$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer File: 03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer (raw, json) Hash identifier: q6GEqbsLqzOX27rMpQLt4RGwvFy74MNx4DNFbeBLZHc= Subject key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858460EACAB084C0608EA2CE41BD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 May 2024 16:42:14 +0000 Certificate not after: Sun 07 Dec 2025 01:45:22 +0000 Subordinate resources: IP: 23.179.216.0/24 IP: 205.189.203.0/24 IP: 2602:fb87::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:0e:ac:ab:08:4c:06:08:ea:2c:e4:1b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 31 16:42:14 2024 GMT Not After : Dec 7 01:45:22 2025 GMT Subject: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d7:5b:8e:91:f0:6c:e8:8e:3e:b1:0b:85:8f: 70:9f:cd:b0:99:92:3f:7f:c7:64:2d:52:50:a6:4c: 55:d5:1d:70:28:62:42:27:25:f5:ac:03:b7:35:d2: ca:80:96:b0:ef:43:4e:8c:ed:70:50:c9:c1:27:97: 80:84:13:9b:e0:21:ab:3c:b2:c5:dc:de:a5:13:bd: 72:1e:90:38:ca:49:7c:80:46:b6:c5:53:76:04:f5: ab:cf:e2:f6:aa:57:1a:49:94:01:b3:14:3e:ff:0c: ae:97:d8:d9:00:75:70:e2:6b:fc:d3:2e:ca:d9:f0: 3c:33:16:98:95:8b:af:ac:1f:ee:6b:f4:ca:f1:c6: 34:b3:09:4f:7b:63:03:50:09:53:15:95:9e:48:73: 7c:38:cf:59:5f:d0:ab:a9:9f:0b:a0:92:ff:20:a0: 15:e4:10:95:79:34:d5:bb:df:e1:d4:b9:4b:00:1a: cb:89:4e:13:76:9b:b8:27:f6:58:ba:44:21:2e:a6: b0:b0:bd:dd:12:28:a4:7e:81:c8:5b:99:56:3e:90: 63:9f:0f:26:fd:a1:99:61:2f:fd:f8:14:20:c9:aa: 9f:00:88:0c:8b:7a:04:6c:bc:a5:c4:ad:d9:a0:e2: 19:77:a4:df:5c:08:c3:a2:20:e1:9c:ed:39:0c:fb: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.179.216.0/24 205.189.203.0/24 IPv6: 2602:fb87::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9b:d4:bb:d6:8b:81:3f:5b:5a:23:84:0a:51:af:5f:a2:3f: f2:b4:a0:1f:d3:b8:ef:da:66:c9:a4:ad:eb:7d:34:7f:cb:c3: c5:f3:19:71:63:fa:5f:80:bb:fa:1c:c7:96:07:a7:d8:71:df: 02:86:cd:56:d6:55:89:74:08:d0:11:27:59:df:52:8a:5d:a7: c5:d0:5a:8b:99:ce:cc:1e:c8:9d:62:8a:e2:85:53:6c:da:f1: 42:6d:73:2c:e1:24:e4:c7:1e:c8:9f:ef:5f:3d:c3:71:ea:0e: eb:50:33:5d:97:19:0a:ed:77:93:a2:d6:19:d7:12:d7:c9:9f: 2b:7e:b2:44:27:a2:ae:2f:3c:e0:b0:fd:39:c4:9a:6a:58:0a: fc:cb:64:a3:54:d4:5b:79:fa:ea:92:12:ad:42:e3:9c:18:72: c1:dd:58:93:77:20:88:35:8f:6b:7a:a0:e7:23:2e:1b:b7:30: f2:56:1b:b2:da:d2:f0:4a:e7:75:7d:50:59:aa:c6:07:ca:15: 14:57:6b:16:5e:e3:43:1c:c6:9b:05:64:53:c4:31:94:da:ff: 5c:67:d5:a6:57:60:58:d5:7a:d5:5b:3b:84:af:1c:54:f2:b8: f1:ea:6d:67:65:59:06:9b:fc:da:36:d7:3a:33:bf:5c:6c:a0: 93:a9:5c:13 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEYOrKsITAYI6izkG9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDUzMTE2NDIxNFoXDTI1MTIwNzAxNDUyMlowLzEtMCsGA1UEAxMk MDNiZmIyOWQtNTdhNC00OWM2LWFhODUtNDg5MmMxZjY5YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9dbjpHwbOiOPrELhY9wn82wmZI/f8dkLVJQ pkxV1R1wKGJCJyX1rAO3NdLKgJaw70NOjO1wUMnBJ5eAhBOb4CGrPLLF3N6lE71y HpA4ykl8gEa2xVN2BPWrz+L2qlcaSZQBsxQ+/wyul9jZAHVw4mv80y7K2fA8MxaY lYuvrB/ua/TK8cY0swlPe2MDUAlTFZWeSHN8OM9ZX9CrqZ8LoJL/IKAV5BCVeTTV u9/h1LlLABrLiU4Tdpu4J/ZYukQhLqawsL3dEiikfoHIW5lWPpBjnw8m/aGZYS/9 +BQgyaqfAIgMi3oEbLylxK3ZoOIZd6TfXAjDoiDhnO05DPszDwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFCNuAb+yelT7DoncXyg74dX2VxGJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w M2JmYjI5ZC01N2E0LTQ5YzYtYWE4NS00ODkyYzFmNjljNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzAzYmZiMjlkLTU3YTQtNDljNi1h YTg1LTQ4OTJjMWY2OWM0OC8wM2JmYjI5ZC01N2E0LTQ5YzYtYWE4NS00ODkyYzFm NjljNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXs9gDBADNvcswDgQCAAIwCAMGBCYC+4cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGb1LvWi4E/W1ojhApRr1+iP/K0oB/TuO/aZsmkret9NH/Lw8XzGXFj +l+Au/ocx5YHp9hx3wKGzVbWVYl0CNARJ1nfUopdp8XQWouZzsweyJ1iiuKFU2za 8UJtcyzhJOTHHsif7189w3HqDutQM12XGQrtd5Oi1hnXEtfJnyt+skQnoq4vPOCw /TnEmmpYCvzLZKNU1Ft5+uqSEq1C45wYcsHdWJN3IIg1j2t6oOcjLhu3MPJWG7La 0vBK53V9UFmqxgfKFRRXaxZe40McxpsFZFPEMZTa/1xn1aZXYFjVetVbO4SvHFTy uPHqbWdlWQab/No21zozv1xsoJOpXBM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:18 2024 by rpki-client on console-ams.rpki-client.org