$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9.cer File: 431389d5-6f88-4763-a957-cb167b00c5b9.cer (raw, json) Hash identifier: Ry4Tf0SYbRzAaqPR0PSD1xidsceo86se7c+tEprVYVg= Subject key identifier: 98:FC:E6:FD:9A:3A:C7:44:9B:A4:5B:69:E8:BD:FC:20:48:0F:59:BD Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858432637D18D8EBB4FB3A8A0D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/431389d5-6f88-4763-a957-cb167b00c5b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Sep 2023 00:45:23 +0000 Certificate not after: Thu 11 Dec 2025 01:45:23 +0000 Subordinate resources: AS: 393909 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:26:37:d1:8d:8e:bb:4f:b3:a8:a0:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 8 00:45:23 2023 GMT Not After : Dec 11 01:45:23 2025 GMT Subject: CN=431389d5-6f88-4763-a957-cb167b00c5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8b:23:81:ba:9c:54:2e:33:89:96:e4:cf:6d: b9:47:ac:43:24:e5:95:20:96:2c:3a:f0:99:8e:a3: 35:b7:d6:a1:3f:c1:4f:d2:a0:d6:23:7f:14:7e:f6: a5:75:33:e5:a6:04:fb:b4:60:a0:2f:9f:a2:9c:07: 1d:ca:f9:97:f2:90:fe:35:27:a9:6b:fd:ff:15:52: a7:88:68:ea:57:4c:94:54:a2:2a:89:69:f2:cc:27: 05:60:d0:c2:4a:c2:16:79:10:6d:ca:e7:21:12:b4: 5d:9e:94:49:62:43:89:6c:e9:ac:32:71:41:a7:fa: 4a:d5:3c:bb:3d:80:64:0e:55:8c:ba:d1:b2:3f:84: 59:7a:58:2f:39:ed:75:da:dc:fd:eb:52:47:66:b4: b2:56:ac:58:14:24:35:ff:08:d3:29:36:40:32:93: 8b:5b:e0:81:62:7a:1e:34:51:d6:f9:25:76:e6:49: cf:90:06:5a:78:90:ee:0c:26:f8:05:28:6b:41:35: 17:17:4a:55:4e:f8:3e:8c:56:15:1a:75:f6:8f:82: 7c:d3:27:0b:c7:3e:f8:66:e4:1e:73:85:6a:a3:0e: e2:40:27:c9:6c:ba:b2:51:50:00:a6:5f:fb:a0:c9: 40:ee:c7:f9:93:5d:35:80:0a:62:d0:ff:ac:1a:7e: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FC:E6:FD:9A:3A:C7:44:9B:A4:5B:69:E8:BD:FC:20:48:0F:59:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/431389d5-6f88-4763-a957-cb167b00c5b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 393909 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e4:e6:1a:c3:9e:41:a8:fe:72:99:36:56:9c:8c:57:f4:48: a9:6f:96:84:0f:56:b0:cd:2e:f0:28:a2:6e:77:26:69:02:36: f4:ce:3c:03:a6:06:85:d0:76:e3:9d:25:35:1d:4b:bd:00:ae: 4f:bb:62:11:e9:3f:4f:c4:17:cc:7d:a0:bb:0c:45:3b:23:84: 20:28:8f:a5:7c:0b:3b:74:2b:51:09:e7:40:51:2a:40:ef:3a: 48:70:84:5e:1d:fa:90:cf:28:d5:14:e8:69:74:3c:82:77:52: 8f:49:0e:f6:9c:0b:6f:a2:54:15:95:fe:ae:e7:6d:99:af:00: 81:e7:09:0c:c5:1f:b4:ac:da:dd:d7:5d:45:2c:fd:54:ee:89: 70:14:02:73:43:20:0d:55:e3:32:df:43:28:39:b0:27:85:e1: d3:b0:4d:94:29:87:3c:34:ef:d7:37:1d:7a:ac:7c:59:fe:93: ae:c3:c6:e9:4c:93:b3:90:15:b9:31:de:79:8f:23:67:86:53: 5b:91:c8:81:f3:65:d0:c9:ad:a0:d6:e5:62:84:b7:5f:78:c3: 5a:be:88:8f:a8:a8:19:4f:e9:e3:13:db:41:9c:4d:76:de:f7: fa:cb:55:ed:bd:ad:e5:a2:27:b2:74:06:4b:fe:56:fc:0b:a1: a4:21:77:5c -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEMmN9GNjrtPs6ig1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDkwODAwNDUyM1oXDTI1MTIxMTAxNDUyM1owLzEtMCsGA1UEAxMk NDMxMzg5ZDUtNmY4OC00NzYzLWE5NTctY2IxNjdiMDBjNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4sjgbqcVC4ziZbkz225R6xDJOWVIJYsOvCZ jqM1t9ahP8FP0qDWI38UfvaldTPlpgT7tGCgL5+inAcdyvmX8pD+NSepa/3/FVKn iGjqV0yUVKIqiWnyzCcFYNDCSsIWeRBtyuchErRdnpRJYkOJbOmsMnFBp/pK1Ty7 PYBkDlWMutGyP4RZelgvOe112tz961JHZrSyVqxYFCQ1/wjTKTZAMpOLW+CBYnoe NFHW+SV25knPkAZaeJDuDCb4BShrQTUXF0pVTvg+jFYVGnX2j4J80ycLxz74ZuQe c4Vqow7iQCfJbLqyUVAApl/7oMlA7sf5k101gApi0P+sGn4BNQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFJj85v2aOsdEm6Rbaei9/CBID1m9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 MzEzODlkNS02Zjg4LTQ3NjMtYTk1Ny1jYjE2N2IwMGM1YjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzQzMTM4OWQ1LTZmODgtNDc2My1h OTU3LWNiMTY3YjAwYzViOS80MzEzODlkNS02Zjg4LTQ3NjMtYTk1Ny1jYjE2N2Iw MGM1YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgK1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAETk5hrDnkGo/nKZNlacjFf0SKlv loQPVrDNLvAoom53JmkCNvTOPAOmBoXQduOdJTUdS70Ark+7YhHpP0/EF8x9oLsM RTsjhCAoj6V8Czt0K1EJ50BRKkDvOkhwhF4d+pDPKNUU6Gl0PIJ3Uo9JDvacC2+i VBWV/q7nbZmvAIHnCQzFH7Ss2t3XXUUs/VTuiXAUAnNDIA1V4zLfQyg5sCeF4dOw TZQphzw079c3HXqsfFn+k67DxulMk7OQFbkx3nmPI2eGU1uRyIHzZdDJraDW5WKE t194w1q+iI+oqBlP6eMT20GcTXbe9/rLVe29reWiJ7J0Bkv+VvwLoaQhd1w= -----END CERTIFICATE-----Generated at Thu Apr 25 22:34:44 2024 by rpki-client on console-fra.rpki-client.org