$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer File: 13fecd24-0da7-4140-9636-71a72de851ec.cer (raw, json) Hash identifier: 8zuGmb6T1AETCrPLpDLqR4nKhYvrk9QaIIwtPxi3JO4= Subject key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858428181699C83B1F49DA10DF7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Jul 2023 00:45:17 +0000 Certificate not after: Mon 13 Oct 2025 00:45:17 +0000 Subordinate resources: AS: 396871 IP: 137.83.32.0/22 IP: 2604:d0c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:81:81:69:9c:83:b1:f4:9d:a1:0d:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 11 00:45:17 2023 GMT Not After : Oct 13 00:45:17 2025 GMT Subject: CN=13fecd24-0da7-4140-9636-71a72de851ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:b1:dd:88:27:bf:69:f0:c5:65:d8:6f:46: 82:dd:11:88:c9:bd:86:41:63:67:db:f4:14:09:43: c3:3c:e9:b2:78:1a:87:09:41:93:2b:1c:41:0d:0b: b4:c8:62:8e:e1:de:14:e0:ec:dd:f0:fd:a9:bd:94: c2:39:fd:33:07:c6:7c:0c:1d:fd:1d:5d:ae:49:91: f3:bc:fe:73:1f:3c:4f:b7:1b:6a:d4:c7:ca:28:1f: 21:57:1b:dc:e6:24:d8:68:25:70:86:72:fd:ff:51: 76:6d:c0:ea:a4:88:be:4e:8e:16:ab:a7:54:0b:25: f7:08:b3:f2:46:3d:f3:c5:4e:c2:d3:4f:37:19:9f: 36:fb:42:ec:ae:8b:5b:f2:c4:af:10:47:11:84:45: b9:4f:c5:9b:ca:d8:65:b3:a9:75:14:bd:10:74:66: 9d:13:b4:60:7f:40:dd:ce:1d:d5:41:92:16:78:31: a1:ac:4d:4e:d9:fb:ff:50:99:b2:33:0e:11:c3:f4: 05:6d:3c:a5:ea:78:a0:63:27:47:50:23:85:d6:00: dd:2b:77:ec:d9:b6:0f:ed:75:d3:47:f5:03:d4:8d: 25:59:2d:56:52:c8:eb:bf:4d:67:3e:21:5f:58:2d: 2a:e1:8f:3e:ee:76:09:fe:77:32:7c:a4:d1:15:01: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 137.83.32.0/22 IPv6: 2604:d0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396871 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:70:ce:81:85:c0:67:e2:48:37:b6:cd:6d:3a:61:46:bb:c8: 21:38:bf:cf:4d:69:13:0a:a0:bf:ae:7c:d4:b5:e9:c5:f2:31: 85:30:11:62:7d:82:a4:7b:12:ef:e4:85:a0:e8:83:3d:7d:c7: b2:2f:6a:04:c3:bf:46:a8:96:de:d5:bc:ba:1b:2c:ec:c8:9e: c3:42:e5:01:be:e9:33:61:87:c6:18:32:f5:8e:32:d8:00:ed: 6f:0a:c4:ec:3d:82:d4:16:3e:ae:9a:b0:b8:01:7a:0d:c7:16: fc:14:1c:8f:e5:56:59:21:30:98:01:00:13:18:ed:17:7c:54: 9a:c3:37:27:24:c9:ef:8d:e7:c0:9f:13:bd:8f:9e:8e:7d:5e: 68:67:af:46:96:8f:bd:29:4d:fd:2f:d7:6b:a9:90:ee:97:10: 3c:d5:9f:ea:3f:3c:3d:ed:2c:d1:4e:0e:c0:cd:ef:34:ed:27: 7a:2b:a2:1d:aa:3b:4b:5c:66:f5:58:78:e2:dd:53:11:c0:12: 2a:a9:32:6e:90:3a:be:a6:75:d5:c2:9f:4c:ea:08:11:d5:3e: 17:4c:75:1a:dd:5c:05:1e:42:8b:4f:96:ca:66:1f:10:0a:e5: ad:ee:74:82:8d:cc:fe:85:5c:55:e5:39:a3:12:4e:a1:59:96: a1:41:d5:ce -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEKBgWmcg7H0naEN98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDcxMTAwNDUxN1oXDTI1MTAxMzAwNDUxN1owLzEtMCsGA1UEAxMk MTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1MWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+x3Ygnv2nwxWXYb0aC3RGIyb2GQWNn2/QU CUPDPOmyeBqHCUGTKxxBDQu0yGKO4d4U4Ozd8P2pvZTCOf0zB8Z8DB39HV2uSZHz vP5zHzxPtxtq1MfKKB8hVxvc5iTYaCVwhnL9/1F2bcDqpIi+To4Wq6dUCyX3CLPy Rj3zxU7C0083GZ82+0Lsrotb8sSvEEcRhEW5T8Wbythls6l1FL0QdGadE7Rgf0Dd zh3VQZIWeDGhrE1O2fv/UJmyMw4Rw/QFbTyl6nigYydHUCOF1gDdK3fs2bYP7XXT R/UD1I0lWS1WUsjrv01nPiFfWC0q4Y8+7nYJ/ncyfKTRFQFW8QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFHH7B+yW3boeUUok50jINVQ20RR+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x M2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzEzZmVjZDI0LTBkYTctNDE0MC05 NjM2LTcxYTcyZGU4NTFlYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRl ODUxZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKJUyAwDQQCAAIwBwMFACYE0MAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg5HMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH5wzoGFwGfiSDe2zW06YUa7yCE4 v89NaRMKoL+ufNS16cXyMYUwEWJ9gqR7Eu/khaDogz19x7IvagTDv0aolt7VvLob LOzInsNC5QG+6TNhh8YYMvWOMtgA7W8KxOw9gtQWPq6asLgBeg3HFvwUHI/lVlkh MJgBABMY7Rd8VJrDNyckye+N58CfE72Pno59Xmhnr0aWj70pTf0v12upkO6XEDzV n+o/PD3tLNFODsDN7zTtJ3oroh2qO0tcZvVYeOLdUxHAEiqpMm6QOr6mddXCn0zq CBHVPhdMdRrdXAUeQotPlspmHxAK5a3udIKNzP6FXFXlOaMSTqFZlqFB1c4= -----END CERTIFICATE-----Generated at Sun May 5 01:25:21 2024 by rpki-client on console-ams.rpki-client.org