$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2.cer File: 8ef65c6b-019c-42a7-a13b-f51faf49a9b2.cer (raw, json) Hash identifier: OZNKX1GlMUrZ9lWqV2dlKbK28HKdls6hkZ7OFJp/qfU= Subject key identifier: 05:07:25:08:E8:CE:34:F9:38:14:F6:A0:B6:05:57:92:B4:FF:3E:7E Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285843772DA61094AE0E90E39A4340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/8ef65c6b-019c-42a7-a13b-f51faf49a9b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Oct 2023 00:45:22 +0000 Certificate not after: Fri 09 Jan 2026 01:45:22 +0000 Subordinate resources: AS: 36506 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:77:2d:a6:10:94:ae:0e:90:e3:9a:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 7 00:45:22 2023 GMT Not After : Jan 9 01:45:22 2026 GMT Subject: CN=8ef65c6b-019c-42a7-a13b-f51faf49a9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5c:89:5f:cb:20:11:3a:58:28:c3:4d:f9:31: 98:77:71:06:5d:07:14:0a:30:78:9b:b7:7a:05:47: 66:51:a0:0a:8f:bc:07:e7:57:7c:c1:7f:f0:18:33: 0a:f1:66:f2:41:c9:a8:f8:78:88:6a:9b:4f:f7:dc: 53:07:97:6c:40:9d:6d:8e:51:8b:c1:bd:c6:15:df: 17:55:3e:1d:9a:af:aa:e2:b3:35:e6:b1:15:0c:f7: b8:d7:ee:a0:ce:d6:7d:2b:21:69:e4:2d:0a:6d:2c: 88:95:60:6d:72:fd:01:a6:fd:72:28:69:3f:e2:c9: eb:13:cd:57:60:6d:6f:c1:56:58:84:f3:c6:d6:e2: da:97:eb:a3:24:fe:9b:25:06:55:60:f0:eb:41:de: 1d:a1:d3:4c:2f:59:9b:9b:0c:8f:75:c8:9a:02:b0: ac:27:0d:af:40:49:ef:56:98:9c:76:1c:01:94:ab: fe:97:b6:39:3f:7c:01:cc:41:3c:24:c4:9f:5c:58: 4f:47:08:92:b5:5f:a8:d9:94:c6:34:11:e9:88:d3: d0:0b:24:ff:c8:e2:82:4c:82:0a:23:ef:57:f1:16: e0:2c:54:08:b8:c5:4b:59:b0:ee:44:7a:6f:c5:2a: 20:49:67:c6:89:fa:cf:30:6b:9f:c1:36:13:f2:53: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:07:25:08:E8:CE:34:F9:38:14:F6:A0:B6:05:57:92:B4:FF:3E:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8ef65c6b-019c-42a7-a13b-f51faf49a9b2/8ef65c6b-019c-42a7-a13b-f51faf49a9b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 36506 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:32:be:1a:29:bc:88:41:70:21:fe:34:a6:c6:46:4b:e4:08: 41:f6:25:a8:6f:78:d6:b7:cf:fd:41:5d:de:93:09:3c:2f:56: 78:76:4d:55:09:8e:b4:9e:9d:c3:2f:51:c8:20:8d:ab:9c:be: 68:c4:f7:50:63:c1:2b:f1:44:4b:07:77:5f:4b:44:f8:ef:a6: 70:f4:3c:c9:9c:9e:43:6a:60:46:e8:56:97:e5:3f:56:e6:73: e8:51:75:8f:b0:aa:03:07:a2:38:3b:2c:f1:19:5c:60:6b:c3: 6b:30:25:45:7a:44:ee:e2:3a:36:b8:3b:a5:03:18:68:66:51: d2:63:41:17:46:24:0a:0e:0b:9b:b6:5a:c7:d7:8a:a0:bc:fd: cf:f1:55:4c:1c:36:e1:51:03:cc:43:21:0b:19:a7:cc:fd:a0: 39:7e:dc:c2:36:2b:da:5b:cc:e6:2e:ab:20:0e:fa:f1:f0:91: bf:8c:9c:8e:5d:29:58:c6:03:92:30:f4:31:87:17:05:79:24: 12:dd:cd:e7:79:ae:00:b1:28:4d:49:3d:47:ae:41:e6:f9:8d: 60:50:c5:76:bd:18:30:15:f0:27:54:49:db:7b:d4:9e:76:6a: 1d:30:0a:2a:8a:5f:df:37:e9:bb:0f:9c:2a:c9:32:e6:22:56: 33:59:dd:5f -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEN3LaYQlK4OkOOaQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMTAwNzAwNDUyMloXDTI2MDEwOTAxNDUyMlowLzEtMCsGA1UEAxMk OGVmNjVjNmItMDE5Yy00MmE3LWExM2ItZjUxZmFmNDlhOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilyJX8sgETpYKMNN+TGYd3EGXQcUCjB4m7d6 BUdmUaAKj7wH51d8wX/wGDMK8WbyQcmo+HiIaptP99xTB5dsQJ1tjlGLwb3GFd8X VT4dmq+q4rM15rEVDPe41+6gztZ9KyFp5C0KbSyIlWBtcv0Bpv1yKGk/4snrE81X YG1vwVZYhPPG1uLal+ujJP6bJQZVYPDrQd4dodNML1mbmwyPdciaArCsJw2vQEnv VpicdhwBlKv+l7Y5P3wBzEE8JMSfXFhPRwiStV+o2ZTGNBHpiNPQCyT/yOKCTIIK I+9X8RbgLFQIuMVLWbDuRHpvxSogSWfGifrPMGufwTYT8lOOhwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFAUHJQjozjT5OBT2oLYFV5K0/z5+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84 ZWY2NWM2Yi0wMTljLTQyYTctYTEzYi1mNTFmYWY0OWE5YjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzhlZjY1YzZiLTAxOWMtNDJhNy1h MTNiLWY1MWZhZjQ5YTliMi84ZWY2NWM2Yi0wMTljLTQyYTctYTEzYi1mNTFmYWY0 OWE5YjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAI6aMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABUyvhopvIhBcCH+NKbGRkvkCEH2 JahveNa3z/1BXd6TCTwvVnh2TVUJjrSencMvUcggjaucvmjE91BjwSvxREsHd19L RPjvpnD0PMmcnkNqYEboVpflP1bmc+hRdY+wqgMHojg7LPEZXGBrw2swJUV6RO7i Oja4O6UDGGhmUdJjQRdGJAoOC5u2WsfXiqC8/c/xVUwcNuFRA8xDIQsZp8z9oDl+ 3MI2K9pbzOYuqyAO+vHwkb+MnI5dKVjGA5Iw9DGHFwV5JBLdzed5rgCxKE1JPUeu Qeb5jWBQxXa9GDAV8CdUSdt71J52ah0wCiqKX9836bsPnCrJMuYiVjNZ3V8= -----END CERTIFICATE-----Generated at Fri Apr 19 17:22:07 2024 by rpki-client on console-fra.rpki-client.org