$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer File: 1a8794d9-eb16-4b3c-b869-96971b72a93b.cer (raw, json) Hash identifier: IEq/PsW6+K5TkWjId1Rp9GtXgkLQeWXSL6DTLQWLy6M= Subject key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285842CE873E92D07647292C9FF900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:17 +0000 Certificate not after: Fri 04 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 27217 AS: 32140 IP: 52.119.10.0/24 IP: 206.225.28.0/24 IP: 2602:806:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:3e:92:d0:76:47:29:2c:9f:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 7 14:54:17 2023 GMT Not After : Jul 4 19:06:39 2025 GMT Subject: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:f8:64:4c:92:b1:49:44:74:31:d0:8c:3f: 5e:36:c8:21:05:58:43:91:12:39:b6:ea:74:2c:2f: f6:92:4d:18:ba:d1:14:d9:9c:3b:46:37:6a:bd:4d: 44:2f:ea:00:0c:e0:4e:81:db:54:e2:4f:c2:09:7b: d1:cd:f8:3c:6e:6f:a9:42:02:fb:75:52:e4:40:e4: 3b:ac:37:b1:fd:37:d3:48:89:fa:e7:ec:13:11:2a: 82:bd:b2:08:7d:c4:80:4a:9e:93:9f:40:69:49:ee: 03:01:ae:41:58:9d:03:cb:10:a9:da:21:a3:be:4c: 51:3c:b5:37:f9:93:53:bb:d4:62:44:2f:89:f6:5e: 92:6b:b0:c0:c1:09:d1:83:54:ab:e7:25:33:8d:86: 94:36:17:e0:ad:36:54:ce:50:89:91:6b:36:43:6d: 8b:fc:6c:c5:59:c7:c1:29:2f:2b:cc:8a:50:d9:79: 0c:59:e9:95:67:a2:38:cc:66:41:87:e9:44:0c:ce: eb:b5:24:24:43:ac:bc:0e:b9:53:74:5b:34:cd:15: 0f:54:4b:6e:f5:2f:9b:3c:aa:d4:4a:61:5e:ff:41: cc:28:b7:bd:69:58:ad:1a:7c:c3:18:c5:5b:1f:4b: 5b:2a:6d:85:dd:fb:a5:a5:34:7e:e7:17:e4:25:39: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 52.119.10.0/24 206.225.28.0/24 IPv6: 2602:806:f000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27217 32140 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:9a:b5:52:9f:61:e8:c6:4f:f2:50:d9:4f:47:cc:07:6c:ff: f2:a0:37:5f:68:f2:e3:30:0c:5f:16:64:2b:9e:8d:66:23:fe: 38:d0:43:a6:28:88:3e:71:4f:d7:27:d7:b8:18:62:88:da:b7: af:76:0c:e2:ed:38:a0:35:6f:e7:83:f5:34:66:e7:37:f3:52: c8:c8:d7:5b:48:3a:e3:fc:ce:44:0e:07:b4:02:12:97:a1:da: 9c:63:7f:af:37:b1:39:fd:9a:dd:46:9b:6b:cb:1e:9a:a2:9e: 90:09:f2:d9:0b:15:32:c3:1e:cf:62:99:34:f6:d2:bf:22:41: 34:46:a7:d2:1f:de:d3:ac:39:40:1b:63:e1:36:36:07:cc:0a: 5b:78:b6:70:33:cd:22:ff:94:66:6b:40:c3:e0:45:21:82:3c: cf:cb:cb:69:a5:99:e4:29:41:ca:a9:8c:0f:f0:63:22:d5:22: c9:d5:71:b2:f7:08:10:e6:4d:81:d6:56:ff:4b:ee:c6:2e:82: 17:5d:8c:b7:35:9d:e3:66:4a:6e:99:f1:bb:8d:ca:c4:13:86: e1:45:40:ab:f9:7c:90:3d:00:11:21:27:c1:cd:f1:fc:5b:29: e8:e1:3d:1a:f2:63:2f:99:0b:9b:3a:69:78:b1:6b:94:18:fa: f1:b8:8e:ab -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWELOhz6S0HZHKSyf+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDgwNzE0NTQxN1oXDTI1MDcwNDE5MDYzOVowLzEtMCsGA1UEAxMk MWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJhOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlT4ZEySsUlEdDHQjD9eNsghBVhDkRI5tup0 LC/2kk0YutEU2Zw7RjdqvU1EL+oADOBOgdtU4k/CCXvRzfg8bm+pQgL7dVLkQOQ7 rDex/TfTSIn65+wTESqCvbIIfcSASp6Tn0BpSe4DAa5BWJ0DyxCp2iGjvkxRPLU3 +ZNTu9RiRC+J9l6Sa7DAwQnRg1Sr5yUzjYaUNhfgrTZUzlCJkWs2Q22L/GzFWcfB KS8rzIpQ2XkMWemVZ6I4zGZBh+lEDM7rtSQkQ6y8DrlTdFs0zRUPVEtu9S+bPKrU SmFe/0HMKLe9aVitGnzDGMVbH0tbKm2F3fulpTR+5xfkJTlY1QIDAQABo4IENTCC BDEwHQYDVR0OBBYEFFhkq6i2xvRob4fOiF/xh8x739stMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x YTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzFhODc5NGQ5LWViMTYtNGIzYy1i ODY5LTk2OTcxYjcyYTkzYi8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3 MmE5M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAA0dwoDBADO4RwwDwQCAAIwCQMHBCYCCAbwADAd BggrBgEFBQcBCAEB/wQOMAygCjAIAgJqUQICfYwwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcJq1Up9h6MZP 8lDZT0fMB2z/8qA3X2jy4zAMXxZkK56NZiP+ONBDpiiIPnFP1yfXuBhiiNq3r3YM 4u04oDVv54P1NGbnN/NSyMjXW0g64/zORA4HtAISl6HanGN/rzexOf2a3Uaba8se mqKekAny2QsVMsMez2KZNPbSvyJBNEan0h/e06w5QBtj4TY2B8wKW3i2cDPNIv+U ZmtAw+BFIYI8z8vLaaWZ5ClByqmMD/BjItUiydVxsvcIEOZNgdZW/0vuxi6CF12M tzWd42ZKbpnxu43KxBOG4UVAq/l8kD0AESEnwc3x/Fsp6OE9GvJjL5kLmzppeLFr lBj68biOqw== -----END CERTIFICATE-----Generated at Sat Apr 20 01:55:32 2024 by rpki-client on console-fra.rpki-client.org