$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92.cer File: ffa88dd6-b56a-4337-b2aa-58a035a26c92.cer (raw, json) Hash identifier: a90cNXbBc9H3jwugZEOzXCEgDxwQNRdHSAejAeYmP5I= Subject key identifier: 57:03:F1:47:66:63:D8:89:6B:E3:6A:77:8C:45:32:F0:59:B6:07:0A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842792158E029DBF88C340F9200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92/ffa88dd6-b56a-4337-b2aa-58a035a26c92.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 08 Jul 2023 00:45:16 +0000 Certificate not after: Fri 10 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 394564 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:79:21:58:e0:29:db:f8:8c:34:0f:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 8 00:45:16 2023 GMT Not After : Oct 10 00:45:16 2025 GMT Subject: CN=ffa88dd6-b56a-4337-b2aa-58a035a26c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:00:f0:16:c6:cd:09:87:12:eb:9f:e6:d2: 41:4c:d3:b0:81:e0:f9:24:ef:3f:c8:bc:b2:89:b4: 7c:6c:72:9a:98:c8:9a:6e:15:cb:6c:1a:ad:47:0a: f2:5a:1c:28:68:2f:2c:34:53:69:03:dd:c1:df:d2: fb:99:7c:2d:12:0c:f8:17:38:cf:b8:1c:da:a7:25: cc:42:fe:04:fe:64:72:c7:cf:fe:fa:da:69:88:99: 33:d3:a3:0b:c7:43:2d:92:c6:82:33:5b:03:51:0b: d4:20:a6:93:8d:7e:8e:c7:80:4d:a9:97:f6:59:2e: 12:f7:a0:1d:37:d2:23:eb:94:78:fb:6d:fe:57:31: e6:8a:8b:62:05:8a:89:98:d5:38:fe:88:da:75:eb: c4:fd:52:73:e4:11:0f:cf:11:2c:c5:b9:38:c1:b8: f1:59:7a:f4:9b:3f:5d:62:b9:9f:89:3b:1c:f1:a8: d4:1c:da:36:87:21:15:72:40:75:af:70:81:27:a1: 15:d2:41:38:3d:8c:40:52:ac:9a:09:aa:cd:53:99: 56:67:4d:88:83:89:15:b6:56:f3:b1:ec:4e:3d:37: 5e:17:90:0d:88:54:be:fc:8f:80:fe:a7:05:85:14: 18:f2:a5:c0:13:8f:bc:e4:4f:25:22:86:49:21:a9: 0d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:03:F1:47:66:63:D8:89:6B:E3:6A:77:8C:45:32:F0:59:B6:07:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffa88dd6-b56a-4337-b2aa-58a035a26c92/ffa88dd6-b56a-4337-b2aa-58a035a26c92.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 394564 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:20:c7:c5:e3:64:80:80:a2:eb:ad:3c:54:92:be:da:c8:c9: af:0c:8e:41:a9:08:91:b3:be:fe:4a:b5:1f:c7:a7:f6:f2:87: 63:14:a4:de:72:ca:76:ce:f2:41:81:a3:cc:3a:29:0b:7b:c7: 1f:e4:27:02:58:44:58:33:72:7c:5d:94:3c:3d:a8:53:7d:a5: a3:89:59:a4:13:38:0b:a3:36:70:90:d7:9a:be:39:73:b6:d2: 9f:1f:82:a9:6d:20:6d:2b:20:5d:ef:6c:40:f7:c9:43:99:2c: 4a:c8:ed:27:0b:c9:3f:1b:3d:05:88:cd:e2:43:9a:a8:ee:19: 22:c6:d9:0c:e5:e4:f8:a7:6a:ac:50:3f:86:fe:b7:98:d7:72: 97:a7:eb:7a:07:6d:d5:76:4c:68:2b:02:aa:6a:04:d5:1f:71: 06:f3:36:f9:b0:16:e9:84:96:cc:fc:55:26:3a:e7:ad:59:b9: e9:ce:9a:d3:da:a5:19:ed:8f:76:98:dd:4a:e2:24:d0:8a:31: c0:f5:30:bb:95:9d:5d:52:11:ed:98:ac:f3:88:fe:dc:e9:e1: b4:73:42:84:2e:2d:97:49:e2:0e:78:c2:9c:cd:f6:09:1f:10: 0b:fc:c0:1a:ed:2c:2c:1b:eb:d7:f3:6c:95:d5:46:e1:3d:4b: fd:4e:fb:9d -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEJ5IVjgKdv4jDQPkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDcwODAwNDUxNloXDTI1MTAxMDAwNDUxNlowLzEtMCsGA1UEAxMk ZmZhODhkZDYtYjU2YS00MzM3LWIyYWEtNThhMDM1YTI2YzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW0A8BbGzQmHEuuf5tJBTNOwgeD5JO8/yLyy ibR8bHKamMiabhXLbBqtRwryWhwoaC8sNFNpA93B39L7mXwtEgz4FzjPuBzapyXM Qv4E/mRyx8/++tppiJkz06MLx0MtksaCM1sDUQvUIKaTjX6Ox4BNqZf2WS4S96Ad N9Ij65R4+23+VzHmiotiBYqJmNU4/ojadevE/VJz5BEPzxEsxbk4wbjxWXr0mz9d YrmfiTsc8ajUHNo2hyEVckB1r3CBJ6EV0kE4PYxAUqyaCarNU5lWZ02Ig4kVtlbz sexOPTdeF5ANiFS+/I+A/qcFhRQY8qXAE4+85E8lIoZJIakNMQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFFcD8UdmY9iJa+Nqd4xFMvBZtgcKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m ZmE4OGRkNi1iNTZhLTQzMzctYjJhYS01OGEwMzVhMjZjOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2ZmYTg4ZGQ2LWI1NmEtNDMzNy1i MmFhLTU4YTAzNWEyNmM5Mi9mZmE4OGRkNi1iNTZhLTQzMzctYjJhYS01OGEwMzVh MjZjOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgVEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIcgx8XjZICAouutPFSSvtrIya8M jkGpCJGzvv5KtR/Hp/byh2MUpN5yynbO8kGBo8w6KQt7xx/kJwJYRFgzcnxdlDw9 qFN9paOJWaQTOAujNnCQ15q+OXO20p8fgqltIG0rIF3vbED3yUOZLErI7ScLyT8b PQWIzeJDmqjuGSLG2Qzl5PinaqxQP4b+t5jXcpen63oHbdV2TGgrAqpqBNUfcQbz NvmwFumElsz8VSY6561ZuenOmtPapRntj3aY3UriJNCKMcD1MLuVnV1SEe2YrPOI /tzp4bRzQoQuLZdJ4g54wpzN9gkfEAv8wBrtLCwb69fzbJXVRuE9S/1O+50= -----END CERTIFICATE-----Generated at Thu Apr 18 17:52:42 2024 by rpki-client on console-ams.rpki-client.org