$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer File: 31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer (raw, json) Hash identifier: YwemDBwe2MeVP0pBs1+RcTOaheXrI6VPtx8svNzHWC0= Subject key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E48348BC6759366B5C3DAA98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sat 17 May 2025 19:06:39 +0000 Subordinate resources: IP: 162.54.0.0/17 IP: 168.125.0.0/16 IP: 205.143.144.0/21 IP: 2606:f100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:48:bc:67:59:36:6b:5c:3d:aa:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 17 19:06:39 2025 GMT Subject: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:06:79:6c:a8:9c:b0:e2:d9:b7:58:04:4d: b5:83:ec:48:fb:99:63:63:b0:c0:ac:b4:07:6b:ec: a9:27:81:8b:70:f5:e9:95:c4:8e:28:d2:7b:1b:59: 5f:58:81:86:a2:6c:6d:8d:c6:16:45:07:b4:78:fe: e5:ff:78:bd:64:21:77:3d:7b:71:dc:66:d3:78:12: e4:94:5b:39:59:fe:0a:ce:83:5e:af:f1:e7:61:bc: bd:0f:55:af:47:cd:b8:9c:49:d1:5f:1c:20:35:8d: e6:ed:bd:0c:05:48:ab:bc:8e:04:e5:d6:d1:cf:db: e9:79:8e:0d:81:c4:d6:7f:67:73:c9:16:e6:36:7f: e0:c3:f3:21:74:16:cc:90:1a:40:c0:28:f6:95:c1: e5:bf:a7:1f:aa:13:a7:ad:59:d9:65:b3:25:72:6b: ee:f3:31:f0:0c:85:09:88:64:65:ee:bf:07:7e:a3: c3:75:91:45:a7:81:8c:28:65:cc:ac:50:39:bb:f1: f7:10:17:9b:1d:cd:47:b6:0b:8f:d3:39:9a:ec:84: 82:98:9a:24:1c:04:cd:f0:ce:ca:f4:ab:71:a4:e2: 13:cf:f2:5d:32:cd:72:ac:f3:ab:b5:66:5c:a1:94: 0b:3e:fa:8a:da:a5:17:7a:81:ae:c4:30:e5:5f:07: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 162.54.0.0/17 168.125.0.0/16 205.143.144.0/21 IPv6: 2606:f100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:65:17:b1:3a:85:54:39:a8:6d:18:8f:b6:fb:14:42:06:bb: 77:76:cc:b9:d7:88:c2:ce:59:18:ba:a3:e8:8a:01:07:4b:1e: 9c:3e:f0:f9:1c:50:46:ab:6f:38:25:e0:28:58:48:bc:fa:90: 6d:7c:34:81:ab:89:4f:87:9f:1c:6f:3e:15:61:c1:8d:58:5b: d7:1c:ad:af:9b:f7:00:0e:bc:b0:24:99:b8:9c:9d:fe:4f:6a: 48:1d:3c:c2:3a:90:a8:71:bd:86:d0:b2:a8:dc:64:8d:3f:4d: db:4c:82:30:12:8a:82:24:d0:ca:bc:49:e1:63:81:0d:82:34: d5:b2:2c:af:98:0c:c8:ef:7e:4d:d8:56:d8:5a:06:38:f2:36: 0d:df:a4:d3:36:62:d4:69:85:73:d3:34:62:57:6e:c2:57:7d: 8c:d6:b0:a2:77:f7:1f:97:90:c2:31:00:99:33:f5:7e:7d:cf: a0:38:ad:a0:15:6e:5c:42:11:b8:a4:9b:d2:4c:12:d7:37:47: 23:18:e9:8e:3d:7b:97:89:71:98:db:e7:8d:f0:65:54:62:1a: da:07:69:02:21:3a:cc:1d:29:7d:91:d9:e8:4b:58:ef:1a:48: 01:ca:5d:96:76:4d:ea:88:67:e4:20:88:33:ad:b2:42:f9:72: 8a:9d:99:ae -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEHkg0i8Z1k2a1w9qpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUxNzE5MDYzOVowLzEtMCsGA1UEAxMk MzFhMjRhMjItZjhlMi00MzlmLWEyZDUtZDQ5NzUzOGQ3YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dUGeWyonLDi2bdYBE21g+xI+5ljY7DArLQH a+ypJ4GLcPXplcSOKNJ7G1lfWIGGomxtjcYWRQe0eP7l/3i9ZCF3PXtx3GbTeBLk lFs5Wf4KzoNer/HnYby9D1WvR824nEnRXxwgNY3m7b0MBUirvI4E5dbRz9vpeY4N gcTWf2dzyRbmNn/gw/MhdBbMkBpAwCj2lcHlv6cfqhOnrVnZZbMlcmvu8zHwDIUJ iGRl7r8HfqPDdZFFp4GMKGXMrFA5u/H3EBebHc1HtguP0zma7ISCmJokHATN8M7K 9KtxpOITz/JdMs1yrPOrtWZcoZQLPvqK2qUXeoGuxDDlXweTzQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFGNiQ+pW3JBTi14A81jY3odik4qLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z MWEyNGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3NTM4ZDdiY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzMxYTI0YTIyLWY4ZTItNDM5Zi1h MmQ1LWQ0OTc1MzhkN2JjYi8zMWEyNGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3NTM4 ZDdiY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMBcEAgABMBEDBAeiNgADAwCofQMEA82PkDANBAIAAjAHAwUAJgbx ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBeZRexOoVUOahtGI+2+xRCBrt3dsy514jCzlkYuqPoigEHSx6c PvD5HFBGq284JeAoWEi8+pBtfDSBq4lPh58cbz4VYcGNWFvXHK2vm/cADrywJJm4 nJ3+T2pIHTzCOpCocb2G0LKo3GSNP03bTIIwEoqCJNDKvEnhY4ENgjTVsiyvmAzI 735N2FbYWgY48jYN36TTNmLUaYVz0zRiV27CV32M1rCid/cfl5DCMQCZM/V+fc+g OK2gFW5cQhG4pJvSTBLXN0cjGOmOPXuXiXGY2+eN8GVUYhraB2kCITrMHSl9kdno S1jvGkgByl2Wdk3qiGfkIIgzrbJC+XKKnZmu -----END CERTIFICATE-----Generated at Wed Apr 24 02:06:29 2024 by rpki-client on console-ams.rpki-client.org