$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer (raw, json) Hash identifier: zCoLrSAB4vOGihAf/PIjoSvEjf/DQfGFU/6jXPjgjis= Subject key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584246E10B9E584645F76DBDE980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Jun 2023 00:45:17 +0000 Certificate not after: Mon 22 Sep 2025 00:45:17 +0000 Subordinate resources: AS: 64210 IP: 137.57.0.0/16 IP: 146.152.0.0/16 IP: 192.55.32.0 -- 192.55.45.255 IP: 192.55.233.0/24 IP: 204.128.183.0/24 IP: 204.130.196.0/24 IP: 2620:104:9000::/44 IP: 2620:148::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:46:e1:0b:9e:58:46:45:f7:6d:bd:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 20 00:45:17 2023 GMT Not After : Sep 22 00:45:17 2025 GMT Subject: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:dc:1a:dc:66:8a:c6:df:f3:a5:e6:d6:7b: 27:ee:98:12:ef:ba:90:21:7b:af:69:f3:92:e2:c6: b7:9d:6d:08:e2:42:3b:1c:2a:14:d1:30:5d:22:07: 57:28:a7:61:f3:73:b2:74:06:d2:ef:33:f5:74:ea: 81:79:ce:4a:0a:30:89:57:b1:21:bf:f3:41:71:dd: e9:a4:95:8a:e6:83:54:dc:5c:e0:71:aa:36:c5:7f: 06:5e:1d:92:07:7b:95:45:63:c0:b5:2a:91:72:99: e4:a3:b0:be:be:50:29:1a:28:fe:d1:08:5e:f4:4f: 9a:25:35:24:2b:bd:68:b2:e0:81:50:28:c4:c1:e3: ee:3b:fc:0e:d0:91:5c:88:be:74:08:f1:26:3f:69: 18:dc:04:fd:8c:2c:17:f2:f5:9c:1f:fc:69:b4:50: 51:46:4e:aa:21:bc:13:7d:d7:88:04:6d:06:2c:e5: a9:cd:02:12:ac:20:85:ba:bc:42:4f:5a:41:cf:59: 68:5f:da:6f:1b:b1:2d:16:b1:d0:a1:b8:0e:bb:0c: ae:18:17:15:1e:b4:a4:e9:f2:aa:ad:c8:49:28:8e: c3:35:27:bf:81:50:b8:14:4d:65:09:24:dd:4f:ab: 9d:00:b1:78:6d:4b:2e:af:d0:2c:82:d5:32:1d:9f: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 137.57.0.0/16 146.152.0.0/16 192.55.32.0-192.55.45.255 192.55.233.0/24 204.128.183.0/24 204.130.196.0/24 IPv6: 2620:104:9000::/44 2620:148::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64210 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c3:34:d9:c4:68:80:aa:cb:91:3f:06:8c:4d:82:a4:ad:09: 69:ee:cc:82:75:65:03:aa:5a:43:ec:c1:95:95:04:e8:e0:04: cf:f3:c1:21:3b:6d:bd:51:f9:a1:9c:5f:f4:49:d1:5e:63:e3: 5d:12:69:92:1e:c8:63:e4:7e:25:0f:33:a4:36:94:ad:04:87: 29:53:55:5e:c1:c1:8b:da:ad:75:ce:cd:6c:24:d9:bc:e2:af: 12:e4:50:e0:14:cd:24:ad:ab:3a:0d:fa:01:f7:39:01:9e:f8: 07:a5:40:f7:50:21:e5:68:63:c8:40:29:89:43:d7:3f:07:e3: 3a:01:0d:36:2f:2d:05:15:30:d2:f0:b9:ad:38:87:19:22:e8: f8:7d:2b:2a:52:6e:5d:8e:48:05:6d:2f:55:9d:9f:e2:db:01: 2c:6e:cb:74:99:09:67:cb:1d:dc:8e:13:02:f9:06:95:8b:42: 37:eb:b0:a3:17:51:16:b8:e0:80:50:54:78:c0:9c:93:a8:91: 4e:f7:8d:55:da:f6:46:0d:74:5d:42:9d:e1:da:24:e5:dd:53: a3:87:34:02:f0:62:64:76:68:e2:f3:aa:db:f9:1b:ed:f7:df: bd:a9:c2:70:d2:1d:3b:01:4b:4c:8c:d0:44:85:67:2f:7b:a8: b2:4c:8f:3f -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEJG4QueWEZF92296YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDYyMDAwNDUxN1oXDTI1MDkyMjAwNDUxN1owLzEtMCsGA1UEAxMk NzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzcGtxmisbf86Xm1nsn7pgS77qQIXuvafOS 4sa3nW0I4kI7HCoU0TBdIgdXKKdh83OydAbS7zP1dOqBec5KCjCJV7Ehv/NBcd3p pJWK5oNU3Fzgcao2xX8GXh2SB3uVRWPAtSqRcpnko7C+vlApGij+0Qhe9E+aJTUk K71osuCBUCjEwePuO/wO0JFciL50CPEmP2kY3AT9jCwX8vWcH/xptFBRRk6qIbwT fdeIBG0GLOWpzQISrCCFurxCT1pBz1loX9pvG7EtFrHQobgOuwyuGBcVHrSk6fKq rchJKI7DNSe/gVC4FE1lCSTdT6udALF4bUsur9AsgtUyHZ/zmQIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFFIt1muHBQab4kQ+jUHLtTfMODGXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzcwNGE3NjFmLWI3MWEtNGZhMi1i MGU3LWRiNTI3OGUyM2RjMy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhl MjNkYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDAEAgABMCoDAwCJOQMDAJKYMAwDBAXANyADBAHANywDBADAN+kD BADMgLcDBADMgsQwFwQCAAIwEQMHBCYgAQSQAAMGBCYgAUgAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwD60jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjwzTZxGiAqsuRPwaMTYKkrQlp7syC dWUDqlpD7MGVlQTo4ATP88EhO229UfmhnF/0SdFeY+NdEmmSHshj5H4lDzOkNpSt BIcpU1VewcGL2q11zs1sJNm84q8S5FDgFM0kras6DfoB9zkBnvgHpUD3UCHlaGPI QCmJQ9c/B+M6AQ02Ly0FFTDS8LmtOIcZIuj4fSsqUm5djkgFbS9VnZ/i2wEsbst0 mQlnyx3cjhMC+QaVi0I367CjF1EWuOCAUFR4wJyTqJFO941V2vZGDXRdQp3h2iTl 3VOjhzQC8GJkdmji86rb+Rvt99+9qcJw0h07AUtMjNBEhWcve6iyTI8/ -----END CERTIFICATE-----Generated at Sun May 5 01:40:22 2024 by rpki-client on console-fra.rpki-client.org