$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer File: 1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer (raw, json) Hash identifier: qYuV5EbUPoluaW1ZMxEgc5jXvU0BrlflBaoTY0MZD7Y= Subject key identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858442CC1D4854740E63633B76A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Dec 2023 01:45:15 +0000 Certificate not after: Sun 15 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 4460 IP: 192.231.207.0/24 IP: 207.200.160.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:2c:c1:d4:85:47:40:e6:36:33:b7:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 11 01:45:15 2023 GMT Not After : Mar 15 00:45:15 2026 GMT Subject: CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:b8:63:a4:40:9f:18:fa:86:40:1a:50:68: b1:ef:67:b3:dd:bc:35:8c:7f:9e:f9:51:19:14:ca: 8d:94:9a:79:91:85:76:a3:2b:bf:5f:22:e2:5a:3f: ee:a7:e3:ab:82:23:34:87:83:49:5f:ab:d1:05:38: 4d:11:eb:32:b8:e8:1d:b1:fe:83:33:ec:9b:1f:ae: bd:d1:42:ce:80:39:c9:2b:73:c2:ed:ab:f2:f1:cc: 03:2f:b4:d8:12:cb:31:95:1a:2b:be:ec:ec:2b:78: a5:08:13:31:b8:f6:56:59:ab:07:d8:6f:02:3a:43: a8:96:2c:e7:31:2d:73:49:2b:42:cd:0c:8f:6a:39: a7:37:a0:73:93:30:eb:7c:80:3a:9e:cf:3a:ee:18: 90:8b:9b:cf:8f:0e:c3:28:06:51:6d:82:51:99:6c: 60:77:67:87:7e:0a:47:44:c3:42:63:e5:b6:82:76: a6:24:95:5e:ea:2e:b2:39:ec:89:0d:48:16:d0:60: b5:59:b6:6e:cd:8c:e0:bd:94:54:05:cf:ef:7d:31: a5:6d:e0:49:2c:dd:65:5c:b3:34:01:a7:93:13:7e: 94:6e:21:f0:1a:95:4c:16:56:31:81:8f:4b:e0:96: bc:e5:8e:0e:8a:f0:d1:86:60:10:ca:3c:2d:d6:e3: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.231.207.0/24 207.200.160.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4460 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:90:f6:b9:9a:5d:79:8c:63:0f:44:18:4f:a0:97:1c:d4:59: 03:21:21:80:f6:c7:a3:c1:6a:d5:09:6b:94:3a:11:8e:16:01: df:81:bf:96:b1:b7:0a:a4:4e:bd:25:1d:c4:1c:88:07:74:39: 56:18:ce:6a:8f:2f:31:d9:d8:d6:58:f4:69:a6:97:75:50:8c: 05:ec:15:cb:d3:7f:85:8e:ed:bf:56:72:6c:40:26:77:b4:df: 9f:d9:a5:83:65:14:2e:6b:e8:3a:32:4f:fc:a9:c1:53:5b:b2: 0e:b1:53:ce:0a:8b:de:9f:f9:99:b0:b7:81:8b:8c:03:f6:c4: 23:60:eb:c5:dc:c8:65:04:78:aa:9c:f5:25:fd:4d:4f:0a:19: 3d:0c:8f:35:3f:95:e4:a2:6b:d0:34:c5:f4:ef:c6:2d:f7:da: c2:2d:26:7f:14:38:30:98:c2:40:ea:19:16:15:94:56:20:96: 11:d3:5e:f0:94:87:bb:d2:f7:bb:ab:f0:9f:1f:89:ff:9f:28: 0e:dc:cd:5d:ba:0b:70:fb:b8:26:a8:5a:02:52:53:40:43:8a: ce:db:09:da:73:1d:95:f9:6c:90:5e:96:89:8a:e3:97:74:2f: 21:f1:0f:18:0d:c5:46:91:ef:4c:33:7e:24:4d:04:40:50:de: 5c:28:20:0e -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEQswdSFR0DmNjO3agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTIxMTAxNDUxNVoXDTI2MDMxNTAwNDUxNVowLzEtMCsGA1UEAxMk MWE3ODQxMTItM2JiZi00MWM4LTljMzItYmRiODVhZTc2YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKW4Y6RAnxj6hkAaUGix72ez3bw1jH+e+VEZ FMqNlJp5kYV2oyu/XyLiWj/up+OrgiM0h4NJX6vRBThNEesyuOgdsf6DM+ybH669 0ULOgDnJK3PC7avy8cwDL7TYEssxlRorvuzsK3ilCBMxuPZWWasH2G8COkOolizn MS1zSStCzQyPajmnN6BzkzDrfIA6ns867hiQi5vPjw7DKAZRbYJRmWxgd2eHfgpH RMNCY+W2gnamJJVe6i6yOeyJDUgW0GC1WbZuzYzgvZRUBc/vfTGlbeBJLN1lXLM0 AaeTE36UbiHwGpVMFlYxgY9L4Ja85Y4OivDRhmAQyjwt1uNZowIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFCxdhJmBXS3DKKKM7AUUnynkthc6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x YTc4NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4NWFlNzZiMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzFhNzg0MTEyLTNiYmYtNDFjOC05 YzMyLWJkYjg1YWU3NmIxYi8xYTc4NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4NWFl NzZiMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADA588DBATPyKAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICEWwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAJJD2uZpdeYxjD0QYT6CXHNRZAyEhgPbHo8Fq1Qlr lDoRjhYB34G/lrG3CqROvSUdxByIB3Q5VhjOao8vMdnY1lj0aaaXdVCMBewVy9N/ hY7tv1ZybEAmd7Tfn9mlg2UULmvoOjJP/KnBU1uyDrFTzgqL3p/5mbC3gYuMA/bE I2DrxdzIZQR4qpz1Jf1NTwoZPQyPNT+V5KJr0DTF9O/GLffawi0mfxQ4MJjCQOoZ FhWUViCWEdNe8JSHu9L3u6vwnx+J/58oDtzNXboLcPu4JqhaAlJTQEOKztsJ2nMd lflskF6WiYrjl3QvIfEPGA3FRpHvTDN+JE0EQFDeXCggDg== -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:22 2024 by rpki-client on console-ams.rpki-client.org