$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d982f3-2d17-4f12-96b0-c0e5b7eabe84.cer File: 07d982f3-2d17-4f12-96b0-c0e5b7eabe84.cer (raw, json) Hash identifier: 05yT3tSsIojqFvaEP4v9bknz1+HVids7GD7AJnWoGo0= Subject key identifier: 02:7C:F3:9A:B8:E7:03:17:E8:E2:95:BF:51:98:C8:96:46:B9:0D:F6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858421FCB763A730CCDCE1C8ABA50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d982f3-2d17-4f12-96b0-c0e5b7eabe84/07d982f3-2d17-4f12-96b0-c0e5b7eabe84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d982f3-2d17-4f12-96b0-c0e5b7eabe84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Jun 2023 00:45:16 +0000 Certificate not after: Mon 08 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 399469 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:1f:cb:76:3a:73:0c:cd:ce:1c:8a:ba:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 6 00:45:16 2023 GMT Not After : Sep 8 00:45:16 2025 GMT Subject: CN=07d982f3-2d17-4f12-96b0-c0e5b7eabe84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:80:07:15:06:61:b4:b3:53:68:5c:dd:69: 67:d4:88:01:0a:2e:af:f9:11:b4:fb:d0:13:b9:6a: 48:dc:47:6a:38:48:f1:6a:01:01:80:d0:e8:45:bb: 7c:35:fa:77:8b:3a:00:67:3e:b2:2e:69:e0:a1:63: 90:75:9b:95:10:47:ee:c5:14:3b:53:83:f1:00:7a: b0:c2:b2:a3:9a:9d:86:69:c5:ec:13:f1:5d:6d:f7: bb:b8:b0:55:6f:47:6e:a0:8d:03:b7:c1:1e:2b:9d: 2e:62:ec:0d:94:d9:d6:68:fc:26:27:72:ab:63:ff: 68:92:23:e6:a0:6b:14:f1:fb:8c:ff:df:a8:f8:dd: 20:3d:dd:b0:03:da:90:c6:ac:ac:2d:4b:32:25:ad: c3:06:37:55:8e:29:17:cb:1b:7e:9b:d5:a5:5c:4c: 2b:25:5b:ad:b6:6b:02:7f:fc:a7:2d:d7:ca:3a:f8: 10:14:bb:a2:3c:4a:d0:56:64:8a:e0:4e:ed:59:20: 31:7a:eb:bd:4e:88:0b:52:7b:5e:2d:b9:8c:be:4d: 50:79:65:d7:07:d3:57:cf:b1:62:f2:7d:48:bc:9d: 4c:b7:10:43:14:aa:73:40:2e:8d:cd:69:ff:9b:04: b1:4f:33:f5:52:ff:1b:33:5f:14:67:3d:0b:0f:b0: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7C:F3:9A:B8:E7:03:17:E8:E2:95:BF:51:98:C8:96:46:B9:0D:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d982f3-2d17-4f12-96b0-c0e5b7eabe84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07d982f3-2d17-4f12-96b0-c0e5b7eabe84/07d982f3-2d17-4f12-96b0-c0e5b7eabe84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399469 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:27:9b:4b:0b:56:c5:c9:a8:77:76:cd:a4:ee:76:46:7d:a3: 94:8a:67:ce:14:50:88:49:8e:f9:1d:5e:3a:08:57:47:57:21: 2c:b2:9a:1f:7c:16:d7:a4:07:8a:b3:18:db:96:db:60:10:48: b0:9a:c6:25:b8:1b:bf:24:ed:d9:68:e7:66:24:87:75:d8:5c: c0:4f:02:18:5e:70:0a:29:09:08:83:62:9e:4d:ee:44:27:8d: 88:13:ad:9d:05:6e:22:15:dd:7f:50:2e:4d:a0:72:a1:f8:76: ba:60:be:ea:b2:12:67:f3:7d:df:c5:89:4c:24:47:4a:50:ee: 2e:e3:77:2f:1e:30:84:03:3b:c0:ca:fb:7c:88:dc:71:99:fd: a3:87:87:bd:d2:ef:fd:26:a9:96:d3:23:26:37:a0:85:0f:fa: 0f:4c:43:0e:d9:4c:a7:4d:2a:12:4b:16:53:a4:f1:be:19:68: f5:f5:f0:98:6f:40:27:42:7b:f6:66:e1:fc:81:bf:9e:ee:3f: c7:30:77:62:e0:ab:20:a1:85:cd:cd:23:fc:05:f4:e6:43:e9: 22:4d:9a:57:5c:c0:47:ba:53:ee:0f:0d:38:00:d3:16:ba:c1: f2:71:69:a4:a4:be:24:55:0e:29:02:d9:4c:f7:95:7a:fe:aa: 8a:0f:f9:11 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEIfy3Y6cwzNzhyKulAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDYwNjAwNDUxNloXDTI1MDkwODAwNDUxNlowLzEtMCsGA1UEAxMk MDdkOTgyZjMtMmQxNy00ZjEyLTk2YjAtYzBlNWI3ZWFiZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZeABxUGYbSzU2hc3Wln1IgBCi6v+RG0+9AT uWpI3EdqOEjxagEBgNDoRbt8Nfp3izoAZz6yLmngoWOQdZuVEEfuxRQ7U4PxAHqw wrKjmp2GacXsE/Fdbfe7uLBVb0duoI0Dt8EeK50uYuwNlNnWaPwmJ3KrY/9okiPm oGsU8fuM/9+o+N0gPd2wA9qQxqysLUsyJa3DBjdVjikXyxt+m9WlXEwrJVuttmsC f/ynLdfKOvgQFLuiPErQVmSK4E7tWSAxeuu9TogLUnteLbmMvk1QeWXXB9NXz7Fi 8n1IvJ1MtxBDFKpzQC6NzWn/mwSxTzP1Uv8bM18UZz0LD7BmWwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFAJ885q45wMX6OKVv1GYyJZGuQ32MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w N2Q5ODJmMy0yZDE3LTRmMTItOTZiMC1jMGU1YjdlYWJlODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA3ZDk4MmYzLTJkMTctNGYxMi05 NmIwLWMwZTViN2VhYmU4NC8wN2Q5ODJmMy0yZDE3LTRmMTItOTZiMC1jMGU1Yjdl YWJlODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhhtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACwnm0sLVsXJqHd2zaTudkZ9o5SK Z84UUIhJjvkdXjoIV0dXISyymh98FtekB4qzGNuW22AQSLCaxiW4G78k7dlo52Yk h3XYXMBPAhhecAopCQiDYp5N7kQnjYgTrZ0FbiIV3X9QLk2gcqH4drpgvuqyEmfz fd/FiUwkR0pQ7i7jdy8eMIQDO8DK+3yI3HGZ/aOHh73S7/0mqZbTIyY3oIUP+g9M Qw7ZTKdNKhJLFlOk8b4ZaPX18JhvQCdCe/Zm4fyBv57uP8cwd2LgqyChhc3NI/wF 9OZD6SJNmldcwEe6U+4PDTgA0xa6wfJxaaSkviRVDikC2Uz3lXr+qooP+RE= -----END CERTIFICATE-----Generated at Thu Apr 25 22:45:07 2024 by rpki-client on console-fra.rpki-client.org