$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer File: 0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer (raw, json) Hash identifier: rj2uMAUcr6xVSqxrqFKkQP+6/xi/r/MUGPBUdvZHHxU= Subject key identifier: 57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285842C6C8D9E8A277F567A619FBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Aug 2023 20:20:00 +0000 Certificate not after: Thu 06 Nov 2025 21:20:00 +0000 Subordinate resources: AS: 46238 IP: 96.46.112.0/20 IP: 162.248.0.0/22 IP: 2606:9480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:c6:c8:d9:e8:a2:77:f5:67:a6:19:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 4 20:20:00 2023 GMT Not After : Nov 6 21:20:00 2025 GMT Subject: CN=0f63fd96-8907-4574-8e07-79a8c7fd8c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:4c:32:b2:12:f4:0f:54:2f:2f:2a:a6:10: f6:63:ce:7b:46:b5:c0:c3:9f:59:ff:8e:6a:e7:85: 43:05:2f:31:47:6c:53:eb:f5:4d:c9:70:d8:ce:c5: 16:19:db:95:8c:92:45:a5:1e:95:5b:47:a2:b9:08: 4f:de:9f:de:1f:97:4a:3e:3c:e9:3d:ba:12:3f:97: b8:01:fa:29:d4:34:70:9e:f6:44:2e:e4:4b:1b:39: 7b:9f:26:b8:b0:8d:6c:a4:46:f1:57:5f:ae:e5:e0: c7:68:25:2b:e8:00:7a:07:0a:2b:50:5a:9e:7f:51: 3e:b4:8d:96:d3:23:49:42:71:04:81:cd:77:1e:04: 14:24:d4:ac:71:d3:71:5b:6e:0f:a2:5b:80:e0:51: 74:24:90:19:e5:6f:7a:52:63:f3:01:50:85:38:93: e5:93:95:85:c7:e0:f2:22:a8:73:34:21:20:13:eb: 55:94:c1:19:1b:95:43:4b:98:3b:e3:c4:ec:81:cb: c1:1d:e3:d3:b3:13:d7:64:4c:a9:0a:88:72:31:0d: d9:3f:9e:38:a8:f2:4a:37:d2:e2:55:16:1b:0f:75: e1:ef:9a:c7:a4:05:1f:87:5c:d0:e1:65:60:69:84: a7:6f:0b:6b:64:ad:3f:07:9a:27:ce:c3:ae:bb:9c: 19:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 96.46.112.0/20 162.248.0.0/22 IPv6: 2606:9480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:73:9d:fd:65:db:a4:ff:62:9e:54:5c:9f:cc:fa:42:bf:46: 9b:61:52:4d:0c:b9:71:5e:f0:a7:13:3e:9b:f6:a5:15:80:9b: 46:ed:84:54:a6:15:b7:a1:0c:bc:39:ab:43:6c:f3:44:18:8a: 58:e6:c6:ac:2a:ff:bf:3a:eb:19:e8:29:9d:64:39:03:5e:71: f5:e1:1a:b8:64:c7:ef:fa:6a:2e:24:8d:d1:76:bd:46:97:52: a1:bb:f6:52:0e:a0:6d:81:28:8f:b0:1e:a5:4f:90:3a:d6:34: cf:0d:a8:a4:60:d9:90:c8:53:a7:d9:62:7e:ea:f2:d2:ab:c3: ff:eb:62:d1:55:ef:0f:06:cd:a0:39:27:79:27:63:f6:fd:a7: 73:64:4c:24:f3:ed:69:51:33:a9:b8:81:81:76:ee:44:e4:e4: 0b:eb:54:5c:a3:d2:8e:67:05:51:f8:ed:e2:5e:38:a5:0f:52: 3a:c3:05:3a:27:c1:d1:c6:2b:26:82:87:bd:e2:3d:4b:ee:5d: f0:67:ab:9d:8b:8e:ce:7b:ea:26:97:db:8e:c6:3d:d3:e8:94: c0:c1:55:ec:bc:0a:5c:20:94:87:ef:ef:42:0a:d9:06:a7:b0: 9e:87:d3:dd:8d:04:c8:70:2c:c1:00:4b:18:20:29:d8:0e:11: 12:66:cb:34 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWELGyNnoonf1Z6YZ+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDgwNDIwMjAwMFoXDTI1MTEwNjIxMjAwMFowLzEtMCsGA1UEAxMk MGY2M2ZkOTYtODkwNy00NTc0LThlMDctNzlhOGM3ZmQ4YzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ5MMrIS9A9ULy8qphD2Y857RrXAw59Z/45q 54VDBS8xR2xT6/VNyXDYzsUWGduVjJJFpR6VW0eiuQhP3p/eH5dKPjzpPboSP5e4 Afop1DRwnvZELuRLGzl7nya4sI1spEbxV1+u5eDHaCUr6AB6BworUFqef1E+tI2W 0yNJQnEEgc13HgQUJNSscdNxW24PoluA4FF0JJAZ5W96UmPzAVCFOJPlk5WFx+Dy IqhzNCEgE+tVlMEZG5VDS5g748TsgcvBHePTsxPXZEypCohyMQ3ZP544qPJKN9Li VRYbD3Xh75rHpAUfh1zQ4WVgaYSnbwtrZK0/B5onzsOuu5wZcQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFd2DtIrSa8bVaAJ+D/AcYgvQ+n1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w ZjYzZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4YzdmZDhjN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBmNjNmZDk2LTg5MDctNDU3NC04 ZTA3LTc5YThjN2ZkOGM3YS8wZjYzZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4Yzdm ZDhjN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARgLnADBAKi+AAwDQQCAAIwBwMFACYGlIAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDALSeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJZznf1l26T/Yp5UXJ/M +kK/RpthUk0MuXFe8KcTPpv2pRWAm0bthFSmFbehDLw5q0Ns80QYiljmxqwq/786 6xnoKZ1kOQNecfXhGrhkx+/6ai4kjdF2vUaXUqG79lIOoG2BKI+wHqVPkDrWNM8N qKRg2ZDIU6fZYn7q8tKrw//rYtFV7w8GzaA5J3knY/b9p3NkTCTz7WlRM6m4gYF2 7kTk5AvrVFyj0o5nBVH47eJeOKUPUjrDBTonwdHGKyaCh73iPUvuXfBnq52Ljs57 6iaX247GPdPolMDBVey8ClwglIfv70IK2QansJ6H092NBMhwLMEASxggKdgOERJm yzQ= -----END CERTIFICATE-----Generated at Tue Apr 30 18:59:33 2024 by rpki-client on console-fra.rpki-client.org