$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e.cer File: 28cbed49-e939-45fa-95d9-3bb13f35a47e.cer (raw, json) Hash identifier: i+40NHD1eQWLwNe3Pwo5vfU4MgqY+Cn20wDB2LM37WY= Subject key identifier: 1E:15:DF:79:45:AC:BA:E8:B2:49:FB:8C:DD:85:42:DD:0D:AF:E8:BB Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858456CE931983D45DB5C9382A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/28cbed49-e939-45fa-95d9-3bb13f35a47e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Apr 2024 18:03:14 +0000 Certificate not after: Fri 03 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 26930 IP: 208.99.44.0/24 IP: 209.151.125.0/24 IP: 2602:fa7c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:e9:31:98:3d:45:db:5c:93:82:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 3 18:03:14 2024 GMT Not After : Oct 3 00:45:16 2025 GMT Subject: CN=28cbed49-e939-45fa-95d9-3bb13f35a47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:86:e4:2a:4b:79:63:12:3e:39:1a:9e:26: 53:72:90:76:8e:cd:7a:fe:0d:02:c3:1e:ca:e7:e7: 8c:2f:cc:62:47:c4:b9:88:90:5a:63:1f:c1:30:03: b8:88:a7:4a:f0:de:3e:14:0b:5a:18:4b:9c:65:f5: a0:34:f4:1e:70:ad:04:af:cc:32:be:27:4f:81:3b: f0:9f:77:32:86:2e:20:f5:ef:e7:17:72:a3:5b:19: 1f:aa:27:83:44:d3:30:ef:fa:27:3c:c8:ef:25:ee: 30:93:69:bd:f6:46:99:aa:30:ee:62:cc:b8:ed:ad: 0b:4d:b6:5f:2a:36:84:6e:2d:31:2a:c9:d6:8f:55: 16:8a:98:23:5e:4d:8c:79:29:35:89:ba:d3:a5:77: 1a:93:c9:a6:6f:10:c8:4c:16:e6:01:52:45:52:5c: f2:ef:73:fc:cb:34:75:88:57:86:fb:2a:8a:3f:e3: b4:1b:d8:62:8d:b3:f8:79:d1:02:44:8a:18:a6:03: ad:cd:8e:70:62:c9:b7:d5:bb:5c:5a:1b:29:64:84: c3:77:b8:2e:c4:04:92:d6:04:c7:db:07:71:d6:3d: 7a:b3:da:37:96:e1:e7:87:6c:8e:ac:a3:4c:85:76: 20:db:60:01:4f:b8:21:bd:87:7b:a8:46:ad:80:d1: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:15:DF:79:45:AC:BA:E8:B2:49:FB:8C:DD:85:42:DD:0D:AF:E8:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/28cbed49-e939-45fa-95d9-3bb13f35a47e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 208.99.44.0/24 209.151.125.0/24 IPv6: 2602:fa7c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26930 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:27:46:c3:8c:c7:95:e5:6e:e2:1f:33:72:2d:ac:b7:ce:e4: 29:d7:f4:30:8a:62:42:65:7a:3d:68:ac:2e:1f:73:9e:5a:42: 97:13:c7:1e:35:c3:8f:93:26:e6:7a:f6:d6:a7:be:1c:9a:9c: 8d:c0:e9:70:04:b9:04:5b:7e:ec:af:c5:64:62:d3:bb:6d:02: 38:37:8c:1c:8d:90:8a:8a:9d:2c:e6:91:be:00:2d:59:4a:d6: 2d:b5:a5:b1:2a:2c:38:ef:81:59:7c:45:ed:52:d2:b7:e6:36: 33:23:df:df:5c:62:34:22:14:67:65:cb:e6:45:2f:52:00:c6: ec:c3:0f:77:82:60:b5:25:96:7f:d8:52:92:25:f4:30:1d:0a: 02:55:86:c3:28:8f:b6:ce:46:20:7d:75:7c:c8:95:51:a4:4e: b2:dc:ef:1b:3f:cc:81:63:fb:02:10:9d:58:65:39:6f:e3:62: 2f:c7:34:bf:89:49:53:3c:00:b0:ad:92:a1:96:ba:ac:ca:80: 26:03:f4:ef:9c:8c:2f:57:c4:00:22:e6:fe:13:39:94:49:f6: 32:52:9f:ef:f7:19:97:f7:94:97:6e:9b:e8:74:17:d3:24:c1: 1e:29:d2:99:ff:ce:52:a0:5a:d2:b7:04:40:30:4a:f4:6e:e5: 18:1b:ac:5c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEVs6TGYPUXbXJOCoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDQwMzE4MDMxNFoXDTI1MTAwMzAwNDUxNlowLzEtMCsGA1UEAxMk MjhjYmVkNDktZTkzOS00NWZhLTk1ZDktM2JiMTNmMzVhNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjCG5CpLeWMSPjkaniZTcpB2js16/g0Cwx7K 5+eML8xiR8S5iJBaYx/BMAO4iKdK8N4+FAtaGEucZfWgNPQecK0Er8wyvidPgTvw n3cyhi4g9e/nF3KjWxkfqieDRNMw7/onPMjvJe4wk2m99kaZqjDuYsy47a0LTbZf KjaEbi0xKsnWj1UWipgjXk2MeSk1ibrTpXcak8mmbxDITBbmAVJFUlzy73P8yzR1 iFeG+yqKP+O0G9hijbP4edECRIoYpgOtzY5wYsm31btcWhspZITDd7guxASS1gTH 2wdx1j16s9o3luHnh2yOrKNMhXYg22ABT7ghvYd7qEatgNHhnQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFB4V33lFrLroskn7jN2FQt0Nr+i7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y OGNiZWQ0OS1lOTM5LTQ1ZmEtOTVkOS0zYmIxM2YzNWE0N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzI4Y2JlZDQ5LWU5MzktNDVmYS05 NWQ5LTNiYjEzZjM1YTQ3ZS8yOGNiZWQ0OS1lOTM5LTQ1ZmEtOTVkOS0zYmIxM2Yz NWE0N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBADQYywDBADRl30wDgQCAAIwCAMGBCYC+nwAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmkyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHcnRsOMx5XlbuIfM3It rLfO5CnX9DCKYkJlej1orC4fc55aQpcTxx41w4+TJuZ69tanvhyanI3A6XAEuQRb fuyvxWRi07ttAjg3jByNkIqKnSzmkb4ALVlK1i21pbEqLDjvgVl8Re1S0rfmNjMj 399cYjQiFGdly+ZFL1IAxuzDD3eCYLUlln/YUpIl9DAdCgJVhsMoj7bORiB9dXzI lVGkTrLc7xs/zIFj+wIQnVhlOW/jYi/HNL+JSVM8ALCtkqGWuqzKgCYD9O+cjC9X xAAi5v4TOZRJ9jJSn+/3GZf3lJdum+h0F9MkwR4p0pn/zlKgWtK3BEAwSvRu5Rgb rFw= -----END CERTIFICATE-----Generated at Thu Apr 25 01:27:53 2024 by rpki-client on console-fra.rpki-client.org