$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8.cer File: 33370fff-a726-4094-b6ac-cacb8a8769f8.cer (raw, json) Hash identifier: 5wB8r3dkcPOgjCFSYbIYM2giCweB9n5N2MV46jR/hs8= Subject key identifier: E1:F0:A2:93:2A:73:44:E9:AE:9D:7A:23:DD:BA:E4:14:1D:CA:5F:07 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584511229FEA2896B179D14C4F20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8/33370fff-a726-4094-b6ac-cacb8a8769f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Mar 2024 21:04:35 +0000 Certificate not after: Thu 04 Jun 2026 20:04:35 +0000 Subordinate resources: AS: 11662 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:11:22:9f:ea:28:96:b1:79:d1:4c:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 1 21:04:35 2024 GMT Not After : Jun 4 20:04:35 2026 GMT Subject: CN=33370fff-a726-4094-b6ac-cacb8a8769f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:57:08:4f:a5:14:bb:64:d0:7f:ce:b1:87:10: e1:bb:33:d7:55:77:1c:5c:d1:99:c1:cb:61:9c:3e: 11:90:b2:83:08:fd:84:a3:fe:4d:55:d2:ac:8a:a8: 75:64:03:25:03:2a:bc:62:a4:b4:47:eb:d5:5b:2d: d3:74:d9:8d:5a:5c:02:b7:38:cb:5c:de:fd:03:cc: b9:01:9f:63:b5:cb:94:07:91:7d:7e:a7:da:f1:a6: db:d3:b6:ea:92:09:95:47:7b:ae:3b:2f:ea:8b:8e: ea:aa:06:fa:bb:ae:9f:88:8a:e7:03:dd:17:8b:7a: ec:e2:bc:f1:43:d4:84:13:35:17:81:e2:1c:86:8f: f3:b7:2d:60:cb:09:c2:19:d2:ac:eb:3f:5e:6a:9a: 49:7f:48:ae:9b:88:da:99:18:fc:79:18:3a:be:44: 41:2a:b7:52:02:e9:14:f2:7b:c0:77:8e:85:07:98: e2:d3:ef:f6:78:bf:24:a7:cb:f3:1f:00:b8:c5:78: 32:3b:b4:de:fe:d8:0c:31:c6:13:e2:16:b4:ae:c3: ff:bc:a2:4a:79:a0:03:ea:5a:e2:7e:4e:6e:f6:98: bb:6a:61:1e:31:ce:c5:14:da:9e:94:71:69:c0:35: da:a5:c5:cb:b3:42:0e:fb:dc:13:88:b6:d3:cd:0d: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:A2:93:2A:73:44:E9:AE:9D:7A:23:DD:BA:E4:14:1D:CA:5F:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8/33370fff-a726-4094-b6ac-cacb8a8769f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 11662 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0e:7b:37:a8:02:dc:ad:a4:cd:fb:e8:d4:46:35:3b:6c:95: 6c:45:eb:b6:15:41:bf:ea:ca:21:44:38:b7:9b:15:69:77:81: ac:f6:f2:6c:ee:7d:94:c6:c6:9c:91:cd:6c:7c:ac:4a:d7:91: b1:fb:b4:45:92:7f:75:8f:b5:cd:bc:d5:b7:1e:80:16:ea:7c: 05:5f:41:1c:02:43:1a:12:df:21:54:3a:77:93:c3:cf:22:74: 1d:57:ce:c3:58:89:44:66:93:d1:89:a6:50:54:65:58:18:49: 4b:13:8e:9d:ba:36:20:23:df:a4:0c:6d:9a:b6:46:85:cc:64: f4:0b:30:f6:ec:a3:33:24:df:99:0b:ea:78:34:a7:fb:08:a0: 25:3d:7b:e3:ee:17:e6:fa:9b:47:0e:5e:0b:23:dc:b3:4b:0b: 5a:0d:23:ee:9e:fc:1b:45:01:61:75:9f:c3:e4:43:94:52:2b: 17:d2:96:ff:f7:05:f7:d0:f7:3e:ca:27:b9:4f:da:15:77:6c: 6f:5f:3e:71:32:63:02:60:62:9d:0e:16:c6:e4:51:4c:41:f3: b0:0c:d1:9a:a6:98:52:98:5e:9d:4d:da:38:d4:a7:ce:24:7f: 79:f2:92:94:6c:39:df:c7:7b:fd:57:e1:55:08:49:c8:3d:8b: 8b:bd:e1:0d -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEURIp/qKJaxedFMTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMwMTIxMDQzNVoXDTI2MDYwNDIwMDQzNVowLzEtMCsGA1UEAxMk MzMzNzBmZmYtYTcyNi00MDk0LWI2YWMtY2FjYjhhODc2OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglcIT6UUu2TQf86xhxDhuzPXVXccXNGZwcth nD4RkLKDCP2Eo/5NVdKsiqh1ZAMlAyq8YqS0R+vVWy3TdNmNWlwCtzjLXN79A8y5 AZ9jtcuUB5F9fqfa8abb07bqkgmVR3uuOy/qi47qqgb6u66fiIrnA90Xi3rs4rzx Q9SEEzUXgeIcho/zty1gywnCGdKs6z9eappJf0ium4jamRj8eRg6vkRBKrdSAukU 8nvAd46FB5ji0+/2eL8kp8vzHwC4xXgyO7Te/tgMMcYT4ha0rsP/vKJKeaAD6lri fk5u9pi7amEeMc7FFNqelHFpwDXapcXLs0IO+9wTiLbTzQ23BwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFOHwopMqc0Tprp16I9265BQdyl8HMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z MzM3MGZmZi1hNzI2LTQwOTQtYjZhYy1jYWNiOGE4NzY5ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzMzMzcwZmZmLWE3MjYtNDA5NC1i NmFjLWNhY2I4YTg3NjlmOC8zMzM3MGZmZi1hNzI2LTQwOTQtYjZhYy1jYWNiOGE4 NzY5ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLY4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZg57N6gC3K2kzfvo1EY1O2yVbEXr thVBv+rKIUQ4t5sVaXeBrPbybO59lMbGnJHNbHysSteRsfu0RZJ/dY+1zbzVtx6A Fup8BV9BHAJDGhLfIVQ6d5PDzyJ0HVfOw1iJRGaT0YmmUFRlWBhJSxOOnbo2ICPf pAxtmrZGhcxk9Asw9uyjMyTfmQvqeDSn+wigJT174+4X5vqbRw5eCyPcs0sLWg0j 7p78G0UBYXWfw+RDlFIrF9KW//cF99D3PsonuU/aFXdsb18+cTJjAmBinQ4WxuRR TEHzsAzRmqaYUphenU3aONSnziR/efKSlGw538d7/VfhVQhJyD2Li73hDQ== -----END CERTIFICATE-----Generated at Fri May 10 20:55:08 2024 by rpki-client on console-ams.rpki-client.org