$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.cer File: c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.cer (raw, json) Hash identifier: J7MIqK0sA98jfaPQwzg69Dr5OxVcCjaqFXZZ4QN/zXE= Subject key identifier: FE:81:51:36:4F:40:83:92:EB:EF:8F:DE:E7:8E:89:D0:FA:32:17:D2 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285845628608267E4E7F8922452400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 31 Mar 2024 00:45:21 +0000 Certificate not after: Sat 04 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 46401 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:86:08:26:7e:4e:7f:89:22:45:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 31 00:45:21 2024 GMT Not After : Jul 4 00:45:21 2026 GMT Subject: CN=c62b2f2e-99d7-4927-b2c8-10b5b15e00d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:33:1f:af:4b:2b:8b:fc:a6:3b:4a:ba:36: dd:c3:49:43:5f:22:e0:1e:d6:8f:95:b4:63:c2:89: c8:31:d2:8a:cf:a9:6a:64:a4:c8:30:c5:2d:d6:f0: 47:c9:b6:13:51:4b:a2:d9:71:3d:8f:f6:bc:9f:66: f4:38:8b:0e:34:80:3a:96:02:1d:a3:9d:16:8a:98: db:83:4f:ad:81:77:1d:b1:ac:f4:83:66:ef:95:71: 86:70:be:46:27:21:af:a9:1a:70:88:44:eb:d1:d2: 81:75:1e:bf:2a:6d:d5:64:01:b6:fe:c0:e4:4e:7f: 75:62:39:a2:a0:16:f7:9f:ce:d6:19:ff:92:ff:90: 01:bb:86:87:c4:e2:6d:b7:eb:03:cb:09:f6:a8:af: 7f:37:58:d6:49:cf:13:25:02:19:77:e1:31:db:a6: 8b:09:40:0a:b2:83:d8:33:02:94:b3:c3:39:74:c5: e9:67:33:3c:c1:4e:7c:5d:bf:94:d8:a6:d5:db:f7: 77:6f:bb:f8:0f:83:fc:56:0d:44:bb:1a:ea:00:af: af:6a:79:4d:9f:27:31:a3:03:18:4c:85:bf:d4:61: cd:5d:94:51:af:5e:46:31:67:89:15:33:11:5d:b5: 95:d4:96:5f:57:40:2d:0a:fe:4c:0f:4a:dc:d8:9c: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:81:51:36:4F:40:83:92:EB:EF:8F:DE:E7:8E:89:D0:FA:32:17:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 46401 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d8:d2:c8:81:ae:ee:41:37:04:7e:c3:5d:99:ce:b0:b4:e1: dd:42:01:2b:ad:bf:36:7a:c6:85:e7:c8:40:65:0f:c0:34:da: 91:0c:3e:5a:65:06:fa:c7:ea:c8:dd:d9:6c:62:9b:93:b3:6c: 5b:66:08:8d:a6:4a:d1:e9:e7:5d:a0:6b:07:fd:76:25:e8:cb: 4d:dd:39:c2:72:f6:41:98:fb:88:65:0f:db:16:2b:e0:6f:31: 61:11:cc:7e:b0:87:fc:8f:4f:85:11:c1:14:42:3f:e3:ca:e1: 10:32:ee:d0:fd:b1:4f:c9:44:17:51:04:40:42:b7:6b:61:33: 8c:22:01:11:1a:11:65:9b:27:78:50:7a:97:bc:c0:ba:21:5b: 04:f5:6c:c2:3b:95:3d:5b:85:8f:ae:39:cf:99:39:5f:c8:8e: bd:ed:26:53:04:0c:98:18:62:bc:d4:77:3f:9d:51:85:d5:8e: 10:4a:8f:23:6d:7b:50:e8:11:f2:f0:0f:ad:63:9a:80:d5:7c: 3c:37:41:bc:a8:be:f9:3c:d0:c7:01:9c:fa:14:4f:24:57:11: 77:bc:11:1f:43:fb:4f:be:ae:e1:5f:1d:6c:c2:51:4b:9a:db: 84:f9:c5:8b:78:77:a0:8a:c2:07:f4:cd:5d:06:d6:7e:75:dc: 41:cb:f5:13 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEVihggmfk5/iSJFJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDMzMTAwNDUyMVoXDTI2MDcwNDAwNDUyMVowLzEtMCsGA1UEAxMk YzYyYjJmMmUtOTlkNy00OTI3LWIyYzgtMTBiNWIxNWUwMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijkzH69LK4v8pjtKujbdw0lDXyLgHtaPlbRj wonIMdKKz6lqZKTIMMUt1vBHybYTUUui2XE9j/a8n2b0OIsONIA6lgIdo50Wipjb g0+tgXcdsaz0g2bvlXGGcL5GJyGvqRpwiETr0dKBdR6/Km3VZAG2/sDkTn91Yjmi oBb3n87WGf+S/5ABu4aHxOJtt+sDywn2qK9/N1jWSc8TJQIZd+Ex26aLCUAKsoPY MwKUs8M5dMXpZzM8wU58Xb+U2KbV2/d3b7v4D4P8Vg1EuxrqAK+vanlNnycxowMY TIW/1GHNXZRRr15GMWeJFTMRXbWV1JZfV0AtCv5MD0rc2JzYpwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFP6BUTZPQIOS6++P3ueOidD6MhfSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j NjJiMmYyZS05OWQ3LTQ5MjctYjJjOC0xMGI1YjE1ZTAwZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M2MmIyZjJlLTk5ZDctNDkyNy1i MmM4LTEwYjViMTVlMDBkOC9jNjJiMmYyZS05OWQ3LTQ5MjctYjJjOC0xMGI1YjE1 ZTAwZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALVBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG7Y0siBru5BNwR+w12ZzrC04d1C ASutvzZ6xoXnyEBlD8A02pEMPlplBvrH6sjd2Wxim5OzbFtmCI2mStHp512gawf9 diXoy03dOcJy9kGY+4hlD9sWK+BvMWERzH6wh/yPT4URwRRCP+PK4RAy7tD9sU/J RBdRBEBCt2thM4wiAREaEWWbJ3hQepe8wLohWwT1bMI7lT1bhY+uOc+ZOV/Ijr3t JlMEDJgYYrzUdz+dUYXVjhBKjyNte1DoEfLwD61jmoDVfDw3Qbyovvk80McBnPoU TyRXEXe8ER9D+0++ruFfHWzCUUua24T5xYt4d6CKwgf0zV0G1n513EHL9RM= -----END CERTIFICATE-----Generated at Fri Apr 26 11:16:07 2024 by rpki-client on console-ams.rpki-client.org