$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe.cer File: 94aa53ed-e0b6-4cb6-946e-e09f4a4597fe.cer (raw, json) Hash identifier: mkYhPkfohZJw7f8e6eIno68RQEi9EyKujFxHgC00vsU= Subject key identifier: 19:91:B6:1C:CD:22:58:89:87:7C:0B:A1:96:91:55:9D:37:44:2B:48 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858456A7069CC598F00CDC766FEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Apr 2024 20:48:16 +0000 Certificate not after: Sun 21 Sep 2025 00:45:17 +0000 Subordinate resources: AS: 19224 IP: 130.51.84.0/22 IP: 172.98.0.0/22 IP: 192.210.0.0/24 IP: 204.10.32.0/22 IP: 2606:bb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6a:70:69:cc:59:8f:00:cd:c7:66:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 2 20:48:16 2024 GMT Not After : Sep 21 00:45:17 2025 GMT Subject: CN=94aa53ed-e0b6-4cb6-946e-e09f4a4597fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:d8:2c:32:a3:ca:e7:56:73:fb:d8:24:ae: df:a7:8c:f3:01:83:7c:69:99:b1:3b:48:c9:84:4d: 14:32:9a:80:15:3f:72:d9:85:0e:fc:b6:6f:86:29: 2b:29:dc:2a:63:55:20:4a:7b:3b:0e:0f:21:57:4c: 73:20:36:4c:8d:10:fc:06:0e:99:16:d5:fd:99:00: e3:b8:e7:6b:6c:58:60:c8:93:f1:23:0b:09:77:68: 1f:d4:73:96:37:94:72:77:ba:80:8a:39:f0:9d:ad: 33:f4:3d:31:a7:ba:f2:9b:ed:6c:e9:b0:91:b1:ca: 6f:c6:73:2c:e5:6c:81:35:8f:fd:1b:7b:27:01:29: 39:76:d3:6e:81:99:4d:98:8e:27:3f:dc:3b:7f:26: d6:fa:8b:42:0c:31:80:0b:fe:9b:a0:e5:5d:fc:d3: a8:d1:4a:18:e0:a6:09:50:ee:7e:ca:5a:8e:7c:df: 12:09:49:78:f1:34:3a:5e:ae:3e:8a:0b:35:5d:10: 6a:e9:bb:9a:72:c7:94:db:61:2d:3d:b6:af:ea:09: b7:04:65:cd:f8:b2:ac:67:49:1c:66:61:b4:1d:ff: 7d:f0:91:51:0f:f1:db:f4:95:e4:bb:a8:29:72:eb: 6b:92:79:b5:d2:d5:e1:5f:80:fe:b5:32:6f:d5:e2: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:91:B6:1C:CD:22:58:89:87:7C:0B:A1:96:91:55:9D:37:44:2B:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe/94aa53ed-e0b6-4cb6-946e-e09f4a4597fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 130.51.84.0/22 172.98.0.0/22 192.210.0.0/24 204.10.32.0/22 IPv6: 2606:bb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19224 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d6:78:b4:b6:40:e6:85:a9:e9:2b:40:6b:45:ca:89:38:98: e2:ce:51:4b:05:08:a3:27:a8:b5:c6:db:71:02:bb:98:73:27: f7:88:b1:2a:66:e9:af:3d:01:e0:c7:56:31:27:52:22:97:1d: 05:7c:bf:76:30:4b:47:d4:36:06:2f:67:06:53:a6:a0:9f:35: d9:54:09:9e:84:a6:eb:92:ef:ca:f8:a9:fb:34:78:f3:8b:63: be:e0:05:d2:31:2f:75:8a:f6:ba:bd:90:55:f8:b7:76:e9:9f: cc:6c:e0:70:c5:7b:44:7d:66:d4:86:73:24:6e:ed:a9:f2:81: 7c:23:49:c4:4f:bd:8c:21:b9:05:b3:81:f1:e3:f6:08:f8:65: a8:bf:66:f8:71:a8:a2:11:34:60:8f:3f:6d:45:ed:63:30:26: 54:1d:ca:51:3c:32:b0:e8:a8:2b:fe:ef:7d:81:a3:8c:0b:d0: 16:25:1d:4b:30:d7:a5:99:ed:92:1a:64:72:68:b6:3f:9d:ee: a6:98:ef:1d:86:31:27:1f:7f:0b:af:ae:05:2d:0a:19:b5:b3: a4:e0:20:26:b7:32:62:83:4b:6f:f8:fb:4c:b6:ab:5b:3b:c0: 38:ab:5b:bd:07:85:11:06:ea:4b:55:28:c9:ff:f9:43:b2:60: 51:83:7e:ff -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEVqcGnMWY8Azcdm/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDQwMjIwNDgxNloXDTI1MDkyMTAwNDUxN1owLzEtMCsGA1UEAxMk OTRhYTUzZWQtZTBiNi00Y2I2LTk0NmUtZTA5ZjRhNDU5N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKLYLDKjyudWc/vYJK7fp4zzAYN8aZmxO0jJ hE0UMpqAFT9y2YUO/LZvhikrKdwqY1UgSns7Dg8hV0xzIDZMjRD8Bg6ZFtX9mQDj uOdrbFhgyJPxIwsJd2gf1HOWN5Ryd7qAijnwna0z9D0xp7rym+1s6bCRscpvxnMs 5WyBNY/9G3snASk5dtNugZlNmI4nP9w7fybW+otCDDGAC/6boOVd/NOo0UoY4KYJ UO5+ylqOfN8SCUl48TQ6Xq4+igs1XRBq6buacseU22EtPbav6gm3BGXN+LKsZ0kc ZmG0Hf998JFRD/Hb9JXku6gpcutrknm10tXhX4D+tTJv1eIqdwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFBmRthzNIliJh3wLoZaRVZ03RCtIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 NGFhNTNlZC1lMGI2LTRjYjYtOTQ2ZS1lMDlmNGE0NTk3ZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk0YWE1M2VkLWUwYjYtNGNiNi05 NDZlLWUwOWY0YTQ1OTdmZS85NGFhNTNlZC1lMGI2LTRjYjYtOTQ2ZS1lMDlmNGE0 NTk3ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAKCM1QDBAKsYgADBADA0gADBALMCiAwDQQCAAIw BwMFACYGu0AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICSxgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZdZ4 tLZA5oWp6StAa0XKiTiY4s5RSwUIoyeotcbbcQK7mHMn94ixKmbprz0B4MdWMSdS IpcdBXy/djBLR9Q2Bi9nBlOmoJ812VQJnoSm65Lvyvip+zR484tjvuAF0jEvdYr2 ur2QVfi3dumfzGzgcMV7RH1m1IZzJG7tqfKBfCNJxE+9jCG5BbOB8eP2CPhlqL9m +HGoohE0YI8/bUXtYzAmVB3KUTwysOioK/7vfYGjjAvQFiUdSzDXpZntkhpkcmi2 P53uppjvHYYxJx9/C6+uBS0KGbWzpOAgJrcyYoNLb/j7TLarWzvAOKtbvQeFEQbq S1Uoyf/5Q7JgUYN+/w== -----END CERTIFICATE-----Generated at Sun May 5 01:26:06 2024 by rpki-client on console-ams.rpki-client.org