$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531.cer File: 855273ae-c64b-4ba7-b8f8-0ba6b82fe531.cer (raw, json) Hash identifier: SLf0Ld8LFpsw2tuTvqC/9NbynzgTJZEVof0+kcd63fk= Subject key identifier: DA:FA:4D:64:2A:51:D5:A8:BD:56:99:D0:AE:B1:FE:4A:7D:C7:D0:92 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285844851A9798E477A4FC6221F780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/855273ae-c64b-4ba7-b8f8-0ba6b82fe531.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Jan 2024 17:15:14 +0000 Certificate not after: Thu 18 Sep 2025 20:58:20 +0000 Subordinate resources: AS: 400922 IP: 2602:2f3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:85:1a:97:98:e4:77:a4:fc:62:21:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 11 17:15:14 2024 GMT Not After : Sep 18 20:58:20 2025 GMT Subject: CN=855273ae-c64b-4ba7-b8f8-0ba6b82fe531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e2:0c:18:6a:55:8c:52:83:32:b7:7c:f0:32: 33:c5:2b:c0:19:d6:92:a6:f2:d8:a0:12:55:e9:e1: b9:d2:30:6b:61:d8:6b:b7:af:a1:e2:2b:42:76:07: 5d:67:6c:2d:18:26:88:6e:fc:9a:26:a4:f5:58:4d: 19:73:dc:31:6e:62:35:3d:ca:ab:d6:c1:25:55:10: 78:01:f9:3f:bf:4a:de:cc:78:54:42:a0:c7:ad:74: 0c:20:04:a0:d7:37:e6:2d:ec:fd:04:c7:26:d1:c6: bd:59:5e:cd:a6:35:2d:1a:76:6f:02:6b:8f:cf:ae: 03:c1:d0:0d:ac:4c:83:44:8d:38:c5:a4:8f:39:09: 0a:70:c1:35:6e:9c:3d:51:56:66:0e:9a:d5:66:e8: f9:5c:b9:26:73:73:da:12:99:ad:25:ff:a9:65:11: 37:ce:ca:d3:f2:39:ed:52:09:56:a6:7c:bd:8f:a0: d8:16:4f:af:23:f4:8e:ac:1b:70:f7:91:6b:f0:8f: bc:50:85:35:0e:b6:74:23:20:09:50:97:a0:55:97: 5e:79:5b:8d:2d:f0:b1:7f:b4:8b:ba:50:90:e3:c8: e5:d1:56:60:c5:82:e2:05:50:20:60:dd:55:04:fc: af:9a:e9:48:21:71:44:10:07:21:e0:17:02:62:71: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FA:4D:64:2A:51:D5:A8:BD:56:99:D0:AE:B1:FE:4A:7D:C7:D0:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/855273ae-c64b-4ba7-b8f8-0ba6b82fe531/855273ae-c64b-4ba7-b8f8-0ba6b82fe531.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2602:2f3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400922 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:23:92:f8:2e:24:92:c8:99:1f:2a:82:7d:56:a5:e9:c6:a8: 32:f2:be:df:77:be:ea:77:1e:3e:16:54:34:43:59:06:31:df: c1:d6:0e:81:f2:86:c3:71:8a:3f:b7:98:71:38:d8:f7:d8:5a: 77:87:3b:fa:d2:cb:dc:e5:91:aa:70:08:70:39:8d:14:fb:52: a6:82:f5:ae:97:24:e1:f7:28:54:b0:83:5d:33:ff:3a:d0:09: c0:44:6c:d0:95:5a:35:16:93:ad:26:e8:bd:bb:28:65:ac:a6: 16:16:6d:8e:ba:8c:f3:6d:a7:43:f9:92:f5:76:4c:d5:27:bf: 8b:63:04:00:b7:5f:db:58:c9:b4:76:cd:22:1e:3a:93:20:eb: 3d:2a:6f:a1:02:ee:27:63:a4:00:9a:42:2f:38:e1:f5:cb:ca: 3a:47:1f:ff:33:2c:27:31:40:19:10:90:d8:89:f4:e6:5f:af: b0:3c:ed:cb:43:c5:76:32:82:bb:b3:0d:77:29:c2:07:f2:d5: cd:27:bb:11:1c:d3:1f:42:a7:23:9d:7f:1c:08:1f:b3:82:80: 5c:0a:1a:3b:ec:14:54:2f:e9:8d:85:af:ac:81:47:d2:21:40: 31:36:98:98:fb:30:3c:5f:63:e9:80:d8:f1:49:3d:3a:45:7f: fe:60:02:6d -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWESFGpeY5Hek/GIh94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDExMTE3MTUxNFoXDTI1MDkxODIwNTgyMFowLzEtMCsGA1UEAxMk ODU1MjczYWUtYzY0Yi00YmE3LWI4ZjgtMGJhNmI4MmZlNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eIMGGpVjFKDMrd88DIzxSvAGdaSpvLYoBJV 6eG50jBrYdhrt6+h4itCdgddZ2wtGCaIbvyaJqT1WE0Zc9wxbmI1Pcqr1sElVRB4 Afk/v0rezHhUQqDHrXQMIASg1zfmLez9BMcm0ca9WV7NpjUtGnZvAmuPz64DwdAN rEyDRI04xaSPOQkKcME1bpw9UVZmDprVZuj5XLkmc3PaEpmtJf+pZRE3zsrT8jnt UglWpny9j6DYFk+vI/SOrBtw95Fr8I+8UIU1DrZ0IyAJUJegVZdeeVuNLfCxf7SL ulCQ48jl0VZgxYLiBVAgYN1VBPyvmulIIXFEEAch4BcCYnFvpQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFNr6TWQqUdWovVaZ0K6x/kp9x9CSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 NTUyNzNhZS1jNjRiLTRiYTctYjhmOC0wYmE2YjgyZmU1MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzg1NTI3M2FlLWM2NGItNGJhNy1i OGY4LTBiYTZiODJmZTUzMS84NTUyNzNhZS1jNjRiLTRiYTctYjhmOC0wYmE2Yjgy ZmU1MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAgLzADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGHhowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFiOS+C4kksiZHyqCfVal6caoMvK+33e+6ncePhZUNENZ BjHfwdYOgfKGw3GKP7eYcTjY99had4c7+tLL3OWRqnAIcDmNFPtSpoL1rpck4fco VLCDXTP/OtAJwERs0JVaNRaTrSbovbsoZaymFhZtjrqM822nQ/mS9XZM1Se/i2ME ALdf21jJtHbNIh46kyDrPSpvoQLuJ2OkAJpCLzjh9cvKOkcf/zMsJzFAGRCQ2In0 5l+vsDzty0PFdjKCu7MNdynCB/LVzSe7ERzTH0KnI51/HAgfs4KAXAoaO+wUVC/p jYWvrIFH0iFAMTaYmPswPF9j6YDY8Uk9OkV//mACbQ== -----END CERTIFICATE-----Generated at Fri May 10 14:28:33 2024 by rpki-client on console-fra.rpki-client.org