$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer File: 0ab2447c-9735-4548-ac30-fc578e8e36ba.cer (raw, json) Hash identifier: IiMzvxyKJVNcxcR89t9UG7a7jpCmy26MBUfDviLZ0ag= Subject key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584687A7D98A01D6C926672E1780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 14 Jul 2024 00:45:20 +0000 Certificate not after: Sat 17 Oct 2026 00:45:20 +0000 Subordinate resources: AS: 13926 AS: 22781 AS: 54203 AS: 62651 AS: 63128 IP: 68.68.32.0/20 IP: 98.158.112.0/20 IP: 104.36.176.0/21 IP: 108.171.96.0/19 IP: 173.195.0.0/20 IP: 173.255.160.0/19 IP: 192.200.144.0/20 IP: 199.127.248.0/21 IP: 207.204.224.0/19 IP: 216.131.64.0/18 IP: 216.169.128.0/20 IP: 2604:c980::/32 IP: 2604:ea80::/32 IP: 2604:fc80::/32 IP: 2606:b300::/32 IP: 2607:fb50::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:87:a7:d9:8a:01:d6:c9:26:67:2e:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 14 00:45:20 2024 GMT Not After : Oct 17 00:45:20 2026 GMT Subject: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:96:07:95:c3:48:fa:0c:df:7b:47:2b:ac: da:9b:75:6c:3b:50:9c:ee:8a:12:dd:99:0a:e6:95: 5f:e2:e9:b7:c3:66:56:6f:5b:15:6b:97:2b:14:bb: 9c:24:ef:04:a9:5f:ba:58:91:db:c7:8b:c8:02:3e: 56:31:89:49:a4:b3:08:84:bd:b1:45:d1:18:c2:98: 3c:2f:86:88:96:d8:d4:68:2f:b4:f2:4c:8a:c5:7d: 34:bd:88:30:28:3f:e2:f4:25:80:cb:54:a1:df:df: 43:b7:10:a5:23:1f:8d:8f:75:52:91:db:84:93:26: d3:be:37:43:cb:8b:dc:bf:ab:7a:71:a3:01:05:1e: 0b:8c:fb:f1:6d:5b:62:26:db:e7:7c:7c:b1:ee:09: 3f:1a:0a:d3:66:e0:21:09:9f:16:9a:1e:2d:ca:cc: 47:b7:0c:fe:98:f1:f1:86:54:98:0c:31:61:7b:42: 58:8a:d5:50:ea:1f:1a:49:33:d5:47:dc:11:45:ce: 9d:09:20:b9:ea:e4:dd:bb:74:96:83:9a:a1:7c:05: 8b:05:7a:d0:2d:27:75:e7:5d:7e:fb:24:57:85:3b: 34:58:2b:94:d8:96:f4:0b:29:fd:f7:10:90:66:e2: ac:e8:60:2b:85:e0:4f:b5:6a:e6:83:0f:d2:52:23: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 68.68.32.0/20 98.158.112.0/20 104.36.176.0/21 108.171.96.0/19 173.195.0.0/20 173.255.160.0/19 192.200.144.0/20 199.127.248.0/21 207.204.224.0/19 216.131.64.0/18 216.169.128.0/20 IPv6: 2604:c980::/32 2604:ea80::/32 2604:fc80::/32 2606:b300::/32 2607:fb50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13926 22781 54203 62651 63128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1f:8e:13:a1:60:77:db:a7:32:c1:78:82:1e:97:46:56:b8: ec:66:23:2a:3a:b3:a6:fe:06:35:55:c4:08:7f:8b:10:8d:10: 4b:56:f8:77:3b:47:22:d1:e2:e9:a2:ae:01:28:0a:6f:49:90: 6e:99:d0:51:63:4e:8e:81:4f:a2:a3:33:1f:8f:7f:03:6f:05: 64:cf:53:9e:0f:32:b8:db:d0:73:84:64:bc:b9:40:46:94:82: 54:f0:cd:0b:2c:34:0c:0b:85:4b:45:14:7f:29:43:9e:8e:7e: c7:f8:94:39:8d:5a:78:0b:43:b5:fc:0e:f9:57:55:e8:8e:a5: 1e:40:3b:93:23:4f:02:20:b2:1f:9b:58:49:d5:42:10:c5:30: 3f:32:d1:38:f2:9d:a5:8c:a3:f6:8c:fb:6f:18:c1:7d:89:91: 1a:2f:fe:f6:04:a4:9e:97:54:4b:1f:c9:5f:7e:df:f6:bb:e8: c2:63:41:55:66:2d:df:5b:56:ba:1b:9f:5f:01:a2:26:84:61: ad:1c:04:94:df:61:cd:23:90:9f:cf:c8:a3:3d:7c:b6:0b:ae: 95:53:fc:00:53:58:c2:59:24:6e:4a:c8:22:15:1e:14:a7:4b: 39:c9:60:a6:73:1e:db:81:6d:19:32:af:f0:05:ce:4f:19:b0: aa:dd:80:3d -----BEGIN CERTIFICATE----- MIIHgzCCBmugAwIBAgIUAQ0Mn0MoWEaHp9mKAdbJJmcuF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDcxNDAwNDUyMFoXDTI2MTAxNzAwNDUyMFowLzEtMCsGA1UEAxMk MGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUzNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcSWB5XDSPoM33tHK6zam3VsO1Cc7ooS3ZkK 5pVf4um3w2ZWb1sVa5crFLucJO8EqV+6WJHbx4vIAj5WMYlJpLMIhL2xRdEYwpg8 L4aIltjUaC+08kyKxX00vYgwKD/i9CWAy1Sh399DtxClIx+Nj3VSkduEkybTvjdD y4vcv6t6caMBBR4LjPvxbVtiJtvnfHyx7gk/GgrTZuAhCZ8Wmh4tysxHtwz+mPHx hlSYDDFhe0JYitVQ6h8aSTPVR9wRRc6dCSC56uTdu3SWg5qhfAWLBXrQLSd1511+ +yRXhTs0WCuU2Jb0Cyn99xCQZuKs6GArheBPtWrmgw/SUiPehQIDAQABo4IElTCC BJEwHQYDVR0OBBYEFFAaEzJgbOg9DXHv2DLxbx6kc9uUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w YWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBhYjI0NDdjLTk3MzUtNDU0OC1h YzMwLWZjNTc4ZThlMzZiYS8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4 ZTM2YmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgYYGCCsGAQUF BwEHAQH/BHcwdTBIBAIAATBCAwQEREQgAwQEYp5wAwQDaCSwAwQFbKtgAwQErcMA AwQFrf+gAwQEwMiQAwQDx3/4AwQFz8zgAwQG2INAAwQE2KmAMCkEAgACMCMDBQAm BMmAAwUAJgTqgAMFACYE/IADBQAmBrMAAwUAJgf7UDAsBggrBgEFBQcBCAEB/wQd MBugGTAXAgI2ZgICWP0CAwDTuwIDAPS7AgMA9pgwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgx+OE6Fgd9un MsF4gh6XRla47GYjKjqzpv4GNVXECH+LEI0QS1b4dztHItHi6aKuASgKb0mQbpnQ UWNOjoFPoqMzH49/A28FZM9Tng8yuNvQc4RkvLlARpSCVPDNCyw0DAuFS0UUfylD no5+x/iUOY1aeAtDtfwO+VdV6I6lHkA7kyNPAiCyH5tYSdVCEMUwPzLROPKdpYyj 9oz7bxjBfYmRGi/+9gSknpdUSx/JX37f9rvowmNBVWYt31tWuhufXwGiJoRhrRwE lN9hzSOQn8/Ioz18tguulVP8AFNYwlkkbkrIIhUeFKdLOclgpnMe24FtGTKv8AXO Txmwqt2APQ== -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:45 2024 by rpki-client on console-fra.rpki-client.org