$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e.cer File: 5455b5bf-2f35-4f56-9135-7682adb23b7e.cer (raw, json) Hash identifier: ndFqixy7sr/kwUGxvMquVG5Nbf/f135R/AUcTTbH2dw= Subject key identifier: 0C:94:88:60:3E:11:A2:36:46:7D:97:10:2C:26:00:4B:3B:A4:F8:1A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847B736158A47D3A56C41350C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e/5455b5bf-2f35-4f56-9135-7682adb23b7e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Oct 2024 18:21:51 +0000 Certificate not after: Tue 02 Feb 2027 19:21:51 +0000 Subordinate resources: AS: 401452 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b7:36:15:8a:47:d3:a5:6c:41:35:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 30 18:21:51 2024 GMT Not After : Feb 2 19:21:51 2027 GMT Subject: CN=5455b5bf-2f35-4f56-9135-7682adb23b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:77:0d:d6:d4:40:0f:5b:9b:2c:b9:8c:e1: 83:5d:7e:be:4f:41:af:5b:58:4e:c1:28:06:a5:a7: 02:78:fb:93:67:3c:e8:88:5f:fd:7c:72:ae:c4:a6: 03:aa:a9:21:d3:3c:07:96:21:14:ce:f0:c6:9d:ff: 22:f9:20:c3:f1:59:17:6b:f7:20:28:36:ba:21:3b: 09:47:af:db:53:bf:44:bf:ec:cd:e2:da:88:be:9c: 45:cf:fd:2c:a9:5b:2c:a8:e8:de:b3:b7:85:5c:2c: 06:17:0c:7b:11:97:bd:58:f4:20:ab:3b:c2:2b:c1: 32:1d:2f:98:ba:c6:07:f8:4f:c0:db:16:63:ae:01: 6c:37:f6:e0:e5:71:f3:24:1c:dd:32:9c:6c:94:9d: b9:c4:88:c1:5f:95:b9:9d:a2:2a:8c:ce:23:08:02: 85:1c:4c:4e:2c:06:cf:eb:81:1d:99:42:13:74:20: a5:d8:20:c6:aa:5d:94:03:7e:20:82:bf:99:f1:08: 4e:25:df:61:fa:00:2f:ec:2c:25:5f:44:fd:6a:c1: 69:bb:22:8f:b3:b5:8e:38:23:27:02:56:2d:65:3a: 63:9a:25:84:b4:93:95:a1:d2:24:85:2c:4d:97:ec: da:d7:39:75:a1:99:a3:ab:77:5e:bb:cd:11:41:b4: 47:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:94:88:60:3E:11:A2:36:46:7D:97:10:2C:26:00:4B:3B:A4:F8:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5455b5bf-2f35-4f56-9135-7682adb23b7e/5455b5bf-2f35-4f56-9135-7682adb23b7e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401452 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d4:0d:97:c6:9d:f1:ca:96:da:cc:c5:0e:d5:d3:0a:51:43: 49:b2:01:6e:8c:10:ed:67:a9:b7:b9:2b:2c:92:d2:3f:fb:6e: 4f:47:91:57:02:cc:ff:53:e5:6b:03:05:1e:12:bd:98:78:bb: 40:6b:5e:8b:37:b2:be:6c:7e:ae:f2:b7:eb:b8:1e:56:09:ee: a0:f6:52:a0:57:c0:df:e2:e5:84:0b:d0:d4:b6:37:c5:90:9c: 3d:2d:d2:09:66:f9:30:c2:6c:26:96:eb:12:c3:c7:6f:ab:55: 8f:ef:73:d1:3f:45:e8:d6:f8:58:1d:8b:c7:d3:04:1f:2f:7c: a1:2c:e7:45:2b:21:4d:5e:2b:8b:8a:e5:23:1d:ff:be:e8:fc: 87:5d:33:db:fa:20:87:6d:d2:1c:a1:78:2e:fd:37:c8:ed:4d: 52:cf:81:41:8b:92:17:5d:09:6e:bd:64:04:0d:0a:cc:7b:35: 06:fa:d1:f5:de:b1:0b:8b:51:ab:cc:c7:98:ac:fd:19:aa:e3: 14:c7:a6:04:0c:fd:2a:02:18:a0:37:f5:42:38:4d:4d:db:97: 49:54:97:8f:8b:b7:45:92:2d:05:b6:ff:6b:45:64:12:c3:67: 4c:9c:4d:2c:5c:df:c1:ee:a0:30:a6:e9:77:99:9b:7a:2c:93: e6:c2:cc:0b -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEe3NhWKR9OlbEE1DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAzMDE4MjE1MVoXDTI3MDIwMjE5MjE1MVowLzEtMCsGA1UEAxMk NTQ1NWI1YmYtMmYzNS00ZjU2LTkxMzUtNzY4MmFkYjIzYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc93DdbUQA9bmyy5jOGDXX6+T0GvW1hOwSgG pacCePuTZzzoiF/9fHKuxKYDqqkh0zwHliEUzvDGnf8i+SDD8VkXa/cgKDa6ITsJ R6/bU79Ev+zN4tqIvpxFz/0sqVssqOjes7eFXCwGFwx7EZe9WPQgqzvCK8EyHS+Y usYH+E/A2xZjrgFsN/bg5XHzJBzdMpxslJ25xIjBX5W5naIqjM4jCAKFHExOLAbP 64EdmUITdCCl2CDGql2UA34ggr+Z8QhOJd9h+gAv7CwlX0T9asFpuyKPs7WOOCMn AlYtZTpjmiWEtJOVodIkhSxNl+za1zl1oZmjq3deu80RQbRH1QIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFAyUiGA+EaI2Rn2XECwmAEs7pPgaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 NDU1YjViZi0yZjM1LTRmNTYtOTEzNS03NjgyYWRiMjNiN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzU0NTViNWJmLTJmMzUtNGY1Ni05 MTM1LTc2ODJhZGIyM2I3ZS81NDU1YjViZi0yZjM1LTRmNTYtOTEzNS03NjgyYWRi MjNiN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiAsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJTUDZfGnfHKltrMxQ7V0wpRQ0my AW6MEO1nqbe5KyyS0j/7bk9HkVcCzP9T5WsDBR4SvZh4u0BrXos3sr5sfq7yt+u4 HlYJ7qD2UqBXwN/i5YQL0NS2N8WQnD0t0glm+TDCbCaW6xLDx2+rVY/vc9E/RejW +Fgdi8fTBB8vfKEs50UrIU1eK4uK5SMd/77o/IddM9v6IIdt0hyheC79N8jtTVLP gUGLkhddCW69ZAQNCsx7NQb60fXesQuLUavMx5is/Rmq4xTHpgQM/SoCGKA39UI4 TU3bl0lUl4+Lt0WSLQW2/2tFZBLDZ0ycTSxc38HuoDCm6XeZm3osk+bCzAs= -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:03 2024 by rpki-client on console-ams.rpki-client.org