$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer File: 2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer (raw, json) Hash identifier: wQTzC7TGng8WzvlF8k8FfIyWRHoaWiDAe32vR48N9t8= Subject key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858461AC72BDA8BA879C1B86E1EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Jun 2024 00:45:20 +0000 Certificate not after: Tue 08 Sep 2026 00:45:20 +0000 Subordinate resources: AS: 10439 IP: 66.240.192.0/18 IP: 71.6.128.0/17 IP: 209.126.128.0/17 IP: 216.75.0.0/18 IP: 216.98.128.0/19 IP: 2607:ff10::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:1a:c7:2b:da:8b:a8:79:c1:b8:6e:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 5 00:45:20 2024 GMT Not After : Sep 8 00:45:20 2026 GMT Subject: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:ce:70:de:9f:64:ba:f0:a1:58:53:c6:5d: 86:4f:2a:17:f5:18:1a:e1:c0:5b:5c:69:f1:5b:64: fd:27:81:4f:f8:e2:fb:5b:89:88:55:8a:8b:b5:ee: 77:f8:f0:4e:3e:35:eb:35:f8:a7:75:92:ec:3e:4a: 82:19:e3:ba:85:d0:27:72:3d:11:17:46:01:44:ef: a1:d3:f5:c9:26:2f:24:05:f0:28:a4:f6:b3:17:13: ad:ef:8b:a2:fc:80:6a:d7:78:d3:20:22:60:aa:30: 09:9b:a4:a0:9f:a9:69:64:43:82:27:3c:1b:a0:a3: 11:d3:86:29:c0:4b:84:0c:5b:9e:95:c9:3f:be:84: 02:f2:d2:03:c5:d4:5a:1c:8b:d1:8f:33:eb:5e:65: ab:84:a7:64:61:ac:cb:4b:f6:2a:6d:db:1b:2c:9f: 9f:d9:0a:ad:03:de:1f:e1:38:d0:7f:76:67:06:11: c2:4d:09:dd:b7:c7:e0:94:2f:fa:18:51:92:35:35: ba:d2:82:07:83:d6:50:f7:96:48:58:ab:b5:b9:7e: f3:ff:75:2d:f2:70:24:87:2f:c8:c9:e4:0a:0c:c3: 03:b4:0e:96:3d:c4:50:13:7e:9e:8a:8a:15:8f:8c: d9:25:72:f8:d1:1f:20:8a:c5:c6:77:4d:d3:9c:ae: 3e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.240.192.0/18 71.6.128.0/17 209.126.128.0/17 216.75.0.0/18 216.98.128.0/19 IPv6: 2607:ff10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10439 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:99:ca:57:d3:8e:e5:1c:94:97:b1:ce:3b:19:0e:a2:d9:88: b5:a7:4b:57:26:82:6a:38:22:96:1e:7e:70:9e:19:1c:09:02: 89:8b:87:ce:1a:f4:e3:f6:2f:7a:1e:b6:e5:84:31:ae:0d:b7: e0:4f:cb:97:d7:0b:7a:05:c3:32:92:bb:87:3e:4b:98:28:c1: f4:21:7e:3a:cd:e6:0a:6c:98:63:2d:99:8a:20:a7:8f:a8:ef: fd:f3:3b:85:35:1a:cd:32:07:52:be:c4:c2:fe:2e:8d:75:ed: 56:1e:05:1e:05:47:d0:38:11:f5:fd:84:38:09:6f:8e:08:71: 05:16:56:d0:c1:9f:9e:9f:f8:04:1a:88:8a:2f:36:5d:fd:a4: df:76:9a:3b:d8:f6:f1:21:1e:75:8e:4c:0d:66:4e:2b:a0:36: 15:0d:23:64:3d:24:bc:57:05:67:4a:75:0e:1b:0e:fa:36:d0: 41:18:29:b0:10:de:dd:05:97:16:dd:09:76:f7:fe:35:c1:3c: 58:4a:00:06:a4:05:26:76:ff:d7:05:7c:6a:e7:9e:69:3b:81: 29:e8:cb:ff:de:9f:bb:e6:b5:6b:df:ac:1f:76:62:aa:f2:d3: d9:82:3f:4d:de:40:b0:5e:25:41:ec:cd:30:d1:70:09:06:b0: d8:c3:9b:0a -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEYaxyvai6h5wbhuHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDYwNTAwNDUyMFoXDTI2MDkwODAwNDUyMFowLzEtMCsGA1UEAxMk MmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEzZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3InOcN6fZLrwoVhTxl2GTyoX9Rga4cBbXGnx W2T9J4FP+OL7W4mIVYqLte53+PBOPjXrNfindZLsPkqCGeO6hdAncj0RF0YBRO+h 0/XJJi8kBfAopPazFxOt74ui/IBq13jTICJgqjAJm6Sgn6lpZEOCJzwboKMR04Yp wEuEDFuelck/voQC8tIDxdRaHIvRjzPrXmWrhKdkYazLS/YqbdsbLJ+f2QqtA94f 4TjQf3ZnBhHCTQndt8fglC/6GFGSNTW60oIHg9ZQ95ZIWKu1uX7z/3Ut8nAkhy/I yeQKDMMDtA6WPcRQE36eiooVj4zZJXL40R8gisXGd03TnK4+ZwIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFP78+6UH4+RZUYmCRQ6DhPPa1Sh7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y ZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJmMmVkODdlLTI3ZjktNDE0Yy1h N2FmLTJiNWI1ZmZhM2Y2NS8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZm YTNmNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAZC8MADBAdHBoADBAfRfoADBAbYSwADBAXYYoAw DQQCAAIwBwMFACYH/xAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICKMcwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEARpnKV9OO5RyUl7HOOxkOotmItadLVyaCajgilh5+cJ4ZHAkCiYuHzhr04/Yv eh625YQxrg234E/Ll9cLegXDMpK7hz5LmCjB9CF+Os3mCmyYYy2ZiiCnj6jv/fM7 hTUazTIHUr7Ewv4ujXXtVh4FHgVH0DgR9f2EOAlvjghxBRZW0MGfnp/4BBqIii82 Xf2k33aaO9j28SEedY5MDWZOK6A2FQ0jZD0kvFcFZ0p1DhsO+jbQQRgpsBDe3QWX Ft0Jdvf+NcE8WEoABqQFJnb/1wV8aueeaTuBKejL/96fu+a1a9+sH3ZiqvLT2YI/ Td5AsF4lQezNMNFwCQaw2MObCg== -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:50 2024 by rpki-client on console-fra.rpki-client.org