$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer File: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer (raw, json) Hash identifier: c1ViQ1pqRdsOieK14ACXnxvuK1Ez2LJwQzdzaetuWIE= Subject key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858421FCB762F0FA4B49BE3C7E448 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Jun 2023 00:45:16 +0000 Certificate not after: Mon 08 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 400245 IP: 165.140.124.0/22 IP: 2602:fb7d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:1f:cb:76:2f:0f:a4:b4:9b:e3:c7:e4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 6 00:45:16 2023 GMT Not After : Sep 8 00:45:16 2025 GMT Subject: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:c6:98:9f:02:dc:11:67:1f:89:83:52:5f: c9:78:68:61:13:58:81:cb:0e:54:b7:b3:06:c1:e6: 3d:fd:ce:bd:7e:b7:69:c9:59:01:0e:b0:0e:a1:94: 82:23:52:a1:ce:fb:d9:34:76:88:88:24:6e:54:cf: 6e:54:41:b6:1c:6c:25:fa:06:03:97:61:a3:eb:81: f9:92:b8:bb:a1:82:69:3d:ab:58:ca:fe:82:ac:21: 7e:bb:44:c4:f8:b2:5a:a8:b0:84:ae:98:f6:32:aa: 06:17:69:b9:a6:43:7e:6d:41:cb:d9:0e:fb:eb:01: d7:70:79:57:99:44:6b:bd:aa:6a:17:96:59:16:aa: 5e:42:84:60:7a:9b:9d:45:50:77:d0:e6:62:af:a6: df:d7:7b:1d:b5:ba:f2:4b:45:7e:9c:4c:ce:39:4f: 48:6a:e8:82:05:c4:f3:8c:6d:ec:0f:08:30:5d:34: dd:58:0a:09:02:53:84:9a:75:1a:c8:cd:df:ea:4f: 42:59:80:a4:73:07:4f:90:3f:3b:98:51:3d:84:fc: 7a:82:ac:6e:cd:37:2a:a8:c5:c0:b9:cb:9a:7d:90: c9:ee:e0:72:8b:05:e1:21:f9:bb:c9:c1:a4:26:87: cf:31:bd:ed:88:cc:a0:db:33:ca:69:27:92:a4:d3: 6d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 165.140.124.0/22 IPv6: 2602:fb7d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400245 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1f:8d:1f:cd:8f:01:70:31:04:54:36:ab:f0:3b:33:74:09: d7:b9:25:a5:bd:86:41:29:88:8d:7b:bc:57:1c:84:38:2a:7d: 7b:ff:6f:de:2e:c8:0b:3c:c6:9c:44:e4:8c:d9:d7:be:9a:f6: ca:31:8e:9d:cc:a7:d0:07:2e:73:14:6c:44:18:2e:1f:44:e0: 4d:1a:d5:70:9e:d6:ba:bf:8c:72:c5:2f:64:68:b2:b3:b3:c1: 6f:dc:82:ad:19:32:66:ca:08:8b:63:0f:94:14:17:f0:66:b5: 7f:e5:74:86:82:d2:54:3c:6e:aa:eb:c5:d2:ca:f0:91:d9:ed: 7c:a1:39:9c:5d:cd:e1:3a:74:ed:a3:b3:93:d0:4e:8c:f1:0b: 8b:a7:91:33:78:e3:dd:88:d3:3e:e0:5e:17:6f:ef:6d:94:12: 0c:ad:54:09:d6:bc:d8:19:e6:d2:c0:ed:4a:da:c5:48:35:bf: f0:b0:b2:9b:01:79:5f:91:5a:34:75:ff:13:3c:e2:94:af:21: e9:79:ba:5e:02:29:ba:35:fb:75:14:3d:18:7e:c0:cb:c6:74: d5:67:eb:c1:f2:c7:bf:3c:b2:d3:9c:ad:03:7a:a6:0e:18:80: ee:8f:ec:24:93:97:8e:90:04:2f:58:08:52:77:8a:8b:41:2e: c6:3e:2e:fe -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEIfy3YvD6S0m+PH5EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDYwNjAwNDUxNloXDTI1MDkwODAwNDUxNlowLzEtMCsGA1UEAxMk MmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVLGmJ8C3BFnH4mDUl/JeGhhE1iByw5Ut7MG weY9/c69frdpyVkBDrAOoZSCI1KhzvvZNHaIiCRuVM9uVEG2HGwl+gYDl2Gj64H5 kri7oYJpPatYyv6CrCF+u0TE+LJaqLCErpj2MqoGF2m5pkN+bUHL2Q776wHXcHlX mURrvapqF5ZZFqpeQoRgepudRVB30OZir6bf13sdtbryS0V+nEzOOU9IauiCBcTz jG3sDwgwXTTdWAoJAlOEmnUayM3f6k9CWYCkcwdPkD87mFE9hPx6gqxuzTcqqMXA ucuafZDJ7uByiwXhIfm7ycGkJofPMb3tiMyg2zPKaSeSpNNtWQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNmXxt2BVfkV9QRjRTnTalEsF3THMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y YTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJhMWU5NzM0LTBhN2YtNDhlNi04 N2QzLWNhN2Q4MzdmNGU1MC8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3 ZjRlNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKljHwwDgQCAAIwCAMGBCYC+30AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYbdTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLH40fzY8BcDEEVDar8DszdAnX uSWlvYZBKYiNe7xXHIQ4Kn17/2/eLsgLPMacROSM2de+mvbKMY6dzKfQBy5zFGxE GC4fROBNGtVwnta6v4xyxS9kaLKzs8Fv3IKtGTJmygiLYw+UFBfwZrV/5XSGgtJU PG6q68XSyvCR2e18oTmcXc3hOnTto7OT0E6M8QuLp5EzeOPdiNM+4F4Xb+9tlBIM rVQJ1rzYGebSwO1K2sVINb/wsLKbAXlfkVo0df8TPOKUryHpebpeAim6Nft1FD0Y fsDLxnTVZ+vB8se/PLLTnK0DeqYOGIDuj+wkk5eOkAQvWAhSd4qLQS7GPi7+ -----END CERTIFICATE-----Generated at Thu Apr 25 02:11:49 2024 by rpki-client on console-ams.rpki-client.org