$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96.cer File: 80b8d460-2636-44c3-9690-90f9cd598d96.cer (raw, json) Hash identifier: FR6ROWxyNi0LkXlNbtVfFe8rl6fjkA/GUydpv32hE3A= Subject key identifier: 3C:EE:60:CA:A8:A0:66:A6:3B:F3:8D:E4:B6:4A:5D:2A:C9:C8:D0:F1 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584827BDA96F6889FEB060BCCB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96/80b8d460-2636-44c3-9690-90f9cd598d96.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Dec 2024 01:45:33 +0000 Certificate not after: Mon 15 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 396858 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:bd:a9:6f:68:89:fe:b0:60:bc:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 10 01:45:33 2024 GMT Not After : Mar 15 00:45:33 2027 GMT Subject: CN=80b8d460-2636-44c3-9690-90f9cd598d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:e6:dd:45:78:13:14:6b:5a:ff:94:52:b8: a2:34:12:7d:a7:fc:25:14:a6:1c:15:97:ba:b7:24: c6:71:7d:07:f7:8e:8f:c3:99:f4:59:fd:76:03:35: 3e:76:17:c4:96:d3:98:e5:7a:9a:d9:e9:b1:ba:88: 45:07:d7:a6:24:55:57:37:9c:f7:17:84:1d:00:26: 97:e1:da:36:46:ab:cf:67:1d:77:16:a4:c2:e9:84: ef:aa:1f:4b:bf:51:7b:0a:6b:bd:be:d6:7d:c4:8d: 13:de:9b:f5:48:21:b0:62:22:14:23:bb:6b:58:82: 19:d2:b0:fc:a0:93:bb:af:10:36:77:3f:e5:fb:2c: b2:45:15:eb:46:98:da:9f:bf:f6:db:7c:79:56:29: f2:df:d6:63:67:f7:2d:7d:24:71:7a:1a:e0:79:c2: 63:d3:25:33:42:03:70:1d:c2:ed:c5:59:90:7c:ce: 86:c2:b8:2c:66:c0:9d:46:53:11:b1:67:f0:1e:90: d2:47:5a:e5:b5:53:51:7b:b1:d4:2d:62:28:fd:44: da:58:51:4b:2c:a2:59:84:75:45:a6:c0:2f:86:16: aa:fe:7f:d5:cc:f8:69:e2:d0:93:ec:36:6b:4a:7d: db:de:c3:44:74:b7:df:20:49:b3:9c:1c:d2:53:ac: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EE:60:CA:A8:A0:66:A6:3B:F3:8D:E4:B6:4A:5D:2A:C9:C8:D0:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96/80b8d460-2636-44c3-9690-90f9cd598d96.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396858 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:91:67:8a:89:16:07:5c:4b:bb:a5:59:0e:4e:7d:19:22:20: a4:88:6c:24:c5:33:3e:15:fa:6f:29:69:86:83:59:5e:90:ac: 00:d1:52:17:a4:83:cb:85:0b:f0:29:24:a4:2f:8f:d6:38:a0: 88:2a:41:30:ef:90:e2:7b:cd:26:a1:c1:ef:8c:aa:00:02:32: ea:b6:04:b3:26:53:cd:00:35:18:0c:48:2a:8b:5a:7b:bc:bc: c0:a0:a6:fb:c0:6a:ef:c8:aa:96:ff:c6:39:f7:75:2f:e1:38: 17:82:57:65:9c:97:59:18:c3:d3:19:27:09:d7:dd:ba:3a:ef: 44:f8:31:37:77:ea:e4:58:35:56:d6:07:a4:f4:2b:ec:46:52: 6e:2b:ad:98:2d:ed:10:4d:4c:a1:7e:27:ca:48:3b:7a:7c:84: ab:38:08:bb:37:61:67:7e:83:40:44:5b:b9:26:be:9e:87:21: b8:40:ff:b8:f8:92:02:23:da:a1:92:12:f2:33:89:94:fc:a5: 5f:6b:bf:d2:09:27:31:27:ee:a4:d2:d8:d1:c3:a4:c8:e9:2f: b9:28:53:6f:0b:a3:d4:ca:6a:83:02:c2:63:80:70:14:8b:5a: 41:9e:8b:a6:95:4c:b4:96:f8:25:6b:22:44:ab:6f:af:33:33: c8:99:66:a0 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEgnvalvaIn+sGC8ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIxMDAxNDUzM1oXDTI3MDMxNTAwNDUzM1owLzEtMCsGA1UEAxMk ODBiOGQ0NjAtMjYzNi00NGMzLTk2OTAtOTBmOWNkNTk4ZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix/m3UV4ExRrWv+UUriiNBJ9p/wlFKYcFZe6 tyTGcX0H946Pw5n0Wf12AzU+dhfEltOY5Xqa2emxuohFB9emJFVXN5z3F4QdACaX 4do2RqvPZx13FqTC6YTvqh9Lv1F7Cmu9vtZ9xI0T3pv1SCGwYiIUI7trWIIZ0rD8 oJO7rxA2dz/l+yyyRRXrRpjan7/223x5Viny39ZjZ/ctfSRxehrgecJj0yUzQgNw HcLtxVmQfM6GwrgsZsCdRlMRsWfwHpDSR1rltVNRe7HULWIo/UTaWFFLLKJZhHVF psAvhhaq/n/VzPhp4tCT7DZrSn3b3sNEdLffIEmznBzSU6xr4wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFDzuYMqooGamO/ON5LZKXSrJyNDxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 MGI4ZDQ2MC0yNjM2LTQ0YzMtOTY5MC05MGY5Y2Q1OThkOTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgwYjhkNDYwLTI2MzYtNDRjMy05 NjkwLTkwZjljZDU5OGQ5Ni84MGI4ZDQ2MC0yNjM2LTQ0YzMtOTY5MC05MGY5Y2Q1 OThkOTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg46MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACyRZ4qJFgdcS7ulWQ5OfRkiIKSI bCTFMz4V+m8paYaDWV6QrADRUhekg8uFC/ApJKQvj9Y4oIgqQTDvkOJ7zSahwe+M qgACMuq2BLMmU80ANRgMSCqLWnu8vMCgpvvAau/Iqpb/xjn3dS/hOBeCV2Wcl1kY w9MZJwnX3bo670T4MTd36uRYNVbWB6T0K+xGUm4rrZgt7RBNTKF+J8pIO3p8hKs4 CLs3YWd+g0BEW7kmvp6HIbhA/7j4kgIj2qGSEvIziZT8pV9rv9IJJzEn7qTS2NHD pMjpL7koU28Lo9TKaoMCwmOAcBSLWkGei6aVTLSW+CVrIkSrb68zM8iZZqA= -----END CERTIFICATE-----Generated at Sun Apr 27 16:36:19 2025 by rpki-client