1b:42:7d:c6:a7:24:88:5a:2a:42:2d:27:62:f5:12:97:cb: 60:09:f1:a5:69:25:39:37:d4:d4:90:f7:9b:1f:91:ff:00:22: af:de:52:4b:20:4a:e7:7f:0b:53:1e:98:e1:a2:f5:c3:8f:17: b7:92:75:61:fc:ac:1a:61:68:5e:98:c0:79:29:ad:77:f2:3e: 09:1c:66:41:b1:c0:95:3a:1e:60:b2:0a:9c:e5:98:4e:ee:54: 01:4a:3d:3c:6d:70:48:a3:db:7f:57:35:17:e5:64:a1:58:2a: dd:66:90:cb:d5:05:ac:16:b2:b1:ba:c9:24:74:fa:3e:6f:e1: 77:bb:86:b7:85:22:36:7b:c5:84:9e:45:87:a7:50:c3:20:3f: fd:dd:8e:0b -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEYyp85n2X9I5cHN3KQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDYxMzE0MDEzMloXDTI2MDkxNjE0MDEzMlowLzEtMCsGA1UEAxMk YmRmYTNjYTQtNmM1ZS00MDM1LThkMjEtNTFkMTYwN2I4NzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvKtajqR+xsgTfygkWOH2ONGwXZk0yuTiEGx Fbn4rxdKPOQ0d2ZPyy9M/2rdD3yqHr5LBtuq0hZqH/1VB5iPYGRxzFnufuzzGSYg QKhURh/ihiIquIM9uiXgjReEl31o3UkgXzOpXZEwm5T6xftQh3OXkzmmi1nwkOD6 Bt+Tc5bW6ll22DcGVaPpn8uzJlVDW+rDk8gziZKPdx1PJPf3WQ9Ke/qJpGlTes+w t+Zv881MXYYYjkSR2DyDDPDIMrFH7pyF4m6v87JZl9URbRqzg+S9kDly8dVPtLek WM0uein3y8567U5TVo82pto/QSFkKS05fiAertJeLSkWnARtpQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFDMH3h7tUim/3IpIBrE3Q5U9vYU1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i ZGZhM2NhNC02YzVlLTQwMzUtOGQyMS01MWQxNjA3Yjg3MTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2JkZmEzY2E0LTZjNWUtNDAzNS04 ZDIxLTUxZDE2MDdiODcxNC9iZGZhM2NhNC02YzVlLTQwMzUtOGQyMS01MWQxNjA3 Yjg3MTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh8UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHe9VhxrP/riIS37pkxU9E91FU+U 4TCnU+VowEjIrKdSMtVTdtPH7nKHc8CqfEd/7UcJ+KXL9ZjFMpaG4JQZ21ZqVaCB adxspypfdFp4Nyn48zosfDNqKHQOApbzqC5/OpJke+gA0oxvL+Y+FAMbQn3GpySI WipCLSdi9RKXy2AJ8aVpJTk31NSQ95sfkf8AIq/eUksgSud/C1MemOGi9cOPF7eS dWH8rBphaF6YwHkprXfyPgkcZkGxwJU6HmCyCpzlmE7uVAFKPTxtcEij239XNRfl ZKFYKt1mkMvVBawWsrG6ySR0+j5v4Xe7hreFIjZ7xYSeRYenUMMgP/3djgs= -----END CERTIFICATE-----Generated at Wed Jun 26 06:23:05 2024 by rpki-client on console-fra.rpki-client.org