$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer File: 8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer (raw, json) Hash identifier: flBjEYQn4nZse9ouKCTgVLY6X2Kocv4T7DvLDcJU9Qs= Subject key identifier: 42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858425F09B3FC5849E0CB5E7CA400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Jun 2023 16:26:36 +0000 Certificate not after: Tue 30 Sep 2025 16:26:36 +0000 Subordinate resources: AS: 400728 IP: 104.255.40.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:5f:09:b3:fc:58:49:e0:cb:5e:7c:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 28 16:26:36 2023 GMT Not After : Sep 30 16:26:36 2025 GMT Subject: CN=8847f57c-ba5f-4d96-baa3-c4a4de39d5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:fc:5e:f5:6e:cb:8a:dd:71:c6:51:fd:d8: 88:85:fa:c5:fb:b3:4d:8d:8a:60:04:e7:f1:20:85: fa:e2:43:4f:f0:89:a5:38:cd:ce:a3:64:0d:8c:06: 9d:6b:07:73:2d:92:d3:87:bd:64:8c:30:1d:97:7e: 04:1f:09:ba:7c:d8:54:99:a5:2f:25:2c:9e:b0:9a: 4d:5f:8a:e2:76:32:c0:8f:1f:fe:a7:cb:c4:dc:d2: 61:a8:d6:43:b1:0f:83:67:1b:31:b1:fc:8b:74:11: 64:d1:c3:fe:22:a3:7c:0f:7b:a7:b8:76:73:0c:28: 36:fb:06:71:1b:f6:fb:ba:f7:95:e0:d2:86:c5:dd: ac:cd:9a:10:cc:68:4b:eb:31:4b:93:80:ef:55:5f: 14:a3:97:11:33:44:4a:f1:17:35:99:90:e9:79:cb: 37:78:e3:83:55:ac:41:a8:8d:d8:ea:30:a9:88:73: 91:a4:ef:db:cd:9e:81:a6:ef:76:7b:0c:67:98:3a: d3:3d:e2:41:02:f3:1b:ca:89:9d:49:66:7f:9a:da: 92:1a:1d:0c:f3:0a:19:84:fe:de:ed:8b:7b:f1:c2: d0:61:7a:38:03:74:c2:f9:10:9a:8f:2d:63:45:b0: da:5d:9b:8d:f5:7a:99:94:e2:1a:ae:7b:d0:72:a3: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 104.255.40.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400728 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d0:5d:ad:6c:29:01:17:79:4c:a1:b2:d3:20:51:b5:02:f2: 85:54:0b:55:59:e7:ed:9d:3b:e5:3a:3b:3e:1e:cb:7c:2a:63: e0:e8:33:4f:15:d0:1d:c7:0f:3f:30:12:26:e4:27:6d:c8:d5: db:bd:91:12:3e:19:81:cc:9a:d5:b9:57:a9:d5:5a:8e:84:54: 20:5a:8d:15:1d:74:7a:70:b6:85:ea:a2:be:f6:ee:1f:2d:5f: 6c:a7:c6:8c:02:65:10:ea:b9:9b:99:fa:8a:ca:7a:84:0c:49: 06:1b:bb:e0:fd:4f:49:98:a3:c7:65:62:ba:a7:8c:04:d5:82: 40:b7:be:28:c3:4e:23:69:28:5d:02:bd:f0:27:23:05:2e:4a: 08:0e:52:a6:ce:fc:94:5c:c0:55:75:3f:0b:30:ce:50:ce:68: a6:4e:e9:f4:c1:44:bc:69:63:b4:df:bc:48:16:ec:8e:6e:63: c0:6f:57:52:72:30:bd:6e:f6:c3:86:15:a7:41:54:35:b4:56: c2:99:ac:90:58:8a:51:88:99:1b:99:4d:b0:3a:7a:05:c5:d0: 61:6c:73:c7:79:da:a2:d0:27:e4:51:df:13:ff:62:fe:d5:fa: 33:0d:67:8e:25:7c:8f:ea:4b:e8:51:4a:9d:bf:f7:78:43:14: 28:ce:11:91 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEJfCbP8WEngy158pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYyODE2MjYzNloXDTI1MDkzMDE2MjYzNlowLzEtMCsGA1UEAxMk ODg0N2Y1N2MtYmE1Zi00ZDk2LWJhYTMtYzRhNGRlMzlkNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0j8XvVuy4rdccZR/diIhfrF+7NNjYpgBOfx IIX64kNP8ImlOM3Oo2QNjAadawdzLZLTh71kjDAdl34EHwm6fNhUmaUvJSyesJpN X4ridjLAjx/+p8vE3NJhqNZDsQ+DZxsxsfyLdBFk0cP+IqN8D3unuHZzDCg2+wZx G/b7uveV4NKGxd2szZoQzGhL6zFLk4DvVV8Uo5cRM0RK8Rc1mZDpecs3eOODVaxB qI3Y6jCpiHORpO/bzZ6Bpu92ewxnmDrTPeJBAvMbyomdSWZ/mtqSGh0M8woZhP7e 7Yt78cLQYXo4A3TC+RCajy1jRbDaXZuN9XqZlOIarnvQcqNJUwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEJnOEeCuUXAozgtxD7HONM12azUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 ODQ3ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0ZGUzOWQ1YTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzg4NDdmNTdjLWJhNWYtNGQ5Ni1i YWEzLWM0YTRkZTM5ZDVhOC84ODQ3ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0ZGUz OWQ1YTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBANo/ygwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh1YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABDQXa1sKQEXeUyhstMgUbUC8oVUC1VZ5+2dO+U6Oz4ey3wq Y+DoM08V0B3HDz8wEibkJ23I1du9kRI+GYHMmtW5V6nVWo6EVCBajRUddHpwtoXq or727h8tX2ynxowCZRDquZuZ+orKeoQMSQYbu+D9T0mYo8dlYrqnjATVgkC3vijD TiNpKF0CvfAnIwUuSggOUqbO/JRcwFV1PwswzlDOaKZO6fTBRLxpY7TfvEgW7I5u Y8BvV1JyML1u9sOGFadBVDW0VsKZrJBYilGImRuZTbA6egXF0GFsc8d52qLQJ+RR 3xP/Yv7V+jMNZ44lfI/qS+hRSp2/93hDFCjOEZE= -----END CERTIFICATE-----Generated at Thu May 9 21:06:18 2024 by rpki-client on console-fra.rpki-client.org