$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8.cer File: b8ba88a1-c986-4f64-b72e-2e108d6945b8.cer (raw, json) Hash identifier: AE1V3JqigtEN/ivZToBnSlocZDP7IFkUDO1YazcSFgo= Subject key identifier: FA:AF:71:1E:33:3A:05:99:FB:64:F5:69:3B:0A:00:D8:14:80:FA:B7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858436DCF86A5286BE3BC2C1EFAF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/b8ba88a1-c986-4f64-b72e-2e108d6945b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Oct 2023 16:13:27 +0000 Certificate not after: Mon 05 Jan 2026 17:13:27 +0000 Subordinate resources: AS: 16575 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:6d:cf:86:a5:28:6b:e3:bc:2c:1e:fa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 3 16:13:27 2023 GMT Not After : Jan 5 17:13:27 2026 GMT Subject: CN=b8ba88a1-c986-4f64-b72e-2e108d6945b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:74:a4:db:bd:ac:f3:6e:bd:43:75:c2:0f:69: a1:ad:16:d7:d1:fe:de:4e:72:82:3f:90:0e:29:77: 72:6a:99:6a:cf:1b:03:fe:a7:a7:4d:04:ba:16:c5: 17:b8:2b:7c:e8:09:11:dc:c0:8f:0c:b6:07:9d:cd: 81:8a:31:33:29:42:81:6f:5d:4e:1c:52:fc:55:30: 14:96:bc:73:8d:e8:72:b9:c0:7c:52:74:39:c3:2d: 4e:88:f6:5a:a7:58:27:bc:4b:68:80:96:f1:00:e4: 30:69:5a:01:c7:b3:4e:cc:02:41:0f:d1:47:43:51: 31:b2:f7:5f:e0:fe:8c:22:6d:c1:a5:31:40:29:3a: 7a:80:83:54:d2:49:d9:f5:7c:b2:05:57:96:d6:52: 63:02:9a:73:89:10:22:fd:f5:af:46:bb:b1:0b:bb: 2a:43:a2:e2:38:97:6a:17:f7:31:69:17:10:09:66: 6e:09:b8:be:c2:c5:fb:8d:0b:5e:71:6b:1f:03:79: 5b:51:23:9b:d4:5d:17:3b:2e:3c:f4:fb:2f:4d:93: 32:0b:42:d9:54:18:75:85:97:58:a9:92:1e:2e:dc: 7b:63:15:49:49:7b:6c:02:89:04:c9:e0:c5:df:e8: e7:c4:db:7b:86:9a:5b:01:19:10:30:61:1f:bb:c7: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AF:71:1E:33:3A:05:99:FB:64:F5:69:3B:0A:00:D8:14:80:FA:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8ba88a1-c986-4f64-b72e-2e108d6945b8/b8ba88a1-c986-4f64-b72e-2e108d6945b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 16575 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:71:29:b4:0d:9f:83:2d:7d:33:33:07:f6:a8:7e:a0:c4:74: cb:1f:73:d2:82:00:68:cc:71:ab:7e:16:33:a3:60:b3:dc:f7: d2:44:f6:92:96:42:1a:03:40:2d:29:23:f9:3d:96:6b:81:0d: ce:14:14:4b:d2:80:5c:96:65:ca:9b:7a:9b:04:16:f0:6d:37: c5:80:d0:7d:61:03:dd:3d:82:91:32:12:5c:21:8b:98:b1:94: 4c:93:87:a1:51:f6:9b:85:47:63:7f:e6:52:48:9f:56:6c:8e: 35:fe:49:08:3d:b9:58:1d:e9:73:28:43:1d:9f:ea:82:45:4e: fc:0c:f6:b6:f5:1a:2d:ff:38:a6:1b:ef:7d:db:81:05:08:64: 6c:2d:0b:26:cb:a7:d1:ec:08:91:8f:b2:1b:e2:c7:31:a6:fa: 03:62:05:94:c0:4f:29:4e:f1:93:14:10:f1:75:cd:ff:e5:d2: 04:51:d3:e6:72:1a:a3:48:c2:b4:3a:ac:1d:ba:26:6b:ae:f6: 14:78:31:35:f9:ec:b4:6b:f4:68:17:5e:f1:c4:8e:dd:4d:6b: e8:c1:97:89:19:9c:23:fc:e6:78:84:a6:2e:5a:cd:8a:4a:eb: 71:90:58:af:62:a9:25:98:be:e8:92:bd:d1:c0:8e:af:a9:21: ef:89:ad:f6 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWENtz4alKGvjvCwe+vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTAwMzE2MTMyN1oXDTI2MDEwNTE3MTMyN1owLzEtMCsGA1UEAxMk YjhiYTg4YTEtYzk4Ni00ZjY0LWI3MmUtMmUxMDhkNjk0NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHSk272s8269Q3XCD2mhrRbX0f7eTnKCP5AO KXdyaplqzxsD/qenTQS6FsUXuCt86AkR3MCPDLYHnc2BijEzKUKBb11OHFL8VTAU lrxzjehyucB8UnQ5wy1OiPZap1gnvEtogJbxAOQwaVoBx7NOzAJBD9FHQ1Exsvdf 4P6MIm3BpTFAKTp6gINU0knZ9XyyBVeW1lJjAppziRAi/fWvRruxC7sqQ6LiOJdq F/cxaRcQCWZuCbi+wsX7jQtecWsfA3lbUSOb1F0XOy489PsvTZMyC0LZVBh1hZdY qZIeLtx7YxVJSXtsAokEyeDF3+jnxNt7hppbARkQMGEfu8fE7QIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFPqvcR4zOgWZ+2T1aTsKANgUgPq3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i OGJhODhhMS1jOTg2LTRmNjQtYjcyZS0yZTEwOGQ2OTQ1YjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2I4YmE4OGExLWM5ODYtNGY2NC1i NzJlLTJlMTA4ZDY5NDViOC9iOGJhODhhMS1jOTg2LTRmNjQtYjcyZS0yZTEwOGQ2 OTQ1YjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQL8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAinEptA2fgy19MzMH9qh+oMR0yx9z 0oIAaMxxq34WM6Ngs9z30kT2kpZCGgNALSkj+T2Wa4ENzhQUS9KAXJZlypt6mwQW 8G03xYDQfWED3T2CkTISXCGLmLGUTJOHoVH2m4VHY3/mUkifVmyONf5JCD25WB3p cyhDHZ/qgkVO/Az2tvUaLf84phvvfduBBQhkbC0LJsun0ewIkY+yG+LHMab6A2IF lMBPKU7xkxQQ8XXN/+XSBFHT5nIao0jCtDqsHboma672FHgxNfnstGv0aBde8cSO 3U1r6MGXiRmcI/zmeISmLlrNikrrcZBYr2KpJZi+6JK90cCOr6kh74mt9g== -----END CERTIFICATE-----Generated at Sat May 11 15:32:37 2024 by rpki-client on console-ams.rpki-client.org