$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.cer File: d21fd4e3-ef8e-4280-aa21-7a5abc068db7.cer (raw, json) Hash identifier: aLKrqUQ838j8ze6IfZYA2t2T6iqlv19/lm1D/FsWtDQ= Subject key identifier: 4E:09:EB:87:86:7F:A2:A1:AB:9D:04:B6:AA:4D:C3:94:3F:81:71:3A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842627D1DC2DDF3AC6F984C9C10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Jun 2023 22:06:34 +0000 Certificate not after: Wed 01 Oct 2025 22:06:34 +0000 Subordinate resources: AS: 395156 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:62:7d:1d:c2:dd:f3:ac:6f:98:4c:9c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 29 22:06:34 2023 GMT Not After : Oct 1 22:06:34 2025 GMT Subject: CN=d21fd4e3-ef8e-4280-aa21-7a5abc068db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6a:6f:b9:11:74:e9:b6:f6:f4:28:10:87:98: 79:c3:61:eb:40:d8:99:3b:9d:e3:e3:dc:c6:73:72: bb:34:88:df:7d:a9:8b:06:57:e5:8f:be:6a:83:f7: 00:82:3a:f7:47:11:5d:d1:7c:ed:65:07:3c:66:4a: 79:83:07:50:0f:4c:34:0e:61:2d:27:96:0d:13:95: ba:78:56:80:44:14:ac:46:59:ee:aa:7c:d9:1a:c8: 34:af:c3:45:dd:16:d4:76:a7:49:56:d3:e1:6a:5f: ae:df:7a:6e:89:eb:8e:fe:e4:18:7b:7c:bd:c7:6c: 9d:31:d7:15:83:b0:39:98:4c:35:58:b2:0d:58:7c: 49:de:e2:ac:6b:63:2a:99:f3:d2:5c:21:fa:f8:ba: 0c:65:56:66:a9:81:52:88:aa:4b:d2:a6:e9:46:5b: 52:67:1b:ae:69:57:3e:81:ef:77:b9:15:c8:73:22: bd:42:9a:58:f1:16:12:69:b8:f7:4e:00:0a:ef:d2: 56:db:40:bf:cc:95:ae:30:bd:3f:74:f7:d6:c5:a6: 3e:a2:fa:26:00:a7:28:93:67:e8:df:42:54:f9:61: 31:41:62:ee:26:21:4a:72:ef:6a:7f:5c:4b:2c:90: b7:86:1b:fa:62:52:60:81:4b:66:2c:f7:02:7d:44: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:09:EB:87:86:7F:A2:A1:AB:9D:04:B6:AA:4D:C3:94:3F:81:71:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395156 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:40:48:d6:cc:7c:2a:3d:56:e5:45:fa:c8:76:a3:f4:2e:2d: 49:bc:79:00:5e:c2:af:6c:6a:74:28:74:3f:c6:98:a7:3c:a6: 47:4e:05:86:a8:ee:2b:fa:b6:31:c8:d4:35:81:0f:06:37:f9: 0e:42:d4:79:ce:7d:5a:7f:b4:1b:df:cb:68:1a:72:7a:91:fc: e4:5d:45:0a:bf:80:ef:ca:c8:cf:73:04:d4:f3:51:be:77:c4: 3e:4a:a2:9e:e1:9d:41:3b:8e:67:2f:b6:6e:10:25:12:99:40: ad:1d:11:d7:2b:b4:16:ff:c8:40:bd:0e:6a:cf:06:b2:d0:a1: 0a:ad:13:e8:39:8b:d8:f3:47:44:6c:cc:d1:dc:8b:1b:11:6c: 24:ad:5c:d1:5f:6f:78:9f:44:e6:54:6a:c2:c9:e9:c2:f7:5d: 3a:e5:2b:b5:fe:f8:ee:58:de:5a:43:06:2a:be:69:74:67:e2: 75:d4:e1:7c:f0:9d:0d:5c:32:78:5b:03:e1:21:91:86:b2:1b: 57:4b:3e:6e:2d:6a:52:48:44:30:db:a4:5d:a3:15:46:67:5e: fc:de:ba:1a:69:bf:5d:32:cb:cf:fe:53:84:9a:f9:d9:f0:51: 3a:f9:ea:34:fe:a0:17:2d:da:96:ca:bb:6d:9c:7b:cf:c8:69: a4:8a:c9:1a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEJifR3C3fOsb5hMnBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYyOTIyMDYzNFoXDTI1MTAwMTIyMDYzNFowLzEtMCsGA1UEAxMk ZDIxZmQ0ZTMtZWY4ZS00MjgwLWFhMjEtN2E1YWJjMDY4ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmpvuRF06bb29CgQh5h5w2HrQNiZO53j49zG c3K7NIjffamLBlflj75qg/cAgjr3RxFd0XztZQc8Zkp5gwdQD0w0DmEtJ5YNE5W6 eFaARBSsRlnuqnzZGsg0r8NF3RbUdqdJVtPhal+u33puieuO/uQYe3y9x2ydMdcV g7A5mEw1WLINWHxJ3uKsa2MqmfPSXCH6+LoMZVZmqYFSiKpL0qbpRltSZxuuaVc+ ge93uRXIcyK9QppY8RYSabj3TgAK79JW20C/zJWuML0/dPfWxaY+ovomAKcok2fo 30JU+WExQWLuJiFKcu9qf1xLLJC3hhv6YlJggUtmLPcCfURNnwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFE4J64eGf6Khq50EtqpNw5Q/gXE6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k MjFmZDRlMy1lZjhlLTQyODAtYWEyMS03YTVhYmMwNjhkYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2QyMWZkNGUzLWVmOGUtNDI4MC1h YTIxLTdhNWFiYzA2OGRiNy9kMjFmZDRlMy1lZjhlLTQyODAtYWEyMS03YTVhYmMw NjhkYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgeUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGRASNbMfCo9VuVF+sh2o/QuLUm8 eQBewq9sanQodD/GmKc8pkdOBYao7iv6tjHI1DWBDwY3+Q5C1HnOfVp/tBvfy2ga cnqR/ORdRQq/gO/KyM9zBNTzUb53xD5Kop7hnUE7jmcvtm4QJRKZQK0dEdcrtBb/ yEC9DmrPBrLQoQqtE+g5i9jzR0RszNHcixsRbCStXNFfb3ifROZUasLJ6cL3XTrl K7X++O5Y3lpDBiq+aXRn4nXU4XzwnQ1cMnhbA+EhkYayG1dLPm4talJIRDDbpF2j FUZnXvzeuhppv10yy8/+U4Sa+dnwUTr56jT+oBct2pbKu22ce8/IaaSKyRo= -----END CERTIFICATE-----Generated at Fri May 10 17:22:19 2024 by rpki-client on console-fra.rpki-client.org