$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer File: 21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer (raw, json) Hash identifier: /1+Xg+AT1JNKrsBJHLumNiiQ7o9b8q+FdqToYkMWSdE= Subject key identifier: 6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858440CF62032F3B2909306AC1E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Nov 2023 16:24:45 +0000 Certificate not after: Tue 03 Mar 2026 16:24:45 +0000 Subordinate resources: AS: 14573 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:0c:f6:20:32:f3:b2:90:93:06:ac:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Nov 29 16:24:45 2023 GMT Not After : Mar 3 16:24:45 2026 GMT Subject: CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:79:b1:f0:49:48:b1:2b:c8:93:04:74:d8: d7:91:09:78:ee:be:78:fb:49:bf:39:28:45:c8:a7: 49:24:8a:cb:f5:84:59:58:bf:0e:19:fe:7f:4d:bb: ed:02:ce:b7:84:ae:69:a7:f9:72:7e:06:a5:bf:4e: dc:72:56:8b:b1:2f:b7:85:43:ab:95:10:9f:58:2a: 8b:43:2d:23:45:bd:49:12:34:b2:40:9c:bf:15:72: df:5c:be:8a:36:16:59:ee:e1:93:17:01:12:0c:0f: de:0a:4f:d6:46:b8:54:ca:1b:d2:6a:ec:fd:8f:a4: a8:5d:49:d1:c4:50:8b:f0:90:2d:3f:18:ac:35:f4: 32:00:f9:ef:83:32:5d:78:af:8b:1b:82:b0:f5:00: 57:81:ba:81:12:17:37:96:01:51:ed:79:f7:00:26: e0:82:f6:29:ce:b3:7c:8a:43:25:a4:de:70:2c:d6: b4:32:da:77:9f:f3:89:37:ed:06:46:8d:14:28:ea: bc:73:0f:03:41:6d:98:02:46:da:58:cf:37:37:78: 32:ad:39:74:c0:cb:b4:d7:c7:a0:69:99:4e:c9:ca: df:82:ff:18:36:d0:03:be:df:4b:37:82:a2:d7:f3: c1:d3:bd:7c:b3:0e:4a:26:e0:72:da:ef:4e:37:ed: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14573 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:65:a0:f5:ed:05:b4:1b:ec:c2:c8:fe:e6:48:66:22:e5:93: 7f:65:37:f9:90:9f:b8:73:88:7b:1d:60:06:5d:03:de:dc:f2: b2:92:66:ee:f6:30:9b:df:b6:b9:40:ac:15:d5:d6:ad:c6:e7: bb:24:18:0d:cb:ea:47:44:5a:8a:83:b9:7e:e1:02:ff:5d:36: a6:22:6c:9b:17:c8:c4:e5:42:0b:79:e8:0f:ed:73:ab:97:b8: a9:da:92:07:c3:62:fc:f0:33:a3:4d:e2:21:ec:0d:84:e4:b1: 78:bb:98:38:99:d0:dd:70:6b:fc:ac:ed:ee:f1:fd:45:8a:dd: 4a:3e:53:8d:a6:67:da:ed:bb:07:16:bd:1c:8b:7d:04:49:08: 09:8b:f1:fa:5e:3f:b3:96:5b:f1:4a:5a:81:4d:e7:bf:cc:9f: c9:e4:f0:f6:6a:56:b4:37:bd:09:ec:8e:3b:37:5b:e1:aa:04: f1:7f:49:44:83:14:28:73:11:20:52:0b:8e:e0:80:fa:86:ce: d2:72:dc:12:8b:a8:af:9c:1f:dc:f7:db:f0:8a:2a:b0:35:e8: cc:a6:2e:0f:16:70:5f:eb:23:49:bf:b7:84:4d:39:e3:bd:df: c4:a6:4a:e3:bb:a0:f3:d1:eb:b9:da:02:e0:4b:cc:12:61:5e: b3:56:95:15 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEQM9iAy87KQkwasHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTEyOTE2MjQ0NVoXDTI2MDMwMzE2MjQ0NVowLzEtMCsGA1UEAxMk MjFiZDBhN2QtNmQ4OS00MzhmLWJhOGEtOGNlMTYxZTk3ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJ5sfBJSLEryJMEdNjXkQl47r54+0m/OShF yKdJJIrL9YRZWL8OGf5/TbvtAs63hK5pp/lyfgalv07cclaLsS+3hUOrlRCfWCqL Qy0jRb1JEjSyQJy/FXLfXL6KNhZZ7uGTFwESDA/eCk/WRrhUyhvSauz9j6SoXUnR xFCL8JAtPxisNfQyAPnvgzJdeK+LG4Kw9QBXgbqBEhc3lgFR7Xn3ACbggvYpzrN8 ikMlpN5wLNa0Mtp3n/OJN+0GRo0UKOq8cw8DQW2YAkbaWM83N3gyrTl0wMu018eg aZlOycrfgv8YNtADvt9LN4Ki1/PB0718sw5KJuBy2u9ON+0vJQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFG+F9MerCuyBotT3TRQFoPTBV3mMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y MWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFlOTdkMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzIxYmQwYTdkLTZkODktNDM4Zi1i YThhLThjZTE2MWU5N2QzOS8yMWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFl OTdkMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICOO0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVmWg9e0FtBvswsj+5khmIuWTf2U3 +ZCfuHOIex1gBl0D3tzyspJm7vYwm9+2uUCsFdXWrcbnuyQYDcvqR0RaioO5fuEC /102piJsmxfIxOVCC3noD+1zq5e4qdqSB8Ni/PAzo03iIewNhOSxeLuYOJnQ3XBr /Kzt7vH9RYrdSj5TjaZn2u27Bxa9HIt9BEkICYvx+l4/s5Zb8UpagU3nv8yfyeTw 9mpWtDe9CeyOOzdb4aoE8X9JRIMUKHMRIFILjuCA+obO0nLcEouor5wf3Pfb8Ioq sDXozKYuDxZwX+sjSb+3hE05473fxKZK47ug89HrudoC4EvMEmFes1aVFQ== -----END CERTIFICATE-----Generated at Sat May 11 15:35:55 2024 by rpki-client on console-fra.rpki-client.org