$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554.cer File: 2a84ba57-a9e1-4782-b32d-347a82b1a554.cer (raw, json) Hash identifier: d6t/vEF+vq4aV2amLMUTchAXMO3oP+7mVLZjXJooZTg= Subject key identifier: 15:C0:1E:33:B9:AF:E8:58:0A:47:89:E1:C7:87:0D:B9:D0:75:E2:74 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584307824B03970CC2DD7CC00B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554/2a84ba57-a9e1-4782-b32d-347a82b1a554.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Aug 2023 00:45:23 +0000 Certificate not after: Sun 30 Nov 2025 01:45:23 +0000 Subordinate resources: AS: 13559 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jul 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:07:82:4b:03:97:0c:c2:dd:7c:c0:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 28 00:45:23 2023 GMT Not After : Nov 30 01:45:23 2025 GMT Subject: CN=2a84ba57-a9e1-4782-b32d-347a82b1a554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:29:8f:dc:6e:14:40:e3:16:cf:f7:f7:2e: 83:6a:72:9e:5f:76:09:77:7c:66:e9:83:94:07:40: 74:55:42:55:e3:c2:e5:60:b8:b5:4d:f8:8e:4a:f0: fe:61:64:0d:74:a5:36:70:ad:65:da:67:b9:be:ad: c2:24:ce:a3:6b:10:2d:02:84:65:47:84:d9:44:3a: 40:05:4c:50:ea:4e:1f:07:27:6a:d7:36:85:f0:a1: 50:93:5d:ce:4d:e3:c6:cc:43:62:ed:e6:ef:a1:a8: ef:85:7b:20:9e:eb:6c:07:1f:b5:84:de:f8:1a:69: e1:70:8c:98:9f:07:5e:e6:f3:cf:4f:37:1e:57:7a: e7:d2:1a:f3:10:50:d7:46:0b:08:86:1e:07:eb:83: c3:d7:04:1a:c1:03:40:c2:0a:27:2b:7a:db:6e:5a: 51:1f:7f:ec:47:83:d9:e4:75:95:11:4c:00:3b:ca: 7b:62:8a:fb:a6:bb:ba:b8:65:12:83:32:77:d6:b7: 10:ca:e4:34:42:b2:90:3d:7e:ca:a6:b8:05:73:57: ba:2a:b3:b2:3d:2b:bc:6a:1e:c1:3d:cd:83:f5:fa: b0:f6:80:f6:63:cb:4a:10:40:90:f7:62:ba:b9:d7: 53:f7:91:e6:0e:6e:d8:5e:3c:4e:de:c2:e8:d2:e4: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:1E:33:B9:AF:E8:58:0A:47:89:E1:C7:87:0D:B9:D0:75:E2:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554/2a84ba57-a9e1-4782-b32d-347a82b1a554.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 13559 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:12:5b:1a:57:d9:29:e2:95:15:dd:73:f0:df:30:92:fa:c5: 2d:cb:45:a5:98:f9:d7:70:78:3c:8a:1c:4d:d8:eb:d3:5b:31: bb:9b:ac:cf:02:cf:2f:09:14:22:2f:57:c2:63:04:9c:43:5f: 37:32:92:99:2e:9c:f0:b2:90:bf:e4:b9:86:f7:82:53:05:fe: e0:07:97:6f:a0:ae:05:05:4b:84:78:dd:96:f9:ba:87:36:43: 7e:90:34:ac:15:ee:e3:53:fe:1b:20:82:1f:02:a2:21:17:b9: 96:cb:47:f7:33:f4:00:6a:49:78:95:da:f9:2d:ff:80:5d:96: cf:be:3d:a0:8e:c3:ad:ef:67:87:c7:53:29:8d:34:7f:2c:8a: 19:3f:5f:1d:26:3a:36:88:e0:1d:50:6e:f3:ab:24:8a:d5:76: 9f:ac:7d:f3:b8:42:d3:f6:d2:ce:44:37:68:67:c5:2d:69:df: b0:51:82:58:12:84:3a:c6:4f:61:d3:09:21:8f:17:82:bd:59: 4f:cf:fe:af:70:5e:93:8f:87:f2:aa:e5:5c:42:14:47:8e:0f: 72:b7:f5:54:02:4c:34:75:d9:78:cc:69:8c:3f:29:33:e4:55: ab:d7:66:f0:0e:0b:ee:ac:4f:b6:5f:87:8a:1d:fb:cd:97:32: b3:81:5f:9d -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEMHgksDlwzC3XzAC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDgyODAwNDUyM1oXDTI1MTEzMDAxNDUyM1owLzEtMCsGA1UEAxMk MmE4NGJhNTctYTllMS00NzgyLWIzMmQtMzQ3YTgyYjFhNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMMpj9xuFEDjFs/39y6DanKeX3YJd3xm6YOU B0B0VUJV48LlYLi1TfiOSvD+YWQNdKU2cK1l2me5vq3CJM6jaxAtAoRlR4TZRDpA BUxQ6k4fBydq1zaF8KFQk13OTePGzENi7ebvoajvhXsgnutsBx+1hN74GmnhcIyY nwde5vPPTzceV3rn0hrzEFDXRgsIhh4H64PD1wQawQNAwgonK3rbblpRH3/sR4PZ 5HWVEUwAO8p7Yor7pru6uGUSgzJ31rcQyuQ0QrKQPX7KprgFc1e6KrOyPSu8ah7B Pc2D9fqw9oD2Y8tKEECQ92K6uddT95HmDm7YXjxO3sLo0uTS9wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFBXAHjO5r+hYCkeJ4ceHDbnQdeJ0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y YTg0YmE1Ny1hOWUxLTQ3ODItYjMyZC0zNDdhODJiMWE1NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJhODRiYTU3LWE5ZTEtNDc4Mi1i MzJkLTM0N2E4MmIxYTU1NC8yYTg0YmE1Ny1hOWUxLTQ3ODItYjMyZC0zNDdhODJi MWE1NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICNPcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMRJbGlfZKeKVFd1z8N8wkvrFLctF pZj513B4PIocTdjr01sxu5uszwLPLwkUIi9XwmMEnENfNzKSmS6c8LKQv+S5hveC UwX+4AeXb6CuBQVLhHjdlvm6hzZDfpA0rBXu41P+GyCCHwKiIRe5lstH9zP0AGpJ eJXa+S3/gF2Wz749oI7Dre9nh8dTKY00fyyKGT9fHSY6NojgHVBu86skitV2n6x9 87hC0/bSzkQ3aGfFLWnfsFGCWBKEOsZPYdMJIY8Xgr1ZT8/+r3Bek4+H8qrlXEIU R44Pcrf1VAJMNHXZeMxpjD8pM+RVq9dm8A4L7qxPtl+Hih37zZcys4FfnQ== -----END CERTIFICATE-----Generated at Tue Jul 9 05:30:08 2024 by rpki-client on console.sobornost.net