$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244.cer File: 57c43936-2f31-493c-b7a1-c53ab607a244.cer (raw, json) Hash identifier: /flxWsbp3NWiMrajY9fHqlGR3V1EGi9ixi6tFYIZ8S0= Subject key identifier: DF:9D:87:90:DE:2B:0F:04:05:3C:1D:0D:AC:F4:BB:3C:18:FC:26:09 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843BCF8B0391F1A82E9977DE480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244/57c43936-2f31-493c-b7a1-c53ab607a244.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Nov 2023 00:45:15 +0000 Certificate not after: Tue 03 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 20343 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:bc:f8:b0:39:1f:1a:82:e9:97:7d:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 1 00:45:15 2023 GMT Not After : Feb 3 01:45:15 2026 GMT Subject: CN=57c43936-2f31-493c-b7a1-c53ab607a244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:92:21:94:a1:ba:6d:bf:0a:76:51:3a:f9: ca:10:57:ba:6b:b9:1b:e5:ee:7e:0a:93:eb:81:2f: fb:2b:d8:15:2c:f7:ba:22:d6:0e:a1:58:a9:17:3e: b6:11:c6:86:08:7b:4e:c2:d4:cd:e1:34:88:a9:97: 4e:d2:38:9b:58:28:97:75:5e:32:7a:e2:21:c3:ef: 47:c4:c0:a3:1e:8a:fa:e2:12:94:d6:47:e6:dc:f6: 58:4c:f4:db:e4:02:79:80:2b:32:3f:67:ca:10:22: 93:46:fb:7b:70:8d:ff:8f:9a:e6:10:59:83:eb:f8: 20:a3:b9:98:13:ac:49:d5:b3:44:6c:98:50:58:ec: 96:5b:7a:a1:76:50:64:26:38:b9:2d:13:61:73:fc: f7:e9:72:7e:fa:b9:df:00:f3:fc:6a:4f:0f:e7:c7: 9b:8b:55:b9:a4:a9:8e:8b:87:13:1f:8d:44:a0:a8: fb:42:22:8a:89:dd:57:76:b8:cd:5f:4d:91:dd:8c: 69:79:4d:e1:24:7f:81:ac:ba:ea:f9:d6:63:44:66: 58:c7:ac:e2:3b:25:84:55:18:b2:ea:e8:69:b9:06: bb:55:36:b0:56:bb:84:6e:15:2d:43:99:40:ac:1d: 3f:cd:84:96:1b:e8:14:6c:8b:90:a1:80:40:3b:dd: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9D:87:90:DE:2B:0F:04:05:3C:1D:0D:AC:F4:BB:3C:18:FC:26:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57c43936-2f31-493c-b7a1-c53ab607a244/57c43936-2f31-493c-b7a1-c53ab607a244.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 20343 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2c:b5:d0:9f:35:20:c1:1b:ec:0c:3f:78:2a:b1:8d:3e:3e: 43:46:a4:2d:2a:cd:5a:2c:54:66:ac:42:e2:1a:49:f2:f9:fc: e4:03:58:27:6a:d2:43:26:65:13:27:7b:91:99:8c:4c:72:00: 84:0f:a2:8c:cf:5f:ab:8c:10:da:b9:55:e6:90:4b:7e:6e:71: 86:8a:f4:27:06:21:4c:0c:77:fd:ab:f4:e3:62:a8:64:74:ee: 81:4a:bb:68:09:04:71:df:b4:39:2e:bc:81:d0:67:27:a5:c2: 4a:83:bd:38:1f:03:06:06:08:85:5c:d1:12:ec:5b:e6:7f:19: 1c:25:5b:c6:33:43:e3:f4:7f:63:e2:6b:3e:b8:84:33:96:7c: c9:fc:b9:57:29:c0:e2:56:39:3e:83:9e:4a:0c:69:17:dc:90: 98:4e:67:2b:6b:d5:69:5f:96:64:32:75:2b:a0:44:4c:d9:42: 66:44:c9:9e:09:2a:ba:47:3e:c0:13:b8:35:15:c2:ca:95:76: b5:ea:23:ee:32:61:05:fa:b4:30:b0:03:02:d6:96:3e:32:d4: 14:fc:d8:2b:14:7c:91:c6:22:ca:82:2a:be:6e:c7:6f:49:00: 04:2b:40:8f:62:04:a2:1a:fa:9a:45:61:07:63:67:18:c6:a3: 87:d6:96:cb -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEO8+LA5HxqC6Zd95IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTEwMTAwNDUxNVoXDTI2MDIwMzAxNDUxNVowLzEtMCsGA1UEAxMk NTdjNDM5MzYtMmYzMS00OTNjLWI3YTEtYzUzYWI2MDdhMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9mSIZShum2/CnZROvnKEFe6a7kb5e5+CpPr gS/7K9gVLPe6ItYOoVipFz62EcaGCHtOwtTN4TSIqZdO0jibWCiXdV4yeuIhw+9H xMCjHor64hKU1kfm3PZYTPTb5AJ5gCsyP2fKECKTRvt7cI3/j5rmEFmD6/ggo7mY E6xJ1bNEbJhQWOyWW3qhdlBkJji5LRNhc/z36XJ++rnfAPP8ak8P58ebi1W5pKmO i4cTH41EoKj7QiKKid1XdrjNX02R3YxpeU3hJH+BrLrq+dZjRGZYx6ziOyWEVRiy 6uhpuQa7VTawVruEbhUtQ5lArB0/zYSWG+gUbIuQoYBAO90BJwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFN+dh5DeKw8EBTwdDaz0uzwY/CYJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 N2M0MzkzNi0yZjMxLTQ5M2MtYjdhMS1jNTNhYjYwN2EyNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU3YzQzOTM2LTJmMzEtNDkzYy1i N2ExLWM1M2FiNjA3YTI0NC81N2M0MzkzNi0yZjMxLTQ5M2MtYjdhMS1jNTNhYjYw N2EyNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICT3cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASCy10J81IMEb7Aw/eCqxjT4+Q0ak LSrNWixUZqxC4hpJ8vn85ANYJ2rSQyZlEyd7kZmMTHIAhA+ijM9fq4wQ2rlV5pBL fm5xhor0JwYhTAx3/av042KoZHTugUq7aAkEcd+0OS68gdBnJ6XCSoO9OB8DBgYI hVzREuxb5n8ZHCVbxjND4/R/Y+JrPriEM5Z8yfy5VynA4lY5PoOeSgxpF9yQmE5n K2vVaV+WZDJ1K6BETNlCZkTJngkqukc+wBO4NRXCypV2teoj7jJhBfq0MLADAtaW PjLUFPzYKxR8kcYiyoIqvm7Hb0kABCtAj2IEohr6mkVhB2NnGMajh9aWyw== -----END CERTIFICATE-----Generated at Sun May 12 15:24:32 2024 by rpki-client on console-ams.rpki-client.org