$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer File: 207c40f4-33c4-478b-ae61-d3f51358881b.cer (raw, json) Hash identifier: mu2/XOwa44vhhP3M/ECOe5i9B2DifWVWvt4EgVnjgSU= Subject key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858445C3776B0D74828E787BA4E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Dec 2023 01:45:15 +0000 Certificate not after: Wed 01 Apr 2026 00:45:15 +0000 Subordinate resources: AS: 40091 IP: 76.9.224.0/20 IP: 216.115.192.0/20 IP: 2607:2580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:5c:37:76:b0:d7:48:28:e7:87:ba:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 28 01:45:15 2023 GMT Not After : Apr 1 00:45:15 2026 GMT Subject: CN=207c40f4-33c4-478b-ae61-d3f51358881b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:e3:64:d7:4f:f1:3f:0d:41:10:87:55:02: 01:bb:c0:44:33:9b:35:ea:ba:90:dd:1a:0b:15:d6: 5a:24:d0:ee:86:9f:d1:1d:c7:36:eb:f8:6c:78:f4: d0:18:e7:66:e6:c5:33:0d:aa:2f:0d:29:03:67:79: a5:5f:22:ec:8e:9c:9e:60:08:85:c1:ae:0c:56:f0: 3d:01:e5:df:55:b3:ce:52:6c:7c:b6:b1:ff:39:c5: 52:19:7c:e9:41:b9:cc:ae:ca:71:ef:75:27:ed:33: bb:1b:1d:35:77:a3:a8:94:9e:0d:cc:3c:0c:9a:a7: 3f:05:cf:4a:99:57:32:d1:4b:ae:64:1c:de:59:e9: 8a:a0:87:73:35:df:ec:a7:57:70:c6:c7:20:c7:74: f2:f7:86:f7:df:06:e0:02:73:98:7c:ad:56:4e:c3: 43:db:b6:5a:3b:6b:db:d2:8a:b2:91:f8:6b:33:d1: 57:e6:5b:58:5f:46:6d:0c:1a:fd:de:4e:99:0a:19: 25:f0:5f:c8:9d:eb:4f:dd:8d:27:c5:0a:9e:80:1d: d6:aa:d5:0a:db:62:2e:9c:20:70:89:b3:e6:54:f2: 10:e3:46:ae:8d:3e:d7:65:cf:18:9e:ab:c9:a1:b9: 86:3b:d8:57:93:c0:5b:45:5b:db:1d:71:7f:f8:cc: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 76.9.224.0/20 216.115.192.0/20 IPv6: 2607:2580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40091 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6c:ae:8e:9d:dd:14:5a:b0:4c:44:8d:4c:18:c4:f6:cd:75: 53:51:a9:e1:6a:51:d5:e9:c6:da:51:a4:8f:d6:03:8c:e5:33: 94:02:29:eb:c9:63:8f:d7:45:3d:d1:85:fe:64:fe:54:d7:f9: 47:3c:72:17:4c:65:f5:96:79:52:fb:19:de:9e:21:42:e7:a4: 63:e6:67:e9:19:2b:0b:3a:6d:07:fd:dd:64:b0:33:c2:13:27: 5f:09:cd:25:19:0b:2b:4a:6c:91:ed:b6:70:c9:2f:43:21:8d: c0:b1:8a:76:9f:d4:67:aa:24:a0:31:9d:fb:74:0e:a0:10:65: bf:41:be:9d:8e:48:ae:47:eb:1a:11:c3:ab:90:cc:0b:0d:8f: c6:c0:7c:b7:c3:e1:2b:53:cc:2c:56:11:1c:89:9f:6d:82:3f: 58:a7:b2:19:0a:02:f5:53:a0:50:af:26:cd:22:67:6e:73:c1: 49:19:44:f7:d8:6b:8a:72:a0:45:04:aa:45:40:af:c9:1e:a0: de:c3:66:63:a6:60:02:a9:c9:4b:9b:56:54:ef:96:5c:8d:b4: ac:ba:52:46:0b:73:2f:34:ee:bd:d4:f0:25:27:14:62:b2:8e: 0b:6b:53:b3:4e:55:ac:7e:2b:d4:f2:ae:bb:b2:8c:ef:ae:5c: bb:a2:fb:6f -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWERcN3aw10go54e6ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTIyODAxNDUxNVoXDTI2MDQwMTAwNDUxNVowLzEtMCsGA1UEAxMk MjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSvjZNdP8T8NQRCHVQIBu8BEM5s16rqQ3RoL FdZaJNDuhp/RHcc26/hsePTQGOdm5sUzDaovDSkDZ3mlXyLsjpyeYAiFwa4MVvA9 AeXfVbPOUmx8trH/OcVSGXzpQbnMrspx73Un7TO7Gx01d6OolJ4NzDwMmqc/Bc9K mVcy0UuuZBzeWemKoIdzNd/sp1dwxscgx3Ty94b33wbgAnOYfK1WTsND27ZaO2vb 0oqykfhrM9FX5ltYX0ZtDBr93k6ZChkl8F/InetP3Y0nxQqegB3WqtUK22IunCBw ibPmVPIQ40aujT7XZc8YnqvJobmGO9hXk8BbRVvbHXF/+My4FwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFICzsDtpDHXU0jMdtiIPHYc0e3sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y MDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzIwN2M0MGY0LTMzYzQtNDc4Yi1h ZTYxLWQzZjUxMzU4ODgxYi8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1 ODg4MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARMCeADBATYc8AwDQQCAAIwBwMFACYHJYAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAJybMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD1sro6d3RRasExEjUwY xPbNdVNRqeFqUdXpxtpRpI/WA4zlM5QCKevJY4/XRT3Rhf5k/lTX+Uc8chdMZfWW eVL7Gd6eIULnpGPmZ+kZKws6bQf93WSwM8ITJ18JzSUZCytKbJHttnDJL0MhjcCx inaf1GeqJKAxnft0DqAQZb9Bvp2OSK5H6xoRw6uQzAsNj8bAfLfD4StTzCxWERyJ n22CP1inshkKAvVToFCvJs0iZ25zwUkZRPfYa4pyoEUEqkVAr8keoN7DZmOmYAKp yUubVlTvllyNtKy6UkYLcy807r3U8CUnFGKyjgtrU7NOVax+K9TyrruyjO+uXLui +28= -----END CERTIFICATE-----Generated at Sat Apr 20 02:48:06 2024 by rpki-client on console-ams.rpki-client.org