$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3.cer File: 48892da2-72b4-4796-951e-24c5f6f972b3.cer (raw, json) Hash identifier: kxg2XRZByaDqdP9R2Q1LiE+i315093wUDLVYzXywYkM= Subject key identifier: 78:E3:AA:4A:F8:31:3B:A9:58:7D:1F:E1:1F:20:C6:98:09:6F:E6:2A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842CE83C357167062D4EA717F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3/48892da2-72b4-4796-951e-24c5f6f972b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:47:16 +0000 Certificate not after: Sun 09 Nov 2025 15:47:16 +0000 Subordinate resources: AS: 62989 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:83:c3:57:16:70:62:d4:ea:71:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 7 14:47:16 2023 GMT Not After : Nov 9 15:47:16 2025 GMT Subject: CN=48892da2-72b4-4796-951e-24c5f6f972b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:c4:44:34:41:d2:24:3b:dc:ba:c4:7a:a7: bb:de:f3:b5:b8:00:8c:fb:cc:35:ba:f3:76:d8:e0: fb:5f:18:55:3f:a3:7d:75:84:65:5c:9f:33:fa:20: 81:4f:b2:a3:d0:5d:6a:05:02:b1:0a:14:37:6c:5a: b3:0d:59:e1:46:cf:15:a0:31:fd:bd:90:ef:a3:2d: d4:f3:19:1c:63:f9:7d:20:76:78:54:13:8b:29:7f: d5:e8:17:63:b8:ff:3f:11:c5:51:99:6f:a3:e4:06: 52:5d:7b:6b:3b:39:e5:8f:8b:33:a5:07:79:3c:63: 89:b5:e4:53:f8:8b:00:ce:e2:97:4b:3a:a3:db:73: cb:9b:91:f8:16:89:91:30:2e:1d:67:35:9e:77:d2: bd:9f:54:2f:63:11:d7:e2:a2:e9:00:2e:f1:ed:53: 4f:94:de:13:dd:c3:84:e1:78:6f:8c:a5:b4:07:83: b0:16:b2:94:cc:09:41:ec:f1:99:ad:7a:26:32:9b: 31:83:18:78:f2:30:df:f5:d0:86:c6:62:48:5f:a9: f3:a1:c1:30:58:d7:4e:2d:19:7b:2b:9e:eb:4f:40: 0a:2c:2b:63:35:41:67:48:f0:1f:f8:b1:1c:62:a0: 0f:cd:dc:88:76:20:5e:0d:d3:54:a5:2b:c5:52:7e: d6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E3:AA:4A:F8:31:3B:A9:58:7D:1F:E1:1F:20:C6:98:09:6F:E6:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3/48892da2-72b4-4796-951e-24c5f6f972b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 62989 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:21:42:00:31:7b:b3:f2:d2:d9:77:f3:48:b5:b6:9b:a7:7d: 32:03:8b:68:b1:ba:a1:93:29:38:b1:fd:03:fe:16:cc:02:6a: 41:8f:7d:b3:5d:37:ae:ae:08:85:92:a7:06:8b:17:b0:4b:83: d5:df:7c:34:49:a8:59:49:e3:9d:31:8c:b6:8b:1f:6d:ec:ed: 3e:54:3b:1e:c7:34:40:2a:d3:2b:e3:ac:1b:90:eb:86:05:02: d2:a5:08:1b:a0:ea:1b:da:5d:b0:5b:b9:4a:a3:07:64:9e:e7: 86:2d:49:eb:26:af:14:ac:49:4c:1b:74:71:d2:5c:43:b8:46: 57:90:4a:1a:1d:98:f0:3f:e9:25:1b:31:07:45:05:a0:54:34: f7:8a:69:c3:0b:65:7f:84:c0:6c:32:a4:f0:74:72:21:b3:c4: 79:6b:4f:2a:a1:06:79:59:15:16:64:f1:b9:7c:ae:1e:2a:e3: 08:df:13:a3:b8:1e:84:17:10:f1:f8:64:10:c1:2e:c2:1a:78: bd:46:a8:9d:ce:aa:ad:08:67:d0:ae:5f:cf:c7:bd:cf:58:92: 6e:eb:ec:cc:13:9e:07:38:32:ea:e5:26:87:1a:33:bf:48:f3: 6b:b3:e1:cd:27:64:98:b2:90:70:ef:51:00:3b:62:49:07:80: 12:4f:c6:89 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWELOg8NXFnBi1Opxf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwNzE0NDcxNloXDTI1MTEwOTE1NDcxNlowLzEtMCsGA1UEAxMk NDg4OTJkYTItNzJiNC00Nzk2LTk1MWUtMjRjNWY2Zjk3MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0DERDRB0iQ73LrEeqe73vO1uACM+8w1uvN2 2OD7XxhVP6N9dYRlXJ8z+iCBT7Kj0F1qBQKxChQ3bFqzDVnhRs8VoDH9vZDvoy3U 8xkcY/l9IHZ4VBOLKX/V6BdjuP8/EcVRmW+j5AZSXXtrOznlj4szpQd5PGOJteRT +IsAzuKXSzqj23PLm5H4FomRMC4dZzWed9K9n1QvYxHX4qLpAC7x7VNPlN4T3cOE 4XhvjKW0B4OwFrKUzAlB7PGZrXomMpsxgxh48jDf9dCGxmJIX6nzocEwWNdOLRl7 K57rT0AKLCtjNUFnSPAf+LEcYqAPzdyIdiBeDdNUpSvFUn7WkwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFHjjqkr4MTupWH0f4R8gxpgJb+YqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 ODg5MmRhMi03MmI0LTQ3OTYtOTUxZS0yNGM1ZjZmOTcyYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQ4ODkyZGEyLTcyYjQtNDc5Ni05 NTFlLTI0YzVmNmY5NzJiMy80ODg5MmRhMi03MmI0LTQ3OTYtOTUxZS0yNGM1ZjZm OTcyYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPYNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIwhQgAxe7Py0tl380i1tpunfTID i2ixuqGTKTix/QP+FswCakGPfbNdN66uCIWSpwaLF7BLg9XffDRJqFlJ450xjLaL H23s7T5UOx7HNEAq0yvjrBuQ64YFAtKlCBug6hvaXbBbuUqjB2Se54YtSesmrxSs SUwbdHHSXEO4RleQShodmPA/6SUbMQdFBaBUNPeKacMLZX+EwGwypPB0ciGzxHlr TyqhBnlZFRZk8bl8rh4q4wjfE6O4HoQXEPH4ZBDBLsIaeL1GqJ3Oqq0IZ9CuX8/H vc9Ykm7r7MwTngc4MurlJocaM79I82uz4c0nZJiykHDvUQA7YkkHgBJPxok= -----END CERTIFICATE-----Generated at Thu May 9 20:34:16 2024 by rpki-client on console-ams.rpki-client.org