$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer File: 5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer (raw, json) Hash identifier: qs24iSl8w4fkTWZ75N4uIxks66SBhvzkFwg7B2XQRTw= Subject key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285844CEAD8D77E152030AA40CA4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Feb 2024 01:45:20 +0000 Certificate not after: Tue 12 May 2026 00:45:20 +0000 Subordinate resources: AS: 394087 IP: 45.74.0.0/18 IP: 104.37.0.0/21 IP: 104.243.240.0/20 IP: 104.250.160.0/19 IP: 162.246.184.0/22 IP: 172.94.0.0/17 IP: 172.111.128.0/17 IP: 192.253.240.0/20 IP: 206.123.128.0/19 IP: 2602:ff84::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ce:ad:8d:77:e1:52:03:0a:a4:0c:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 7 01:45:20 2024 GMT Not After : May 12 00:45:20 2026 GMT Subject: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:8a:73:35:af:18:1d:c7:08:4b:13:db:27: 47:27:72:73:71:7d:f3:64:6a:f4:b7:a6:7c:42:59: a4:e7:22:ce:d7:1a:22:24:49:1a:6b:9c:f3:cf:48: 01:a4:8b:2d:0c:df:58:df:9a:3a:dc:14:b3:70:2f: 8b:3e:ad:84:29:07:b4:8c:54:49:ab:e1:7d:b8:2e: be:8e:40:ea:f0:4d:ee:20:1f:9a:0f:cc:57:44:18: 1c:fa:0c:04:03:d5:f4:26:a2:e4:6f:ff:fe:58:60: 23:fa:17:e2:89:3b:50:24:58:ba:42:0f:b4:c6:f0: 1c:c1:10:2a:a6:dc:9e:a9:cc:b7:41:03:bf:99:c9: f1:81:f5:81:f8:f5:cb:ac:fa:c5:11:e9:51:72:ab: 9c:d6:b1:f1:c6:3f:98:36:34:28:e4:bb:1e:7a:fb: 38:b9:d8:e9:1a:99:21:68:25:e0:91:c4:08:14:a6: 5c:84:c5:50:f2:c9:62:1c:23:67:1b:29:74:5e:3e: 72:e4:48:0a:2a:9a:6d:8d:c3:05:a4:a8:d7:86:f1: c4:c1:f2:d2:52:d0:4d:ad:7d:3d:e4:4f:d2:55:27: 70:6d:6c:3c:38:63:ef:8e:3d:f3:ea:20:52:fb:4b: 75:73:5e:c2:b5:40:5f:04:85:f2:6d:a9:7c:e7:66: f1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.74.0.0/18 104.37.0.0/21 104.243.240.0/20 104.250.160.0/19 162.246.184.0/22 172.94.0.0/17 172.111.128.0/17 192.253.240.0/20 206.123.128.0/19 IPv6: 2602:ff84::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394087 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:29:91:d3:a6:df:8a:3e:7e:68:d2:b1:29:29:90:0f:46:d7: 01:27:80:9c:63:8f:34:7e:17:ac:5c:7f:8b:53:a4:cf:14:e0: fe:08:e8:5f:5b:dc:c5:c7:e3:2a:4e:b0:f0:7d:2d:df:cc:c8: db:b7:28:bf:8e:1f:a4:ba:f3:91:83:77:5f:ea:c4:67:b6:c9: ad:ac:5d:80:8b:8d:ec:86:7e:cb:dd:3c:32:d4:df:99:08:a4: 0f:1d:e2:3b:b5:b2:ea:1b:0c:56:be:71:8b:c3:af:e2:17:12: 3f:77:d4:44:9d:59:55:fc:50:e2:52:6f:03:f7:e1:27:38:ae: 17:47:38:5c:80:97:b7:89:ad:91:f7:a6:a2:d8:ce:e5:03:65: de:c7:29:2d:d4:47:40:ed:41:d9:12:8f:c4:76:97:92:dc:c2: 25:a2:c8:a3:bc:74:86:f2:dc:97:17:46:aa:4c:db:40:54:64: 64:8c:45:2a:a1:e5:85:5a:12:94:7e:7c:fe:2a:8b:5a:af:85: ae:bf:dc:a5:e5:96:f9:d3:26:c8:a0:8a:cd:91:57:48:3d:47: 25:a4:1f:9a:e0:d0:a5:07:d2:eb:02:4b:46:9d:1c:86:cb:47: e2:4b:31:eb:49:b9:8b:55:84:90:cd:00:a7:97:9d:e8:ca:fb: 30:52:43:8b -----BEGIN CERTIFICATE----- MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWETOrY134VIDCqQMpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDIwNzAxNDUyMFoXDTI2MDUxMjAwNDUyMFowLzEtMCsGA1UEAxMk NWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNiMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2+KczWvGB3HCEsT2ydHJ3JzcX3zZGr0t6Z8 Qlmk5yLO1xoiJEkaa5zzz0gBpIstDN9Y35o63BSzcC+LPq2EKQe0jFRJq+F9uC6+ jkDq8E3uIB+aD8xXRBgc+gwEA9X0JqLkb//+WGAj+hfiiTtQJFi6Qg+0xvAcwRAq ptyeqcy3QQO/mcnxgfWB+PXLrPrFEelRcquc1rHxxj+YNjQo5Lseevs4udjpGpkh aCXgkcQIFKZchMVQ8sliHCNnGyl0Xj5y5EgKKpptjcMFpKjXhvHEwfLSUtBNrX09 5E/SVSdwbWw8OGPvjj3z6iBS+0t1c17CtUBfBIXybal852bxUwIDAQABo4IEWzCC BFcwHQYDVR0OBBYEFHk/CVoxoyWkQJFuUU3Nrdl1C6i0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVjNWFhNGI0LWUzMGQtNDY4Zi1i YjY4LWJmN2ZlMTMzYjFiOC81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEz M2IxYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwXwYIKwYBBQUH AQcBAf8EUDBOMDwEAgABMDYDBAYtSgADBANoJQADBARo8/ADBAVo+qADBAKi9rgD BAesXgADBAesb4ADBATA/fADBAXOe4AwDgQCAAIwCAMGBCYC/4QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYDZzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVKZHTpt+KPn5o0rEpKZAPRtcB J4CcY480fhesXH+LU6TPFOD+COhfW9zFx+MqTrDwfS3fzMjbtyi/jh+kuvORg3df 6sRntsmtrF2Ai43shn7L3Twy1N+ZCKQPHeI7tbLqGwxWvnGLw6/iFxI/d9REnVlV /FDiUm8D9+EnOK4XRzhcgJe3ia2R96ai2M7lA2Xexykt1EdA7UHZEo/EdpeS3MIl osijvHSG8tyXF0aqTNtAVGRkjEUqoeWFWhKUfnz+Kotar4Wuv9yl5Zb50ybIoIrN kVdIPUclpB+a4NClB9LrAktGnRyGy0fiSzHrSbmLVYSQzQCnl53oyvswUkOL -----END CERTIFICATE-----Generated at Sun May 5 01:25:46 2024 by rpki-client on console-ams.rpki-client.org