$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.cer File: 9377ba0e-dde7-47fc-b879-e155f4e3ce8d.cer (raw, json) Hash identifier: gTnME/GwkNpE7ggk3KV3J9WmHIcUYBY+8bsMitzMDsM= Subject key identifier: D6:FA:12:88:DB:E4:56:52:BC:BB:5F:03:F3:D4:7E:0B:12:16:9E:5C Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858447DB7B39DB48CE5CE8B1BA380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Jan 2024 01:45:19 +0000 Certificate not after: Mon 13 Apr 2026 00:45:19 +0000 Subordinate resources: AS: 395161 IP: 2606:d940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:7d:b7:b3:9d:b4:8c:e5:ce:8b:1b:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 9 01:45:19 2024 GMT Not After : Apr 13 00:45:19 2026 GMT Subject: CN=9377ba0e-dde7-47fc-b879-e155f4e3ce8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:db:78:f2:4d:b3:69:52:ee:80:ce:59:cf: 2b:db:7c:2c:27:6b:47:57:10:37:b3:f0:1a:31:07: 42:f7:b2:37:9a:10:3a:c8:e5:92:23:29:70:f2:57: 6a:7c:d7:db:b7:f4:eb:29:f3:8c:16:e7:7f:54:36: 04:fe:48:ed:ae:69:6c:69:6c:67:de:d1:d5:1e:7c: 4f:7c:df:ff:2c:8e:77:9f:e4:7c:5a:42:2b:0e:65: 2c:64:3b:f4:54:8d:e9:08:5d:68:b6:52:d9:0c:5e: 02:54:97:bf:db:0b:c8:63:7d:64:83:5b:f7:13:e3: 6a:3f:40:ea:b0:c4:82:c5:48:1f:71:fd:a3:22:55: e5:66:5d:32:fe:5f:26:91:9e:db:19:96:45:8b:28: 12:30:7c:f4:4d:64:16:5c:ac:1f:cf:89:33:06:12: 8f:45:f6:53:0a:aa:0c:62:88:17:a4:8c:5d:51:2a: 27:19:9b:90:54:82:54:19:23:50:dd:29:41:d1:c8: fc:0d:2d:1c:85:49:c4:d2:c7:ea:7f:f2:04:6b:e5: 36:c2:20:14:5c:78:94:96:3b:1b:60:5f:29:05:1a: 97:99:51:6c:a7:bc:b3:f9:53:be:ee:c3:e8:67:ff: 5d:a3:a2:ef:ad:dd:8a:42:90:57:41:f1:ce:8a:bd: e7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FA:12:88:DB:E4:56:52:BC:BB:5F:03:F3:D4:7E:0B:12:16:9E:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9377ba0e-dde7-47fc-b879-e155f4e3ce8d/9377ba0e-dde7-47fc-b879-e155f4e3ce8d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2606:d940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395161 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:11:d6:5e:99:24:8e:05:12:51:b2:73:b2:3c:96:81:2d:db: 06:ce:79:58:bb:b8:07:05:39:fb:ee:54:21:17:b8:10:e7:ec: 7f:5c:5c:17:5c:00:ef:25:11:95:cf:45:b8:d5:80:79:20:3e: e9:c1:70:a9:62:0f:a4:57:96:d1:61:7b:be:ff:bf:f5:57:39: 30:12:6b:35:a8:57:33:cb:7e:c5:ca:d1:30:1b:ba:ed:8c:b7: e2:ef:ae:9e:dc:8c:14:bb:4f:81:ec:48:ea:0a:71:b0:06:d1: 2d:90:18:d2:83:98:f7:22:a9:f6:44:5c:cb:3e:aa:a9:0d:15: 65:c4:52:f5:79:8a:ea:10:d4:d1:87:d1:2a:e8:70:2b:7f:ee: 7e:72:02:ad:a8:fc:ae:22:17:55:52:07:54:e0:95:da:5d:9d: 37:07:cb:a1:ba:ec:0d:a9:c4:21:5b:d5:8c:8e:4f:8c:97:fd: d5:b2:64:43:99:7a:b2:05:6f:9c:28:d2:3e:08:e4:2f:63:31: fb:e1:b1:a8:4f:e1:19:6a:7a:f8:c0:21:f1:e3:77:71:dc:34: ed:9d:73:39:9a:6c:ea:c1:b7:81:22:5e:de:a0:d1:29:96:5c: f0:e0:bc:db:de:fd:7b:73:b5:99:e9:2c:ac:c4:10:24:a5:be: f5:a6:19:1b -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWER9t7OdtIzlzosbo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDEwOTAxNDUxOVoXDTI2MDQxMzAwNDUxOVowLzEtMCsGA1UEAxMk OTM3N2JhMGUtZGRlNy00N2ZjLWI4NzktZTE1NWY0ZTNjZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJDbePJNs2lS7oDOWc8r23wsJ2tHVxA3s/Aa MQdC97I3mhA6yOWSIylw8ldqfNfbt/TrKfOMFud/VDYE/kjtrmlsaWxn3tHVHnxP fN//LI53n+R8WkIrDmUsZDv0VI3pCF1otlLZDF4CVJe/2wvIY31kg1v3E+NqP0Dq sMSCxUgfcf2jIlXlZl0y/l8mkZ7bGZZFiygSMHz0TWQWXKwfz4kzBhKPRfZTCqoM YogXpIxdUSonGZuQVIJUGSNQ3SlB0cj8DS0chUnE0sfqf/IEa+U2wiAUXHiUljsb YF8pBRqXmVFsp7yz+VO+7sPoZ/9do6Lvrd2KQpBXQfHOir3n6wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFNb6Eojb5FZSvLtfA/PUfgsSFp5cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85 Mzc3YmEwZS1kZGU3LTQ3ZmMtYjg3OS1lMTU1ZjRlM2NlOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzkzNzdiYTBlLWRkZTctNDdmYy1i ODc5LWUxNTVmNGUzY2U4ZC85Mzc3YmEwZS1kZGU3LTQ3ZmMtYjg3OS1lMTU1ZjRl M2NlOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBtlAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYHmTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBrEdZemSSOBRJRsnOyPJaBLdsGznlYu7gHBTn77lQhF7gQ 5+x/XFwXXADvJRGVz0W41YB5ID7pwXCpYg+kV5bRYXu+/7/1VzkwEms1qFczy37F ytEwG7rtjLfi766e3IwUu0+B7EjqCnGwBtEtkBjSg5j3Iqn2RFzLPqqpDRVlxFL1 eYrqENTRh9Eq6HArf+5+cgKtqPyuIhdVUgdU4JXaXZ03B8uhuuwNqcQhW9WMjk+M l/3VsmRDmXqyBW+cKNI+COQvYzH74bGoT+EZanr4wCHx43dx3DTtnXM5mmzqwbeB Il7eoNEpllzw4Lzb3v17c7WZ6SysxBAkpb71phkb -----END CERTIFICATE-----Generated at Thu Apr 25 22:34:48 2024 by rpki-client on console-fra.rpki-client.org