$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer File: 2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer (raw, json) Hash identifier: MblA2RqCI5S12FKory5kv4uclWj/31GKHaQsjrF+eBc= Subject key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285847E0919F88B9CE682C4BC07740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Nov 2024 13:54:26 +0000 Certificate not after: Wed 08 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 400427 IP: 206.225.0.0/22 IP: 216.120.144.0/23 IP: 2606:ad40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:91:9f:88:b9:ce:68:2c:4b:c0:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 14 13:54:26 2024 GMT Not After : Jul 8 00:45:21 2026 GMT Subject: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:38:b1:f2:f5:cd:fc:96:e2:0f:d1:4a:6a: b5:89:7f:aa:07:71:8e:1f:b8:89:2e:bd:b2:e9:21: b8:ab:09:18:6a:12:2a:90:64:ff:07:e4:0d:6a:2c: fe:74:24:f8:ce:2f:85:93:4d:20:01:f8:36:e3:fe: 2d:3c:95:d2:89:14:1c:1d:71:d7:88:a8:27:61:f2: 5e:9b:a9:70:8e:93:2f:25:29:50:9e:cf:f5:b6:65: 4b:83:13:c1:45:a0:05:32:f7:80:8f:aa:7e:8b:f3: a3:b8:2c:4e:11:5a:f6:d8:2e:64:77:1d:1f:42:18: 2b:75:7d:5a:22:33:f0:1d:86:36:86:59:28:12:cf: 9e:c2:de:05:49:87:fd:c2:3d:83:eb:c3:4f:41:66: 33:1e:f2:9b:94:65:65:ea:d7:92:8c:12:b8:7d:3e: 93:a3:e5:9c:46:41:c2:31:28:97:27:99:e9:7f:f2: e7:a7:b3:64:2b:6c:e5:ed:5c:83:fd:4e:0e:1f:33: 93:1c:33:a6:45:36:0a:f8:c4:b5:7d:28:77:a8:ae: f2:0c:36:ca:55:81:a5:15:68:17:0c:69:11:bf:cb: f0:61:81:65:19:8f:e3:0e:ad:79:6d:23:1d:42:7f: 39:ae:1e:9c:f1:08:82:69:cf:88:35:74:c9:ca:a7: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 206.225.0.0/22 216.120.144.0/23 IPv6: 2606:ad40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d6:cc:d0:a3:26:35:3b:08:63:7a:21:84:84:e8:a3:bb:d6: f6:b7:6b:ba:c6:e7:17:3b:d2:c2:56:dc:2f:4e:e1:fd:21:a4: ab:93:f0:ed:78:b1:84:6a:de:f8:76:bf:5e:8d:52:20:4e:53: cc:87:80:93:93:96:15:ad:db:90:0d:dc:ca:cf:dd:c9:f2:88: a8:47:de:6b:80:7e:ff:41:b7:2c:92:f8:3a:ee:45:99:34:5d: f6:09:6e:d9:44:6d:2a:05:f2:cf:26:e6:3c:3d:8a:5b:01:78: 7b:5c:ba:4a:f6:a8:59:b4:6a:a5:3e:90:76:c7:4c:8a:c6:8c: 7c:62:7a:09:1a:31:7a:be:05:8c:52:5e:e8:70:ce:1d:f7:46: 9f:ca:e1:df:20:0a:65:6a:03:de:83:8a:06:c8:92:06:e9:65: 05:12:65:b0:cc:68:2b:98:a6:57:a7:8b:fc:67:d5:7a:63:5e: 76:34:99:75:3f:07:36:de:15:76:f9:4f:c5:9a:a0:58:7e:5e: d1:76:7a:03:f4:1b:7f:c4:b2:6c:4f:e0:78:12:72:74:eb:d2: 7b:29:9e:b6:c3:1d:44:7a:eb:32:1d:37:75:60:1d:06:df:4c: 04:de:c7:28:cd:33:60:1b:7b:91:4d:ec:4e:b0:44:ee:33:2f: bf:a5:aa:2c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEfgkZ+Iuc5oLEvAd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTExNDEzNTQyNloXDTI2MDcwODAwNDUyMVowLzEtMCsGA1UEAxMk MmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW84sfL1zfyW4g/RSmq1iX+qB3GOH7iJLr2y 6SG4qwkYahIqkGT/B+QNaiz+dCT4zi+Fk00gAfg24/4tPJXSiRQcHXHXiKgnYfJe m6lwjpMvJSlQns/1tmVLgxPBRaAFMveAj6p+i/OjuCxOEVr22C5kdx0fQhgrdX1a IjPwHYY2hlkoEs+ewt4FSYf9wj2D68NPQWYzHvKblGVl6teSjBK4fT6To+WcRkHC MSiXJ5npf/Lnp7NkK2zl7VyD/U4OHzOTHDOmRTYK+MS1fSh3qK7yDDbKVYGlFWgX DGkRv8vwYYFlGY/jDq15bSMdQn85rh6c8QiCac+INXTJyqdTcQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOBGlZEoEy/VjmO4jypDUsTDoTmOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y ZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJlNjdhMzc0LWRiZDMtNGJmYS1i ODJjLTZkYmZkNjRlNTc4Zi8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0 ZTU3OGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALO4QADBAHYeJAwDQQCAAIwBwMFACYGrUAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhwrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIXWzNCjJjU7CGN6IYSE 6KO71va3a7rG5xc70sJW3C9O4f0hpKuT8O14sYRq3vh2v16NUiBOU8yHgJOTlhWt 25AN3MrP3cnyiKhH3muAfv9BtyyS+DruRZk0XfYJbtlEbSoF8s8m5jw9ilsBeHtc ukr2qFm0aqU+kHbHTIrGjHxiegkaMXq+BYxSXuhwzh33Rp/K4d8gCmVqA96DigbI kgbpZQUSZbDMaCuYpleni/xn1XpjXnY0mXU/BzbeFXb5T8WaoFh+XtF2egP0G3/E smxP4HgScnTr0nspnrbDHUR66zIdN3VgHQbfTATexyjNM2Abe5FN7E6wRO4zL7+l qiw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:50 2024 by rpki-client on console-fra.rpki-client.org