$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe.cer File: b5615d12-8558-4019-b1d5-797e6ca333fe.cer (raw, json) Hash identifier: 1NDUQ78Vni8RJ24Bigso6Tr+R9nrw+Rw9AKh4pSUV/I= Subject key identifier: 44:CB:A0:C4:B3:F3:4D:A9:A1:D7:FC:F6:32:88:F2:52:F4:88:4D:FA Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285846EEF335B50560AE15426D1F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe/b5615d12-8558-4019-b1d5-797e6ca333fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Aug 2024 00:45:25 +0000 Certificate not after: Mon 23 Nov 2026 01:45:25 +0000 Subordinate resources: AS: 396395 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:ee:f3:35:b5:05:60:ae:15:42:6d:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 20 00:45:25 2024 GMT Not After : Nov 23 01:45:25 2026 GMT Subject: CN=b5615d12-8558-4019-b1d5-797e6ca333fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:ec:04:2f:5a:b9:3a:c8:cd:fc:dd:f0:7f: d6:e5:5e:66:0e:0b:13:b2:3d:de:45:04:70:45:4f: 9b:73:01:fa:c9:e0:77:6a:5a:39:73:7c:22:d1:2f: f4:43:4e:a4:5b:6f:6e:ec:c3:e2:88:70:06:1d:2b: cd:be:d6:fb:6a:68:ef:76:a7:35:cb:0e:75:24:d2: ab:61:90:62:d1:5e:fc:12:43:63:fb:e7:8b:22:6c: b4:d1:10:35:4b:38:f1:53:79:5d:24:b0:01:1b:db: 2f:3a:01:3c:80:31:f5:10:f9:03:13:1b:85:a6:34: 42:4e:42:bd:b1:35:cf:27:bd:6b:91:0b:42:49:42: e4:e0:6b:5a:10:3f:97:9d:7a:55:0d:54:4b:2f:67: f6:17:09:5a:62:be:3f:a1:9b:8d:9c:2b:15:a4:00: 2d:69:a2:76:0f:f6:d1:c1:9e:57:11:ed:53:a5:6c: 75:03:90:14:5b:9f:bf:f6:be:3d:75:26:84:10:6b: dd:5f:73:27:82:b3:0e:d0:8c:08:43:97:d3:1e:06: 62:96:12:a0:d9:ef:10:4b:48:d3:3f:c4:0c:6e:42: f8:ae:49:c3:67:ff:8d:b3:58:9d:76:a0:e8:92:a9: fa:48:33:dd:7b:3c:fb:b0:49:83:ee:89:91:13:3b: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CB:A0:C4:B3:F3:4D:A9:A1:D7:FC:F6:32:88:F2:52:F4:88:4D:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe/b5615d12-8558-4019-b1d5-797e6ca333fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396395 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:27:eb:86:a8:3c:5c:61:a6:b2:ba:a2:b0:b7:55:bd:19:cf: fe:18:a1:a2:9c:09:ae:79:6d:aa:4f:cb:c9:6e:fe:66:e0:87: ad:bf:08:14:18:b9:91:a0:b4:7e:e2:53:b9:6b:25:56:8b:00: 44:e7:99:89:54:f9:4d:c5:1e:07:0b:f6:ca:3d:d0:fd:3a:cd: 59:ce:5c:97:d2:9f:25:0b:c5:c9:9a:eb:81:8e:f1:20:f4:69: 90:50:da:21:2a:c5:17:ca:00:f9:b1:5d:e0:f1:01:36:36:97: 3b:64:4f:34:d7:95:f7:79:80:6b:50:83:51:c5:01:c5:54:8d: 03:d7:15:7c:a2:80:3e:9d:59:66:74:c3:d5:54:95:56:93:72: aa:00:e1:1f:55:19:90:4a:05:60:ba:7d:5d:8f:85:15:82:7e: 20:10:4a:29:f0:53:ed:4d:e8:f9:85:c7:3d:e2:5c:54:a2:f2: ad:fb:7a:a0:fb:a3:7f:0a:f0:12:aa:4e:98:ea:19:0b:a5:e9: 7a:c6:90:e2:60:48:e4:90:14:9f:73:6c:65:61:57:2c:3b:ee: 2d:69:07:49:59:58:59:ba:96:f6:76:93:76:b4:3c:f6:2c:04: 36:08:26:77:96:7c:8e:01:bb:fc:d4:51:94:85:87:68:4b:7b: 9f:5f:83:96 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEbu8zW1BWCuFUJtH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDgyMDAwNDUyNVoXDTI2MTEyMzAxNDUyNVowLzEtMCsGA1UEAxMk YjU2MTVkMTItODU1OC00MDE5LWIxZDUtNzk3ZTZjYTMzM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOrsBC9auTrIzfzd8H/W5V5mDgsTsj3eRQRw RU+bcwH6yeB3alo5c3wi0S/0Q06kW29u7MPiiHAGHSvNvtb7amjvdqc1yw51JNKr YZBi0V78EkNj++eLImy00RA1SzjxU3ldJLABG9svOgE8gDH1EPkDExuFpjRCTkK9 sTXPJ71rkQtCSULk4GtaED+XnXpVDVRLL2f2FwlaYr4/oZuNnCsVpAAtaaJ2D/bR wZ5XEe1TpWx1A5AUW5+/9r49dSaEEGvdX3MngrMO0IwIQ5fTHgZilhKg2e8QS0jT P8QMbkL4rknDZ/+Ns1iddqDokqn6SDPdezz7sEmD7omREzsefwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFETLoMSz802podf89jKI8lL0iE36MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i NTYxNWQxMi04NTU4LTQwMTktYjFkNS03OTdlNmNhMzMzZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2I1NjE1ZDEyLTg1NTgtNDAxOS1i MWQ1LTc5N2U2Y2EzMzNmZS9iNTYxNWQxMi04NTU4LTQwMTktYjFkNS03OTdlNmNh MzMzZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgxrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAsn64aoPFxhprK6orC3Vb0Zz/4Y oaKcCa55bapPy8lu/mbgh62/CBQYuZGgtH7iU7lrJVaLAETnmYlU+U3FHgcL9so9 0P06zVnOXJfSnyULxcma64GO8SD0aZBQ2iEqxRfKAPmxXeDxATY2lztkTzTXlfd5 gGtQg1HFAcVUjQPXFXyigD6dWWZ0w9VUlVaTcqoA4R9VGZBKBWC6fV2PhRWCfiAQ SinwU+1N6PmFxz3iXFSi8q37eqD7o38K8BKqTpjqGQul6XrGkOJgSOSQFJ9zbGVh Vyw77i1pB0lZWFm6lvZ2k3a0PPYsBDYIJneWfI4Bu/zUUZSFh2hLe59fg5Y= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:29 2024 by rpki-client on console-fra.rpki-client.org