$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer File: 011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer (raw, json) Hash identifier: Hbs/Puzek31/BWEPfePoDTro0ukqf81WLXB+Rn4TFtw= Subject key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584827BDA96375E01EDC30BF6908 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Dec 2024 01:45:33 +0000 Certificate not after: Mon 15 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 63394 IP: 23.184.112.0/24 IP: 104.237.112.0/20 IP: 157.52.32.0/19 IP: 172.86.0.0/18 IP: 2605:e4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:bd:a9:63:75:e0:1e:dc:30:bf:69:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 10 01:45:33 2024 GMT Not After : Mar 15 00:45:33 2027 GMT Subject: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:99:f8:f0:9a:5a:41:9d:e5:40:ec:8a:23:dd: df:db:d6:36:a2:0d:e3:d3:1b:63:a6:14:53:b6:5f: 02:27:72:44:70:78:aa:21:59:79:8f:02:dd:33:34: ca:a1:5e:6a:67:4e:62:9a:85:b2:e9:50:31:19:e1: dd:fc:33:01:9a:93:af:7c:cc:61:c9:1d:26:7f:a6: f5:ab:65:96:e3:16:ff:70:04:35:67:92:b3:ac:1c: de:10:d5:38:73:fe:f4:1f:e6:4f:79:c9:36:a4:a8: 8a:45:c5:48:5e:be:02:fd:80:29:d7:e3:a8:06:ee: ea:6d:56:1d:45:25:1a:fa:05:2d:13:12:77:93:04: 72:a8:e0:0a:b6:1a:ac:3d:6c:08:9e:4b:79:5c:45: 8c:57:cb:8b:61:0e:4c:38:a6:2e:51:31:6c:87:f6: 2b:f1:f6:0d:4b:63:5d:c2:49:a9:07:88:83:9f:44: 94:5e:83:fb:fd:57:81:56:9c:ce:1f:8c:46:86:60: 7e:0d:be:a9:63:4e:3c:3d:ea:1a:e1:e6:d7:2f:7c: 32:e1:56:91:39:4e:f4:86:14:9b:55:20:ff:45:d1: 4d:ca:7a:1c:1b:33:d2:18:90:d9:8d:1c:1e:d1:b5: 42:84:ce:ae:d3:11:20:28:9c:dc:81:0d:d9:a6:14: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.184.112.0/24 104.237.112.0/20 157.52.32.0/19 172.86.0.0/18 IPv6: 2605:e4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63394 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:01:4b:a5:89:93:4b:e2:56:c2:ed:7f:41:6f:fb:ff:6e:ae: cb:33:4b:c2:8c:84:34:45:4f:b2:87:76:ef:c1:a1:a3:70:ca: 15:91:b6:b3:fb:e4:75:57:6d:7d:2b:13:75:0e:e8:0b:78:fe: c7:ff:d8:82:41:fb:0e:23:cf:f2:94:ad:de:02:bc:3c:b9:a2: 78:24:5a:ff:8f:48:99:89:51:12:87:a2:3d:dc:a6:5e:e9:ac: 41:6a:9c:5a:21:d9:99:04:8d:1f:94:db:17:42:ac:ce:06:0f: 92:dd:85:6b:a9:d5:4f:0a:7c:53:74:de:d0:36:ce:37:5f:63: 18:b0:4a:47:fe:ca:33:45:2a:28:84:bf:b6:41:39:c5:eb:3f: 79:f7:94:d2:6a:bf:80:f5:34:92:67:68:1c:f4:f9:03:89:25: a6:70:dc:e7:19:59:45:cc:45:4e:e1:78:19:63:ec:92:6a:3f: 29:2a:85:ed:d1:35:f9:6b:59:3d:c2:09:c7:81:33:1e:c8:48: 38:be:5f:2d:57:7f:db:96:03:26:c3:64:3d:10:38:eb:2a:0d: 13:77:dd:ed:6c:70:5b:d8:53:ed:02:d2:d9:da:54:d5:35:13: ab:c0:23:77:8a:b9:22:3a:ca:c7:e5:03:1f:8c:ca:13:03:5b: a4:99:59:be -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEgnvaljdeAe3DC/aQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTIxMDAxNDUzM1oXDTI3MDMxNTAwNDUzM1owLzEtMCsGA1UEAxMk MDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJmOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJn48JpaQZ3lQOyKI93f29Y2og3j0xtjphRT tl8CJ3JEcHiqIVl5jwLdMzTKoV5qZ05imoWy6VAxGeHd/DMBmpOvfMxhyR0mf6b1 q2WW4xb/cAQ1Z5KzrBzeENU4c/70H+ZPeck2pKiKRcVIXr4C/YAp1+OoBu7qbVYd RSUa+gUtExJ3kwRyqOAKthqsPWwInkt5XEWMV8uLYQ5MOKYuUTFsh/Yr8fYNS2Nd wkmpB4iDn0SUXoP7/VeBVpzOH4xGhmB+Db6pY048Peoa4ebXL3wy4VaROU70hhSb VSD/RdFNynocGzPSGJDZjRwe0bVChM6u0xEgKJzcgQ3ZphTMKwIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFFEKvPdZUuImBtcBExMijFgD578aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w MTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzAxMWEwZDFiLTc5YTQtNGQxNC05 Y2QwLTA3NDNmMjliZjk1Ni8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5 YmY5NTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAAXuHADBARo7XADBAWdNCADBAasVgAwDQQCAAIw BwMFACYF5MAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPeiMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABYB S6WJk0viVsLtf0Fv+/9ursszS8KMhDRFT7KHdu/BoaNwyhWRtrP75HVXbX0rE3UO 6At4/sf/2IJB+w4jz/KUrd4CvDy5ongkWv+PSJmJURKHoj3cpl7prEFqnFoh2ZkE jR+U2xdCrM4GD5LdhWup1U8KfFN03tA2zjdfYxiwSkf+yjNFKiiEv7ZBOcXrP3n3 lNJqv4D1NJJnaBz0+QOJJaZw3OcZWUXMRU7heBlj7JJqPykqhe3RNflrWT3CCceB Mx7ISDi+Xy1Xf9uWAybDZD0QOOsqDRN33e1scFvYU+0C0tnaVNU1E6vAI3eKuSI6 ysflAx+MyhMDW6SZWb4= -----END CERTIFICATE-----Generated at Fri Apr 4 20:20:53 2025 by rpki-client