$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa File: AS21957.asa (raw, json) Hash identifier: N1Y1Whlk6zz8tptuQ59a6/lJkYYvYae83hANXFayAsg= Subject key identifier: 0B:F2:6D:CC:52:50:89:6E:0D:02:9B:E6:8C:C8:57:FF:AE:0F:30:71 Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Certificate serial: 5B4F2896263061AE5E5F425110ECEAE73E0E8812 Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa Signing time: Mon 10 Apr 2023 06:24:39 +0000 ASPA not before: Mon 10 Apr 2023 06:19:39 +0000 ASPA not after: Mon 08 Apr 2024 06:24:39 +0000 Customer ASID: 21957 Provider set: AS: 970 Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 May 2023 11:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4f:28:96:26:30:61:ae:5e:5f:42:51:10:ec:ea:e7:3e:0e:88:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Validity Not Before: Apr 10 06:19:39 2023 GMT Not After : Apr 8 06:24:39 2024 GMT Subject: CN=0BF26DCC5250896E0D029BE68CC857FFAE0F3071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:e4:ec:8a:79:ce:7c:23:c3:f4:f1:34:fb: 64:0b:a4:f1:d2:fe:55:78:51:0d:92:24:78:e8:ca: 8f:ee:b7:5a:d6:9b:ad:a3:3b:c7:0d:73:d3:07:ef: 8d:16:8d:97:fa:6a:78:24:b1:32:14:cd:2e:b3:f8: ec:e3:0b:c9:1b:22:69:f2:ea:31:44:16:40:d2:5e: 6b:c6:89:af:79:3d:e6:12:9f:06:a4:0c:41:08:bd: 43:1b:f8:f7:81:77:cd:a9:e2:44:82:bf:a2:32:23: c0:ff:d9:7b:a6:94:bb:e7:1a:13:9e:99:bf:03:e2: 34:5c:e7:e5:b8:ea:3f:d2:ab:e9:22:75:a8:62:d7: f7:42:f6:e5:ad:81:a4:f5:44:1a:02:4a:bd:67:04: 8e:a3:d9:ee:c3:d6:4c:83:a1:3c:82:38:46:a4:ff: 75:d7:4e:18:92:c8:ed:c6:78:aa:2d:29:62:77:99: b4:d1:11:17:08:4f:43:5a:5b:05:fc:8e:df:9b:68: c6:fc:dd:ec:f2:7c:d6:40:c1:f5:86:bb:aa:ba:d8: 68:c6:7a:0d:39:81:ef:89:24:c8:a2:19:fe:22:cb: 81:08:ac:23:9d:59:f4:ac:f6:3c:3c:ee:1b:36:06: 10:26:3e:4c:58:60:56:e0:64:32:31:ef:46:be:3f: d3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F2:6D:CC:52:50:89:6E:0D:02:9B:E6:8C:C8:57:FF:AE:0F:30:71 X509v3 Authority Key Identifier: keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 21957 Signature Algorithm: sha256WithRSAEncryption 3d:30:17:37:10:db:4d:37:a3:87:91:0d:9b:8c:78:97:32:66: 8a:c5:d2:88:83:1d:26:0e:83:35:61:fd:25:24:6d:fe:a0:24: 4f:cb:99:5e:a5:1a:cf:9f:19:97:2e:76:17:f8:ba:25:51:9a: cf:1c:5f:0e:60:dd:d0:a7:88:fe:30:7f:ad:5b:e4:d5:76:e5: 38:bc:b7:16:d7:99:91:95:88:4f:4c:79:97:c7:74:cc:09:e4: 1e:c3:26:68:78:60:5f:98:63:64:20:80:21:19:22:c2:17:d0: 5b:6b:74:5d:72:c2:44:96:1b:a1:c1:28:9a:9f:f8:60:6f:84: 0d:55:03:ff:c5:9d:a7:0d:34:60:64:ac:60:68:cd:3e:ed:57: 87:d3:ac:4e:7a:96:2d:ad:ab:db:0a:a2:12:08:77:a9:be:2e: 71:8a:e2:4f:4f:bf:d4:c7:ed:86:a1:b6:71:73:da:12:9b:90: 95:cf:0d:b3:4f:3e:9f:22:67:f5:e3:86:0d:b8:f8:20:1d:83: c0:cd:ca:9e:9c:8f:76:47:c7:93:77:40:da:9d:96:02:10:75: 2f:04:fa:27:8a:d0:3b:40:39:6e:7c:38:03:16:4c:94:37:b5: 62:9c:e7:ce:e1:f3:75:6d:4f:7c:c2:40:13:4d:d8:ce:97:8d: f3:a8:b8:f4 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUW08oliYwYa5eX0JREOzq5z4OiBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5 YzA1ODliOTk1NmM1MWUzNTEwHhcNMjMwNDEwMDYxOTM5WhcNMjQwNDA4MDYyNDM5 WjAzMTEwLwYDVQQDEygwQkYyNkRDQzUyNTA4OTZFMEQwMjlCRTY4Q0M4NTdGRkFF MEYzMDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48fk7Ip5znwj w/TxNPtkC6Tx0v5VeFENkiR46MqP7rda1putozvHDXPTB++NFo2X+mp4JLEyFM0u s/js4wvJGyJp8uoxRBZA0l5rxomveT3mEp8GpAxBCL1DG/j3gXfNqeJEgr+iMiPA /9l7ppS75xoTnpm/A+I0XOfluOo/0qvpInWoYtf3QvblrYGk9UQaAkq9ZwSOo9nu w9ZMg6E8gjhGpP91104YksjtxniqLSlid5m00REXCE9DWlsF/I7fm2jG/N3s8nzW QMH1hruquthoxnoNOYHviSTIohn+IsuBCKwjnVn0rPY8PO4bNgYQJj5MWGBW4GQy Me9Gvj/T1wIDAQABo4ICOTCCAjUwHQYDVR0OBBYEFAvybcxSUIluDQKb5ozIV/+u DzBxMB8GA1UdIwQYMBaAFH7JtdIlCMAjHBXava9RNZkLZr/tMA4GA1UdDwEB/wQE AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3JlcG8ua2FnbC5tZS9ycGtp L0tlYXRvbkFHTGFpci8wLzdFQzlCNUQyMjUwOEMwMjMxQzE1REFCREFGNTEzNTk5 MEI2NkJGRUQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt NDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02 M2RlMjMyZjJhMDQvMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1 ODliOTk1NmM1MWUzNTEuY2VyMFAGCCsGAQUFBwELBEQwQjBABggrBgEFBQcwC4Y0 cnN5bmM6Ly9yZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC9BUzIxOTU3 LmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAlXFMA0GCSqGSIb3DQEBCwUAA4IBAQA9MBc3ENtNN6OHkQ2bjHiXMmaK xdKIgx0mDoM1Yf0lJG3+oCRPy5lepRrPnxmXLnYX+LolUZrPHF8OYN3Qp4j+MH+t W+TVduU4vLcW15mRlYhPTHmXx3TMCeQewyZoeGBfmGNkIIAhGSLCF9Bba3RdcsJE lhuhwSian/hgb4QNVQP/xZ2nDTRgZKxgaM0+7VeH06xOepYtravbCqISCHepvi5x iuJPT7/Ux+2GobZxc9oSm5CVzw2zTz6fImf144YNuPggHYPAzcqenI92R8eTd0Da nZYCEHUvBPonitA7QDlufDgDFkyUN7VinOfO4fN1bU98wkATTdjOl43zqLj0 -----END CERTIFICATE-----Generated at Wed May 3 13:06:20 2023 by rpki-client on console-ams.rpki-client.org