$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer File: 06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer (raw, json) Hash identifier: mMdFIJVZ+jGK2Pm5D4C/f/N9DEoQ/9Zs2/045wKLgUI= Subject key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285845C17148535B1F792660EC0C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 May 2024 00:45:20 +0000 Certificate not after: Fri 07 Aug 2026 00:45:20 +0000 Subordinate resources: IP: 192.67.160.0/22 IP: 206.168.88.0/22 IP: 2602:fc12::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:71:48:53:5b:1f:79:26:60:ec:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 4 00:45:20 2024 GMT Not After : Aug 7 00:45:20 2026 GMT Subject: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:2d:82:9a:4e:a8:93:06:56:1f:02:1a:e5: ea:85:4f:bf:1a:1a:2d:d9:69:5d:a8:9c:da:45:ef: 2e:a3:9e:55:08:52:f0:ac:b7:28:1d:7b:48:07:ca: 92:97:a4:f8:f2:be:ef:aa:22:e4:f4:e0:76:e7:5f: 64:1b:ad:6c:29:46:ef:e2:38:db:7c:c8:5a:8e:2e: 1e:9a:94:dc:48:1f:04:79:61:50:ad:e5:67:ec:95: 98:4d:bb:25:15:64:d4:5b:3c:94:35:f4:5e:97:8e: f1:25:34:9e:4d:eb:67:86:54:40:15:e2:4e:1f:8e: 66:60:f8:85:f9:2a:92:79:cb:23:b3:61:ad:2d:a7: fc:b7:44:b6:3e:84:8c:7f:07:f6:b6:3f:ef:2f:ca: 82:cc:c0:ae:fb:2b:71:64:3f:9f:91:fd:29:e2:98: 5b:ed:d9:c8:90:e0:95:94:2d:82:c3:06:24:a9:27: 0d:51:fb:5c:ca:11:70:46:60:a1:ee:9d:a3:64:f4: 6a:ce:f3:08:f3:2c:73:a4:01:ef:28:ab:83:be:8d: bd:4c:4d:4f:fd:b4:f1:b5:ce:ac:49:a7:c6:4e:77: 99:8d:80:fe:ed:8d:5d:a5:4c:49:06:0d:64:a0:bb: 91:cb:e9:c6:1b:30:28:f4:7d:c5:ef:e8:09:bb:37: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.67.160.0/22 206.168.88.0/22 IPv6: 2602:fc12::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9b:20:c8:d9:86:37:0a:25:cc:6f:a7:37:48:41:57:10:7a: e6:3c:10:eb:38:46:77:cd:6a:82:ba:e8:6d:c6:42:3c:5d:24: dc:30:6b:10:0e:ae:c4:11:3e:f8:98:7f:4d:88:e0:e2:e9:5b: 16:c9:bf:67:56:9b:33:98:54:53:ea:55:77:4e:e7:93:09:60: 0c:aa:09:d4:d6:28:de:71:32:c4:81:1b:54:d6:ac:e9:8d:86: f5:83:4a:bc:ee:9d:dd:c7:ea:4d:de:0b:e0:0a:05:31:5d:6b: b2:bd:59:e6:f5:0f:1c:e2:14:47:c7:07:3f:fe:9c:1d:2c:15: 10:95:6f:28:ac:60:55:56:ad:2a:8f:d9:0c:71:e1:f4:2b:da: 1e:fc:36:4d:bb:dd:40:19:88:75:a1:6a:ec:f2:5e:55:aa:1b: 53:ac:f8:f8:0d:b9:05:77:a2:65:37:63:af:73:34:b2:fe:c7: 92:28:6a:87:f6:b4:1f:e2:3d:46:df:9c:d3:39:54:7b:18:eb: 95:ad:35:aa:5b:db:2b:09:a2:d8:15:ab:3e:8f:24:33:1c:e9: e1:da:93:7d:25:91:23:9c:92:b9:b0:a0:b2:19:f2:13:6e:9a: f4:27:d6:ed:ea:24:89:49:7b:28:2f:74:42:ac:2e:d1:cb:c7: 8c:fe:58:9b -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEXBcUhTWx95JmDsDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDUwNDAwNDUyMFoXDTI2MDgwNzAwNDUyMFowLzEtMCsGA1UEAxMk MDY1MDdiNDUtYjczYi00MjA4LWI0M2QtYjdkYzdhNmZiZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjotgppOqJMGVh8CGuXqhU+/Ghot2WldqJza Re8uo55VCFLwrLcoHXtIB8qSl6T48r7vqiLk9OB2519kG61sKUbv4jjbfMhaji4e mpTcSB8EeWFQreVn7JWYTbslFWTUWzyUNfRel47xJTSeTetnhlRAFeJOH45mYPiF +SqSecsjs2GtLaf8t0S2PoSMfwf2tj/vL8qCzMCu+ytxZD+fkf0p4phb7dnIkOCV lC2CwwYkqScNUftcyhFwRmCh7p2jZPRqzvMI8yxzpAHvKKuDvo29TE1P/bTxtc6s SafGTneZjYD+7Y1dpUxJBg1koLuRy+nGGzAo9H3F7+gJuzdE/QIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFDYjp7J0oQhaDUUg1Xi8yzSIqLuYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w NjUwN2I0NS1iNzNiLTQyMDgtYjQzZC1iN2RjN2E2ZmJmYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzA2NTA3YjQ1LWI3M2ItNDIwOC1i NDNkLWI3ZGM3YTZmYmZhOS8wNjUwN2I0NS1iNzNiLTQyMDgtYjQzZC1iN2RjN2E2 ZmJmYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBALAQ6ADBALOqFgwDgQCAAIwCAMGBCYC/BIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+bIMjZhjcKJcxvpzdIQVcQeuY8EOs4RnfNaoK66G3GQjxdJNwwaxAO rsQRPviYf02I4OLpWxbJv2dWmzOYVFPqVXdO55MJYAyqCdTWKN5xMsSBG1TWrOmN hvWDSrzund3H6k3eC+AKBTFda7K9Web1DxziFEfHBz/+nB0sFRCVbyisYFVWrSqP 2Qxx4fQr2h78Nk273UAZiHWhauzyXlWqG1Os+PgNuQV3omU3Y69zNLL+x5Ioaof2 tB/iPUbfnNM5VHsY65WtNapb2ysJotgVqz6PJDMc6eHak30lkSOckrmwoLIZ8hNu mvQn1u3qJIlJeygvdEKsLtHLx4z+WJs= -----END CERTIFICATE-----Generated at Sat May 4 15:01:40 2024 by rpki-client on console-ams.rpki-client.org