$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a.cer File: 414698c0-81d5-46ea-95ef-95e376ba003a.cer (raw, json) Hash identifier: 7ppry7b48EBmO3xVeb6kbmBQH3Ih0OTuZqYz4SV8AyI= Subject key identifier: CB:49:E0:5B:C6:B3:DA:01:8B:C9:49:77:0F:69:F4:E0:EE:A3:8C:BD Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584824721F6AA695C8810F2A4FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/414698c0-81d5-46ea-95ef-95e376ba003a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Dec 2024 21:25:56 +0000 Certificate not after: Sat 13 Mar 2027 21:25:56 +0000 Subordinate resources: AS: 40112 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:72:1f:6a:a6:95:c8:81:0f:2a:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 8 21:25:56 2024 GMT Not After : Mar 13 21:25:56 2027 GMT Subject: CN=414698c0-81d5-46ea-95ef-95e376ba003a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:39:ff:7d:3b:c7:77:af:50:fa:67:66:f6: 3c:a3:7a:5d:f4:0f:ac:2d:56:36:a9:d4:4e:dd:8a: b2:78:20:50:67:75:e2:dd:15:0b:8c:ac:f5:43:5a: f8:95:8b:87:a0:50:56:81:11:63:b2:8e:03:9b:ef: da:55:2d:90:81:5a:03:4f:0e:b6:9c:3d:d2:cf:a4: 99:64:ae:3e:90:59:da:5d:28:b9:43:f1:56:9d:28: 53:2f:43:f0:49:8b:c8:01:af:8e:f6:5d:2e:89:72: 1a:56:33:24:22:7b:a4:2c:cb:06:0d:1f:ed:13:11: 33:31:cf:31:a4:6c:40:2c:6b:cd:5e:83:3c:8f:7b: cb:06:e4:c9:0e:6c:1d:d2:31:14:ba:eb:0d:53:4a: f3:bd:cb:a5:05:28:e5:e9:fc:cc:f1:90:c2:15:f7: 1c:8d:c0:f2:d7:6e:19:3a:11:ed:bf:8f:15:b7:43: 1c:82:b8:4c:a4:8f:5f:35:d4:f9:fd:03:3b:f1:fa: 0e:1f:2a:48:44:3f:e4:a1:95:3b:47:b8:06:02:64: 30:6d:30:77:7c:0e:f2:f7:92:50:9e:b7:9e:e2:00: eb:28:81:a8:74:89:57:54:bc:80:d8:fc:86:8f:4f: f9:82:e4:2e:2c:9a:6e:b6:25:59:52:ff:9c:11:f3: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:E0:5B:C6:B3:DA:01:8B:C9:49:77:0F:69:F4:E0:EE:A3:8C:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/414698c0-81d5-46ea-95ef-95e376ba003a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 40112 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:96:44:23:82:bd:c2:3e:ee:89:ca:c1:e9:2c:74:f2:f3:23: 33:24:51:77:d0:42:c1:90:ab:d5:43:9d:1a:3c:bb:f1:eb:de: f6:38:ce:a5:71:b2:1b:c9:7e:ad:ce:e6:87:a3:b0:46:72:51: ef:3d:7d:e2:a4:0d:b5:f5:40:4d:d2:3a:11:48:c4:8c:45:b1: 07:24:ae:8f:f6:b2:00:d8:9b:d2:09:71:e6:4e:e8:51:95:5d: 26:9a:2b:bd:b5:42:07:2a:a9:11:0e:48:44:0f:fe:35:e6:a0: 32:58:cd:dd:74:44:c6:88:db:1e:2b:7a:8e:2b:37:5a:29:c6: 73:fc:cf:02:f7:25:e1:ff:9a:96:fb:f1:d8:21:b0:51:28:b8: c1:8e:d0:9e:66:7a:ee:3e:df:48:b1:9f:d6:b9:c3:46:c1:f5: ba:18:aa:be:29:4b:d4:ec:5e:e7:09:02:36:60:0e:ca:b6:f7: 20:c2:71:76:74:58:a4:e2:03:f7:72:01:eb:b6:7c:dc:55:d0: c8:67:b6:00:3b:97:d1:87:70:bf:86:8e:79:7a:5d:80:68:cf: 52:f7:7c:29:38:36:50:7d:7e:dc:45:8b:40:16:ad:69:ec:59: e0:09:31:68:45:51:03:56:f4:2b:05:a9:31:8f:ac:63:66:b3: 31:34:ab:9d -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEgkch9qppXIgQ8qT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwODIxMjU1NloXDTI3MDMxMzIxMjU1NlowLzEtMCsGA1UEAxMk NDE0Njk4YzAtODFkNS00NmVhLTk1ZWYtOTVlMzc2YmEwMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdo5/307x3evUPpnZvY8o3pd9A+sLVY2qdRO 3YqyeCBQZ3Xi3RULjKz1Q1r4lYuHoFBWgRFjso4Dm+/aVS2QgVoDTw62nD3Sz6SZ ZK4+kFnaXSi5Q/FWnShTL0PwSYvIAa+O9l0uiXIaVjMkInukLMsGDR/tExEzMc8x pGxALGvNXoM8j3vLBuTJDmwd0jEUuusNU0rzvculBSjl6fzM8ZDCFfccjcDy124Z OhHtv48Vt0McgrhMpI9fNdT5/QM78foOHypIRD/koZU7R7gGAmQwbTB3fA7y95JQ nree4gDrKIGodIlXVLyA2PyGj0/5guQuLJputiVZUv+cEfOLbwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFMtJ4FvGs9oBi8lJdw9p9ODuo4y9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 MTQ2OThjMC04MWQ1LTQ2ZWEtOTVlZi05NWUzNzZiYTAwM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQxNDY5OGMwLTgxZDUtNDZlYS05 NWVmLTk1ZTM3NmJhMDAzYS80MTQ2OThjMC04MWQ1LTQ2ZWEtOTVlZi05NWUzNzZi YTAwM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKCWRCOCvcI+7onKweksdPLzIzMk UXfQQsGQq9VDnRo8u/Hr3vY4zqVxshvJfq3O5oejsEZyUe89feKkDbX1QE3SOhFI xIxFsQckro/2sgDYm9IJceZO6FGVXSaaK721QgcqqREOSEQP/jXmoDJYzd10RMaI 2x4reo4rN1opxnP8zwL3JeH/mpb78dghsFEouMGO0J5meu4+30ixn9a5w0bB9boY qr4pS9TsXucJAjZgDsq29yDCcXZ0WKTiA/dyAeu2fNxV0MhntgA7l9GHcL+Gjnl6 XYBoz1L3fCk4NlB9ftxFi0AWrWnsWeAJMWhFUQNW9CsFqTGPrGNmszE0q50= -----END CERTIFICATE-----Generated at Fri Dec 27 14:25:25 2024 by rpki-client on console-fra.rpki-client.org