$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95c3d028-262d-4fdf-bb2e-6c60f3dadebc.cer File: 95c3d028-262d-4fdf-bb2e-6c60f3dadebc.cer (raw, json) Hash identifier: 19YNrh/95a0PuQx7ZHkDMkb+RcU9FsmG8QqO9mWgDkw= Subject key identifier: 68:09:FF:84:74:BF:3E:B6:0E:2D:F1:AB:09:A2:8E:E4:4F:70:A8:57 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285842950C31178B2A4498E4F1B980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95c3d028-262d-4fdf-bb2e-6c60f3dadebc/95c3d028-262d-4fdf-bb2e-6c60f3dadebc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95c3d028-262d-4fdf-bb2e-6c60f3dadebc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Jul 2023 00:45:16 +0000 Certificate not after: Mon 20 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 46223 AS: 396352 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:95:0c:31:17:8b:2a:44:98:e4:f1:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 18 00:45:16 2023 GMT Not After : Oct 20 00:45:16 2025 GMT Subject: CN=95c3d028-262d-4fdf-bb2e-6c60f3dadebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:ac:5b:76:40:5f:5f:d5:17:ac:80:2a:54: ab:1a:1b:be:a4:0d:dd:e1:d2:68:f6:3c:19:2e:dd: 29:9f:a3:6d:5b:10:02:73:6f:03:12:1e:46:4d:09: 4e:47:bf:fd:9f:f7:de:d4:50:1f:39:4d:5f:d9:6d: b9:e4:be:27:5f:1e:b6:c4:e4:7f:4b:e0:a2:9b:7f: 63:8b:4c:c9:90:02:d7:9c:33:f4:83:6d:18:ff:ee: 0f:c6:85:a1:e4:29:07:93:07:74:4a:e6:d3:29:93: 17:39:2b:f5:64:a6:07:ad:bf:3c:d6:9d:1c:21:5f: 8f:f7:78:81:fa:4c:1e:53:79:de:4d:49:35:d9:1b: 5f:dc:ec:87:09:6e:06:e0:cf:42:38:f0:9a:0f:2a: d9:9f:d9:c6:13:b5:73:20:90:85:a5:7f:54:7e:d8: 47:94:40:08:3f:ea:f5:79:f0:42:f4:b6:58:eb:d3: b4:cc:f3:4a:c8:aa:cc:06:1b:2d:93:54:c9:52:25: 12:ee:6d:c2:f3:e8:1d:0a:6a:4d:26:98:9a:c6:63: 64:3d:37:c1:2b:ac:0e:14:9a:77:00:5d:bc:80:58: c0:d0:0e:66:a7:8e:f8:de:f3:1d:ba:af:1e:a7:ea: eb:b2:bf:f7:f5:19:07:e0:b6:d3:78:ec:ff:fd:94: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:09:FF:84:74:BF:3E:B6:0E:2D:F1:AB:09:A2:8E:E4:4F:70:A8:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95c3d028-262d-4fdf-bb2e-6c60f3dadebc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95c3d028-262d-4fdf-bb2e-6c60f3dadebc/95c3d028-262d-4fdf-bb2e-6c60f3dadebc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 46223 396352 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b2:4d:20:c3:0c:f0:25:3c:a5:b1:a4:f4:3e:de:e2:5d:6b: 7e:98:33:4e:fd:f5:b4:49:8a:f5:df:f6:f0:78:13:80:df:97: 04:85:d3:76:a4:90:54:50:d8:21:4b:ff:7a:e9:c9:03:d4:d0: ff:5a:be:1b:3c:66:13:ee:c9:0b:23:25:c2:78:df:c7:87:9d: 62:e7:45:bf:30:c6:6b:c2:84:44:42:5c:0d:3d:06:c9:6a:0f: af:1d:88:9e:52:17:ed:83:02:c8:ba:d8:bd:72:a5:cb:47:1d: 70:40:87:9d:78:03:a5:bf:8d:f8:5c:f4:11:65:db:b6:55:81: 1b:1f:b6:d7:fd:04:9a:bb:88:cf:6c:1b:ab:6a:ad:92:45:05: 78:ea:43:64:84:34:22:01:07:48:3d:59:36:b2:31:69:b6:86: b7:85:4e:b1:92:2f:c5:06:fd:a9:f9:52:8d:74:b9:e9:af:c4: ab:85:44:8f:f6:17:dc:bf:87:51:ce:72:5b:a8:e3:ed:06:5d: bc:fc:01:45:e4:56:3e:41:88:45:ff:f4:22:0c:a0:e1:b0:c9: 74:1c:07:b2:b4:72:a7:d8:50:d3:d1:71:c8:f8:dc:f8:eb:6a: a2:4c:dc:b5:3d:f4:fa:72:93:50:54:7d:9a:e1:36:de:41:35: c1:7b:84:9d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEKVDDEXiypEmOTxuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDcxODAwNDUxNloXDTI1MTAyMDAwNDUxNlowLzEtMCsGA1UEAxMk OTVjM2QwMjgtMjYyZC00ZmRmLWJiMmUtNmM2MGYzZGFkZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluisW3ZAX1/VF6yAKlSrGhu+pA3d4dJo9jwZ Lt0pn6NtWxACc28DEh5GTQlOR7/9n/fe1FAfOU1f2W255L4nXx62xOR/S+Cim39j i0zJkALXnDP0g20Y/+4PxoWh5CkHkwd0SubTKZMXOSv1ZKYHrb881p0cIV+P93iB +kweU3neTUk12Rtf3OyHCW4G4M9COPCaDyrZn9nGE7VzIJCFpX9UfthHlEAIP+r1 efBC9LZY69O0zPNKyKrMBhstk1TJUiUS7m3C8+gdCmpNJpiaxmNkPTfBK6wOFJp3 AF28gFjA0A5mp4743vMduq8ep+rrsr/39RkH4LbTeOz//ZQBuQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGgJ/4R0vz62Di3xqwmijuRPcKhXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 NWMzZDAyOC0yNjJkLTRmZGYtYmIyZS02YzYwZjNkYWRlYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk1YzNkMDI4LTI2MmQtNGZkZi1i YjJlLTZjNjBmM2RhZGViYy85NWMzZDAyOC0yNjJkLTRmZGYtYmIyZS02YzYwZjNk YWRlYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQgBAf8EEDAOoAwwCgIDALSPAgMGDEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAibJNIMMM8CU8pbGk9D7e 4l1rfpgzTv31tEmK9d/28HgTgN+XBIXTdqSQVFDYIUv/eunJA9TQ/1q+GzxmE+7J CyMlwnjfx4edYudFvzDGa8KEREJcDT0GyWoPrx2InlIX7YMCyLrYvXKly0cdcECH nXgDpb+N+Fz0EWXbtlWBGx+21/0EmruIz2wbq2qtkkUFeOpDZIQ0IgEHSD1ZNrIx abaGt4VOsZIvxQb9qflSjXS56a/Eq4VEj/YX3L+HUc5yW6jj7QZdvPwBReRWPkGI Rf/0Igyg4bDJdBwHsrRyp9hQ09FxyPjc+OtqokzctT30+nKTUFR9muE23kE1wXuE nQ== -----END CERTIFICATE-----Generated at Fri Mar 29 02:51:43 2024 by rpki-client on console-fra.rpki-client.org