$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177.cer File: cada6a48-d0c8-4e9d-a867-b68a41d02177.cer (raw, json) Hash identifier: qiEMKw2vHesZYIPpH63H/gZr0jcXhbDU8n1cNHHlRwQ= Subject key identifier: A2:E9:89:86:50:FF:78:1F:27:1B:AF:0C:DE:B5:B3:C7:98:BE:DC:3E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584221B23A61661D164973CBE500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177/cada6a48-d0c8-4e9d-a867-b68a41d02177.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Jun 2023 17:06:03 +0000 Certificate not after: Mon 08 Sep 2025 17:06:03 +0000 Subordinate resources: AS: 400188 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:21:b2:3a:61:66:1d:16:49:73:cb:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 6 17:06:03 2023 GMT Not After : Sep 8 17:06:03 2025 GMT Subject: CN=cada6a48-d0c8-4e9d-a867-b68a41d02177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:86:4c:83:17:5a:86:01:19:2a:88:52:0b:75: 1f:82:3f:59:0f:2c:e8:81:11:b5:dd:83:6b:52:aa: 44:df:c1:a9:c5:e5:0b:b8:75:88:9a:5d:b7:b4:1c: 0d:9b:6f:40:b6:09:83:a2:77:79:21:fd:04:c1:c9: ff:24:0d:d1:ae:a0:f1:55:51:8f:a6:e4:26:a8:58: 2e:2f:48:99:44:bf:bb:41:a0:57:53:fe:db:74:ad: d4:be:44:dd:32:67:fe:df:15:3b:e5:c1:a4:f2:96: 2d:13:50:e0:b8:e2:95:fc:e5:da:59:82:b7:32:6b: a6:cd:50:5c:9f:b0:6b:f2:73:9d:81:b7:9e:dc:c5: 5e:02:d8:2a:d7:47:3a:9e:c5:3e:3c:fc:b9:f6:ae: 76:ec:0e:c3:54:76:f1:84:20:0e:01:5b:51:8f:d6: 95:e9:a4:c4:21:70:03:70:1d:b7:5c:de:5f:95:45: f2:a6:e3:b4:2a:67:24:2e:5f:35:0e:f1:08:20:62: 9a:00:40:67:1a:93:c4:90:ae:78:fe:8a:8d:11:55: c2:4a:4c:4b:17:6c:5d:9b:6c:d2:59:ef:dc:86:15: 42:90:a4:6a:0b:9c:b2:7a:20:da:c4:f9:5c:21:eb: 22:81:ee:8d:6f:cd:c2:f9:ea:69:01:6f:38:98:d4: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E9:89:86:50:FF:78:1F:27:1B:AF:0C:DE:B5:B3:C7:98:BE:DC:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cada6a48-d0c8-4e9d-a867-b68a41d02177/cada6a48-d0c8-4e9d-a867-b68a41d02177.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 400188 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4b:5a:c8:51:a2:43:8b:8d:ec:ed:b2:1c:7f:2d:6e:81:80: 23:3d:01:1c:2c:ed:cb:23:84:bb:02:53:5a:b4:a0:e5:6e:af: c5:ae:0a:35:2e:06:6c:cc:b6:59:fb:93:0a:22:4c:6b:7b:bb: b1:e0:28:5b:90:49:b0:8c:69:74:73:e1:92:11:eb:2e:c4:2b: a6:d2:8b:2c:87:7a:ad:86:49:68:8a:25:3a:45:f4:7d:4b:c8: fa:29:ed:2a:ea:fd:63:0f:ba:05:8c:00:6f:93:7e:0a:69:96: 27:86:8b:79:7d:a7:71:09:a4:6d:5b:19:0c:16:9f:0f:bf:71: d7:ab:bd:b8:01:a8:99:1b:bb:a8:e8:8e:a6:02:7b:a1:26:16: f2:58:68:d3:0e:5e:a2:d1:71:5f:4a:6f:b2:fd:af:4a:12:bf: a5:16:8e:75:6f:d2:72:b5:e9:cc:23:23:bc:1e:5f:ed:48:9b: 4a:bf:a3:84:d2:eb:af:dd:82:14:5a:38:55:16:d8:b6:3e:7d: 37:6a:01:5c:ea:64:22:2c:2e:4e:59:28:df:a0:57:1d:95:c3: 2d:0f:9c:5c:d8:eb:b1:94:18:77:73:82:1c:a1:d4:b0:16:08: d1:83:7d:74:06:ec:ac:f6:70:69:26:2b:16:22:6f:e8:ec:45: 9c:79:e4:48 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEIhsjphZh0WSXPL5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYwNjE3MDYwM1oXDTI1MDkwODE3MDYwM1owLzEtMCsGA1UEAxMk Y2FkYTZhNDgtZDBjOC00ZTlkLWE4NjctYjY4YTQxZDAyMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYZMgxdahgEZKohSC3Ufgj9ZDyzogRG13YNr UqpE38GpxeULuHWIml23tBwNm29AtgmDond5If0Ewcn/JA3RrqDxVVGPpuQmqFgu L0iZRL+7QaBXU/7bdK3UvkTdMmf+3xU75cGk8pYtE1DguOKV/OXaWYK3MmumzVBc n7Br8nOdgbee3MVeAtgq10c6nsU+PPy59q527A7DVHbxhCAOAVtRj9aV6aTEIXAD cB23XN5flUXypuO0KmckLl81DvEIIGKaAEBnGpPEkK54/oqNEVXCSkxLF2xdm2zS We/chhVCkKRqC5yyeiDaxPlcIesige6Nb83C+eppAW84mNQH7QIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFKLpiYZQ/3gfJxuvDN61s8eYvtw+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j YWRhNmE0OC1kMGM4LTRlOWQtYTg2Ny1iNjhhNDFkMDIxNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NhZGE2YTQ4LWQwYzgtNGU5ZC1h ODY3LWI2OGE0MWQwMjE3Ny9jYWRhNmE0OC1kMGM4LTRlOWQtYTg2Ny1iNjhhNDFk MDIxNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhs8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABBLWshRokOLjeztshx/LW6BgCM9 ARws7csjhLsCU1q0oOVur8WuCjUuBmzMtln7kwoiTGt7u7HgKFuQSbCMaXRz4ZIR 6y7EK6bSiyyHeq2GSWiKJTpF9H1LyPop7Srq/WMPugWMAG+TfgpplieGi3l9p3EJ pG1bGQwWnw+/cdervbgBqJkbu6jojqYCe6EmFvJYaNMOXqLRcV9Kb7L9r0oSv6UW jnVv0nK16cwjI7weX+1Im0q/o4TS66/dghRaOFUW2LY+fTdqAVzqZCIsLk5ZKN+g Vx2Vwy0PnFzY67GUGHdzghyh1LAWCNGDfXQG7Kz2cGkmKxYib+jsRZx55Eg= -----END CERTIFICATE-----Generated at Thu May 9 20:34:27 2024 by rpki-client on console-ams.rpki-client.org