$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f.cer File: 42228b03-73da-4c1a-9825-832cf144e90f.cer (raw, json) Hash identifier: WY7WhdBw+lW9fUjs3KVy0gfgbvzXhakudlxoF/kAhH4= Subject key identifier: 41:AB:20:75:D8:31:52:AF:3C:69:51:E5:0F:88:26:A0:6A:15:DD:9B Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858446EA26A304C15EE4BE2383200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/42228b03-73da-4c1a-9825-832cf144e90f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Jan 2024 16:05:18 +0000 Certificate not after: Tue 07 Apr 2026 15:05:18 +0000 Subordinate resources: AS: 399622 IP: 2606:4940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:6e:a2:6a:30:4c:15:ee:4b:e2:38:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 3 16:05:18 2024 GMT Not After : Apr 7 15:05:18 2026 GMT Subject: CN=42228b03-73da-4c1a-9825-832cf144e90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:c0:62:ce:25:c9:3a:60:63:da:6b:d7:14: 04:35:43:8f:61:80:e0:2a:04:7b:59:35:e3:a8:4e: 9d:27:f9:8a:47:24:b9:ee:fa:26:4a:0d:5f:2b:fc: df:5c:3f:53:ec:7f:9a:e5:9b:4c:5a:61:e1:7b:f9: 4a:6a:fb:e2:09:79:f5:bf:98:88:20:57:4c:55:5e: d2:e9:8a:d4:6b:cd:30:76:e2:15:d0:e1:54:ae:89: 62:0a:0b:32:70:f7:a7:a2:7b:01:b2:b0:36:90:a0: 3f:84:d4:ae:1f:29:5b:b6:7e:6c:72:a1:0b:ae:05: 62:ec:e0:75:0c:f5:e2:50:32:a4:c9:e8:00:e6:2d: ae:85:1d:7a:5b:85:1e:3d:c4:e1:f7:c6:fd:c6:db: b1:fb:4e:b7:cc:95:29:2f:a9:90:93:d1:ad:12:89: c1:4c:cd:00:8d:c9:0d:f3:8e:78:84:d3:f5:b1:0c: 51:d1:54:85:fa:c4:13:49:07:04:5a:a3:d1:5a:69: c0:7e:50:44:b7:d4:2f:5e:4e:9d:29:4f:61:5a:d3: ba:2f:34:11:98:3c:0f:d7:9d:1d:ac:7d:d1:c4:91: 55:58:39:ed:1c:b4:60:8d:08:d7:52:f5:a2:40:4f: 9b:0b:cf:2b:89:5f:3f:0e:e4:d9:8c:22:07:56:be: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AB:20:75:D8:31:52:AF:3C:69:51:E5:0F:88:26:A0:6A:15:DD:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42228b03-73da-4c1a-9825-832cf144e90f/42228b03-73da-4c1a-9825-832cf144e90f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:4940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399622 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e1:cc:92:c3:5d:aa:ac:66:2c:92:aa:04:04:d5:41:f6:aa: dc:61:99:aa:82:a8:a3:4c:ec:cd:12:eb:2b:70:c0:95:f9:62: 5e:50:8e:07:03:c0:d8:4f:75:8a:fd:c7:ec:8c:8b:3f:78:d0: 37:b1:2f:0b:19:44:b0:e7:4b:d2:7b:87:db:96:36:8a:c4:15: bd:ff:8e:e5:f6:27:8e:4e:31:3f:9f:17:0b:a2:9d:40:a9:27: fb:fd:73:a5:20:bf:a6:fc:45:cc:d0:0b:ae:ee:90:84:fa:91: da:c4:3d:d9:dd:f5:16:d4:b8:94:dd:76:84:1f:c9:b4:a7:89: 3a:23:9f:09:0c:de:63:dc:68:71:63:4c:ff:7e:5d:f9:f0:d1: 69:6a:1c:b3:b3:35:2f:99:62:32:21:bb:60:a9:51:4c:1e:8d: 6b:e4:7c:56:c4:5d:54:cf:2b:dc:ad:05:c3:d3:a9:82:b6:34: ab:fb:4a:16:d4:86:66:3e:de:b0:72:65:00:8b:92:9d:61:5e: 5b:77:10:e7:cf:8c:b2:ce:58:cb:92:2c:16:d4:cf:ca:5a:14: 92:e3:c3:ab:71:23:58:9d:8c:3b:1f:e5:de:b0:ca:99:69:fe: 9d:e8:4f:bd:d0:f2:fc:11:ec:41:fb:ce:3e:0e:5f:cd:7e:c3: 68:7c:85:ac -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWERuomowTBXuS+I4MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDEwMzE2MDUxOFoXDTI2MDQwNzE1MDUxOFowLzEtMCsGA1UEAxMk NDIyMjhiMDMtNzNkYS00YzFhLTk4MjUtODMyY2YxNDRlOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLzAYs4lyTpgY9pr1xQENUOPYYDgKgR7WTXj qE6dJ/mKRyS57vomSg1fK/zfXD9T7H+a5ZtMWmHhe/lKavviCXn1v5iIIFdMVV7S 6YrUa80wduIV0OFUroliCgsycPenonsBsrA2kKA/hNSuHylbtn5scqELrgVi7OB1 DPXiUDKkyegA5i2uhR16W4UePcTh98b9xtux+063zJUpL6mQk9GtEonBTM0AjckN 8454hNP1sQxR0VSF+sQTSQcEWqPRWmnAflBEt9QvXk6dKU9hWtO6LzQRmDwP150d rH3RxJFVWDntHLRgjQjXUvWiQE+bC88riV8/DuTZjCIHVr4dywIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFEGrIHXYMVKvPGlR5Q+IJqBqFd2bMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 MjIyOGIwMy03M2RhLTRjMWEtOTgyNS04MzJjZjE0NGU5MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQyMjI4YjAzLTczZGEtNGMxYS05 ODI1LTgzMmNmMTQ0ZTkwZi80MjIyOGIwMy03M2RhLTRjMWEtOTgyNS04MzJjZjE0 NGU5MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBklAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYZBjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCY4cySw12qrGYskqoEBNVB9qrcYZmqgqijTOzNEusrcMCV +WJeUI4HA8DYT3WK/cfsjIs/eNA3sS8LGUSw50vSe4fbljaKxBW9/47l9ieOTjE/ nxcLop1AqSf7/XOlIL+m/EXM0Auu7pCE+pHaxD3Z3fUW1LiU3XaEH8m0p4k6I58J DN5j3GhxY0z/fl358NFpahyzszUvmWIyIbtgqVFMHo1r5HxWxF1UzyvcrQXD06mC tjSr+0oW1IZmPt6wcmUAi5KdYV5bdxDnz4yyzljLkiwW1M/KWhSS48OrcSNYnYw7 H+XesMqZaf6d6E+90PL8EexB+84+Dl/NfsNofIWs -----END CERTIFICATE-----Generated at Sat May 11 15:35:56 2024 by rpki-client on console-fra.rpki-client.org