$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer File: e7f210e3-2923-4916-a0dd-8d3cc9158403.cer (raw, json) Hash identifier: ppuHArfjMREPtBca8jeKIgcWsWxliftLczedp84l0Oo= Subject key identifier: BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858451C6EF0BB71E7C0548AE8E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Mar 2024 22:12:14 +0000 Certificate not after: Mon 08 Jun 2026 06:57:25 +0000 Subordinate resources: AS: 394837 IP: 2607:9d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1c:6e:f0:bb:71:e7:c0:54:8a:e8:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 5 22:12:14 2024 GMT Not After : Jun 8 06:57:25 2026 GMT Subject: CN=e7f210e3-2923-4916-a0dd-8d3cc9158403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b7:2d:0a:59:ad:8d:dc:2f:c2:46:9b:39:28: 41:8c:f5:22:0b:7b:ee:a8:5d:85:a5:92:cd:b6:cd: 89:53:e9:70:2c:fc:bb:11:1d:ce:40:68:0d:66:15: e7:78:40:22:3f:59:a6:84:e4:96:cf:58:3a:f4:31: d6:4e:31:e8:bb:eb:e5:91:52:f9:7d:5f:43:e6:cf: cb:d7:3f:e0:66:fe:fc:cc:95:67:0f:6d:16:a6:32: 0b:f5:93:62:60:f8:ec:a5:8c:48:40:ae:10:f2:85: 5c:bd:f4:4a:46:c5:b0:ca:fd:6e:df:ef:d6:47:da: c3:f0:04:d5:08:a7:45:aa:3d:d0:a9:d9:1a:00:2f: d7:bd:bc:c2:89:45:df:51:0f:f6:25:df:f4:a0:9d: fb:df:80:c9:ea:73:42:9a:fc:ae:69:16:da:78:9b: 09:d6:83:33:05:c5:86:cd:79:75:7c:9a:50:2d:64: 2f:a5:c0:4a:3b:21:a9:e3:f5:b9:ce:b9:6e:4c:20: af:b3:66:8c:0d:0a:93:23:c4:dc:87:d4:5e:66:ad: ed:c0:77:5d:ef:b2:ca:77:de:86:ac:01:ad:76:1e: 56:aa:c6:36:c5:c1:a8:cd:e4:e7:76:82:3e:97:4e: 52:60:d3:71:e0:bf:76:97:56:76:ca:80:24:72:87: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2607:9d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394837 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d2:77:2d:56:5c:23:61:11:4d:41:8c:73:56:22:85:bd:cb: 84:04:3c:6c:27:4c:fd:14:3e:75:53:d7:90:1c:24:b9:cd:79: f8:95:62:e9:ff:b2:b2:d2:48:92:6e:fb:05:61:56:4b:7a:55: eb:aa:95:6c:00:c6:5a:09:eb:04:64:ba:a4:56:b4:b5:da:ea: 70:fc:4a:c0:48:bb:36:08:70:64:11:3c:9f:74:92:ba:4f:be: b3:30:2a:01:42:3c:5e:e8:bc:d6:96:27:2c:c6:40:5e:8d:fd: d3:24:db:58:16:6b:15:f7:34:f1:4c:73:fa:e3:9e:bd:3f:61: e1:0f:9e:5c:54:51:86:3e:52:17:96:de:56:03:e5:f5:88:ff: 5a:4b:42:bd:5a:aa:34:e0:df:5c:fa:d0:f0:3a:24:61:0d:95: f8:ce:d4:48:5c:39:fc:50:c4:5f:f9:cd:03:bb:05:ab:43:42: 86:97:9a:0a:58:c8:20:c4:26:ed:37:d0:ff:3e:3b:83:91:79: 33:87:eb:87:25:b3:1a:47:09:04:82:81:4b:e1:bf:8d:e2:07: b8:0a:7e:56:cd:21:04:4c:56:91:01:59:77:6c:60:33:5e:b2: 27:20:f3:c5:4c:32:8b:5e:ba:8a:a6:8b:dd:ae:ca:43:d0:f7: c3:ed:87:81 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEUcbvC7cefAVIro5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMwNTIyMTIxNFoXDTI2MDYwODA2NTcyNVowLzEtMCsGA1UEAxMk ZTdmMjEwZTMtMjkyMy00OTE2LWEwZGQtOGQzY2M5MTU4NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7ctClmtjdwvwkabOShBjPUiC3vuqF2FpZLN ts2JU+lwLPy7ER3OQGgNZhXneEAiP1mmhOSWz1g69DHWTjHou+vlkVL5fV9D5s/L 1z/gZv78zJVnD20WpjIL9ZNiYPjspYxIQK4Q8oVcvfRKRsWwyv1u3+/WR9rD8ATV CKdFqj3QqdkaAC/XvbzCiUXfUQ/2Jd/0oJ3734DJ6nNCmvyuaRbaeJsJ1oMzBcWG zXl1fJpQLWQvpcBKOyGp4/W5zrluTCCvs2aMDQqTI8Tch9ReZq3twHdd77LKd96G rAGtdh5WqsY2xcGozeTndoI+l05SYNNx4L92l1Z2yoAkcocvlQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFLtqg/zishJm6f33sa9UUAv5C9j/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l N2YyMTBlMy0yOTIzLTQ5MTYtYTBkZC04ZDNjYzkxNTg0MDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U3ZjIxMGUzLTI5MjMtNDkxNi1h MGRkLThkM2NjOTE1ODQwMy9lN2YyMTBlMy0yOTIzLTQ5MTYtYTBkZC04ZDNjYzkx NTg0MDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB51AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYGVTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBU0nctVlwjYRFNQYxzViKFvcuEBDxsJ0z9FD51U9eQHCS5 zXn4lWLp/7Ky0kiSbvsFYVZLelXrqpVsAMZaCesEZLqkVrS12upw/ErASLs2CHBk ETyfdJK6T76zMCoBQjxe6LzWlicsxkBejf3TJNtYFmsV9zTxTHP64569P2HhD55c VFGGPlIXlt5WA+X1iP9aS0K9Wqo04N9c+tDwOiRhDZX4ztRIXDn8UMRf+c0DuwWr Q0KGl5oKWMggxCbtN9D/PjuDkXkzh+uHJbMaRwkEgoFL4b+N4ge4Cn5WzSEETFaR AVl3bGAzXrInIPPFTDKLXrqKpovdrspD0PfD7YeB -----END CERTIFICATE-----Generated at Sat May 11 18:14:58 2024 by rpki-client on console-fra.rpki-client.org