$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer File: d21149ca-bfeb-409c-adbb-e86e751b6f22.cer (raw, json) Hash identifier: r4zLt2QUUQfp9NrnvrgWmMxgd9A0Qb+twftSv81bS1E= Subject key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858458DD77DE0EB6B921BD9E79B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Apr 2024 13:09:14 +0000 Certificate not after: Sun 18 May 2025 19:06:39 +0000 Subordinate resources: AS: 23467 AS: 395722 IP: 152.38.128.0/19 IP: 162.247.240.0/22 IP: 2602:816:5000::/40 IP: 2620:16:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8d:d7:7d:e0:eb:6b:92:1b:d9:e7:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 15 13:09:14 2024 GMT Not After : May 18 19:06:39 2025 GMT Subject: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:83:ad:a0:4b:e9:b9:48:9a:1e:5e:58:58: df:93:9a:4e:56:45:ad:40:48:b4:25:6c:d1:73:c8: fe:be:70:05:74:da:ae:50:ca:e8:c3:21:63:c6:97: 36:7e:42:9f:0d:e0:7b:cd:89:3b:98:34:ee:3e:6f: e9:d8:b0:c9:59:a9:b3:ec:81:17:3b:64:96:10:5a: 25:80:e8:af:12:15:be:3a:27:f2:b2:59:09:b5:0d: 4e:8c:b0:3b:e8:1e:6b:6c:b8:2c:6c:96:fc:9e:96: b7:0d:47:35:36:a1:55:a5:2e:c3:fe:4c:3f:1b:b9: bf:de:87:c2:84:91:e1:f6:b8:6b:df:0a:5a:4f:64: 6e:26:8e:0c:50:54:4a:ec:cf:7e:c4:17:11:d6:61: 69:7c:70:9c:01:27:09:d9:c4:75:ba:83:44:19:a3: 98:1a:6d:e9:35:6a:97:fc:ef:cc:9d:78:e2:5a:d0: b7:77:fe:55:46:36:ad:e4:f0:93:42:0c:eb:f1:5c: 1e:b7:5d:76:47:40:ff:f1:eb:1a:e9:e7:4d:ea:c6: fc:a3:32:bd:49:0e:21:92:e4:9b:2d:2c:42:f9:c6: 63:95:3b:ee:90:88:6f:e4:ce:9b:d3:29:be:df:1f: d5:d3:8c:42:10:cb:62:38:00:9c:8c:37:e7:f9:12: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 162.247.240.0/22 IPv6: 2602:816:5000::/40 2620:16:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23467 395722 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e3:d5:09:73:c0:2f:07:12:93:a4:28:fc:0e:ea:a0:2e:c7: ca:aa:b6:26:dd:58:be:75:ef:d2:b1:7d:01:ca:d9:70:99:b0: 03:73:b9:97:45:3b:be:48:12:8e:c1:f6:75:76:ba:04:44:02: e4:7f:66:83:b9:0f:ad:c1:17:34:5f:1c:53:b1:b0:43:26:2f: a0:68:7b:a7:dc:c1:40:89:54:85:07:17:b5:8d:5f:15:84:12: 41:6d:8c:df:61:89:a7:88:10:fe:75:af:45:4d:26:8b:cb:63: e2:c9:dd:1c:d0:c5:0d:c8:0d:64:10:5c:a2:1d:89:2b:ea:da: 27:63:7f:44:d6:8a:7b:ba:f8:bc:54:32:cb:61:76:c4:50:3b: 00:67:62:91:08:95:1d:cc:2a:40:be:6c:6c:d3:2e:c7:f0:bc: 9c:27:7c:d9:87:a1:4e:35:fe:21:44:2b:0d:46:89:2e:39:95: 27:69:7f:24:e6:13:20:26:ae:83:2e:cb:39:a3:2a:d6:e8:ff: be:d5:cb:e7:c0:03:54:a4:5b:1a:40:77:9a:62:9d:b6:7c:c9: a9:2a:22:02:5b:c2:df:21:92:f0:64:1b:73:b4:5d:d2:0b:ee: c5:d8:fb:d0:6b:b8:03:b8:4a:d4:5a:e9:12:27:f2:16:59:4e: 6b:a6:a8:f2 -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEWN133g62uSG9nnmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDQxNTEzMDkxNFoXDTI1MDUxODE5MDYzOVowLzEtMCsGA1UEAxMk ZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjODraBL6blImh5eWFjfk5pOVkWtQEi0JWzR c8j+vnAFdNquUMrowyFjxpc2fkKfDeB7zYk7mDTuPm/p2LDJWamz7IEXO2SWEFol gOivEhW+OifyslkJtQ1OjLA76B5rbLgsbJb8npa3DUc1NqFVpS7D/kw/G7m/3ofC hJHh9rhr3wpaT2RuJo4MUFRK7M9+xBcR1mFpfHCcAScJ2cR1uoNEGaOYGm3pNWqX /O/MnXjiWtC3d/5VRjat5PCTQgzr8Vwet112R0D/8esa6edN6sb8ozK9SQ4hkuSb LSxC+cZjlTvukIhv5M6b0ym+3x/V04xCEMtiOACcjDfn+RKSGwIDAQABo4IEPjCC BDowHQYDVR0OBBYEFEPr96ysRVcLRGAp4vU0UOfSgjD/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k MjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2QyMTE0OWNhLWJmZWItNDA5Yy1h ZGJiLWU4NmU3NTFiNmYyMi9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUx YjZmMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPgYIKwYBBQUH AQcBAf8ELzAtMBIEAgABMAwDBAWYJoADBAKi9/AwFwQCAAIwEQMGACYCCBZQAwcA JiAAFkAAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlurAgMGCcowVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA OOPVCXPALwcSk6Qo/A7qoC7Hyqq2Jt1YvnXv0rF9AcrZcJmwA3O5l0U7vkgSjsH2 dXa6BEQC5H9mg7kPrcEXNF8cU7GwQyYvoGh7p9zBQIlUhQcXtY1fFYQSQW2M32GJ p4gQ/nWvRU0mi8tj4sndHNDFDcgNZBBcoh2JK+raJ2N/RNaKe7r4vFQyy2F2xFA7 AGdikQiVHcwqQL5sbNMux/C8nCd82YehTjX+IUQrDUaJLjmVJ2l/JOYTICaugy7L OaMq1uj/vtXL58ADVKRbGkB3mmKdtnzJqSoiAlvC3yGS8GQbc7Rd0gvuxdj70Gu4 A7hK1FrpEifyFllOa6ao8g== -----END CERTIFICATE-----Generated at Sat May 4 15:01:44 2024 by rpki-client on console-fra.rpki-client.org