$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca.cer File: 1265cc41-1464-4ca3-818d-917a36c8afca.cer (raw, json) Hash identifier: AXZnySw+mNfDwDGBWTn2NOShcattdune5jzik0fFvMI= Subject key identifier: 33:F2:2A:43:E3:17:30:45:4E:10:FE:49:6A:9A:EC:86:29:34:ED:C3 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285844A2029B3AD5264C89EBF75E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/1265cc41-1464-4ca3-818d-917a36c8afca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Jan 2024 01:45:20 +0000 Certificate not after: Sun 26 Apr 2026 00:45:20 +0000 Subordinate resources: AS: 397046 IP: 23.135.32.0/24 IP: 158.51.80.0/22 IP: 170.39.168.0/22 IP: 2604:b2c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:a2:02:9b:3a:d5:26:4c:89:eb:f7:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 22 01:45:20 2024 GMT Not After : Apr 26 00:45:20 2026 GMT Subject: CN=1265cc41-1464-4ca3-818d-917a36c8afca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:52:a9:ec:0e:3d:5c:6d:d6:5e:7b:d0:c1:5a: eb:1b:50:cd:35:2e:9f:84:90:7a:a0:22:b4:8d:36: e2:0b:da:00:d5:42:35:67:ba:65:2b:8f:16:57:09: df:8b:22:5d:f5:6c:13:a6:07:6a:5d:30:be:96:63: ea:da:04:4e:f5:9e:f0:90:cf:88:e8:6d:ce:6a:30: 66:cf:bd:0e:e1:d5:8e:dd:60:7e:2b:44:39:b0:91: 7c:5a:c3:d2:c3:69:61:19:0b:72:08:36:f5:e6:83: 2a:09:96:87:81:43:d4:e7:72:bb:54:30:6a:bc:5a: 14:5c:cf:bf:2f:83:04:94:8f:74:b2:07:cb:09:18: dd:1d:7e:ab:6d:a3:c1:e9:9e:e8:e2:0b:d6:f6:c5: 6d:8c:2d:f1:e5:d0:ee:0a:63:18:05:4c:0f:01:6c: f7:20:5a:ae:44:e9:b0:44:3a:af:42:58:8d:95:3f: c1:fe:62:4a:ed:21:5a:45:2a:e3:51:72:77:08:f1: 23:79:33:87:0e:f1:2d:26:ed:1b:93:f3:fd:4d:6e: a4:e0:c6:24:8d:89:3b:e4:de:2c:53:f4:34:0c:85: ed:4c:92:ba:66:bd:9e:95:58:41:62:67:1a:57:07: 59:fe:02:e3:b1:96:77:fd:94:32:0c:5a:ed:75:46: 79:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F2:2A:43:E3:17:30:45:4E:10:FE:49:6A:9A:EC:86:29:34:ED:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/1265cc41-1464-4ca3-818d-917a36c8afca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.135.32.0/24 158.51.80.0/22 170.39.168.0/22 IPv6: 2604:b2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397046 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ea:be:29:ce:84:00:74:d6:a7:45:b5:21:6d:75:e1:7a:65: 36:f2:e1:48:22:58:ac:39:2b:63:fa:1c:3a:3a:ef:0d:be:9b: b5:4a:8e:d0:ea:98:c8:cc:f1:0b:1b:a5:c9:40:9c:bf:8b:67: cf:34:ba:99:f5:57:15:31:ef:f2:80:a9:03:17:b9:47:2c:b7: b4:7c:a5:5e:b8:12:70:3b:46:24:bd:10:6c:8d:dc:15:52:3c: f7:11:4f:3f:2f:90:44:58:f1:60:d5:aa:1e:aa:d1:45:3a:a0: ab:f4:ab:fc:a6:6d:2e:59:31:82:f8:d4:17:88:d1:69:30:66: 87:48:e0:c4:b9:e4:cd:b7:38:14:58:db:dd:5c:77:99:4d:0d: 82:20:96:25:50:dc:40:20:2d:d8:a8:ff:be:01:27:91:e5:02: f4:d7:a0:0f:60:64:19:58:f1:a4:9c:24:58:d6:58:4c:fa:5f: 21:35:d4:bb:85:37:5a:33:04:c4:48:ab:ad:96:85:a1:90:84: 58:c3:b9:53:da:ec:31:82:b5:2d:d1:18:9f:67:6e:1c:00:2f: bc:c8:3e:89:bf:b9:12:83:4b:1e:c0:82:20:97:83:b3:73:ca: 1f:35:e1:94:26:8e:06:b8:52:34:0d:33:81:24:fa:50:2a:d8: 7e:5a:07:a1 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWESiAps61SZMiev3XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDEyMjAxNDUyMFoXDTI2MDQyNjAwNDUyMFowLzEtMCsGA1UEAxMk MTI2NWNjNDEtMTQ2NC00Y2EzLTgxOGQtOTE3YTM2YzhhZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21Kp7A49XG3WXnvQwVrrG1DNNS6fhJB6oCK0 jTbiC9oA1UI1Z7plK48WVwnfiyJd9WwTpgdqXTC+lmPq2gRO9Z7wkM+I6G3OajBm z70O4dWO3WB+K0Q5sJF8WsPSw2lhGQtyCDb15oMqCZaHgUPU53K7VDBqvFoUXM+/ L4MElI90sgfLCRjdHX6rbaPB6Z7o4gvW9sVtjC3x5dDuCmMYBUwPAWz3IFquROmw RDqvQliNlT/B/mJK7SFaRSrjUXJ3CPEjeTOHDvEtJu0bk/P9TW6k4MYkjYk75N4s U/Q0DIXtTJK6Zr2elVhBYmcaVwdZ/gLjsZZ3/ZQyDFrtdUZ5BQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFDPyKkPjFzBFThD+SWqa7IYpNO3DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x MjY1Y2M0MS0xNDY0LTRjYTMtODE4ZC05MTdhMzZjOGFmY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzEyNjVjYzQxLTE0NjQtNGNhMy04 MThkLTkxN2EzNmM4YWZjYS8xMjY1Y2M0MS0xNDY0LTRjYTMtODE4ZC05MTdhMzZj OGFmY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXhyADBAKeM1ADBAKqJ6gwDQQCAAIwBwMFACYE ssAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBg72MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFfqvinOhAB0 1qdFtSFtdeF6ZTby4UgiWKw5K2P6HDo67w2+m7VKjtDqmMjM8QsbpclAnL+LZ880 upn1VxUx7/KAqQMXuUcst7R8pV64EnA7RiS9EGyN3BVSPPcRTz8vkERY8WDVqh6q 0UU6oKv0q/ymbS5ZMYL41BeI0WkwZodI4MS55M23OBRY291cd5lNDYIgliVQ3EAg Ldio/74BJ5HlAvTXoA9gZBlY8aScJFjWWEz6XyE11LuFN1ozBMRIq62WhaGQhFjD uVPa7DGCtS3RGJ9nbhwAL7zIPom/uRKDSx7AgiCXg7Nzyh814ZQmjga4UjQNM4Ek +lAq2H5aB6E= -----END CERTIFICATE-----Generated at Fri Mar 29 02:50:36 2024 by rpki-client on console-fra.rpki-client.org