$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer File: 2cdca715-b3ad-4985-b6fd-0bd7308257df.cer (raw, json) Hash identifier: KAkAI+dFohk4dtYQ2VsATCapMf/15jfdJO+SVDmhNIM= Subject key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285844BB22C255BEB3A25D989E5500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 31 Jan 2024 01:45:20 +0000 Certificate not after: Tue 05 May 2026 00:45:20 +0000 Subordinate resources: AS: 19528 IP: 74.209.184.0 -- 74.209.188.255 IP: 2605:14c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:bb:22:c2:55:be:b3:a2:5d:98:9e:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 31 01:45:20 2024 GMT Not After : May 5 00:45:20 2026 GMT Subject: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:78:54:a7:1c:8e:e4:06:87:71:3c:ca:70: db:91:bd:86:04:20:f3:f2:35:38:da:bc:b7:28:fd: 44:6d:d6:55:ee:24:e7:c9:f6:a0:1e:42:45:d3:31: cc:c5:a4:96:3c:e7:e1:6e:95:15:8d:fa:41:e8:22: 21:e6:73:ac:4e:27:10:be:70:f2:5f:ed:e6:60:7e: dd:53:0f:90:1d:07:85:fa:e1:22:be:93:97:7b:44: aa:be:f8:61:73:55:2f:ad:14:ee:0d:c5:f3:7b:0b: 8d:c1:6e:c0:90:9f:44:f7:5d:3f:55:9d:61:aa:3e: 48:73:79:33:3d:3b:e1:bf:6e:76:bd:d4:b9:df:8e: 3b:04:d4:bc:39:89:06:a9:e9:79:b8:f1:0a:42:df: 01:50:f5:bf:58:aa:70:dd:e7:a0:32:58:0e:7a:5f: 3f:a9:1d:a4:05:37:5d:29:2b:48:e1:0a:77:2e:c5: 1e:41:ab:11:c6:6e:26:ba:9a:6c:b4:25:c8:d1:dd: 77:85:97:a4:8e:f8:48:a7:f3:db:2d:e5:28:ab:e7: 8b:44:ef:db:ce:84:4c:38:00:73:3d:08:8f:62:be: 6a:0c:a7:89:10:48:9d:89:7b:2c:b2:80:e8:24:45: 15:83:12:fd:99:bd:e4:3a:4b:0a:6f:26:c1:fe:48: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.209.184.0-74.209.188.255 IPv6: 2605:14c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19528 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:bd:bb:95:d0:3f:da:8d:bc:9c:4c:80:24:67:2d:35:b9:b6: 0c:e3:54:f3:32:cb:e5:22:b7:11:ca:f0:ab:f6:71:7f:2e:0e: 54:ec:82:db:31:08:a3:5d:16:7f:d9:55:6b:99:71:6b:1d:7c: 0c:df:59:5c:e4:c3:11:75:c2:be:b1:0d:64:58:16:46:b5:02: e9:aa:4f:49:75:ec:18:87:8e:bb:19:f4:3b:4b:85:e3:40:23: e8:f8:b9:19:82:f9:b5:c1:22:54:4f:e6:fe:ca:4a:05:b1:72: 8d:88:04:20:c0:60:a4:fa:66:d1:0c:bf:3f:bf:47:26:30:be: 4c:da:64:e8:f7:e0:5a:91:dc:8d:ad:b8:a8:ad:18:17:3c:5a: 37:7b:b3:b4:b5:31:da:a2:e6:33:60:22:b0:da:10:fa:5c:b1: e3:fa:f1:94:6f:7c:4b:fa:9a:f7:9e:be:f7:c3:e2:87:a8:e3: ca:2a:39:29:bc:77:92:90:22:08:b9:08:d8:9f:35:b1:5c:e7: 2e:e8:40:99:7b:4c:e7:d3:b4:c4:87:ba:69:02:b8:45:50:ed: d2:af:ca:4a:8e:23:7e:9c:b8:0f:63:5d:08:45:87:4a:21:9a: 10:f9:0d:f0:1f:60:5e:ea:f4:bf:e6:e2:a4:58:59:e5:bd:a2: e1:48:6e:df -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWES7IsJVvrOiXZieVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDEzMTAxNDUyMFoXDTI2MDUwNTAwNDUyMFowLzEtMCsGA1UEAxMk MmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNx4VKccjuQGh3E8ynDbkb2GBCDz8jU42ry3 KP1EbdZV7iTnyfagHkJF0zHMxaSWPOfhbpUVjfpB6CIh5nOsTicQvnDyX+3mYH7d Uw+QHQeF+uEivpOXe0Sqvvhhc1UvrRTuDcXzewuNwW7AkJ9E910/VZ1hqj5Ic3kz PTvhv252vdS53447BNS8OYkGqel5uPEKQt8BUPW/WKpw3eegMlgOel8/qR2kBTdd KStI4Qp3LsUeQasRxm4muppstCXI0d13hZekjvhIp/PbLeUoq+eLRO/bzoRMOABz PQiPYr5qDKeJEEidiXsssoDoJEUVgxL9mb3kOksKbybB/khNMwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFNRMJa+KixdRISsSPvw+BxKnuvl7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y Y2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJjZGNhNzE1LWIzYWQtNDk4NS1i NmZkLTBiZDczMDgyNTdkZi8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4 MjU3ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBQEAgABMA4wDAMEA0rRuAMEAErRvDANBAIAAjAHAwUAJgUUwDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJMSDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApvbuV0D/ajbycTIAk Zy01ubYM41TzMsvlIrcRyvCr9nF/Lg5U7ILbMQijXRZ/2VVrmXFrHXwM31lc5MMR dcK+sQ1kWBZGtQLpqk9JdewYh467GfQ7S4XjQCPo+LkZgvm1wSJUT+b+ykoFsXKN iAQgwGCk+mbRDL8/v0cmML5M2mTo9+BakdyNrbiorRgXPFo3e7O0tTHaouYzYCKw 2hD6XLHj+vGUb3xL+pr3nr73w+KHqOPKKjkpvHeSkCIIuQjYnzWxXOcu6ECZe0zn 07TEh7ppArhFUO3Sr8pKjiN+nLgPY10IRYdKIZoQ+Q3wH2Be6vS/5uKkWFnlvaLh SG7f -----END CERTIFICATE-----Generated at Sun May 5 01:39:47 2024 by rpki-client on console-fra.rpki-client.org