$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88.cer File: 0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88.cer (raw, json) Hash identifier: AO8ChfppDfnoeFimmOPn56c0/CRN2aw3Mt6wLllGBPs= Subject key identifier: BB:D0:3E:E4:06:84:A2:F1:E0:FB:8A:59:5C:03:05:17:4C:DE:0D:01 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844C07A9424D3D594256E5D7400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Feb 2024 23:41:19 +0000 Certificate not after: Wed 06 May 2026 22:41:19 +0000 Subordinate resources: AS: 54051 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:c0:7a:94:24:d3:d5:94:25:6e:5d:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 1 23:41:19 2024 GMT Not After : May 6 22:41:19 2026 GMT Subject: CN=0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:28:c9:81:70:16:17:ad:9e:1f:c1:cd:1b:f4: f2:fe:93:ac:04:58:d2:3f:79:3d:58:1f:10:23:fa: 9d:1c:d5:03:48:d6:15:18:ae:42:a6:20:50:db:6a: 5d:fe:05:12:2a:3e:45:b0:c4:ea:4e:d5:23:75:c9: b4:a3:2a:e5:29:4f:3e:67:46:32:72:33:b8:b3:c1: 65:2c:bc:3e:d2:c4:f1:e0:57:16:8a:af:e6:e8:e5: 44:ed:e4:a4:2e:07:3d:eb:89:78:b3:f9:87:61:59: 76:d2:41:0b:0b:d9:5e:7a:42:81:c8:29:12:68:d8: 2b:8c:25:7a:56:0c:d0:f0:84:81:66:df:7f:6b:60: 28:87:e0:c8:06:8b:cc:61:d5:d7:2a:67:04:2f:c6: 6d:71:3b:ff:bf:34:6f:f1:79:78:f5:9d:37:82:81: ce:76:2c:da:8f:b9:2f:7c:6d:72:b7:7c:e7:8d:27: f9:d6:9f:f8:d9:49:80:03:85:db:78:0c:7b:a6:33: c9:36:24:eb:23:6a:3c:1b:c9:1f:72:2b:69:7d:17: b3:58:b3:1a:37:98:5b:c8:99:33:9c:57:d7:63:c1: 4a:c2:e7:a3:17:cc:54:9d:0b:63:81:54:41:70:07: 7c:d5:ee:38:05:36:9b:8e:77:02:51:4c:1a:d6:74: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:3E:E4:06:84:A2:F1:E0:FB:8A:59:5C:03:05:17:4C:DE:0D:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 54051 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:41:94:c0:13:53:b8:4b:2b:64:9f:e8:f1:45:f4:b4:31:2b: 41:2c:30:0a:53:ba:c5:97:6f:f0:88:b6:c0:7e:e4:6b:e8:11: 76:b4:8e:78:36:d1:7a:05:0c:aa:2a:37:64:79:44:21:f5:12: 33:ad:51:60:55:a0:f6:a0:32:b8:bc:1b:32:1d:e8:43:26:02: 2e:02:86:27:c0:03:45:38:8e:4d:38:34:67:80:5f:85:8d:a1: 36:6f:1c:c5:dd:07:fe:9d:3d:e3:f6:07:07:3d:72:8a:22:7b: b0:09:24:bb:cd:c3:1b:a8:bf:58:0b:eb:7e:f2:c7:32:5b:47: bd:0e:8a:a7:06:d1:cd:ed:47:fd:c0:75:82:1d:77:65:b7:98: 00:86:27:ec:bd:6a:42:3d:f2:0b:30:62:2a:f4:33:7a:96:39: e3:89:7d:4c:c7:02:ce:13:0e:cd:90:27:06:da:60:35:8a:df: 23:9f:28:9f:e3:6b:af:98:f5:01:67:ee:fa:8a:c7:58:26:be: 83:a8:e5:e1:32:43:ab:08:4d:45:65:a1:63:77:aa:6c:9d:dd: 8e:e0:e7:aa:95:64:22:f0:7c:43:46:7a:f9:87:37:f1:eb:74: 9c:51:08:fb:7d:5a:0c:28:74:01:56:bf:09:e5:6f:d6:d3:c1: 6d:c5:ae:fa -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWETAepQk09WUJW5ddAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwMTIzNDExOVoXDTI2MDUwNjIyNDExOVowLzEtMCsGA1UEAxMk MGU4YzUwYmEtYjlkMy00ZDlhLWFlYWQtNGZkNWU1YzIxZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SjJgXAWF62eH8HNG/Ty/pOsBFjSP3k9WB8Q I/qdHNUDSNYVGK5CpiBQ22pd/gUSKj5FsMTqTtUjdcm0oyrlKU8+Z0YycjO4s8Fl LLw+0sTx4FcWiq/m6OVE7eSkLgc964l4s/mHYVl20kELC9leekKByCkSaNgrjCV6 VgzQ8ISBZt9/a2Aoh+DIBovMYdXXKmcEL8ZtcTv/vzRv8Xl49Z03goHOdizaj7kv fG1yt3znjSf51p/42UmAA4XbeAx7pjPJNiTrI2o8G8kfcitpfRezWLMaN5hbyJkz nFfXY8FKwuejF8xUnQtjgVRBcAd81e44BTabjncCUUwa1nRYzwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFLvQPuQGhKLx4PuKWVwDBRdM3g0BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w ZThjNTBiYS1iOWQzLTRkOWEtYWVhZC00ZmQ1ZTVjMjFlODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzBlOGM1MGJhLWI5ZDMtNGQ5YS1h ZWFkLTRmZDVlNWMyMWU4OC8wZThjNTBiYS1iOWQzLTRkOWEtYWVhZC00ZmQ1ZTVj MjFlODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANMjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEJBlMATU7hLK2Sf6PFF9LQxK0Es MApTusWXb/CItsB+5GvoEXa0jng20XoFDKoqN2R5RCH1EjOtUWBVoPagMri8GzId 6EMmAi4ChifAA0U4jk04NGeAX4WNoTZvHMXdB/6dPeP2Bwc9cooie7AJJLvNwxuo v1gL637yxzJbR70OiqcG0c3tR/3AdYIdd2W3mACGJ+y9akI98gswYir0M3qWOeOJ fUzHAs4TDs2QJwbaYDWK3yOfKJ/ja6+Y9QFn7vqKx1gmvoOo5eEyQ6sITUVloWN3 qmyd3Y7g56qVZCLwfENGevmHN/HrdJxRCPt9WgwodAFWvwnlb9bTwW3Frvo= -----END CERTIFICATE-----Generated at Fri May 10 20:14:29 2024 by rpki-client on console-fra.rpki-client.org