$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361.cer File: 3551cc95-27a3-4fce-b6e6-c75933be1361.cer (raw, json) Hash identifier: 0FVpMyMW1GsjMV9GpEYf32P0C7KOPJgrbiVIyq1+h+k= Subject key identifier: 61:84:45:19:1A:5E:99:C3:14:8A:BD:D5:F8:7B:D6:C4:4C:75:A1:B9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858455F25414C5A75F694C0807160 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/3551cc95-27a3-4fce-b6e6-c75933be1361.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 Mar 2024 19:42:56 +0000 Certificate not after: Thu 02 Jul 2026 19:42:56 +0000 Subordinate resources: AS: 32828 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:25:41:4c:5a:75:f6:94:c0:80:71:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 29 19:42:56 2024 GMT Not After : Jul 2 19:42:56 2026 GMT Subject: CN=3551cc95-27a3-4fce-b6e6-c75933be1361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:f0:ae:8c:94:26:7b:f5:76:bc:d0:73:d6: cc:13:ac:16:6e:45:52:6f:83:36:0a:e1:b6:29:40: 05:06:35:f5:a6:58:c2:8d:0e:38:78:a5:f2:68:a8: 3a:09:76:79:27:ae:c7:76:7f:f1:49:20:fb:ac:d9: 20:4f:c1:df:e5:12:be:18:c2:9f:52:20:b3:5c:ea: c3:66:ab:6b:36:af:38:26:ee:ff:c3:8d:12:99:13: 80:6a:6e:9b:aa:22:ac:a5:87:c1:be:3b:56:2d:38: fc:71:ff:8e:94:79:c7:3d:8a:9e:c0:91:5b:2e:36: 46:88:8b:b5:31:7e:c1:bb:71:f8:09:de:a3:e5:fd: 65:fc:f0:7c:a7:fd:f4:48:28:75:11:b7:35:a9:e8: 56:a5:4a:34:a4:3f:e9:b1:6a:1d:50:a9:23:61:0b: 13:02:8d:60:a8:dd:15:a5:d4:21:89:3a:7f:a7:18: 9b:d1:f9:ef:1e:ee:c3:3c:5a:5d:e5:02:1b:1b:2e: 99:64:6c:08:e4:ec:42:6a:f5:64:7e:3b:f4:ed:10: e1:b7:2c:48:78:d0:ae:e7:3b:3e:d9:94:01:22:9f: 08:11:4b:ef:9c:58:56:af:88:65:1a:f3:53:43:49: 48:0f:48:e2:7b:76:24:7a:b5:fc:ef:9a:e6:81:d9: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:45:19:1A:5E:99:C3:14:8A:BD:D5:F8:7B:D6:C4:4C:75:A1:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3551cc95-27a3-4fce-b6e6-c75933be1361/3551cc95-27a3-4fce-b6e6-c75933be1361.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32828 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7c:42:1e:6d:d6:08:ad:6e:55:ea:ff:c6:11:10:2c:8b:3a: 00:d3:61:93:ec:d0:14:b9:11:b5:e5:d7:31:fe:ea:11:02:a7: 58:3e:3b:fd:53:70:4d:5d:70:4e:44:76:6c:77:b6:d3:92:b6: a1:24:27:3c:fd:37:27:35:6b:09:81:02:bf:c0:cf:a9:78:77: 27:a0:78:2d:79:ca:dd:fd:e8:a8:3b:eb:6b:53:be:07:b0:cf: 75:5c:61:53:8d:71:83:de:79:bc:f4:45:3c:2d:1a:ee:c7:3b: 7b:dc:6c:f0:d1:4a:5e:5a:d5:db:ee:46:cc:ab:d0:88:29:56: 90:c8:27:0f:67:8e:85:7f:4c:8b:08:88:e0:c6:bf:ca:d9:8e: f0:97:89:0e:f6:72:1a:cf:39:f2:aa:56:de:c9:1a:2e:50:5c: b0:85:ff:5a:64:8c:b5:9c:cc:08:ff:f1:4b:41:57:ea:e9:ea: ab:52:07:a9:c9:2b:bc:2a:c3:7f:8e:76:e3:32:87:ef:dc:1d: 93:24:83:3b:f7:69:3f:36:40:cc:a6:14:54:0b:08:07:22:48: 3d:60:44:24:cc:4d:65:72:d3:da:86:b2:5c:11:c1:56:40:0c: 0e:64:28:77:c2:e5:58:f9:0c:74:79:4a:5d:34:5f:d9:4a:2a: f8:68:92:b1 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEVfJUFMWnX2lMCAcWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMyOTE5NDI1NloXDTI2MDcwMjE5NDI1NlowLzEtMCsGA1UEAxMk MzU1MWNjOTUtMjdhMy00ZmNlLWI2ZTYtYzc1OTMzYmUxMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2XwroyUJnv1drzQc9bME6wWbkVSb4M2CuG2 KUAFBjX1pljCjQ44eKXyaKg6CXZ5J67Hdn/xSSD7rNkgT8Hf5RK+GMKfUiCzXOrD ZqtrNq84Ju7/w40SmROAam6bqiKspYfBvjtWLTj8cf+OlHnHPYqewJFbLjZGiIu1 MX7Bu3H4Cd6j5f1l/PB8p/30SCh1Ebc1qehWpUo0pD/psWodUKkjYQsTAo1gqN0V pdQhiTp/pxib0fnvHu7DPFpd5QIbGy6ZZGwI5OxCavVkfjv07RDhtyxIeNCu5zs+ 2ZQBIp8IEUvvnFhWr4hlGvNTQ0lID0jie3YkerX875rmgdkBCwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFGGERRkaXpnDFIq91fh71sRMdaG5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NTUxY2M5NS0yN2EzLTRmY2UtYjZlNi1jNzU5MzNiZTEzNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM1NTFjYzk1LTI3YTMtNGZjZS1i NmU2LWM3NTkzM2JlMTM2MS8zNTUxY2M5NS0yN2EzLTRmY2UtYjZlNi1jNzU5MzNi ZTEzNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIA8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABR8Qh5t1gitblXq/8YRECyLOgDT YZPs0BS5EbXl1zH+6hECp1g+O/1TcE1dcE5Edmx3ttOStqEkJzz9Nyc1awmBAr/A z6l4dyegeC15yt396Kg762tTvgewz3VcYVONcYPeebz0RTwtGu7HO3vcbPDRSl5a 1dvuRsyr0IgpVpDIJw9njoV/TIsIiODGv8rZjvCXiQ72chrPOfKqVt7JGi5QXLCF /1pkjLWczAj/8UtBV+rp6qtSB6nJK7wqw3+OduMyh+/cHZMkgzv3aT82QMymFFQL CAciSD1gRCTMTWVy09qGslwRwVZADA5kKHfC5Vj5DHR5Sl00X9lKKvhokrE= -----END CERTIFICATE-----Generated at Sat May 11 18:14:39 2024 by rpki-client on console-fra.rpki-client.org