$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c301e755-c0f8-4871-a18a-a46f7cc49385.cer File: c301e755-c0f8-4871-a18a-a46f7cc49385.cer (raw, json) Hash identifier: APkkWcdwC/AijTjmk2ZAK4FF7uw2iG47HjyTVagSIPU= Subject key identifier: 06:CE:61:8C:2A:12:79:3A:57:E4:DF:5C:73:D1:48:69:AF:20:BB:BB Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858476433F182CF429326915F6700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c301e755-c0f8-4871-a18a-a46f7cc49385/c301e755-c0f8-4871-a18a-a46f7cc49385.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c301e755-c0f8-4871-a18a-a46f7cc49385/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Oct 2024 00:45:26 +0000 Certificate not after: Mon 04 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 399232 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:33:f1:82:cf:42:93:26:91:5f:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 1 00:45:26 2024 GMT Not After : Jan 4 01:45:26 2027 GMT Subject: CN=c301e755-c0f8-4871-a18a-a46f7cc49385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:65:d7:2a:51:84:a4:6b:49:e3:a5:e8:c4: 80:ca:32:39:e1:58:56:87:ac:af:37:83:30:2b:ff: 19:b1:97:15:66:41:91:ae:77:81:e3:24:5d:b7:b4: 7f:0d:f3:f7:4b:82:a6:30:7e:26:fe:38:b5:73:88: 87:fd:63:d5:77:0b:6c:00:e5:e3:46:95:90:c0:d4: b5:eb:f6:3c:26:30:2d:c7:fc:c2:e8:46:f0:a7:09: cc:81:96:bd:90:e8:0b:28:af:20:c8:51:bb:9e:3d: 95:e5:35:85:45:4c:8d:b5:fa:8f:75:08:54:56:03: 1a:0d:9e:e9:6a:15:0b:73:bf:15:f6:22:44:e6:e2: c0:d3:19:ac:b3:f0:d1:04:fe:67:52:52:05:56:48: 24:bd:37:39:ff:08:b7:7a:f3:53:c5:c4:1c:58:4d: a3:99:ed:be:d6:3f:37:e0:53:40:69:c0:25:2a:20: 68:95:79:ab:84:48:da:37:6e:13:43:21:18:c1:83: 94:46:c4:82:55:39:7a:1d:c2:e8:e8:85:ee:fa:8c: f8:b7:40:a0:e0:48:17:d9:da:39:92:bc:ff:ef:42: 71:4a:1b:e4:3e:f8:e2:d1:09:66:c5:d4:6d:5e:9e: cf:52:07:67:59:c0:95:3e:2d:38:5d:ce:04:a5:6c: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CE:61:8C:2A:12:79:3A:57:E4:DF:5C:73:D1:48:69:AF:20:BB:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c301e755-c0f8-4871-a18a-a46f7cc49385/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c301e755-c0f8-4871-a18a-a46f7cc49385/c301e755-c0f8-4871-a18a-a46f7cc49385.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399232 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:68:c2:af:eb:ba:c5:3b:73:34:c2:f1:aa:c5:5e:eb:28:68: 37:7f:c0:5c:2b:45:b3:62:e3:d7:29:b2:d5:9c:7e:31:d2:28: e0:81:d8:15:3c:d2:94:55:58:16:62:69:57:19:31:8a:3b:3c: 82:c8:a3:ac:1b:d5:d0:14:da:23:19:00:db:fa:75:d2:02:f6: ff:ec:b6:e0:41:0b:7e:a9:4d:64:dc:84:af:23:21:3f:12:fd: c1:15:a9:2f:77:f9:69:68:f7:27:83:77:70:8d:a7:c0:17:de: 3e:09:4c:5d:41:58:67:27:f6:c6:ce:96:ff:1e:b8:83:bf:de: bb:37:bb:a2:71:8e:c5:85:b2:96:2e:61:0e:fb:d4:47:d4:f3: 6a:38:2c:28:60:d2:fe:f7:da:68:0a:11:1f:f6:31:9b:40:7c: 8a:8d:06:f4:ac:d0:be:2a:e1:bb:56:63:bc:4e:82:23:9c:98: e9:6e:9b:58:ae:a6:e8:01:9f:2e:0d:ef:42:39:85:4f:6a:d3: 8c:4d:28:c8:69:69:b7:9c:9f:f6:1c:81:2a:fb:dc:60:47:9f: 76:35:61:00:2f:6b:c9:f2:3f:d9:db:6b:d2:a0:e4:a8:73:ee: 4b:f9:01:c2:c5:05:39:69:ab:fc:ee:fc:87:cb:c1:09:20:f2: a7:f3:51:57 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEdkM/GCz0KTJpFfZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTAwMTAwNDUyNloXDTI3MDEwNDAxNDUyNlowLzEtMCsGA1UEAxMk YzMwMWU3NTUtYzBmOC00ODcxLWExOGEtYTQ2ZjdjYzQ5Mzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGxl1ypRhKRrSeOl6MSAyjI54VhWh6yvN4Mw K/8ZsZcVZkGRrneB4yRdt7R/DfP3S4KmMH4m/ji1c4iH/WPVdwtsAOXjRpWQwNS1 6/Y8JjAtx/zC6EbwpwnMgZa9kOgLKK8gyFG7nj2V5TWFRUyNtfqPdQhUVgMaDZ7p ahULc78V9iJE5uLA0xmss/DRBP5nUlIFVkgkvTc5/wi3evNTxcQcWE2jme2+1j83 4FNAacAlKiBolXmrhEjaN24TQyEYwYOURsSCVTl6HcLo6IXu+oz4t0Cg4EgX2do5 krz/70JxShvkPvji0QlmxdRtXp7PUgdnWcCVPi04Xc4EpWyV0wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFAbOYYwqEnk6V+TfXHPRSGmvILu7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j MzAxZTc1NS1jMGY4LTQ4NzEtYTE4YS1hNDZmN2NjNDkzODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2MzMDFlNzU1LWMwZjgtNDg3MS1h MThhLWE0NmY3Y2M0OTM4NS9jMzAxZTc1NS1jMGY4LTQ4NzEtYTE4YS1hNDZmN2Nj NDkzODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBheAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHJowq/rusU7czTC8arFXusoaDd/ wFwrRbNi49cpstWcfjHSKOCB2BU80pRVWBZiaVcZMYo7PILIo6wb1dAU2iMZANv6 ddIC9v/stuBBC36pTWTchK8jIT8S/cEVqS93+Wlo9yeDd3CNp8AX3j4JTF1BWGcn 9sbOlv8euIO/3rs3u6JxjsWFspYuYQ771EfU82o4LChg0v732mgKER/2MZtAfIqN BvSs0L4q4btWY7xOgiOcmOlum1iupugBny4N70I5hU9q04xNKMhpabecn/YcgSr7 3GBHn3Y1YQAva8nyP9nba9Kg5Khz7kv5AcLFBTlpq/zu/IfLwQkg8qfzUVc= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:30 2024 by rpki-client on console-fra.rpki-client.org