$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer File: ab0439ab-3236-4080-a238-62d21f65e1ad.cer (raw, json) Hash identifier: gTO36d2LPr9t7lderAeXjrKOlJz7alEaZ6WXUDPq7PE= Subject key identifier: 17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858445F0225C71BA0FC9D61B50300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 Dec 2023 01:45:15 +0000 Certificate not after: Thu 02 Apr 2026 00:45:15 +0000 Subordinate resources: IP: 2602:80e:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:5f:02:25:c7:1b:a0:fc:9d:61:b5:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 29 01:45:15 2023 GMT Not After : Apr 2 00:45:15 2026 GMT Subject: CN=ab0439ab-3236-4080-a238-62d21f65e1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:4b:ad:20:a4:0b:b9:17:e6:c6:f8:27:6d: c2:52:2d:e7:f7:7b:e4:cc:1d:81:fc:24:71:f3:ba: cb:58:f9:e3:aa:f7:9e:cd:85:28:2e:b9:b9:26:8a: 29:67:ea:90:11:41:b9:1a:38:b7:8b:52:ee:ff:2a: ed:85:d0:ef:e7:a4:e2:9e:8d:52:6d:d9:da:7c:84: a0:a6:2a:80:5a:36:51:39:a0:5d:17:4d:c4:4f:96: 26:46:45:60:3a:7f:c0:03:30:20:1a:89:7f:7e:32: b2:49:54:a4:1e:a3:53:e8:b2:c2:ea:24:95:e9:21: 48:bc:db:7f:f8:97:f7:20:cc:0e:66:9c:29:ed:72: 20:e6:ce:63:f3:3f:91:de:20:30:80:e9:fd:dd:bc: b4:0d:b1:a8:7f:59:d3:b0:e5:ab:4f:78:99:a2:98: 5b:37:5d:a3:b7:d3:e3:07:22:23:bb:43:69:50:4e: 43:46:3c:63:21:a5:3c:d6:b5:c1:c1:36:4a:93:c8: ce:d1:a4:8f:a2:c1:f8:f5:50:af:57:55:56:1b:a7: 1e:43:05:ff:98:7d:5d:4a:fb:5e:fd:d1:d6:3b:b1: b4:52:0e:bc:d3:f7:77:00:5f:80:32:37:7d:45:0a: f5:b7:f7:65:8b:ac:50:59:dc:50:a3:05:67:83:c0: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2602:80e:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:6b:71:fe:bf:71:e5:38:76:bf:23:db:4f:96:85:d1:f0:45: 35:ae:a3:73:10:e1:ae:fd:b4:53:b0:78:ea:a5:74:aa:ab:fb: c6:8b:06:24:a1:7d:d5:fd:34:1c:d5:03:39:20:44:e6:d5:9d: e7:73:0c:a5:6c:d2:99:20:27:1c:56:8b:de:3b:53:14:7f:e6: 94:96:bd:b5:3e:7d:2d:91:50:99:7e:69:a6:e1:0c:08:94:c3: 97:ed:37:59:2f:ff:bd:f5:d4:f2:43:72:c1:2c:de:d2:18:81: d9:c1:2a:b4:50:fa:39:c8:a0:65:c5:7f:1a:3e:73:fb:70:26: c8:71:9a:25:5a:a3:54:f0:ee:39:05:00:a1:39:ff:7a:f7:43: 91:95:6c:d3:39:2d:7b:fc:70:9a:9c:4f:a3:31:69:e5:b3:a0: 18:3d:39:cd:e8:eb:c0:f6:74:81:52:3d:24:e6:40:f8:8e:57: bb:fe:93:db:b4:ce:62:a7:37:5c:c7:e6:9a:50:82:b2:64:0a: e8:dc:00:65:bb:c6:1d:7d:af:b0:3a:42:75:b1:88:e8:6e:bd: b1:20:03:0f:04:b8:1d:e7:be:55:ef:f8:d9:e4:98:58:9c:eb: ec:e6:e4:46:9c:57:3c:b0:f6:1b:37:e9:94:7e:23:99:c3:40: 4b:dc:03:2d -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWERfAiXHG6D8nWG1AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTIyOTAxNDUxNVoXDTI2MDQwMjAwNDUxNVowLzEtMCsGA1UEAxMk YWIwNDM5YWItMzIzNi00MDgwLWEyMzgtNjJkMjFmNjVlMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3tLrSCkC7kX5sb4J23CUi3n93vkzB2B/CRx 87rLWPnjqveezYUoLrm5JoopZ+qQEUG5Gji3i1Lu/yrthdDv56Tino1SbdnafISg piqAWjZROaBdF03ET5YmRkVgOn/AAzAgGol/fjKySVSkHqNT6LLC6iSV6SFIvNt/ +Jf3IMwOZpwp7XIg5s5j8z+R3iAwgOn93by0DbGof1nTsOWrT3iZophbN12jt9Pj ByIju0NpUE5DRjxjIaU81rXBwTZKk8jO0aSPosH49VCvV1VWG6ceQwX/mH1dSvte /dHWO7G0Ug680/d3AF+AMjd9RQr1t/dli6xQWdxQowVng8AA5wIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFBdAsvbkXi0Numc67hHgGGjD8F2vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h YjA0MzlhYi0zMjM2LTQwODAtYTIzOC02MmQyMWY2NWUxYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FiMDQzOWFiLTMyMzYtNDA4MC1h MjM4LTYyZDIxZjY1ZTFhZC9hYjA0MzlhYi0zMjM2LTQwODAtYTIzOC02MmQyMWY2 NWUxYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggOwAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjmtx/r9x5Th2vyPb T5aF0fBFNa6jcxDhrv20U7B46qV0qqv7xosGJKF91f00HNUDOSBE5tWd53MMpWzS mSAnHFaL3jtTFH/mlJa9tT59LZFQmX5ppuEMCJTDl+03WS//vfXU8kNywSze0hiB 2cEqtFD6OcigZcV/Gj5z+3AmyHGaJVqjVPDuOQUAoTn/evdDkZVs0zkte/xwmpxP ozFp5bOgGD05zejrwPZ0gVI9JOZA+I5Xu/6T27TOYqc3XMfmmlCCsmQK6NwAZbvG HX2vsDpCdbGI6G69sSADDwS4Hee+Ve/42eSYWJzr7ObkRpxXPLD2GzfplH4jmcNA S9wDLQ== -----END CERTIFICATE-----Generated at Sat May 4 15:01:42 2024 by rpki-client on console-fra.rpki-client.org