$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.cer File: d21fd4e3-ef8e-4280-aa21-7a5abc068db7.cer (raw, json) Hash identifier: Kify6TBYb3yBGrEZGmv2ldDjgln2TILiMTZl4wZ1WE0= Subject key identifier: 4E:09:EB:87:86:7F:A2:A1:AB:9D:04:B6:AA:4D:C3:94:3F:81:71:3A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584766FEA1D862F308C749D93100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Oct 2024 00:45:27 +0000 Certificate not after: Tue 05 Jan 2027 01:45:27 +0000 Subordinate resources: AS: 395156 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:66:fe:a1:d8:62:f3:08:c7:49:d9:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 2 00:45:27 2024 GMT Not After : Jan 5 01:45:27 2027 GMT Subject: CN=d21fd4e3-ef8e-4280-aa21-7a5abc068db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6a:6f:b9:11:74:e9:b6:f6:f4:28:10:87:98: 79:c3:61:eb:40:d8:99:3b:9d:e3:e3:dc:c6:73:72: bb:34:88:df:7d:a9:8b:06:57:e5:8f:be:6a:83:f7: 00:82:3a:f7:47:11:5d:d1:7c:ed:65:07:3c:66:4a: 79:83:07:50:0f:4c:34:0e:61:2d:27:96:0d:13:95: ba:78:56:80:44:14:ac:46:59:ee:aa:7c:d9:1a:c8: 34:af:c3:45:dd:16:d4:76:a7:49:56:d3:e1:6a:5f: ae:df:7a:6e:89:eb:8e:fe:e4:18:7b:7c:bd:c7:6c: 9d:31:d7:15:83:b0:39:98:4c:35:58:b2:0d:58:7c: 49:de:e2:ac:6b:63:2a:99:f3:d2:5c:21:fa:f8:ba: 0c:65:56:66:a9:81:52:88:aa:4b:d2:a6:e9:46:5b: 52:67:1b:ae:69:57:3e:81:ef:77:b9:15:c8:73:22: bd:42:9a:58:f1:16:12:69:b8:f7:4e:00:0a:ef:d2: 56:db:40:bf:cc:95:ae:30:bd:3f:74:f7:d6:c5:a6: 3e:a2:fa:26:00:a7:28:93:67:e8:df:42:54:f9:61: 31:41:62:ee:26:21:4a:72:ef:6a:7f:5c:4b:2c:90: b7:86:1b:fa:62:52:60:81:4b:66:2c:f7:02:7d:44: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:09:EB:87:86:7F:A2:A1:AB:9D:04:B6:AA:4D:C3:94:3F:81:71:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395156 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:42:a6:31:46:90:e0:be:2c:41:5b:60:06:98:0a:84:a5:a3: d1:57:86:7d:15:fb:7d:89:a8:39:64:79:fc:03:90:7b:42:74: 4f:01:2e:dc:5b:96:43:ae:ba:b6:40:d5:d5:71:31:e5:f4:85: ee:a4:e3:c0:bc:74:30:23:60:9f:95:12:35:f7:8a:65:2a:29: 6a:08:11:28:32:56:c4:bc:97:ae:1d:ff:fc:9a:34:1d:e8:c1: 4f:d3:d7:01:ab:fd:ed:4a:bc:ff:84:a4:eb:f1:29:c6:d3:5f: eb:8c:29:87:bb:aa:b8:d0:c7:d0:28:6b:04:6c:48:ac:0f:ba: 5c:3a:1c:ab:d8:80:59:35:c3:f5:13:28:6f:5e:b8:35:8c:3f: a1:d0:e7:3b:a9:cc:dd:18:29:a2:0d:69:af:02:3f:f6:63:a9: 2e:00:eb:4c:9d:c7:61:f9:38:14:a2:73:d9:83:74:ab:95:1c: fe:f7:35:35:1c:bf:f6:9f:cf:6b:ef:f8:ad:ce:b8:1e:aa:fe: df:2c:90:0f:ab:1d:f9:60:c5:ec:83:dd:05:96:0a:39:d5:f6: 26:e5:35:b6:3f:9f:7a:3f:c1:3a:72:df:a0:0d:3e:6a:fe:10: 35:2b:69:9f:7c:96:25:a5:c1:a0:0f:5d:2a:3d:84:ab:fa:f4: ed:f3:c9:ef -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEdm/qHYYvMIx0nZMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAwMjAwNDUyN1oXDTI3MDEwNTAxNDUyN1owLzEtMCsGA1UEAxMk ZDIxZmQ0ZTMtZWY4ZS00MjgwLWFhMjEtN2E1YWJjMDY4ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmpvuRF06bb29CgQh5h5w2HrQNiZO53j49zG c3K7NIjffamLBlflj75qg/cAgjr3RxFd0XztZQc8Zkp5gwdQD0w0DmEtJ5YNE5W6 eFaARBSsRlnuqnzZGsg0r8NF3RbUdqdJVtPhal+u33puieuO/uQYe3y9x2ydMdcV g7A5mEw1WLINWHxJ3uKsa2MqmfPSXCH6+LoMZVZmqYFSiKpL0qbpRltSZxuuaVc+ ge93uRXIcyK9QppY8RYSabj3TgAK79JW20C/zJWuML0/dPfWxaY+ovomAKcok2fo 30JU+WExQWLuJiFKcu9qf1xLLJC3hhv6YlJggUtmLPcCfURNnwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFE4J64eGf6Khq50EtqpNw5Q/gXE6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k MjFmZDRlMy1lZjhlLTQyODAtYWEyMS03YTVhYmMwNjhkYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2QyMWZkNGUzLWVmOGUtNDI4MC1h YTIxLTdhNWFiYzA2OGRiNy9kMjFmZDRlMy1lZjhlLTQyODAtYWEyMS03YTVhYmMw NjhkYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgeUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGRCpjFGkOC+LEFbYAaYCoSlo9FX hn0V+32JqDlkefwDkHtCdE8BLtxblkOuurZA1dVxMeX0he6k48C8dDAjYJ+VEjX3 imUqKWoIESgyVsS8l64d//yaNB3owU/T1wGr/e1KvP+EpOvxKcbTX+uMKYe7qrjQ x9AoawRsSKwPulw6HKvYgFk1w/UTKG9euDWMP6HQ5zupzN0YKaINaa8CP/ZjqS4A 60ydx2H5OBSic9mDdKuVHP73NTUcv/afz2vv+K3OuB6q/t8skA+rHflgxeyD3QWW CjnV9iblNbY/n3o/wTpy36ANPmr+EDUraZ98liWlwaAPXSo9hKv69O3zye8= -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:31 2024 by rpki-client on console-fra.rpki-client.org