$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer File: 1a8794d9-eb16-4b3c-b869-96971b72a93b.cer (raw, json) Hash identifier: MjOd3KmywcJAoW30Za1f4nKCTx0YTjLUiWiqWm6Clvs= Subject key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858466E87B168B75E65B8815AF6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Jul 2024 00:45:20 +0000 Certificate not after: Thu 08 Oct 2026 00:45:20 +0000 Subordinate resources: AS: 27217 AS: 32140 IP: 52.119.10.0/24 IP: 206.225.28.0/24 IP: 2602:806:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:6e:87:b1:68:b7:5e:65:b8:81:5a:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 5 00:45:20 2024 GMT Not After : Oct 8 00:45:20 2026 GMT Subject: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:f8:64:4c:92:b1:49:44:74:31:d0:8c:3f: 5e:36:c8:21:05:58:43:91:12:39:b6:ea:74:2c:2f: f6:92:4d:18:ba:d1:14:d9:9c:3b:46:37:6a:bd:4d: 44:2f:ea:00:0c:e0:4e:81:db:54:e2:4f:c2:09:7b: d1:cd:f8:3c:6e:6f:a9:42:02:fb:75:52:e4:40:e4: 3b:ac:37:b1:fd:37:d3:48:89:fa:e7:ec:13:11:2a: 82:bd:b2:08:7d:c4:80:4a:9e:93:9f:40:69:49:ee: 03:01:ae:41:58:9d:03:cb:10:a9:da:21:a3:be:4c: 51:3c:b5:37:f9:93:53:bb:d4:62:44:2f:89:f6:5e: 92:6b:b0:c0:c1:09:d1:83:54:ab:e7:25:33:8d:86: 94:36:17:e0:ad:36:54:ce:50:89:91:6b:36:43:6d: 8b:fc:6c:c5:59:c7:c1:29:2f:2b:cc:8a:50:d9:79: 0c:59:e9:95:67:a2:38:cc:66:41:87:e9:44:0c:ce: eb:b5:24:24:43:ac:bc:0e:b9:53:74:5b:34:cd:15: 0f:54:4b:6e:f5:2f:9b:3c:aa:d4:4a:61:5e:ff:41: cc:28:b7:bd:69:58:ad:1a:7c:c3:18:c5:5b:1f:4b: 5b:2a:6d:85:dd:fb:a5:a5:34:7e:e7:17:e4:25:39: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 52.119.10.0/24 206.225.28.0/24 IPv6: 2602:806:f000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27217 32140 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9e:26:1a:e9:41:07:fd:a8:ea:2a:7c:1a:a0:c9:bf:51:3f: b7:66:c0:2a:a3:66:fe:98:ef:f9:5e:01:c0:8e:c7:72:29:4b: 5a:5b:99:34:8a:76:47:fc:4f:f1:63:23:84:32:c5:d8:46:98: 71:2a:cd:f7:29:7e:14:74:e3:ff:b4:87:cf:1d:3b:03:c7:06: 1e:51:75:d1:4f:0b:f1:37:04:19:17:22:27:f3:69:d9:eb:6e: 80:f1:31:cc:50:bd:f0:84:cb:72:82:f8:36:78:0c:a9:99:68: 45:18:ec:28:25:32:44:77:d1:ef:9c:34:56:b8:ab:3b:66:d5: 1b:d8:d6:ef:c2:59:eb:7b:6e:72:3a:b4:67:04:76:cf:9e:59: 73:95:16:7f:8a:44:36:ca:5c:48:a6:5a:fe:7b:1d:21:a1:5e: a1:35:c2:24:4c:3b:0e:dd:a8:eb:38:b3:b0:68:af:05:9d:a8: 06:bd:95:51:0b:6e:18:ad:c7:04:8a:02:8c:32:33:f3:fb:74: e2:0b:86:09:a5:9c:38:65:b2:5e:3e:65:8b:2f:67:57:81:fb: 02:88:07:e5:58:2a:6f:03:aa:83:9d:e0:6c:ef:4f:ce:61:39: cb:ec:61:fb:6a:3d:11:9b:a8:42:39:53:7c:dd:8d:36:4e:d3: 57:fd:b9:d5 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEZuh7Fot15luIFa9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDcwNTAwNDUyMFoXDTI2MTAwODAwNDUyMFowLzEtMCsGA1UEAxMk MWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJhOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlT4ZEySsUlEdDHQjD9eNsghBVhDkRI5tup0 LC/2kk0YutEU2Zw7RjdqvU1EL+oADOBOgdtU4k/CCXvRzfg8bm+pQgL7dVLkQOQ7 rDex/TfTSIn65+wTESqCvbIIfcSASp6Tn0BpSe4DAa5BWJ0DyxCp2iGjvkxRPLU3 +ZNTu9RiRC+J9l6Sa7DAwQnRg1Sr5yUzjYaUNhfgrTZUzlCJkWs2Q22L/GzFWcfB KS8rzIpQ2XkMWemVZ6I4zGZBh+lEDM7rtSQkQ6y8DrlTdFs0zRUPVEtu9S+bPKrU SmFe/0HMKLe9aVitGnzDGMVbH0tbKm2F3fulpTR+5xfkJTlY1QIDAQABo4IENTCC BDEwHQYDVR0OBBYEFFhkq6i2xvRob4fOiF/xh8x739stMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x YTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzFhODc5NGQ5LWViMTYtNGIzYy1i ODY5LTk2OTcxYjcyYTkzYi8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3 MmE5M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAA0dwoDBADO4RwwDwQCAAIwCQMHBCYCCAbwADAd BggrBgEFBQcBCAEB/wQOMAygCjAIAgJqUQICfYwwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASJ4mGulBB/2o 6ip8GqDJv1E/t2bAKqNm/pjv+V4BwI7HcilLWluZNIp2R/xP8WMjhDLF2EaYcSrN 9yl+FHTj/7SHzx07A8cGHlF10U8L8TcEGRciJ/Np2etugPExzFC98ITLcoL4NngM qZloRRjsKCUyRHfR75w0VrirO2bVG9jW78JZ63tucjq0ZwR2z55Zc5UWf4pENspc SKZa/nsdIaFeoTXCJEw7Dt2o6zizsGivBZ2oBr2VUQtuGK3HBIoCjDIz8/t04guG CaWcOGWyXj5liy9nV4H7AogH5VgqbwOqg53gbO9PzmE5y+xh+2o9EZuoQjlTfN2N Nk7TV/251Q== -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:48 2024 by rpki-client on console-fra.rpki-client.org