$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77.cer File: f421b0e5-f1f1-43bc-9512-cc17251b2b77.cer (raw, json) Hash identifier: VQmecC48/or1aUGHfI6QQm1GQ6yuOTCotho4J84qsZ4= Subject key identifier: 79:03:83:2B:47:55:0B:DF:0A:B7:92:EF:9A:CE:93:13:F5:5D:21:A8 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584378DF37542F36C1380F5BDB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Oct 2023 15:18:57 +0000 Certificate not after: Fri 09 Jan 2026 16:18:57 +0000 Subordinate resources: AS: 14695 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:78:df:37:54:2f:36:c1:38:0f:5b:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 7 15:18:57 2023 GMT Not After : Jan 9 16:18:57 2026 GMT Subject: CN=f421b0e5-f1f1-43bc-9512-cc17251b2b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c7:1a:9e:48:7f:26:7c:8e:ca:bd:96:35:52: 81:26:44:f8:6a:bc:b0:46:a0:08:72:7c:b3:c1:7c: d0:40:4d:f4:71:8c:95:07:11:24:72:54:bc:c8:83: a2:9d:14:66:3b:55:bd:25:c2:b2:52:6b:40:46:4c: 3e:50:d3:23:d1:8e:a0:b3:58:bc:39:16:ad:23:9a: 35:17:20:04:73:84:7a:fb:b9:ec:45:0f:f4:85:f0: db:ee:15:4a:b0:f9:f7:48:b6:ce:44:b5:ba:83:54: db:2d:8a:5c:a0:15:8d:bc:16:18:8b:e9:f4:49:79: 24:1c:6e:18:98:22:07:7d:b1:f4:2f:d8:97:d1:af: d9:26:7b:34:15:85:7e:76:d0:de:e8:10:83:7a:ba: fa:40:b7:0e:cb:53:f5:63:8c:e4:98:86:5d:f2:1e: a1:7b:23:56:18:a7:03:57:13:4e:f1:ce:2f:99:67: 6e:75:24:05:af:a0:a2:a7:9b:08:2c:bb:98:31:78: 52:56:a0:1b:cb:5e:66:12:76:c9:e1:e8:f7:86:7b: ee:fc:e6:d9:0c:80:e6:42:f8:8e:89:73:1e:e2:68: 69:af:84:53:91:5a:f5:c1:cf:2c:26:0c:2c:f2:b1: 42:89:81:eb:fe:cd:a1:6b:4f:2e:4e:4c:39:4e:38: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:03:83:2B:47:55:0B:DF:0A:B7:92:EF:9A:CE:93:13:F5:5D:21:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14695 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:47:e2:b4:02:be:aa:fd:02:b0:41:af:ca:82:3e:42:83:84: c5:3f:92:14:33:3e:87:cd:9d:82:98:62:4f:cd:c4:9e:cb:53: fd:77:b6:e2:2c:f8:92:f9:56:e1:cd:a1:8d:bd:df:57:dc:fd: 17:4a:11:90:e8:57:bf:05:54:db:17:c3:8c:2b:b3:1f:68:71: af:46:cc:bf:1f:13:bd:98:2b:38:11:f0:f0:6e:de:a6:e2:93: f4:5a:0a:46:6a:6d:62:ee:1b:02:dd:bd:e1:9c:f2:b0:d0:67: 42:63:ad:d6:e0:67:42:6a:d2:ad:34:85:53:51:4f:87:2d:82: 5c:ce:c5:10:85:4e:9e:d9:a3:1c:32:9b:41:da:b4:83:df:74: bc:dd:65:fe:6e:bf:f0:bc:d5:28:4c:e6:3a:09:04:06:ea:1f: 4c:8d:86:c6:66:44:da:af:88:69:b2:35:09:2b:04:b8:40:9d: b2:40:32:d6:c1:a2:4f:a9:ab:3f:36:8e:31:f5:48:a5:a2:c4: 65:01:e8:67:0e:e4:31:14:cb:5b:8e:a3:17:76:0d:9c:16:6b: 1a:9a:42:21:c6:15:45:53:9b:ec:de:bc:cb:04:ab:d1:50:85: f5:fe:07:55:41:4b:16:97:fb:36:e6:b1:2a:23:43:4f:d3:45: ec:80:02:e1 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEN43zdULzbBOA9b24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTAwNzE1MTg1N1oXDTI2MDEwOTE2MTg1N1owLzEtMCsGA1UEAxMk ZjQyMWIwZTUtZjFmMS00M2JjLTk1MTItY2MxNzI1MWIyYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkccankh/JnyOyr2WNVKBJkT4arywRqAIcnyz wXzQQE30cYyVBxEkclS8yIOinRRmO1W9JcKyUmtARkw+UNMj0Y6gs1i8ORatI5o1 FyAEc4R6+7nsRQ/0hfDb7hVKsPn3SLbORLW6g1TbLYpcoBWNvBYYi+n0SXkkHG4Y mCIHfbH0L9iX0a/ZJns0FYV+dtDe6BCDerr6QLcOy1P1Y4zkmIZd8h6heyNWGKcD VxNO8c4vmWdudSQFr6Cip5sILLuYMXhSVqAby15mEnbJ4ej3hnvu/ObZDIDmQviO iXMe4mhpr4RTkVr1wc8sJgws8rFCiYHr/s2ha08uTkw5TjjHhwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFHkDgytHVQvfCreS75rOkxP1XSGoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m NDIxYjBlNS1mMWYxLTQzYmMtOTUxMi1jYzE3MjUxYjJiNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Y0MjFiMGU1LWYxZjEtNDNiYy05 NTEyLWNjMTcyNTFiMmI3Ny9mNDIxYjBlNS1mMWYxLTQzYmMtOTUxMi1jYzE3MjUx YjJiNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICOWcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKUfitAK+qv0CsEGvyoI+QoOExT+S FDM+h82dgphiT83EnstT/Xe24iz4kvlW4c2hjb3fV9z9F0oRkOhXvwVU2xfDjCuz H2hxr0bMvx8TvZgrOBHw8G7epuKT9FoKRmptYu4bAt294ZzysNBnQmOt1uBnQmrS rTSFU1FPhy2CXM7FEIVOntmjHDKbQdq0g990vN1l/m6/8LzVKEzmOgkEBuofTI2G xmZE2q+IabI1CSsEuECdskAy1sGiT6mrPzaOMfVIpaLEZQHoZw7kMRTLW46jF3YN nBZrGppCIcYVRVOb7N68ywSr0VCF9f4HVUFLFpf7NuaxKiNDT9NF7IAC4Q== -----END CERTIFICATE-----Generated at Fri May 10 17:25:47 2024 by rpki-client on console-fra.rpki-client.org