$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer File: 0c3cf342-4337-44bf-ac45-d0772ad75854.cer (raw, json) Hash identifier: 3Cy0kQ2ABv4oEs88/DVgTCvdxR8vHrJpzLzo5NSDGaw= Subject key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285844AFF807BE180D65BC279A3540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Jan 2024 01:45:20 +0000 Certificate not after: Fri 01 May 2026 00:45:20 +0000 Subordinate resources: IP: 104.167.196.0/22 IP: 2606:2040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:af:f8:07:be:18:0d:65:bc:27:9a:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 27 01:45:20 2024 GMT Not After : May 1 00:45:20 2026 GMT Subject: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6e:a0:bd:ee:3f:b4:4a:21:d9:ed:52:90:83: 78:96:89:cf:6f:26:dc:52:80:8b:ce:01:ed:6f:ef: 25:83:c2:e2:99:35:47:8f:36:8a:c4:09:8e:bb:8c: e9:f3:04:31:30:92:ae:07:51:4e:ca:7c:d5:41:62: 16:ac:99:38:68:39:3d:28:41:fe:f2:d4:2b:5d:86: 61:1d:38:b0:40:ba:09:23:c1:34:4f:00:c2:93:49: 05:f8:82:69:e5:36:c8:a0:a0:15:87:47:59:15:88: 43:ea:41:90:d9:e8:e3:1a:88:fe:3a:0f:98:19:da: a7:f5:4b:c8:a5:08:4b:db:25:96:b3:57:6e:83:a6: 62:dd:f8:eb:1b:08:bc:76:f4:2d:52:f3:5c:98:5f: b1:9c:9e:d2:8e:5c:2b:9b:b5:26:38:ee:05:d1:75: 75:fa:81:ca:1e:c0:38:a3:ac:77:7f:cd:4f:3b:f5: 08:b3:85:63:cd:7b:3e:ca:80:c2:d2:0a:9d:3d:18: 21:82:94:f0:68:b1:50:1f:9b:c2:2f:c1:09:83:a1: a0:2e:6b:13:b1:2d:ad:0b:14:3b:dd:da:e9:a2:6a: c6:1e:a3:5e:36:d2:ff:eb:08:c3:ef:e6:80:68:b6: c9:07:36:ba:1d:3c:ed:59:73:09:2b:45:ab:59:8a: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.167.196.0/22 IPv6: 2606:2040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c2:e6:87:01:0b:6b:78:29:58:65:a1:40:ce:fd:3a:f7:3a: c5:99:7f:b0:cb:21:e2:80:2c:54:72:3a:06:73:7b:d9:9e:b1: 73:bc:a5:d9:58:5f:0e:09:e4:37:5a:c6:09:e8:2f:f2:8c:ee: e3:65:12:9f:2e:3c:c2:21:0a:43:99:80:14:f6:ec:5b:aa:87: 6e:4b:c5:48:2f:66:af:f5:15:53:53:ea:fc:f4:a6:55:2e:52: 56:45:85:d0:87:72:86:23:16:5c:5c:86:a6:10:6f:4b:ff:78: 26:50:8d:20:4b:9e:c4:17:ab:a4:02:3b:bb:2d:d3:47:0b:16: 08:45:01:0a:83:31:a8:dd:cc:4e:90:8f:47:7b:c2:2c:a9:31: b0:9f:0e:07:31:dc:8d:dd:9b:00:bd:a2:02:3f:2e:b3:36:96: 61:7d:10:fc:f8:cb:15:e0:e4:ea:85:01:3c:d5:8c:95:1a:b2: ed:51:88:40:6b:ba:80:9b:7c:98:65:4b:80:6d:a4:74:e5:20: d5:83:e4:13:73:e6:a9:4f:b8:39:cf:f3:49:23:c4:ca:02:a8: ca:7c:0e:72:cd:82:78:c7:6f:a8:b3:b2:64:00:6b:6d:85:66: cc:84:cc:98:19:a9:e1:d8:81:40:48:5e:9a:2e:11:e8:e7:16: 00:b8:11:4e -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWESv+Ae+GA1lvCeaNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDEyNzAxNDUyMFoXDTI2MDUwMTAwNDUyMFowLzEtMCsGA1UEAxMk MGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1ODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G6gve4/tEoh2e1SkIN4lonPbybcUoCLzgHt b+8lg8LimTVHjzaKxAmOu4zp8wQxMJKuB1FOynzVQWIWrJk4aDk9KEH+8tQrXYZh HTiwQLoJI8E0TwDCk0kF+IJp5TbIoKAVh0dZFYhD6kGQ2ejjGoj+Og+YGdqn9UvI pQhL2yWWs1dug6Zi3fjrGwi8dvQtUvNcmF+xnJ7Sjlwrm7UmOO4F0XV1+oHKHsA4 o6x3f81PO/UIs4VjzXs+yoDC0gqdPRghgpTwaLFQH5vCL8EJg6GgLmsTsS2tCxQ7 3drpomrGHqNeNtL/6wjD7+aAaLbJBza6HTztWXMJK0WrWYoxDwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFDPlbXu4avtZci0195WdKoeVH5VhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w YzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBjM2NmMzQyLTQzMzctNDRiZi1h YzQ1LWQwNzcyYWQ3NTg1NC8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFk NzU4NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJop8QwDQQCAAIwBwMFACYGIEAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA E8LmhwELa3gpWGWhQM79Ovc6xZl/sMsh4oAsVHI6BnN72Z6xc7yl2VhfDgnkN1rG Cegv8ozu42USny48wiEKQ5mAFPbsW6qHbkvFSC9mr/UVU1Pq/PSmVS5SVkWF0Idy hiMWXFyGphBvS/94JlCNIEuexBerpAI7uy3TRwsWCEUBCoMxqN3MTpCPR3vCLKkx sJ8OBzHcjd2bAL2iAj8uszaWYX0Q/PjLFeDk6oUBPNWMlRqy7VGIQGu6gJt8mGVL gG2kdOUg1YPkE3PmqU+4Oc/zSSPEygKoynwOcs2CeMdvqLOyZABrbYVmzITMmBmp 4diBQEhemi4R6OcWALgRTg== -----END CERTIFICATE-----Generated at Thu Apr 25 01:27:52 2024 by rpki-client on console-fra.rpki-client.org