$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer File: 2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer (raw, json) Hash identifier: qh5PPOANk3GheAzC9oLITMrtI4gUDWAW/MMP5zXYA8I= Subject key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858482C5F7A4ED8A8DCFD8E4C2500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Dec 2024 17:34:50 +0000 Certificate not after: Tue 16 Mar 2027 16:34:50 +0000 Subordinate resources: AS: 23297 IP: 23.130.44.0/24 IP: 2602:f780::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2c:5f:7a:4e:d8:a8:dc:fd:8e:4c:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 11 17:34:50 2024 GMT Not After : Mar 16 16:34:50 2027 GMT Subject: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:98:1d:c4:0c:4f:7d:56:28:61:c1:ff:31: f9:9b:78:20:aa:f6:58:eb:09:d5:7d:36:08:97:65: 87:46:8a:dc:05:8e:30:25:63:9b:e1:9b:a6:b6:b5: 5a:23:36:02:26:23:8a:79:3c:ac:74:e0:a0:43:71: be:25:91:d0:41:82:f2:ee:3a:d5:05:2d:cf:b9:83: 5b:89:3c:0e:de:25:cc:3d:aa:59:b6:b5:3f:3f:6a: e0:47:21:2a:0b:1c:e7:8e:bf:0d:57:6a:75:0b:00: 97:6e:e8:6d:f2:19:56:e1:b3:29:a5:a7:46:20:dd: bb:76:3e:fd:3a:3c:99:fb:fd:68:f1:a0:ad:50:c9: 12:59:73:e7:fc:ac:49:74:46:ff:64:23:e9:d8:c3: e1:04:e1:1d:b4:85:5f:46:01:45:47:59:cd:60:01: c8:f9:05:5d:e6:0d:22:d0:75:dc:cd:91:56:09:22: 67:ed:94:17:02:e2:9b:28:9f:25:35:a2:45:52:52: 4e:d3:1e:75:b4:2e:1c:3c:d9:99:aa:bb:0d:b7:19: 30:6c:9c:7f:a4:09:4a:40:0b:c7:b4:02:4f:6f:b9: cf:9b:7b:11:d2:d9:4c:6c:82:68:18:62:8f:0a:4c: b6:7c:e4:16:aa:ad:06:fc:87:c7:c5:61:ed:e9:e0: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.130.44.0/24 IPv6: 2602:f780::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23297 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c5:8b:88:50:5c:f0:81:14:bd:35:23:5c:81:88:22:f6:a3: 30:cd:68:fd:66:13:19:c8:90:e8:e8:79:95:15:f2:96:75:fc: aa:b3:85:ae:4c:f3:fc:c2:1e:13:62:3d:a2:b3:19:35:13:47: e6:5c:c0:7f:e7:8c:a5:02:ab:22:25:32:5f:fb:fa:e3:88:a5: e0:24:65:2d:b1:52:9b:5d:88:ae:21:b3:16:e1:2e:6d:48:6b: 11:aa:b2:3c:fd:21:a7:50:b2:3f:f7:22:57:89:9c:eb:61:c9: 76:d8:08:e5:b5:ca:5e:a2:75:75:ac:74:d8:f7:1d:81:9d:c5: dc:9c:0c:cc:92:fa:d0:dc:a4:bf:34:c9:fa:cc:a9:11:ed:be: 8a:06:b5:61:05:5e:12:33:a3:60:ce:75:fd:f1:78:d9:37:8a: 68:6d:83:b6:bd:59:f9:f1:51:9a:18:07:38:42:ec:e4:0f:b4: 5d:50:f4:a8:a0:c9:64:3c:ae:12:3d:99:a1:57:76:12:ec:fa: 6d:52:75:0f:6e:a6:be:fd:3c:07:75:86:9b:16:ff:bc:c2:b2: 44:2d:32:4c:f9:cc:8c:01:1c:a0:95:94:87:aa:2e:6e:d4:46: 80:f5:0c:41:96:b9:0d:ba:f4:61:c1:de:5c:fb:fa:b8:ed:2c: c9:c3:97:c2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEgsX3pO2Kjc/Y5MJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTIxMTE3MzQ1MFoXDTI3MDMxNjE2MzQ1MFowLzEtMCsGA1UEAxMk MmI1OTQ3ZTQtNjFlNi00ZGRmLThjMmUtMGI4NDgyMTViMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbuYHcQMT31WKGHB/zH5m3ggqvZY6wnVfTYI l2WHRorcBY4wJWOb4ZumtrVaIzYCJiOKeTysdOCgQ3G+JZHQQYLy7jrVBS3PuYNb iTwO3iXMPapZtrU/P2rgRyEqCxznjr8NV2p1CwCXbuht8hlW4bMppadGIN27dj79 OjyZ+/1o8aCtUMkSWXPn/KxJdEb/ZCPp2MPhBOEdtIVfRgFFR1nNYAHI+QVd5g0i 0HXczZFWCSJn7ZQXAuKbKJ8lNaJFUlJO0x51tC4cPNmZqrsNtxkwbJx/pAlKQAvH tAJPb7nPm3sR0tlMbIJoGGKPCky2fOQWqq0G/IfHxWHt6eA8CQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFMblM5tu2w5bWam2ZAJujhiaPJDUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y YjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIxNWIyNTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJiNTk0N2U0LTYxZTYtNGRkZi04 YzJlLTBiODQ4MjE1YjI1MS8yYjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIx NWIyNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgiwwDgQCAAIwCAMGBCYC94AAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlsBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAInFi4hQXPCBFL01I1yBiCL2ozDN aP1mExnIkOjoeZUV8pZ1/Kqzha5M8/zCHhNiPaKzGTUTR+ZcwH/njKUCqyIlMl/7 +uOIpeAkZS2xUptdiK4hsxbhLm1IaxGqsjz9IadQsj/3IleJnOthyXbYCOW1yl6i dXWsdNj3HYGdxdycDMyS+tDcpL80yfrMqRHtvooGtWEFXhIzo2DOdf3xeNk3imht g7a9WfnxUZoYBzhC7OQPtF1Q9KigyWQ8rhI9maFXdhLs+m1SdQ9upr79PAd1hpsW /7zCskQtMkz5zIwBHKCVlIeqLm7URoD1DEGWuQ269GHB3lz7+rjtLMnDl8I= -----END CERTIFICATE-----Generated at Wed Feb 5 12:43:57 2025 by rpki-client