$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer (raw, json) Hash identifier: geYmQ/EU63S3P9NiPq0pqVzEcVX1BclZKcTeQaWqDxM= Subject key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285842BEEC7493FDCB3A070B324080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Aug 2023 00:45:16 +0000 Certificate not after: Tue 04 Nov 2025 01:45:16 +0000 Subordinate resources: AS: 400564 IP: 23.134.136.0/24 IP: 207.174.20.0/24 IP: 2602:fb9f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:be:ec:74:93:fd:cb:3a:07:0b:32:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 2 00:45:16 2023 GMT Not After : Nov 4 01:45:16 2025 GMT Subject: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:80:95:a0:af:58:b6:d4:5e:23:8d:5f:e7:82: 88:97:c6:83:e9:ef:9c:e0:f1:dd:0b:79:64:43:5f: c1:a4:c3:f8:96:13:ff:71:aa:ea:6f:9b:08:ff:1a: a7:96:c2:f7:1e:a1:cc:8f:73:ca:28:6b:c5:a5:bc: bc:fc:d7:49:4e:1c:f3:2f:29:97:32:65:d9:82:e3: e0:97:c5:5b:09:91:d2:b2:20:f9:60:b0:ac:8e:10: a3:95:19:31:d7:61:42:99:8c:13:82:2c:82:c8:30: 56:01:55:7b:53:c6:e7:00:00:60:07:38:ed:f6:b2: 71:1d:6f:cd:0a:e4:4c:40:4c:77:dc:e7:52:8b:8e: ee:9f:64:d8:01:6a:ab:26:70:02:06:4d:7a:d4:c8: d6:cd:2d:0d:e4:4c:14:53:81:94:3b:8e:21:5a:ee: a6:2c:0c:63:fb:1e:6a:15:5f:81:fc:8e:e1:ac:63: ff:70:bc:15:f0:01:58:06:4c:fa:f6:43:26:c0:d8: 44:d9:78:e0:35:6d:57:a5:6f:61:ed:1b:3a:ee:ea: 51:ad:97:6f:d6:18:c4:c0:86:2f:61:32:6b:d4:ca: 31:5d:69:9f:11:d6:8b:6b:58:89:75:90:5b:f0:af: e2:c2:a1:04:1d:cc:90:6c:a9:53:27:46:5f:0e:ca: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.134.136.0/24 207.174.20.0/24 IPv6: 2602:fb9f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400564 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:12:a6:99:b3:54:1d:9b:78:61:8f:1e:7b:1a:73:cc:15:88: d9:67:60:c0:0e:ff:7a:01:e6:10:37:5a:8c:56:46:b2:be:0a: 05:04:27:cb:10:a1:27:29:1e:df:6c:1f:83:35:12:32:d4:4a: b4:7c:96:7d:40:5f:ce:8a:21:83:27:6a:6e:11:5d:38:7b:3c: 43:29:e4:93:c9:72:72:72:03:ea:fb:8c:b8:f0:c5:e6:e0:85: a8:26:d5:3d:cf:8b:d0:66:45:16:37:76:c5:ee:bd:80:d3:91: dd:f1:25:0c:b3:70:f3:c7:77:48:2a:09:b7:c5:35:95:26:25: fb:54:e5:83:e8:18:79:a2:ed:f9:0c:d5:72:2f:c0:89:e8:7c: 4a:1f:08:e3:69:bb:51:b1:14:74:9a:4c:5d:7b:6a:61:55:74: 9b:a3:b0:1c:7e:84:22:cb:cd:ff:9a:ce:13:c3:42:22:2d:e1: c3:65:9b:ae:2e:94:9d:50:9a:42:2b:e1:c4:fe:fb:01:9c:10: db:3e:bf:c0:d5:8c:a3:0b:2d:90:3d:9c:47:a2:10:c9:95:b6: 2a:d5:19:9a:25:79:53:8d:de:4e:57:41:bd:1a:0f:53:4b:d3: 5b:70:e6:72:c6:8a:95:23:1c:22:08:da:86:5c:fb:aa:5c:ea: de:52:d2:f5 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEK+7HST/cs6BwsyQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDgwMjAwNDUxNloXDTI1MTEwNDAxNDUxNlowLzEtMCsGA1UEAxMk ZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNiMThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4CVoK9YttReI41f54KIl8aD6e+c4PHdC3lk Q1/BpMP4lhP/carqb5sI/xqnlsL3HqHMj3PKKGvFpby8/NdJThzzLymXMmXZguPg l8VbCZHSsiD5YLCsjhCjlRkx12FCmYwTgiyCyDBWAVV7U8bnAABgBzjt9rJxHW/N CuRMQEx33OdSi47un2TYAWqrJnACBk161MjWzS0N5EwUU4GUO44hWu6mLAxj+x5q FV+B/I7hrGP/cLwV8AFYBkz69kMmwNhE2XjgNW1XpW9h7Rs67upRrZdv1hjEwIYv YTJr1MoxXWmfEdaLa1iJdZBb8K/iwqEEHcyQbKlTJ0ZfDsqwowIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFPcbHyRUBYB/bsZdRhuCoonn7YLGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k ZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RlODkzOWE2LTZhY2ItNDhlNS1h ZjlhLWQxZjdjY2EzYjE4ZS9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2Nh M2IxOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXhogDBADPrhQwDgQCAAIwCAMGBCYC+58AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYctDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaEqaZs1Qdm3hhjx57 GnPMFYjZZ2DADv96AeYQN1qMVkayvgoFBCfLEKEnKR7fbB+DNRIy1Eq0fJZ9QF/O iiGDJ2puEV04ezxDKeSTyXJycgPq+4y48MXm4IWoJtU9z4vQZkUWN3bF7r2A05Hd 8SUMs3Dzx3dIKgm3xTWVJiX7VOWD6Bh5ou35DNVyL8CJ6HxKHwjjabtRsRR0mkxd e2phVXSbo7AcfoQiy83/ms4Tw0IiLeHDZZuuLpSdUJpCK+HE/vsBnBDbPr/A1Yyj Cy2QPZxHohDJlbYq1RmaJXlTjd5OV0G9Gg9TS9NbcOZyxoqVIxwiCNqGXPuqXOre UtL1 -----END CERTIFICATE-----Generated at Sat May 4 15:01:45 2024 by rpki-client on console-fra.rpki-client.org