$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c8ed10e-57ea-44b7-8606-463e89a890f1.cer File: 0c8ed10e-57ea-44b7-8606-463e89a890f1.cer (raw, json) Hash identifier: jwsJ2+XH7SsqzxMBKi9oHtYiWitn6xhY7bKXUFIuA54= Subject key identifier: 53:95:24:B2:F2:B8:8A:04:DE:BA:0E:97:15:56:E9:41:50:43:58:F0 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584278DD857AC15B0A38F0F2C180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c8ed10e-57ea-44b7-8606-463e89a890f1/0c8ed10e-57ea-44b7-8606-463e89a890f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c8ed10e-57ea-44b7-8606-463e89a890f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Jul 2023 22:28:36 +0000 Certificate not after: Thu 09 Oct 2025 22:28:36 +0000 Subordinate resources: AS: 55170 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:78:dd:85:7a:c1:5b:0a:38:f0:f2:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 7 22:28:36 2023 GMT Not After : Oct 9 22:28:36 2025 GMT Subject: CN=0c8ed10e-57ea-44b7-8606-463e89a890f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:87:e8:49:92:5e:65:86:73:7e:35:d3:36: 05:a6:f0:eb:ce:52:41:42:d1:7f:ba:6a:6a:32:83: 50:09:62:d8:a9:54:da:d9:7a:d0:8a:80:04:f3:fc: 53:54:30:2e:f6:0b:49:4c:b3:42:c4:d1:28:32:3b: 94:7d:2c:87:e0:73:15:7a:29:26:d6:bc:d1:f0:66: 5c:19:bf:96:ba:36:8f:b4:08:e8:a6:76:f9:3f:71: a3:60:17:70:c3:b9:3b:74:13:a6:b6:50:ad:0c:92: c9:bb:26:0e:69:42:40:9e:08:6e:e2:68:8a:e8:8b: 13:ef:6c:ec:27:3f:d6:15:ec:b5:59:5e:33:29:7c: 1c:f4:b0:f7:c2:fc:ae:65:c6:bb:03:d2:88:a7:1d: ec:76:bb:2e:85:7a:fb:fc:72:5e:b5:a7:85:9e:b5: 54:2e:84:ac:40:ef:9d:45:d3:80:2a:d2:37:6e:0a: e7:59:b6:9b:3f:a0:f6:42:f0:5b:5a:85:7b:7e:01: 12:7a:2e:8c:b1:0e:e3:49:15:00:62:80:99:4c:da: 50:35:15:ae:97:93:0d:02:83:8f:82:96:fa:7a:28: 59:b0:d9:9f:6c:04:95:68:d6:57:4c:71:2b:78:46: 49:f2:c9:ea:44:2b:af:3d:73:7a:f5:41:c0:5f:e5: 93:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:95:24:B2:F2:B8:8A:04:DE:BA:0E:97:15:56:E9:41:50:43:58:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c8ed10e-57ea-44b7-8606-463e89a890f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0c8ed10e-57ea-44b7-8606-463e89a890f1/0c8ed10e-57ea-44b7-8606-463e89a890f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 55170 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4a:cb:6c:2b:d3:d8:53:c9:34:f7:8d:2b:9e:81:18:af:ba: 80:8a:3a:ff:58:de:c9:6f:b5:46:9c:74:af:f6:a0:9d:1a:84: 32:d6:65:c2:38:81:c8:6e:d4:b3:d9:15:44:ee:88:a2:49:60: 50:c4:74:0c:ea:18:ff:5e:9c:c8:38:c0:25:49:d5:6a:c7:ad: 03:cf:03:e0:c1:21:db:0d:3b:0d:03:b0:90:2c:81:ce:5d:f8: 07:1d:d7:33:70:2d:c5:f1:a9:93:c3:6d:3a:34:6f:1d:ac:c8: d9:65:0f:17:e3:97:1b:64:bc:7d:21:53:b5:64:26:21:a4:31: d9:64:9f:91:8f:13:f8:eb:f7:73:16:e7:0c:2e:28:b1:87:db: 0d:03:8b:79:af:56:cc:00:41:2f:1f:21:05:59:e4:13:7e:c0: fd:fd:d2:83:74:2d:7f:1e:a4:e4:f7:60:78:9e:23:73:b1:6f: b8:fc:83:01:0f:12:fc:1e:34:17:b1:21:dd:51:90:e1:4e:62: c0:7b:f6:e3:55:c7:e1:bf:ca:df:35:d2:e5:56:68:e5:2c:c9: cd:7e:47:2d:64:35:c8:96:06:96:72:34:b2:94:b0:be:97:6c: 89:11:0e:8f:ab:ce:29:0a:df:88:0f:48:1b:69:ee:1a:24:6b: 43:77:95:ed -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEJ43YV6wVsKOPDywYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcwNzIyMjgzNloXDTI1MTAwOTIyMjgzNlowLzEtMCsGA1UEAxMk MGM4ZWQxMGUtNTdlYS00NGI3LTg2MDYtNDYzZTg5YTg5MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4mH6EmSXmWGc3410zYFpvDrzlJBQtF/umpq MoNQCWLYqVTa2XrQioAE8/xTVDAu9gtJTLNCxNEoMjuUfSyH4HMVeikm1rzR8GZc Gb+WujaPtAjopnb5P3GjYBdww7k7dBOmtlCtDJLJuyYOaUJAnghu4miK6IsT72zs Jz/WFey1WV4zKXwc9LD3wvyuZca7A9KIpx3sdrsuhXr7/HJetaeFnrVULoSsQO+d RdOAKtI3bgrnWbabP6D2QvBbWoV7fgESei6MsQ7jSRUAYoCZTNpQNRWul5MNAoOP gpb6eihZsNmfbASVaNZXTHEreEZJ8snqRCuvPXN69UHAX+WTEQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFFOVJLLyuIoE3roOlxVW6UFQQ1jwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w YzhlZDEwZS01N2VhLTQ0YjctODYwNi00NjNlODlhODkwZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzBjOGVkMTBlLTU3ZWEtNDRiNy04 NjA2LTQ2M2U4OWE4OTBmMS8wYzhlZDEwZS01N2VhLTQ0YjctODYwNi00NjNlODlh ODkwZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANeCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADpKy2wr09hTyTT3jSuegRivuoCK Ov9Y3slvtUacdK/2oJ0ahDLWZcI4gchu1LPZFUTuiKJJYFDEdAzqGP9enMg4wCVJ 1WrHrQPPA+DBIdsNOw0DsJAsgc5d+Acd1zNwLcXxqZPDbTo0bx2syNllDxfjlxtk vH0hU7VkJiGkMdlkn5GPE/jr93MW5wwuKLGH2w0Di3mvVswAQS8fIQVZ5BN+wP39 0oN0LX8epOT3YHieI3Oxb7j8gwEPEvweNBexId1RkOFOYsB79uNVx+G/yt810uVW aOUsyc1+Ry1kNciWBpZyNLKUsL6XbIkRDo+rzikK34gPSBtp7hoka0N3le0= -----END CERTIFICATE-----Generated at Thu May 9 20:34:08 2024 by rpki-client on console-ams.rpki-client.org