$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer File: e91007f4-8b69-443f-87b7-248480814a0d.cer (raw, json) Hash identifier: uuRdH7990EiGte874JSelsYh6okbOGvnPWorN2SEYPk= Subject key identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E483551AD17252BB141CBF50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sun 10 Aug 2025 19:06:39 +0000 Subordinate resources: IP: 128.164.0.0/16 IP: 161.253.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:55:1a:d1:72:52:bb:14:1c:bf:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 10 19:06:39 2025 GMT Subject: CN=e91007f4-8b69-443f-87b7-248480814a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:35:28:39:19:ff:32:c3:69:87:5f:ea:81: 10:80:81:ee:a3:8d:9b:90:df:fc:95:dd:06:aa:a0: 51:d2:10:2d:78:50:b4:4f:5e:74:59:5b:3e:87:21: 91:4b:f1:f5:f4:9e:95:7c:19:a2:c7:b6:5f:b7:e3: 5d:b9:c9:ca:ff:9a:ff:d9:46:ad:d2:2a:a5:e6:be: ab:0c:b4:60:45:81:41:8f:aa:3c:72:84:89:d0:5a: fe:37:86:eb:ff:3e:ba:35:34:69:e6:d9:8b:bd:3d: c9:bc:92:98:61:89:01:06:1c:b7:b9:9f:e6:74:32: 95:52:33:a5:bb:9e:fe:1c:1a:7d:52:73:86:c4:a7: 09:76:b8:a5:bb:b5:de:63:fa:22:8c:90:0d:5a:ff: 1b:d4:63:fb:57:5f:8d:4c:37:ff:28:dd:5e:9d:73: 6c:60:46:25:6c:0d:d2:dc:e6:b7:4e:2b:09:d8:99: 85:e2:3b:62:02:e9:10:93:96:e7:15:bb:39:33:2d: c5:28:04:00:dc:9a:2e:d9:ec:ef:8f:e9:c6:b5:00: 1f:42:e3:34:cd:aa:29:52:3d:9e:84:78:6e:55:73: 3e:f8:cd:db:35:74:1c:fa:36:de:ee:7d:2d:42:54: 6a:e1:c5:fc:c4:83:05:f0:9b:f4:1b:99:62:6d:10: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 128.164.0.0/16 161.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ff:0f:6a:6e:31:68:1c:3b:26:71:7f:7f:e6:ac:f6:55:0c: b5:c1:5d:47:03:79:9d:2b:57:af:b6:cd:45:52:0b:a4:46:0c: 7d:56:f6:f1:57:bc:84:31:70:40:5b:f2:4b:76:33:37:37:99: 8c:04:b6:cd:7c:cb:a2:b7:f6:f3:bc:09:05:55:9f:29:47:46: 04:36:40:a0:4a:73:3c:a6:56:41:dc:86:30:b5:5c:43:90:3b: 65:ff:3f:ef:22:55:a8:e4:e7:d3:7c:15:e8:60:a0:4c:27:47: 47:4c:20:41:b5:ef:ce:36:52:22:22:ec:6b:13:20:8c:ec:a0: a1:4e:e9:f6:84:f8:63:ba:1d:80:51:63:fb:52:5a:21:21:29: 91:1d:ea:80:f7:ae:5b:45:ea:62:dd:f0:92:4f:46:aa:6a:93: 63:95:07:44:e4:8f:53:02:0a:71:9e:7e:2d:aa:27:2c:42:1d: 6a:cc:e7:e0:62:c9:70:c9:ee:ac:82:1c:08:37:1e:fd:3d:ca: cd:a2:4f:0e:5f:dd:b4:b2:2e:01:19:a4:13:25:43:11:8b:ab: d2:6e:47:5e:34:9f:68:fd:a5:3f:fc:4f:51:0f:8c:56:96:aa: 8f:b6:f2:21:1e:96:c0:82:97:83:f9:ce:df:1e:b4:38:b3:e4: 9d:03:4d:f3 -----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgIUAQ0Mn0MoWEHkg1Ua0XJSuxQcv1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgxMDE5MDYzOVowLzEtMCsGA1UEAxMk ZTkxMDA3ZjQtOGI2OS00NDNmLTg3YjctMjQ4NDgwODE0YTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEU1KDkZ/zLDaYdf6oEQgIHuo42bkN/8ld0G qqBR0hAteFC0T150WVs+hyGRS/H19J6VfBmix7Zft+NducnK/5r/2Uat0iql5r6r DLRgRYFBj6o8coSJ0Fr+N4br/z66NTRp5tmLvT3JvJKYYYkBBhy3uZ/mdDKVUjOl u57+HBp9UnOGxKcJdrilu7XeY/oijJANWv8b1GP7V1+NTDf/KN1enXNsYEYlbA3S 3Oa3TisJ2JmF4jtiAukQk5bnFbs5My3FKAQA3Jou2ezvj+nGtQAfQuM0zaopUj2e hHhuVXM++M3bNXQc+jbe7n0tQlRq4cX8xIMF8Jv0G5libRCtsQIDAQABo4IEAzCC A/8wHQYDVR0OBBYEFKeVo6jhMXOMOkzcYeggr45PcOCPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l OTEwMDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0ODA4MTRhMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U5MTAwN2Y0LThiNjktNDQzZi04 N2I3LTI0ODQ4MDgxNGEwZC9lOTEwMDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0ODA4 MTRhMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIwYIKwYBBQUH AQcBAf8EFDASMBAEAgABMAoDAwCApAMDAKH9MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACj/D2puMWgcOyZx f3/mrPZVDLXBXUcDeZ0rV6+2zUVSC6RGDH1W9vFXvIQxcEBb8kt2Mzc3mYwEts18 y6K39vO8CQVVnylHRgQ2QKBKczymVkHchjC1XEOQO2X/P+8iVajk59N8FehgoEwn R0dMIEG17842UiIi7GsTIIzsoKFO6faE+GO6HYBRY/tSWiEhKZEd6oD3rltF6mLd 8JJPRqpqk2OVB0Tkj1MCCnGefi2qJyxCHWrM5+BiyXDJ7qyCHAg3Hv09ys2iTw5f 3bSyLgEZpBMlQxGLq9JuR140n2j9pT/8T1EPjFaWqo+28iEelsCCl4P5zt8etDiz 5J0DTfM= -----END CERTIFICATE-----Generated at Sat May 4 15:02:40 2024 by rpki-client on console-ams.rpki-client.org