$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1be9b3f-f28e-4004-8794-9d63dffe78e3.cer File: b1be9b3f-f28e-4004-8794-9d63dffe78e3.cer (raw, json) Hash identifier: vGJfgoa+zdiqnDUQRel97REJByR5lWpc6Flaufzp2FA= Subject key identifier: 1A:D3:04:AE:B9:D4:D3:09:5D:1B:6C:68:20:3F:30:6A:FC:9F:1E:4C Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858471868586DA78F0A7DC41CBF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1be9b3f-f28e-4004-8794-9d63dffe78e3/b1be9b3f-f28e-4004-8794-9d63dffe78e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1be9b3f-f28e-4004-8794-9d63dffe78e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Sep 2024 21:09:36 +0000 Certificate not after: Mon 07 Dec 2026 22:09:36 +0000 Subordinate resources: AS: 33032 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:18:68:58:6d:a7:8f:0a:7d:c4:1c:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 3 21:09:36 2024 GMT Not After : Dec 7 22:09:36 2026 GMT Subject: CN=b1be9b3f-f28e-4004-8794-9d63dffe78e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:02:f7:15:38:35:c4:7e:b4:23:c0:97:b7: ed:f0:ae:d9:2d:68:0a:7d:3b:6a:70:34:03:8d:1f: e4:02:c8:4a:28:d5:54:9e:73:12:e3:01:27:da:29: 5b:0f:f5:76:cd:7a:92:eb:04:f5:9d:d5:1b:b1:b0: 4d:89:fc:03:75:4c:06:e8:69:ec:5d:0f:b9:3c:d9: 0c:8d:78:4b:69:46:9f:ee:b2:1e:e1:81:ab:eb:f4: d7:a2:65:fa:5c:7d:75:09:15:1a:e5:76:b1:c8:13: c2:c9:fe:3e:15:97:41:15:ca:16:08:ad:49:d7:8b: b0:76:36:99:89:11:33:33:4e:9b:5c:fc:92:84:ef: 2e:e6:f8:93:22:e5:da:45:a5:e4:1f:a4:21:d3:81: 7a:74:8b:b5:84:8c:47:9e:71:ea:0c:21:99:0b:0e: a7:2a:28:60:4b:f3:0e:10:92:26:3b:82:8b:8d:ad: 16:fe:0e:d0:e0:b5:eb:65:c9:84:c0:44:ce:65:df: f3:cd:f1:32:6c:1b:6d:ed:49:37:42:72:57:95:c1: 17:e0:31:84:14:16:eb:0b:3b:1d:97:4a:60:70:26: 30:58:4c:fd:1a:0a:20:fc:c6:5b:e5:13:cb:b1:e8: f1:d0:12:51:bb:af:1f:be:04:a9:05:1a:bc:17:e3: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D3:04:AE:B9:D4:D3:09:5D:1B:6C:68:20:3F:30:6A:FC:9F:1E:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1be9b3f-f28e-4004-8794-9d63dffe78e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1be9b3f-f28e-4004-8794-9d63dffe78e3/b1be9b3f-f28e-4004-8794-9d63dffe78e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 33032 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:56:2b:0d:d3:a0:e7:5f:c6:a3:5d:7b:0c:3f:f0:9a:00:39: 55:57:d3:6b:25:fd:70:86:e1:99:9f:f0:04:bd:53:d8:e6:4d: ec:c1:8f:75:9e:c3:dd:92:e8:25:27:39:50:b0:5d:1f:0d:ea: 63:1b:5b:ef:79:cd:72:1d:65:07:33:e6:6a:91:31:8f:c2:d1: 38:c8:b9:83:97:99:a8:1d:07:f7:b6:4d:1c:d4:a8:18:d0:1b: b6:77:da:8c:9a:92:6e:f7:32:1a:1f:fc:3d:7b:98:a9:54:6a: 81:82:db:dd:af:8a:2e:42:80:ca:1a:32:bd:3a:1e:0b:0f:da: 29:a8:f8:92:41:e4:fd:0b:55:16:72:93:db:5a:7f:0c:0b:17: 48:05:43:c8:df:8e:33:9c:b6:f8:a9:22:8e:60:8b:41:a0:07: 36:f5:a1:20:cd:72:fc:cd:2a:eb:e9:02:c9:53:d1:52:54:87: 24:58:5c:aa:19:c4:66:42:4c:8b:af:94:6d:32:bc:d7:da:58: 0a:d6:08:f1:db:6b:62:4c:9e:59:cb:b5:52:f0:7c:fe:19:e8: 34:c8:aa:ac:36:15:38:ed:b8:1c:16:33:4e:bb:95:47:d4:07: 4d:7b:d7:60:4d:14:4e:7f:9b:33:03:ff:ee:11:ee:83:7f:46: 5b:92:25:30 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEcYaFhtp48KfcQcvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkwMzIxMDkzNloXDTI2MTIwNzIyMDkzNlowLzEtMCsGA1UEAxMk YjFiZTliM2YtZjI4ZS00MDA0LTg3OTQtOWQ2M2RmZmU3OGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+wC9xU4NcR+tCPAl7ft8K7ZLWgKfTtqcDQD jR/kAshKKNVUnnMS4wEn2ilbD/V2zXqS6wT1ndUbsbBNifwDdUwG6GnsXQ+5PNkM jXhLaUaf7rIe4YGr6/TXomX6XH11CRUa5XaxyBPCyf4+FZdBFcoWCK1J14uwdjaZ iREzM06bXPyShO8u5viTIuXaRaXkH6Qh04F6dIu1hIxHnnHqDCGZCw6nKihgS/MO EJImO4KLja0W/g7Q4LXrZcmEwETOZd/zzfEybBtt7Uk3QnJXlcEX4DGEFBbrCzsd l0pgcCYwWEz9Ggog/MZb5RPLsejx0BJRu68fvgSpBRq8F+MG/wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFBrTBK651NMJXRtsaCA/MGr8nx5MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9i MWJlOWIzZi1mMjhlLTQwMDQtODc5NC05ZDYzZGZmZTc4ZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2IxYmU5YjNmLWYyOGUtNDAwNC04 Nzk0LTlkNjNkZmZlNzhlMy9iMWJlOWIzZi1mMjhlLTQwMDQtODc5NC05ZDYzZGZm ZTc4ZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIEIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGNWKw3ToOdfxqNdeww/8JoAOVVX 02sl/XCG4Zmf8AS9U9jmTezBj3Wew92S6CUnOVCwXR8N6mMbW+95zXIdZQcz5mqR MY/C0TjIuYOXmagdB/e2TRzUqBjQG7Z32oyakm73Mhof/D17mKlUaoGC292vii5C gMoaMr06HgsP2imo+JJB5P0LVRZyk9tafwwLF0gFQ8jfjjOctvipIo5gi0GgBzb1 oSDNcvzNKuvpAslT0VJUhyRYXKoZxGZCTIuvlG0yvNfaWArWCPHba2JMnlnLtVLw fP4Z6DTIqqw2FTjtuBwWM067lUfUB01712BNFE5/mzMD/+4R7oN/RluSJTA= -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:03 2024 by rpki-client on console-fra.rpki-client.org