$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer File: 2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer (raw, json) Hash identifier: 0gaADtDqICH4hUfMDhjLonWECMoqtcBJvgGgODJQzpE= Subject key identifier: 98:78:21:86:ED:9D:35:05:CA:8F:79:3A:AC:13:31:BA:88:62:78:CE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584822A6422010BA1E5A14B00F30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Dec 2024 05:59:22 +0000 Certificate not after: Sat 13 Mar 2027 05:59:22 +0000 Subordinate resources: AS: 401494 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:22:a6:42:20:10:ba:1e:5a:14:b0:0f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 8 05:59:22 2024 GMT Not After : Mar 13 05:59:22 2027 GMT Subject: CN=2f3df651-bde8-4b01-b3c2-405a8caac7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:bb:42:84:c3:1a:46:f3:68:29:de:0a:31: 30:c0:24:28:ca:ec:ca:8b:72:dc:27:d4:37:8b:b7: 68:5e:0c:34:ac:a1:ec:c9:41:f5:65:82:c1:06:7f: aa:b0:27:47:bf:37:8e:9e:cb:be:5b:7f:63:f9:fe: 7e:5d:43:ec:7e:6e:8b:e7:ae:97:0c:42:de:4b:c7: 90:54:6f:8d:ee:e6:91:10:01:21:26:5e:97:80:5b: f6:71:88:ea:01:0c:02:79:00:98:46:67:71:e6:b8: 5f:67:c4:53:7d:c2:d6:bd:41:5a:80:4d:1e:70:50: f6:a7:9d:13:88:01:e6:84:9f:a9:c4:c7:d3:95:76: 26:8e:24:bc:9d:c3:f3:03:0c:09:f7:42:23:f0:b6: c0:a2:bd:4b:d0:1f:4d:91:3d:3e:4d:a0:04:c3:0a: c9:1a:49:b4:87:02:de:4a:c4:1e:76:29:4e:af:af: 80:e2:f5:ec:b1:84:18:e5:96:a0:61:60:c6:f7:55: 0f:60:56:fd:2b:cf:27:86:45:79:c6:ee:03:11:1a: c5:04:b2:25:be:c5:63:0e:43:28:bd:ad:ef:c3:b9: 5a:d7:da:02:f4:43:bd:c5:f8:24:79:ba:ae:c7:02: 70:39:f2:4e:8e:ec:75:c6:21:9f:17:48:85:02:cd: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:78:21:86:ED:9D:35:05:CA:8F:79:3A:AC:13:31:BA:88:62:78:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401494 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:13:13:5e:10:41:ff:11:7c:cc:7b:56:b2:6d:9d:f7:82:cf: 08:25:27:c1:e8:62:1b:74:6d:f6:d8:7e:81:7f:a9:be:d3:95: b4:59:f6:d3:08:2b:d8:56:f7:c1:44:1f:d3:52:f0:89:51:b9: e8:2e:f5:5a:2b:71:4a:c1:43:fb:b7:ef:72:8f:13:6f:00:38: 43:8e:ff:d1:c0:ae:d0:64:21:7d:fa:93:fd:7f:a4:08:a5:06: c2:83:6f:c5:0c:0c:54:d6:4f:14:06:9c:42:e2:b1:84:cd:84: c0:01:78:90:c0:d1:db:36:86:dd:d4:6c:0e:8d:e8:9a:8c:c2: 88:88:ba:42:f2:50:64:57:79:b9:cb:09:77:04:db:83:b4:fa: 2f:5b:c8:e5:a0:3f:84:c9:8d:dd:02:15:92:f5:5d:66:9d:74: a6:97:d2:22:2f:06:37:3f:85:f0:b1:21:77:39:63:58:57:c4: 49:2d:eb:55:ae:7d:a8:2c:7e:cb:89:9d:40:b2:e8:10:83:c7: 59:6f:4a:84:42:fe:9c:88:9c:1a:cc:29:ec:6f:79:34:8f:ba: e9:4b:05:3d:8f:08:0c:20:36:d0:d7:97:76:e4:f6:c8:02:a7: 91:67:bf:d5:b1:e6:05:bd:7d:d3:93:fd:dd:05:b4:d3:f0:a9: f6:e7:0e:ab -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEgipkIgELoeWhSwDzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwODA1NTkyMloXDTI3MDMxMzA1NTkyMlowLzEtMCsGA1UEAxMk MmYzZGY2NTEtYmRlOC00YjAxLWIzYzItNDA1YThjYWFjN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeW7QoTDGkbzaCneCjEwwCQoyuzKi3LcJ9Q3 i7doXgw0rKHsyUH1ZYLBBn+qsCdHvzeOnsu+W39j+f5+XUPsfm6L566XDELeS8eQ VG+N7uaREAEhJl6XgFv2cYjqAQwCeQCYRmdx5rhfZ8RTfcLWvUFagE0ecFD2p50T iAHmhJ+pxMfTlXYmjiS8ncPzAwwJ90Ij8LbAor1L0B9NkT0+TaAEwwrJGkm0hwLe SsQedilOr6+A4vXssYQY5ZagYWDG91UPYFb9K88nhkV5xu4DERrFBLIlvsVjDkMo va3vw7la19oC9EO9xfgkebquxwJwOfJOjux1xiGfF0iFAs39RQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFJh4IYbtnTUFyo95OqwTMbqIYnjOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y ZjNkZjY1MS1iZGU4LTRiMDEtYjNjMi00MDVhOGNhYWM3ZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJmM2RmNjUxLWJkZTgtNGIwMS1i M2MyLTQwNWE4Y2FhYzdkZC8yZjNkZjY1MS1iZGU4LTRiMDEtYjNjMi00MDVhOGNh YWM3ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiBWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGgTE14QQf8RfMx7VrJtnfeCzwgl J8HoYht0bfbYfoF/qb7TlbRZ9tMIK9hW98FEH9NS8IlRuegu9VorcUrBQ/u373KP E28AOEOO/9HArtBkIX36k/1/pAilBsKDb8UMDFTWTxQGnELisYTNhMABeJDA0ds2 ht3UbA6N6JqMwoiIukLyUGRXebnLCXcE24O0+i9byOWgP4TJjd0CFZL1XWaddKaX 0iIvBjc/hfCxIXc5Y1hXxEkt61WufagsfsuJnUCy6BCDx1lvSoRC/pyInBrMKexv eTSPuulLBT2PCAwgNtDXl3bk9sgCp5Fnv9Wx5gW9fdOT/d0FtNPwqfbnDqs= -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org