$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer File: 2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer (raw, json) Hash identifier: x2jX6Kp2Kgn6Kv+crJeCpuhBIxB24N9oUiW1XgwXYQQ= Subject key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858456DB0C618481C38A11CAD0600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Apr 2024 00:45:21 +0000 Certificate not after: Wed 08 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 400427 IP: 206.225.0.0/22 IP: 2606:ad40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6d:b0:c6:18:48:1c:38:a1:1c:ad:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 4 00:45:21 2024 GMT Not After : Jul 8 00:45:21 2026 GMT Subject: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:38:b1:f2:f5:cd:fc:96:e2:0f:d1:4a:6a: b5:89:7f:aa:07:71:8e:1f:b8:89:2e:bd:b2:e9:21: b8:ab:09:18:6a:12:2a:90:64:ff:07:e4:0d:6a:2c: fe:74:24:f8:ce:2f:85:93:4d:20:01:f8:36:e3:fe: 2d:3c:95:d2:89:14:1c:1d:71:d7:88:a8:27:61:f2: 5e:9b:a9:70:8e:93:2f:25:29:50:9e:cf:f5:b6:65: 4b:83:13:c1:45:a0:05:32:f7:80:8f:aa:7e:8b:f3: a3:b8:2c:4e:11:5a:f6:d8:2e:64:77:1d:1f:42:18: 2b:75:7d:5a:22:33:f0:1d:86:36:86:59:28:12:cf: 9e:c2:de:05:49:87:fd:c2:3d:83:eb:c3:4f:41:66: 33:1e:f2:9b:94:65:65:ea:d7:92:8c:12:b8:7d:3e: 93:a3:e5:9c:46:41:c2:31:28:97:27:99:e9:7f:f2: e7:a7:b3:64:2b:6c:e5:ed:5c:83:fd:4e:0e:1f:33: 93:1c:33:a6:45:36:0a:f8:c4:b5:7d:28:77:a8:ae: f2:0c:36:ca:55:81:a5:15:68:17:0c:69:11:bf:cb: f0:61:81:65:19:8f:e3:0e:ad:79:6d:23:1d:42:7f: 39:ae:1e:9c:f1:08:82:69:cf:88:35:74:c9:ca:a7: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 206.225.0.0/22 IPv6: 2606:ad40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9e:d6:f2:fe:3e:e9:a6:41:45:d3:da:ca:bc:00:4e:77:af: c4:4c:5d:62:ff:2c:61:e7:ca:90:83:9a:39:14:4e:0c:f4:80: 7d:2e:53:77:d0:b7:2a:7a:40:4e:da:cb:8c:1e:2d:4f:ad:c6: 2d:47:d5:ac:41:cc:d5:d2:1e:e2:0e:9e:b6:4d:17:df:a5:3d: c8:9d:d1:7c:9d:65:29:e1:7e:2b:db:14:3f:6c:a3:f1:5d:7f: 26:bd:a2:f3:39:29:e9:42:07:9b:2f:33:c1:7a:47:5c:75:1e: dc:ce:4c:0a:08:7a:b4:75:cf:06:f1:cf:9c:29:f6:bd:04:7e: 84:ed:b0:d2:d6:bc:42:78:80:4e:ae:df:05:9e:96:2d:2e:ee: 15:82:ca:9a:8b:33:e4:fe:1e:91:cf:1a:07:56:3f:03:98:b8: 42:e4:7c:8c:b3:2b:90:8e:fa:b5:67:36:b4:5f:38:3a:85:22: ff:60:0a:eb:8e:c9:a4:7f:b9:6f:bf:54:92:80:bc:74:fc:89: b0:96:8f:9f:05:33:cc:6a:15:0d:5d:e6:c7:28:7f:6a:eb:f8: 67:56:54:ff:5b:a7:20:0a:c3:ac:52:e2:47:15:fd:ab:d0:ab: 06:86:3f:3d:24:d3:8c:c7:a2:79:99:f6:86:77:e4:61:79:65: 2b:e1:3f:1f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEVtsMYYSBw4oRytBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDQwNDAwNDUyMVoXDTI2MDcwODAwNDUyMVowLzEtMCsGA1UEAxMk MmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW84sfL1zfyW4g/RSmq1iX+qB3GOH7iJLr2y 6SG4qwkYahIqkGT/B+QNaiz+dCT4zi+Fk00gAfg24/4tPJXSiRQcHXHXiKgnYfJe m6lwjpMvJSlQns/1tmVLgxPBRaAFMveAj6p+i/OjuCxOEVr22C5kdx0fQhgrdX1a IjPwHYY2hlkoEs+ewt4FSYf9wj2D68NPQWYzHvKblGVl6teSjBK4fT6To+WcRkHC MSiXJ5npf/Lnp7NkK2zl7VyD/U4OHzOTHDOmRTYK+MS1fSh3qK7yDDbKVYGlFWgX DGkRv8vwYYFlGY/jDq15bSMdQn85rh6c8QiCac+INXTJyqdTcQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFOBGlZEoEy/VjmO4jypDUsTDoTmOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y ZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJlNjdhMzc0LWRiZDMtNGJmYS1i ODJjLTZkYmZkNjRlNTc4Zi8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0 ZTU3OGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALO4QAwDQQCAAIwBwMFACYGrUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhwrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACWe1vL+PummQUXT2sq8AE53r8RM XWL/LGHnypCDmjkUTgz0gH0uU3fQtyp6QE7ay4weLU+txi1H1axBzNXSHuIOnrZN F9+lPcid0XydZSnhfivbFD9so/Fdfya9ovM5KelCB5svM8F6R1x1HtzOTAoIerR1 zwbxz5wp9r0EfoTtsNLWvEJ4gE6u3wWeli0u7hWCypqLM+T+HpHPGgdWPwOYuELk fIyzK5CO+rVnNrRfODqFIv9gCuuOyaR/uW+/VJKAvHT8ibCWj58FM8xqFQ1d5sco f2rr+GdWVP9bpyAKw6xS4kcV/avQqwaGPz0k04zHonmZ9oZ35GF5ZSvhPx8= -----END CERTIFICATE-----Generated at Tue Apr 16 20:15:24 2024 by rpki-client on console-ams.rpki-client.org