$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer File: f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer (raw, json) Hash identifier: BU28OZ+MCnThVsuiVXfH4Dx+SqRXhWSOsBtXIkFNL7Y= Subject key identifier: 5C:63:42:D4:AD:8B:F0:98:04:F4:2E:A5:4E:95:92:69:38:17:53:39 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858453CB02050DE013FDB9F94EF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Mar 2024 11:29:27 +0000 Certificate not after: Sat 20 Jun 2026 11:29:27 +0000 Subordinate resources: AS: 27498 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3c:b0:20:50:de:01:3f:db:9f:94:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 17 11:29:27 2024 GMT Not After : Jun 20 11:29:27 2026 GMT Subject: CN=f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:cd:95:a2:52:89:dc:ac:8a:57:30:8a:b4: 32:5f:17:4b:13:06:f8:ee:66:ed:d6:b9:f7:12:cf: f5:f6:e5:a7:4f:cf:f0:46:b2:df:81:62:fc:a0:40: e5:3d:ce:47:a1:99:e9:aa:dd:ac:91:c6:6c:e8:65: 90:86:2d:37:91:63:98:84:68:96:30:04:91:c1:94: 1a:af:43:63:9f:1e:39:7e:26:b8:fe:49:61:95:e2: 5d:e9:6b:3d:f3:05:f3:d4:6b:8a:98:58:3d:4b:70: 04:11:c7:fd:77:46:07:cd:a4:58:7f:64:0e:3e:45: de:29:0f:4e:6b:1e:be:61:d9:bc:c5:11:4e:98:87: 55:26:2b:0d:99:11:e1:de:3d:be:50:c1:a7:31:0c: 23:7d:98:69:f6:ca:03:07:ca:ed:c7:3e:9b:a9:7c: ad:b5:06:ea:33:1b:8f:1e:16:9c:c1:f0:f4:eb:3f: 4e:80:0b:c9:07:26:e9:f4:a2:3a:7e:ab:c3:ae:c9: 81:62:97:43:f0:7f:bc:1e:7a:9b:40:ba:21:98:4a: 39:c7:94:bb:81:a7:e2:56:c6:7c:6e:6c:c4:e1:34: d9:27:9e:15:e7:4c:1c:c8:40:28:39:65:93:0f:d4: da:b0:73:e8:b4:01:58:9e:61:c3:ae:41:71:96:7e: 3a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:42:D4:AD:8B:F0:98:04:F4:2E:A5:4E:95:92:69:38:17:53:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 27498 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:10:fb:9e:f0:b8:d4:a6:a1:48:2f:52:a4:2c:90:c2:44:d4: 66:45:53:df:0f:98:07:30:a9:a4:b7:89:6c:ee:a0:26:d6:57: c6:4e:91:46:7e:7a:0b:a2:3f:2c:cf:cc:ef:1a:a6:eb:9f:51: bc:c8:57:8b:33:df:f0:24:f3:0a:e2:a3:9d:17:8d:70:d5:ba: da:9c:c9:77:4f:8e:bf:7c:35:f2:07:3b:24:f8:25:62:ec:5b: 83:16:9b:54:ac:fe:73:37:f4:ca:d9:19:44:31:9a:ee:b5:02: 90:c1:a5:ee:1c:34:aa:c8:ac:10:36:97:be:0f:e8:44:c0:2e: c1:6e:87:05:11:75:fa:e0:5f:d4:ab:6b:7b:5a:d6:17:19:f1: 22:36:9c:d4:a9:01:6e:fd:89:42:7c:b2:5b:f2:6c:60:70:7d: 83:d1:ca:95:31:a7:06:27:89:03:3f:70:82:3c:62:9d:63:d4: 05:bb:8a:5d:35:f9:50:d0:d3:36:5c:2a:ed:d0:90:3b:8e:0b: 67:de:6f:9b:58:04:80:01:4a:3f:43:f4:0a:46:3a:c3:84:6e: 37:05:76:c4:6d:e9:91:f3:fd:03:73:f9:b2:2b:90:7a:f9:64: 04:ae:ff:13:e2:4b:00:44:c2:42:a2:c4:30:09:62:c0:91:40: b7:d7:7f:1c -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEU8sCBQ3gE/25+U7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMxNzExMjkyN1oXDTI2MDYyMDExMjkyN1owLzEtMCsGA1UEAxMk ZjBjZjk4NmEtMmVjOS00YWEyLTllNjEtNDNhMGVmYzRmMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigfNlaJSidysilcwirQyXxdLEwb47mbt1rn3 Es/19uWnT8/wRrLfgWL8oEDlPc5HoZnpqt2skcZs6GWQhi03kWOYhGiWMASRwZQa r0Njnx45fia4/klhleJd6Ws98wXz1GuKmFg9S3AEEcf9d0YHzaRYf2QOPkXeKQ9O ax6+Ydm8xRFOmIdVJisNmRHh3j2+UMGnMQwjfZhp9soDB8rtxz6bqXyttQbqMxuP HhacwfD06z9OgAvJBybp9KI6fqvDrsmBYpdD8H+8HnqbQLohmEo5x5S7gafiVsZ8 bmzE4TTZJ54V50wcyEAoOWWTD9TasHPotAFYnmHDrkFxln46vwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFFxjQtSti/CYBPQupU6Vkmk4F1M5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m MGNmOTg2YS0yZWM5LTRhYTItOWU2MS00M2EwZWZjNGYyZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2YwY2Y5ODZhLTJlYzktNGFhMi05 ZTYxLTQzYTBlZmM0ZjJlYS9mMGNmOTg2YS0yZWM5LTRhYTItOWU2MS00M2EwZWZj NGYyZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICa2owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFBD7nvC41KahSC9SpCyQwkTUZkVT 3w+YBzCppLeJbO6gJtZXxk6RRn56C6I/LM/M7xqm659RvMhXizPf8CTzCuKjnReN cNW62pzJd0+Ov3w18gc7JPglYuxbgxabVKz+czf0ytkZRDGa7rUCkMGl7hw0qsis EDaXvg/oRMAuwW6HBRF1+uBf1Ktre1rWFxnxIjac1KkBbv2JQnyyW/JsYHB9g9HK lTGnBieJAz9wgjxinWPUBbuKXTX5UNDTNlwq7dCQO44LZ95vm1gEgAFKP0P0CkY6 w4RuNwV2xG3pkfP9A3P5siuQevlkBK7/E+JLAETCQqLEMAliwJFAt9d/HA== -----END CERTIFICATE-----Generated at Sat May 11 17:57:35 2024 by rpki-client on console-ams.rpki-client.org