$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer File: 324346b5-3875-43b0-bb0d-8052274567d4.cer (raw, json) Hash identifier: lzzXVonOTZIvkm4P4gfHKiwZQazX1nRJCmUn6DTg83Y= Subject key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584679B26E3D6489FC1BA1CFED80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Jul 2024 00:45:20 +0000 Certificate not after: Mon 12 Oct 2026 00:45:20 +0000 Subordinate resources: AS: 55 AS: 69 IP: 128.91.0.0/16 IP: 130.91.0.0/16 IP: 158.130.0.0/16 IP: 165.123.0.0/16 IP: 192.5.44.0/24 IP: 192.84.2.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:79:b2:6e:3d:64:89:fc:1b:a1:cf:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 9 00:45:20 2024 GMT Not After : Oct 12 00:45:20 2026 GMT Subject: CN=324346b5-3875-43b0-bb0d-8052274567d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:6e:b4:db:ac:b0:ff:a3:fc:94:0a:ad:21: cb:9d:9d:8e:dc:40:19:dd:54:8a:88:25:ca:ec:36: 5f:ed:45:1f:0e:e1:05:07:3e:ce:6f:28:e0:fd:ef: 32:be:b7:c9:32:a9:de:72:97:62:d9:b4:bf:5a:43: b6:aa:f7:ed:72:22:e6:6b:49:46:f5:37:dd:4d:9f: 9d:a9:ba:a2:8c:9c:1c:a8:99:8a:73:8b:f0:fb:c2: bf:34:d7:f6:a0:e9:7c:57:15:65:a4:4e:14:78:b8: 43:0b:2c:87:d3:d3:bd:51:ab:92:1a:1f:4f:c4:a6: 53:94:d1:a4:42:3c:43:03:c9:ef:dd:3d:82:e0:69: bf:45:c5:b9:ac:ef:f1:3c:e4:f1:61:7c:b6:b3:a7: b7:f7:7b:23:b5:45:7f:6e:84:7b:6d:2d:99:d0:fd: 9c:53:dc:15:04:ab:ed:37:dc:45:3d:f3:6e:53:06: 73:db:51:05:96:98:6a:24:1c:e0:13:a3:81:45:47: 1f:71:f9:6c:3f:53:00:b2:91:ce:dd:48:0e:16:e7: cf:97:e4:70:e4:73:cc:71:86:9e:dd:32:65:68:a9: c2:c3:b9:71:7a:2d:aa:22:93:93:b1:a2:8d:47:c8: 23:b0:73:bc:1f:8a:80:e1:f9:99:70:21:1c:36:92: 7e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 128.91.0.0/16 130.91.0.0/16 158.130.0.0/16 165.123.0.0/16 192.5.44.0/24 192.84.2.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55 69 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:75:4d:fa:d7:ac:85:b5:03:c3:9d:48:24:ba:7d:cd:d9:56: 75:27:31:9f:e1:4a:73:bb:f7:8a:7c:0c:5a:19:64:8b:3b:86: 73:d8:8b:d8:ad:cf:e0:b1:ac:85:4e:32:6a:22:a2:1d:5a:3d: 14:e4:24:d1:12:4f:7b:bb:8c:b6:50:63:e5:9e:7a:38:28:0b: 98:51:01:1f:11:bd:18:1f:a8:05:31:c1:21:e2:9c:09:53:93: ab:54:b6:c6:bf:a7:dd:65:7a:bb:32:51:e2:70:1b:2e:09:8e: 05:c7:cd:02:d6:49:22:87:70:42:fe:42:49:86:a9:c6:d4:fa: 11:64:e9:35:6a:35:1f:0b:2a:77:ef:8a:0b:f0:9c:5a:e2:0e: 02:60:3a:2a:4c:25:61:ce:bf:b1:86:3c:e5:e6:d2:04:c8:cd: 7d:cc:86:41:14:80:ad:7c:35:62:8d:e0:ff:40:0a:a2:25:78: 9a:ac:57:cd:1a:89:fd:b6:c3:58:8f:14:47:53:6e:42:d2:15: ad:e0:c0:e6:e8:10:97:69:46:98:9c:4f:da:58:7b:64:a2:41: 2b:3c:87:2d:39:50:e3:ab:c5:b1:0d:a9:ae:f3:1c:36:45:33: f1:24:7c:82:1f:df:74:ea:a6:67:b8:17:05:cf:d5:1b:fe:57: 55:43:39:17 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEZ5sm49ZIn8G6HP7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDcwOTAwNDUyMFoXDTI2MTAxMjAwNDUyMFowLzEtMCsGA1UEAxMk MzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAordutNussP+j/JQKrSHLnZ2O3EAZ3VSKiCXK 7DZf7UUfDuEFBz7Obyjg/e8yvrfJMqnecpdi2bS/WkO2qvftciLma0lG9TfdTZ+d qbqijJwcqJmKc4vw+8K/NNf2oOl8VxVlpE4UeLhDCyyH09O9UauSGh9PxKZTlNGk QjxDA8nv3T2C4Gm/RcW5rO/xPOTxYXy2s6e393sjtUV/boR7bS2Z0P2cU9wVBKvt N9xFPfNuUwZz21EFlphqJBzgE6OBRUcfcflsP1MAspHO3UgOFufPl+Rw5HPMcYae 3TJlaKnCw7lxei2qIpOTsaKNR8gjsHO8H4qA4fmZcCEcNpJ+owIDAQABo4IENjCC BDIwHQYDVR0OBBYEFEopNMWSZnnp6eAL/n+28Ogpdl4kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z MjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzMyNDM0NmI1LTM4NzUtNDNiMC1i YjBkLTgwNTIyNzQ1NjdkNC8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0 NTY3ZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADAwCAWwMDAIJbAwMAnoIDAwClewMEAMAFLAMEAMBU AjAbBggrBgEFBQcBCAEB/wQMMAqgCDAGAgE3AgFFMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIB1TfrXrIW1 A8OdSCS6fc3ZVnUnMZ/hSnO794p8DFoZZIs7hnPYi9itz+CxrIVOMmoioh1aPRTk JNEST3u7jLZQY+WeejgoC5hRAR8RvRgfqAUxwSHinAlTk6tUtsa/p91lersyUeJw Gy4JjgXHzQLWSSKHcEL+QkmGqcbU+hFk6TVqNR8LKnfvigvwnFriDgJgOipMJWHO v7GGPOXm0gTIzX3MhkEUgK18NWKN4P9ACqIleJqsV80aif22w1iPFEdTbkLSFa3g wOboEJdpRpicT9pYe2SiQSs8hy05UOOrxbENqa7zHDZFM/EkfIIf33Tqpme4FwXP 1Rv+V1VDORc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:51 2024 by rpki-client on console-fra.rpki-client.org