$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9.cer File: cac7de8c-1961-4d0f-865e-4790965b85b9.cer (raw, json) Hash identifier: WbgZXjsgs6afjC2NKFJtBegw3hUkNt36URo2cdAeQjQ= Subject key identifier: 42:C0:5B:AA:F1:14:9E:4A:E1:F1:44:0A:F3:38:7B:DA:CF:03:67:86 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847C76D0E4E11291234D098C8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Nov 2024 13:45:32 +0000 Certificate not after: Mon 08 Feb 2027 13:45:32 +0000 Subordinate resources: AS: 13741 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c7:6d:0e:4e:11:29:12:34:d0:98:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 5 13:45:32 2024 GMT Not After : Feb 8 13:45:32 2027 GMT Subject: CN=cac7de8c-1961-4d0f-865e-4790965b85b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:42:55:09:43:8d:a6:76:85:d0:94:f6:e4: fc:b7:6d:5d:9b:3b:72:fd:45:59:83:ab:f1:0b:8d: c0:c7:e9:58:7e:49:ac:41:7a:d8:c3:96:39:b6:96: 19:e8:fb:a0:c3:42:f7:2f:cd:4e:57:bc:cf:ec:9a: f0:51:6d:ca:9a:78:e3:fa:ea:54:87:2e:7f:0d:dc: 3b:3e:07:68:0f:63:51:04:41:65:18:32:8d:6e:32: 9f:f6:48:96:0e:61:7c:3f:40:ef:96:5f:da:97:62: fa:2f:2d:26:9f:28:a5:0f:2a:76:3e:59:19:06:2a: 76:df:56:42:df:d0:76:15:67:02:6f:50:b5:c9:1c: 99:9f:1d:fd:43:31:ee:47:94:f8:f4:3a:b8:89:eb: ed:ce:33:b6:a0:aa:3e:45:0b:23:7a:31:09:c8:b2: 87:04:f4:d9:b2:9e:82:51:e1:82:8b:7e:3e:80:7d: 27:1c:1a:26:42:f4:2d:70:e3:b6:ce:d4:03:06:86: a5:cb:30:52:6f:61:a8:79:28:93:d0:e6:bb:1c:51: fc:81:72:bf:bc:f3:83:fe:02:2c:1a:3c:c1:6e:7f: 51:95:5f:a0:eb:19:ef:aa:cc:73:70:56:ea:5b:9e: cb:5a:74:af:db:62:ac:e2:a9:9f:4f:ac:df:8b:3b: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C0:5B:AA:F1:14:9E:4A:E1:F1:44:0A:F3:38:7B:DA:CF:03:67:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 13741 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:d2:57:57:e7:27:1d:ef:81:8a:09:bc:29:42:e8:36:5f:0b: 25:30:a9:e0:1f:8a:8f:dd:cc:f2:45:66:b0:09:b5:9e:a9:7b: 5c:e9:4d:d5:eb:cc:17:13:2c:ad:66:c9:32:cf:67:df:b1:08: 0b:1e:81:34:85:a0:e5:d5:30:53:78:6f:99:00:67:66:6d:d2: d6:f9:8c:ad:67:56:85:1b:0a:a0:36:fd:13:75:e5:ea:e4:f5: e5:bf:a5:e8:1d:a3:c8:8f:39:f8:d1:d4:7b:97:ed:2d:e2:10: bf:5b:32:4f:bd:c4:4c:9d:f0:fb:83:aa:e9:1a:d7:3f:c4:23: d2:2c:7c:1b:19:2c:b8:83:e6:20:46:ff:43:ee:48:d3:d6:c5: b5:46:18:ef:ee:f0:d2:69:49:d9:17:41:da:4c:60:8d:38:e8: b9:61:ae:32:6e:b8:c6:85:eb:a3:6e:c5:a7:fe:0b:3b:0b:6e: 05:3a:0c:9d:df:03:dd:d6:10:65:2e:ff:f4:fb:1a:4f:a4:99: 23:81:f0:22:d2:b3:5d:80:97:7a:0a:22:26:4b:c8:8b:4a:24: 87:f2:29:d7:bc:d6:e1:03:72:c4:61:ec:3d:f7:3d:7f:65:04: e7:86:5b:23:c9:a1:53:4f:52:59:9b:aa:e6:0e:1a:df:3c:91: 8b:e8:e3:ce -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEfHbQ5OESkSNNCYyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEwNTEzNDUzMloXDTI3MDIwODEzNDUzMlowLzEtMCsGA1UEAxMk Y2FjN2RlOGMtMTk2MS00ZDBmLTg2NWUtNDc5MDk2NWI4NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD9CVQlDjaZ2hdCU9uT8t21dmzty/UVZg6vx C43Ax+lYfkmsQXrYw5Y5tpYZ6Pugw0L3L81OV7zP7JrwUW3Kmnjj+upUhy5/Ddw7 PgdoD2NRBEFlGDKNbjKf9kiWDmF8P0Dvll/al2L6Ly0mnyilDyp2PlkZBip231ZC 39B2FWcCb1C1yRyZnx39QzHuR5T49Dq4ievtzjO2oKo+RQsjejEJyLKHBPTZsp6C UeGCi34+gH0nHBomQvQtcOO2ztQDBoalyzBSb2GoeSiT0Oa7HFH8gXK/vPOD/gIs GjzBbn9RlV+g6xnvqsxzcFbqW57LWnSv22Ks4qmfT6zfizthLwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFELAW6rxFJ5K4fFECvM4e9rPA2eGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j YWM3ZGU4Yy0xOTYxLTRkMGYtODY1ZS00NzkwOTY1Yjg1YjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NhYzdkZThjLTE5NjEtNGQwZi04 NjVlLTQ3OTA5NjViODViOS9jYWM3ZGU4Yy0xOTYxLTRkMGYtODY1ZS00NzkwOTY1 Yjg1YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICNa0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoNJXV+cnHe+Bigm8KULoNl8LJTCp 4B+Kj93M8kVmsAm1nql7XOlN1evMFxMsrWbJMs9n37EICx6BNIWg5dUwU3hvmQBn Zm3S1vmMrWdWhRsKoDb9E3Xl6uT15b+l6B2jyI85+NHUe5ftLeIQv1syT73ETJ3w +4Oq6RrXP8Qj0ix8GxksuIPmIEb/Q+5I09bFtUYY7+7w0mlJ2RdB2kxgjTjouWGu Mm64xoXro27Fp/4LOwtuBToMnd8D3dYQZS7/9PsaT6SZI4HwItKzXYCXegoiJkvI i0okh/Ip17zW4QNyxGHsPfc9f2UE54ZbI8mhU09SWZuq5g4a3zyRi+jjzg== -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:12 2024 by rpki-client on console-ams.rpki-client.org