$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer File: 0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer (raw, json) Hash identifier: zT6wrG3B6pN1qCke0kmi4WJtzpeefygIxINnopKSb/4= Subject key identifier: 57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285847CB9D16529415E770EFB23380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 Nov 2024 01:45:33 +0000 Certificate not after: Wed 10 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 46238 IP: 96.46.112.0/20 IP: 162.248.0.0/22 IP: 2606:9480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cb:9d:16:52:94:15:e7:70:ef:b2:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 7 01:45:33 2024 GMT Not After : Feb 10 01:45:33 2027 GMT Subject: CN=0f63fd96-8907-4574-8e07-79a8c7fd8c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:4c:32:b2:12:f4:0f:54:2f:2f:2a:a6:10: f6:63:ce:7b:46:b5:c0:c3:9f:59:ff:8e:6a:e7:85: 43:05:2f:31:47:6c:53:eb:f5:4d:c9:70:d8:ce:c5: 16:19:db:95:8c:92:45:a5:1e:95:5b:47:a2:b9:08: 4f:de:9f:de:1f:97:4a:3e:3c:e9:3d:ba:12:3f:97: b8:01:fa:29:d4:34:70:9e:f6:44:2e:e4:4b:1b:39: 7b:9f:26:b8:b0:8d:6c:a4:46:f1:57:5f:ae:e5:e0: c7:68:25:2b:e8:00:7a:07:0a:2b:50:5a:9e:7f:51: 3e:b4:8d:96:d3:23:49:42:71:04:81:cd:77:1e:04: 14:24:d4:ac:71:d3:71:5b:6e:0f:a2:5b:80:e0:51: 74:24:90:19:e5:6f:7a:52:63:f3:01:50:85:38:93: e5:93:95:85:c7:e0:f2:22:a8:73:34:21:20:13:eb: 55:94:c1:19:1b:95:43:4b:98:3b:e3:c4:ec:81:cb: c1:1d:e3:d3:b3:13:d7:64:4c:a9:0a:88:72:31:0d: d9:3f:9e:38:a8:f2:4a:37:d2:e2:55:16:1b:0f:75: e1:ef:9a:c7:a4:05:1f:87:5c:d0:e1:65:60:69:84: a7:6f:0b:6b:64:ad:3f:07:9a:27:ce:c3:ae:bb:9c: 19:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 96.46.112.0/20 162.248.0.0/22 IPv6: 2606:9480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:17:03:c9:db:ed:8c:a4:0f:cf:13:14:51:42:7f:b8:d9:30: a8:a7:7a:6f:bc:c7:1a:d1:d1:8b:b7:4e:95:7a:e7:97:ea:77: c6:2a:ca:64:e4:20:38:96:f8:0c:8d:2c:12:63:02:75:83:ac: 56:00:54:db:28:ad:91:e0:28:b9:1c:1f:c4:eb:08:ba:de:35: e5:51:b0:f3:b0:13:1d:1d:c6:03:72:60:e4:f7:17:e0:ff:2b: 9c:c7:73:69:16:9a:e5:30:cb:ee:20:ee:65:cb:0c:f4:f7:86: 8e:61:7f:b4:0a:73:09:e5:65:e7:50:09:c0:b4:b7:8e:d8:c1: fa:5e:43:00:2d:d3:1b:bc:db:6e:d3:4b:f6:d9:5c:6c:23:ba: b7:d3:fe:3b:39:98:5e:1b:25:f5:ba:0f:80:2f:78:5d:a1:8c: 53:b1:db:3e:3d:08:68:88:61:6b:a3:bc:76:c3:71:e7:da:23: 26:35:cc:44:5e:2a:3d:ce:45:71:db:99:0d:54:81:88:3b:9e: 8f:23:49:22:f5:d3:2d:6c:11:7b:88:cb:57:4f:5b:4e:23:85: e6:cf:08:6b:73:32:93:64:c1:e6:de:25:bb:96:73:d9:19:0f: 60:c9:95:40:d8:eb:40:57:b1:f0:bd:cd:8e:9a:d5:46:d0:72: f2:a4:19:52 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEfLnRZSlBXncO+yM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTEwNzAxNDUzM1oXDTI3MDIxMDAxNDUzM1owLzEtMCsGA1UEAxMk MGY2M2ZkOTYtODkwNy00NTc0LThlMDctNzlhOGM3ZmQ4YzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ5MMrIS9A9ULy8qphD2Y857RrXAw59Z/45q 54VDBS8xR2xT6/VNyXDYzsUWGduVjJJFpR6VW0eiuQhP3p/eH5dKPjzpPboSP5e4 Afop1DRwnvZELuRLGzl7nya4sI1spEbxV1+u5eDHaCUr6AB6BworUFqef1E+tI2W 0yNJQnEEgc13HgQUJNSscdNxW24PoluA4FF0JJAZ5W96UmPzAVCFOJPlk5WFx+Dy IqhzNCEgE+tVlMEZG5VDS5g748TsgcvBHePTsxPXZEypCohyMQ3ZP544qPJKN9Li VRYbD3Xh75rHpAUfh1zQ4WVgaYSnbwtrZK0/B5onzsOuu5wZcQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFd2DtIrSa8bVaAJ+D/AcYgvQ+n1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w ZjYzZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4YzdmZDhjN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBmNjNmZDk2LTg5MDctNDU3NC04 ZTA3LTc5YThjN2ZkOGM3YS8wZjYzZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4Yzdm ZDhjN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARgLnADBAKi+AAwDQQCAAIwBwMFACYGlIAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDALSeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD8XA8nb7YykD88TFFFC f7jZMKinem+8xxrR0Yu3TpV655fqd8YqymTkIDiW+AyNLBJjAnWDrFYAVNsorZHg KLkcH8TrCLreNeVRsPOwEx0dxgNyYOT3F+D/K5zHc2kWmuUwy+4g7mXLDPT3ho5h f7QKcwnlZedQCcC0t47YwfpeQwAt0xu8227TS/bZXGwjurfT/js5mF4bJfW6D4Av eF2hjFOx2z49CGiIYWujvHbDcefaIyY1zEReKj3ORXHbmQ1UgYg7no8jSSL10y1s EXuIy1dPW04jhebPCGtzMpNkwebeJbuWc9kZD2DJlUDY60BXsfC9zY6a1UbQcvKk GVI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:20 2024 by rpki-client on console-ams.rpki-client.org