$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126.cer File: 51ac292a-caef-4fc2-9606-4d3f1e372126.cer (raw, json) Hash identifier: BV/xQF6fPsF6nCUtaXl9INRWcHaQNW4VjaTByLWCjwE= Subject key identifier: AB:F5:27:6A:2F:F8:0D:57:44:AA:27:9D:50:C6:60:2C:0F:56:3A:5E Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285845CF66B3FD32D00A0F7EA05580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126/51ac292a-caef-4fc2-9606-4d3f1e372126.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 May 2024 00:45:20 +0000 Certificate not after: Wed 12 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 11525 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cf:66:b3:fd:32:d0:0a:0f:7e:a0:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 9 00:45:20 2024 GMT Not After : Aug 12 00:45:20 2026 GMT Subject: CN=51ac292a-caef-4fc2-9606-4d3f1e372126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:50:85:93:7a:c3:96:e8:cc:5d:17:d1:fc: 1a:99:62:cc:62:13:ac:bf:30:68:c2:e3:c3:fc:aa: c5:3d:90:64:09:28:3a:f5:cd:3b:cd:10:a8:1d:53: 90:77:aa:20:31:5c:bf:ab:22:ee:cc:69:eb:b5:92: ad:28:6a:be:03:8a:44:a0:93:c8:70:da:9c:83:99: 31:e3:45:c4:d8:cf:9f:8b:0d:c4:a9:59:54:40:9e: 23:b1:f9:04:d8:a8:a7:8a:9c:a5:03:54:23:be:6a: 38:3d:7f:3f:b7:b8:0a:e5:e5:b8:b8:ee:a3:33:f5: 2a:a1:c0:0e:b8:de:2e:61:f5:62:a5:25:77:6d:d6: be:7f:68:fd:4c:b0:dc:77:93:8d:cb:3f:59:ba:09: 49:83:b4:22:73:a5:71:5e:ff:cb:1f:cd:1f:d7:7b: 29:cb:b2:fb:d8:db:c3:d2:41:25:ff:12:5c:d5:ca: db:89:1e:6c:f2:ba:f4:bc:bc:46:0d:a0:7f:63:22: 20:6d:2d:48:02:f5:0c:ed:94:3e:23:7c:4b:c3:57: f8:2f:ed:22:9d:ba:71:31:7e:e5:4c:d1:5a:24:ea: 9c:58:e7:60:5b:41:be:3f:e0:87:ee:4b:27:e6:1e: cc:14:8a:5c:01:00:9a:dd:02:4b:e0:05:12:ca:38: ef:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F5:27:6A:2F:F8:0D:57:44:AA:27:9D:50:C6:60:2C:0F:56:3A:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ac292a-caef-4fc2-9606-4d3f1e372126/51ac292a-caef-4fc2-9606-4d3f1e372126.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 11525 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a1:e0:53:b5:32:30:e9:0b:c9:b6:fc:2e:c3:25:e4:c6:5d: d0:33:82:99:65:e9:30:10:92:41:16:7b:f8:09:2e:35:9e:2a: 12:b7:a1:89:8b:27:ea:c5:ae:73:d7:1a:d6:4d:fa:9f:83:03: bf:f7:e0:93:c3:13:4d:a9:87:27:43:f4:e2:5c:6e:b6:98:83: fe:05:e2:df:ed:87:f4:ff:98:3e:c3:c1:93:a1:b6:0f:f1:97: 54:1e:9b:cf:87:18:a5:ce:51:b7:dd:fc:93:3c:94:ce:67:00: 2c:f4:ae:6a:71:0e:f6:24:da:b0:94:6a:b2:f3:87:8a:ec:e6: 38:5c:90:c2:8f:2c:5e:eb:7a:07:7e:c2:db:f3:bb:1c:b5:b0: 34:23:62:89:86:82:29:a4:69:6c:22:22:61:a4:ab:f9:37:ab: 16:6b:1e:0b:a0:0d:89:cc:7d:bd:18:51:0b:70:4a:90:7e:44: a0:32:27:71:5f:1b:87:f0:55:08:0e:64:24:01:ec:d6:63:d9: 00:da:3a:2c:fc:68:b3:ca:bd:61:26:52:dd:84:6f:5f:17:ce: cd:be:01:39:f1:ff:e3:ce:fb:83:ef:83:2b:24:e1:e6:f3:80: 12:0e:6e:41:45:77:4b:a5:4a:d0:a4:34:8e:af:47:5f:8b:86: 2a:78:d7:98 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEXPZrP9MtAKD36gVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDUwOTAwNDUyMFoXDTI2MDgxMjAwNDUyMFowLzEtMCsGA1UEAxMk NTFhYzI5MmEtY2FlZi00ZmMyLTk2MDYtNGQzZjFlMzcyMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sxQhZN6w5bozF0X0fwamWLMYhOsvzBowuPD /KrFPZBkCSg69c07zRCoHVOQd6ogMVy/qyLuzGnrtZKtKGq+A4pEoJPIcNqcg5kx 40XE2M+fiw3EqVlUQJ4jsfkE2KinipylA1Qjvmo4PX8/t7gK5eW4uO6jM/UqocAO uN4uYfVipSV3bda+f2j9TLDcd5ONyz9ZuglJg7Qic6VxXv/LH80f13spy7L72NvD 0kEl/xJc1crbiR5s8rr0vLxGDaB/YyIgbS1IAvUM7ZQ+I3xLw1f4L+0inbpxMX7l TNFaJOqcWOdgW0G+P+CH7ksn5h7MFIpcAQCa3QJL4AUSyjjvOQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFKv1J2ov+A1XRKonnVDGYCwPVjpeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 MWFjMjkyYS1jYWVmLTRmYzItOTYwNi00ZDNmMWUzNzIxMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzUxYWMyOTJhLWNhZWYtNGZjMi05 NjA2LTRkM2YxZTM3MjEyNi81MWFjMjkyYS1jYWVmLTRmYzItOTYwNi00ZDNmMWUz NzIxMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLQUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKaHgU7UyMOkLybb8LsMl5MZd0DOC mWXpMBCSQRZ7+AkuNZ4qErehiYsn6sWuc9ca1k36n4MDv/fgk8MTTamHJ0P04lxu tpiD/gXi3+2H9P+YPsPBk6G2D/GXVB6bz4cYpc5Rt938kzyUzmcALPSuanEO9iTa sJRqsvOHiuzmOFyQwo8sXut6B37C2/O7HLWwNCNiiYaCKaRpbCIiYaSr+TerFmse C6ANicx9vRhRC3BKkH5EoDIncV8bh/BVCA5kJAHs1mPZANo6LPxos8q9YSZS3YRv XxfOzb4BOfH/4877g++DKyTh5vOAEg5uQUV3S6VK0KQ0jq9HX4uGKnjXmA== -----END CERTIFICATE-----Generated at Mon May 13 02:02:44 2024 by rpki-client on console-fra.rpki-client.org