$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf.cer File: 0712b41c-9270-4741-84b8-3aaaa15afdcf.cer (raw, json) Hash identifier: QJr+i5rCkh6JgTFD84de4MCTLJhYJQ0I2qD18SeWFqg= Subject key identifier: 2C:7F:77:DE:EB:4F:52:A2:A4:A2:F4:75:31:89:B5:A2:D3:14:99:22 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858460F9C739C9DE71F5F27F54240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/0712b41c-9270-4741-84b8-3aaaa15afdcf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Jun 2024 00:45:22 +0000 Certificate not after: Fri 04 Sep 2026 00:45:22 +0000 Subordinate resources: AS: 22412 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:0f:9c:73:9c:9d:e7:1f:5f:27:f5:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 1 00:45:22 2024 GMT Not After : Sep 4 00:45:22 2026 GMT Subject: CN=0712b41c-9270-4741-84b8-3aaaa15afdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:e3:ee:5d:30:6e:57:f0:05:93:7b:46:dd: f6:48:1c:ea:24:ae:ec:a5:f9:4e:d2:31:e4:20:0e: 3c:47:02:46:0c:72:aa:77:a2:27:65:48:4b:3d:57: 3c:3d:a5:07:67:5e:8f:11:4d:0f:0e:04:d3:f5:08: 56:d4:75:0c:9f:20:86:77:d0:9b:d6:19:81:9e:72: ca:28:5f:d0:e2:33:d5:da:af:50:e8:fd:ef:32:4b: e3:f0:be:49:c2:84:29:5c:2c:b2:53:b9:b2:c4:b3: 3d:f7:f8:6a:3a:7f:a6:29:7c:d8:f2:35:74:fd:7f: 12:d5:a0:aa:f6:fa:87:6d:0b:bb:7d:0a:22:1a:a6: bd:9b:20:8f:ab:3f:d5:19:e7:eb:0e:b9:80:2a:06: a8:4d:fa:68:18:b4:6d:1e:06:f9:a8:53:6c:dd:df: 21:4a:70:bb:b2:b0:ed:1b:92:c5:ce:d2:73:a6:d0: b4:f8:25:ee:2f:a3:47:f5:54:fe:b1:a8:21:3f:49: 67:88:ba:3a:31:d8:52:eb:e2:06:e5:a9:3c:d4:d5: 2f:26:8b:6f:07:7d:3c:4b:a9:ad:26:56:4e:ae:29: b9:ea:3d:f2:52:2e:32:d3:d0:54:50:c8:1f:f4:1d: dd:56:3e:a8:09:46:8a:eb:3e:02:08:c3:b1:46:31: de:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7F:77:DE:EB:4F:52:A2:A4:A2:F4:75:31:89:B5:A2:D3:14:99:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/0712b41c-9270-4741-84b8-3aaaa15afdcf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 22412 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:89:6e:05:34:f4:8d:83:c0:e5:6c:6b:00:3b:e3:39:31:f0: 6f:d3:61:f9:7a:d2:6a:19:59:3e:3e:d1:31:18:04:66:b3:70: 7e:51:e8:89:ed:93:e5:5c:a8:8a:45:b3:fa:c5:cc:31:9e:03: 8c:89:6f:01:81:33:d5:90:0e:5b:41:7b:2b:76:72:06:c0:df: 7b:e6:a3:8f:0e:5a:be:e9:80:14:6d:1e:07:47:c9:81:37:46: d5:ac:67:07:81:93:b7:f3:00:da:11:0a:14:cd:4e:9b:fa:51: ad:66:20:5e:48:fd:d3:27:30:00:1b:3a:20:f8:c9:26:27:a0: 95:f7:85:1a:e9:e6:9c:70:ff:81:0f:1b:63:db:38:d5:4b:43: 6e:d5:69:f5:0f:17:42:5c:4f:39:e1:03:d8:cb:92:eb:d1:a9: 27:ca:16:24:8e:0d:18:96:6a:16:8a:3e:a6:86:dc:e9:2b:98: 6e:40:91:a2:79:12:93:ae:0f:db:9f:af:b4:b0:44:8b:c4:0f: 59:0b:67:b9:6b:97:7a:e7:ab:79:7d:88:ca:0f:08:de:f7:7f: ab:3e:38:26:27:6f:7b:e5:03:f2:40:da:fe:a5:90:f0:01:d2: 3f:81:7c:56:81:a0:4f:56:55:cb:44:ac:92:83:b2:2a:42:10: b9:2e:fb:58 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEYPnHOcnecfXyf1QkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDYwMTAwNDUyMloXDTI2MDkwNDAwNDUyMlowLzEtMCsGA1UEAxMk MDcxMmI0MWMtOTI3MC00NzQxLTg0YjgtM2FhYWExNWFmZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcDj7l0wblfwBZN7Rt32SBzqJK7spflO0jHk IA48RwJGDHKqd6InZUhLPVc8PaUHZ16PEU0PDgTT9QhW1HUMnyCGd9Cb1hmBnnLK KF/Q4jPV2q9Q6P3vMkvj8L5JwoQpXCyyU7myxLM99/hqOn+mKXzY8jV0/X8S1aCq 9vqHbQu7fQoiGqa9myCPqz/VGefrDrmAKgaoTfpoGLRtHgb5qFNs3d8hSnC7srDt G5LFztJzptC0+CXuL6NH9VT+saghP0lniLo6MdhS6+IG5ak81NUvJotvB308S6mt JlZOrim56j3yUi4y09BUUMgf9B3dVj6oCUaK6z4CCMOxRjHe4QIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFCx/d97rT1KipKL0dTGJtaLTFJkiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w NzEyYjQxYy05MjcwLTQ3NDEtODRiOC0zYWFhYTE1YWZkY2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA3MTJiNDFjLTkyNzAtNDc0MS04 NGI4LTNhYWFhMTVhZmRjZi8wNzEyYjQxYy05MjcwLTQ3NDEtODRiOC0zYWFhYTE1 YWZkY2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICV4wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnoluBTT0jYPA5WxrADvjOTHwb9Nh +XrSahlZPj7RMRgEZrNwflHoie2T5VyoikWz+sXMMZ4DjIlvAYEz1ZAOW0F7K3Zy BsDfe+ajjw5avumAFG0eB0fJgTdG1axnB4GTt/MA2hEKFM1Om/pRrWYgXkj90ycw ABs6IPjJJieglfeFGunmnHD/gQ8bY9s41UtDbtVp9Q8XQlxPOeED2MuS69GpJ8oW JI4NGJZqFoo+pobc6SuYbkCRonkSk64P25+vtLBEi8QPWQtnuWuXeuereX2Iyg8I 3vd/qz44Jidve+UD8kDa/qWQ8AHSP4F8VoGgT1ZVy0SskoOyKkIQuS77WA== -----END CERTIFICATE-----Generated at Thu Nov 21 16:26:25 2024 by rpki-client on console-ams.rpki-client.org