$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.cer File: 5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.cer (raw, json) Hash identifier: NgeiBgmPmlJS4ikP51f/efHFsXTRL+BqGoKJ21C0QfA= Subject key identifier: DF:4B:B0:B5:6D:27:A0:AF:86:F0:AA:86:5A:D8:4C:AB:5F:60:C7:5A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285845193117708AB505746DABDF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Mar 2024 18:20:12 +0000 Certificate not after: Sun 07 Jun 2026 17:20:12 +0000 Subordinate resources: AS: 46269 IP: 2620:88:8000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:19:31:17:70:8a:b5:05:74:6d:ab:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 4 18:20:12 2024 GMT Not After : Jun 7 17:20:12 2026 GMT Subject: CN=5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:e3:af:87:3a:49:dc:13:c3:fd:da:ed:ad: 4a:d1:8f:e4:bb:a2:c4:d5:45:d6:a5:4a:bc:f5:0e: 7f:6d:c8:f7:a0:0b:3b:08:41:6a:06:ee:83:ee:dd: 5e:e4:2d:34:98:07:d0:fc:ec:9f:cb:c6:88:b6:0e: 33:30:78:39:77:03:67:9f:c6:3b:6a:f0:2d:86:10: fb:d6:f0:f3:9d:aa:34:cf:02:26:40:7b:15:cf:a4: 5c:ed:74:bb:8b:42:d0:df:38:8a:b8:99:2f:1d:bf: 1c:f5:91:97:ed:79:f5:19:40:f6:df:55:4b:50:77: ea:e0:d0:eb:5c:6e:7c:51:2b:97:d0:2e:a5:22:2b: 0e:6a:46:bb:09:69:aa:a5:e0:98:13:5e:62:59:db: c0:10:18:45:5d:56:b2:0c:86:9a:d5:5f:57:dc:6f: 21:4f:5b:dc:b7:d9:b3:ca:7a:8a:4d:be:04:b6:a3: c5:6d:93:6f:7a:2e:81:7f:7b:31:27:19:05:42:72: 9a:39:d3:18:e8:04:06:61:cc:e5:03:28:07:39:86: 12:17:26:68:53:09:a5:2f:cf:6c:e2:d2:03:27:ba: f8:bb:4c:dc:ee:91:ef:26:45:ad:5b:d7:b6:ff:e9: 84:1f:d3:29:35:56:cd:3f:f4:9f:89:b3:3a:9a:ff: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4B:B0:B5:6D:27:A0:AF:86:F0:AA:86:5A:D8:4C:AB:5F:60:C7:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2620:88:8000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46269 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ee:4e:80:2c:5f:d8:69:91:19:dd:04:1c:81:f5:63:aa:25: 59:62:80:cf:22:cd:4a:1b:81:93:66:4b:7a:35:43:db:91:05: f3:ff:e4:32:31:55:05:dd:8f:8c:c2:23:5a:c0:69:da:92:56: 28:87:d3:7e:78:17:0a:85:1c:6a:da:88:7f:4d:87:7b:a3:dc: 9e:c1:4a:2b:da:d3:4c:bd:74:94:af:ce:91:d9:4a:9a:c1:48: 37:f2:38:78:c2:7d:1b:2e:e6:08:d6:e6:d1:ca:3d:f8:48:cd: a6:2d:3c:e9:dd:7d:83:b7:91:9e:26:14:20:b7:4c:f2:b4:52: c0:b4:da:47:47:c7:c2:0b:f6:28:6b:4f:3a:b9:02:2e:65:44: 70:91:91:eb:ad:57:b8:23:70:75:98:ed:c4:93:e3:dd:cc:5b: 26:cd:3d:58:d9:7e:6e:4d:5e:28:c7:b3:2b:8c:95:cb:40:80: ef:54:91:a3:42:34:24:63:94:e6:70:b6:06:2b:48:29:c9:7d: 00:f1:ae:cc:60:43:53:fd:9a:e7:7b:8e:e8:03:65:4b:8a:4a: 01:db:ef:d7:c5:a7:85:59:ab:09:2e:ff:09:25:9a:2f:d0:e5: d6:54:a6:a4:94:7f:ed:88:6a:51:e3:80:8a:f3:da:af:e2:aa: cb:57:9f:55 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEUZMRdwirUFdG2r3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMwNDE4MjAxMloXDTI2MDYwNzE3MjAxMlowLzEtMCsGA1UEAxMk NTkwNWQyY2UtYmQwMi00OGVmLWJiZWUtOWNkM2IyNmZjZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pvjr4c6SdwTw/3a7a1K0Y/ku6LE1UXWpUq8 9Q5/bcj3oAs7CEFqBu6D7t1e5C00mAfQ/Oyfy8aItg4zMHg5dwNnn8Y7avAthhD7 1vDznao0zwImQHsVz6Rc7XS7i0LQ3ziKuJkvHb8c9ZGX7Xn1GUD231VLUHfq4NDr XG58USuX0C6lIisOaka7CWmqpeCYE15iWdvAEBhFXVayDIaa1V9X3G8hT1vct9mz ynqKTb4EtqPFbZNvei6Bf3sxJxkFQnKaOdMY6AQGYczlAygHOYYSFyZoUwmlL89s 4tIDJ7r4u0zc7pHvJkWtW9e2/+mEH9MpNVbNP/SfibM6mv/cyQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFN9LsLVtJ6CvhvCqhlrYTKtfYMdaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 OTA1ZDJjZS1iZDAyLTQ4ZWYtYmJlZS05Y2QzYjI2ZmNmYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzU5MDVkMmNlLWJkMDItNDhlZi1i YmVlLTljZDNiMjZmY2ZiZS81OTA1ZDJjZS1iZDAyLTQ4ZWYtYmJlZS05Y2QzYjI2 ZmNmYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIACIgAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDALS9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAJnuToAsX9hpkRndBByB9WOqJVligM8izUobgZNmS3o1 Q9uRBfP/5DIxVQXdj4zCI1rAadqSViiH0354FwqFHGraiH9Nh3uj3J7BSiva00y9 dJSvzpHZSprBSDfyOHjCfRsu5gjW5tHKPfhIzaYtPOndfYO3kZ4mFCC3TPK0UsC0 2kdHx8IL9ihrTzq5Ai5lRHCRkeutV7gjcHWY7cST493MWybNPVjZfm5NXijHsyuM lctAgO9UkaNCNCRjlOZwtgYrSCnJfQDxrsxgQ1P9mud7jugDZUuKSgHb79fFp4VZ qwku/wklmi/Q5dZUpqSUf+2IalHjgIrz2q/iqstXn1U= -----END CERTIFICATE-----Generated at Sat May 11 18:14:41 2024 by rpki-client on console-fra.rpki-client.org