$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer File: 13fecd24-0da7-4140-9636-71a72de851ec.cer (raw, json) Hash identifier: eWyShbfEVydu7Hqed3gzuXieYDsMYCIXmrt9yk9HqsU= Subject key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584785B4261F58668C211C534070 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 13 Oct 2024 00:45:26 +0000 Certificate not after: Sat 16 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 396871 IP: 137.83.32.0/22 IP: 2604:d0c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:85:b4:26:1f:58:66:8c:21:1c:53:40:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 13 00:45:26 2024 GMT Not After : Jan 16 01:45:26 2027 GMT Subject: CN=13fecd24-0da7-4140-9636-71a72de851ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:b1:dd:88:27:bf:69:f0:c5:65:d8:6f:46: 82:dd:11:88:c9:bd:86:41:63:67:db:f4:14:09:43: c3:3c:e9:b2:78:1a:87:09:41:93:2b:1c:41:0d:0b: b4:c8:62:8e:e1:de:14:e0:ec:dd:f0:fd:a9:bd:94: c2:39:fd:33:07:c6:7c:0c:1d:fd:1d:5d:ae:49:91: f3:bc:fe:73:1f:3c:4f:b7:1b:6a:d4:c7:ca:28:1f: 21:57:1b:dc:e6:24:d8:68:25:70:86:72:fd:ff:51: 76:6d:c0:ea:a4:88:be:4e:8e:16:ab:a7:54:0b:25: f7:08:b3:f2:46:3d:f3:c5:4e:c2:d3:4f:37:19:9f: 36:fb:42:ec:ae:8b:5b:f2:c4:af:10:47:11:84:45: b9:4f:c5:9b:ca:d8:65:b3:a9:75:14:bd:10:74:66: 9d:13:b4:60:7f:40:dd:ce:1d:d5:41:92:16:78:31: a1:ac:4d:4e:d9:fb:ff:50:99:b2:33:0e:11:c3:f4: 05:6d:3c:a5:ea:78:a0:63:27:47:50:23:85:d6:00: dd:2b:77:ec:d9:b6:0f:ed:75:d3:47:f5:03:d4:8d: 25:59:2d:56:52:c8:eb:bf:4d:67:3e:21:5f:58:2d: 2a:e1:8f:3e:ee:76:09:fe:77:32:7c:a4:d1:15:01: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 137.83.32.0/22 IPv6: 2604:d0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396871 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fd:a1:fa:d4:2f:87:bf:c3:68:eb:e4:b1:38:87:a6:db:2a: b7:28:34:64:4e:99:e4:59:ca:55:31:a4:09:0e:d3:48:4f:8e: b8:0a:77:9d:61:9b:05:9e:75:4c:16:1d:44:fc:18:9f:cc:0a: a5:93:d0:ee:d8:4b:22:46:bb:8e:f7:59:a8:33:dd:ca:d6:64: 5e:cb:50:19:73:27:35:f0:37:72:ba:ad:44:b3:78:ef:05:b2: 74:68:b7:db:40:45:42:d9:54:ca:48:ca:0f:f9:f2:1e:8e:d4: 1f:81:f5:31:b8:23:65:0e:9d:f3:63:34:b2:d5:56:57:47:77: e1:c2:08:bd:26:f8:10:34:0d:a4:29:0d:0a:04:20:a9:31:f7: 97:1d:cd:a2:b5:59:0f:ac:69:cf:c3:2d:8c:89:76:49:36:ca: 8b:45:18:d5:27:6d:22:c9:88:a9:bd:2a:ae:6c:1a:50:92:ea: af:01:1b:69:bc:25:f4:29:a3:20:82:22:79:59:ba:b0:ee:6b: aa:7f:86:ac:d7:82:44:d2:9a:72:92:ed:8d:b9:d5:92:b0:46: e3:1e:b1:87:15:48:56:6e:34:e2:d5:35:66:92:2e:1e:af:2c: 8c:af:a3:f7:c8:ff:9c:17:96:4d:0b:2e:95:8d:f3:7a:99:96: e9:2c:75:7b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEeFtCYfWGaMIRxTQHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTAxMzAwNDUyNloXDTI3MDExNjAxNDUyNlowLzEtMCsGA1UEAxMk MTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1MWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+x3Ygnv2nwxWXYb0aC3RGIyb2GQWNn2/QU CUPDPOmyeBqHCUGTKxxBDQu0yGKO4d4U4Ozd8P2pvZTCOf0zB8Z8DB39HV2uSZHz vP5zHzxPtxtq1MfKKB8hVxvc5iTYaCVwhnL9/1F2bcDqpIi+To4Wq6dUCyX3CLPy Rj3zxU7C0083GZ82+0Lsrotb8sSvEEcRhEW5T8Wbythls6l1FL0QdGadE7Rgf0Dd zh3VQZIWeDGhrE1O2fv/UJmyMw4Rw/QFbTyl6nigYydHUCOF1gDdK3fs2bYP7XXT R/UD1I0lWS1WUsjrv01nPiFfWC0q4Y8+7nYJ/ncyfKTRFQFW8QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFHH7B+yW3boeUUok50jINVQ20RR+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x M2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzEzZmVjZDI0LTBkYTctNDE0MC05 NjM2LTcxYTcyZGU4NTFlYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRl ODUxZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKJUyAwDQQCAAIwBwMFACYE0MAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg5HMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABr9ofrUL4e/w2jr5LE4h6bbKrco NGROmeRZylUxpAkO00hPjrgKd51hmwWedUwWHUT8GJ/MCqWT0O7YSyJGu473Wagz 3crWZF7LUBlzJzXwN3K6rUSzeO8FsnRot9tARULZVMpIyg/58h6O1B+B9TG4I2UO nfNjNLLVVldHd+HCCL0m+BA0DaQpDQoEIKkx95cdzaK1WQ+sac/DLYyJdkk2yotF GNUnbSLJiKm9Kq5sGlCS6q8BG2m8JfQpoyCCInlZurDua6p/hqzXgkTSmnKS7Y25 1ZKwRuMesYcVSFZuNOLVNWaSLh6vLIyvo/fI/5wXlk0LLpWN83qZluksdXs= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:21 2024 by rpki-client on console-ams.rpki-client.org