$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer File: 324346b5-3875-43b0-bb0d-8052274567d4.cer (raw, json) Hash identifier: E+1N82catBTvfVYTdmkioATqxZtL8Nzskf/ItFKs5pk= Subject key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E483504A1F0C5EB2F3D75D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Tue 08 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 55 AS: 69 IP: 128.91.0.0/16 IP: 130.91.0.0/16 IP: 158.130.0.0/16 IP: 165.123.0.0/16 IP: 192.5.44.0/24 IP: 192.84.2.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:50:4a:1f:0c:5e:b2:f3:d7:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 8 19:06:39 2025 GMT Subject: CN=324346b5-3875-43b0-bb0d-8052274567d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:6e:b4:db:ac:b0:ff:a3:fc:94:0a:ad:21: cb:9d:9d:8e:dc:40:19:dd:54:8a:88:25:ca:ec:36: 5f:ed:45:1f:0e:e1:05:07:3e:ce:6f:28:e0:fd:ef: 32:be:b7:c9:32:a9:de:72:97:62:d9:b4:bf:5a:43: b6:aa:f7:ed:72:22:e6:6b:49:46:f5:37:dd:4d:9f: 9d:a9:ba:a2:8c:9c:1c:a8:99:8a:73:8b:f0:fb:c2: bf:34:d7:f6:a0:e9:7c:57:15:65:a4:4e:14:78:b8: 43:0b:2c:87:d3:d3:bd:51:ab:92:1a:1f:4f:c4:a6: 53:94:d1:a4:42:3c:43:03:c9:ef:dd:3d:82:e0:69: bf:45:c5:b9:ac:ef:f1:3c:e4:f1:61:7c:b6:b3:a7: b7:f7:7b:23:b5:45:7f:6e:84:7b:6d:2d:99:d0:fd: 9c:53:dc:15:04:ab:ed:37:dc:45:3d:f3:6e:53:06: 73:db:51:05:96:98:6a:24:1c:e0:13:a3:81:45:47: 1f:71:f9:6c:3f:53:00:b2:91:ce:dd:48:0e:16:e7: cf:97:e4:70:e4:73:cc:71:86:9e:dd:32:65:68:a9: c2:c3:b9:71:7a:2d:aa:22:93:93:b1:a2:8d:47:c8: 23:b0:73:bc:1f:8a:80:e1:f9:99:70:21:1c:36:92: 7e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 128.91.0.0/16 130.91.0.0/16 158.130.0.0/16 165.123.0.0/16 192.5.44.0/24 192.84.2.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55 69 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:17:05:19:a6:9c:a4:d1:55:bf:a1:56:22:fb:1f:fa:93:96: a3:e9:42:2b:ca:ab:9c:c5:db:b0:02:8b:d1:6c:63:83:17:80: d8:47:38:2a:98:f3:cd:c6:d0:94:7b:61:9b:91:4e:99:f3:ef: 7c:dd:73:0a:10:81:73:29:b4:1a:4e:11:34:6d:e5:8a:64:df: ae:44:91:e6:6e:ac:6a:0c:53:40:18:19:9c:eb:5f:24:8b:16: b6:93:d7:f9:e7:e6:36:98:de:b7:e4:90:11:da:1a:3d:01:fd: c1:73:0a:ee:cf:44:84:e8:79:2a:fe:25:4b:cf:2d:91:b7:1b: 3d:bf:90:c2:0f:7b:e5:e7:d7:55:c8:70:d8:0e:f3:7d:08:5b: 09:61:1e:9c:1d:53:3e:d3:07:eb:9e:46:99:61:d5:19:1d:f4: ef:6e:26:5b:57:36:4b:78:8d:a9:40:16:26:3a:47:00:0a:6f: db:1e:1b:c5:8d:b2:57:bf:62:39:ef:92:3f:54:5c:cb:56:a3: 56:3c:3c:9f:44:cd:6f:f9:c4:cd:df:14:4f:ca:8d:76:42:85: ad:c2:b6:2e:1f:d2:8c:67:93:7c:d8:00:52:fc:ab:34:d5:5e: d1:63:35:c1:3d:4c:11:5b:dd:a1:70:03:1f:d6:cf:e4:3f:1c: df:bd:61:25 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEHkg1BKHwxesvPXXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcwODE5MDYzOVowLzEtMCsGA1UEAxMk MzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAordutNussP+j/JQKrSHLnZ2O3EAZ3VSKiCXK 7DZf7UUfDuEFBz7Obyjg/e8yvrfJMqnecpdi2bS/WkO2qvftciLma0lG9TfdTZ+d qbqijJwcqJmKc4vw+8K/NNf2oOl8VxVlpE4UeLhDCyyH09O9UauSGh9PxKZTlNGk QjxDA8nv3T2C4Gm/RcW5rO/xPOTxYXy2s6e393sjtUV/boR7bS2Z0P2cU9wVBKvt N9xFPfNuUwZz21EFlphqJBzgE6OBRUcfcflsP1MAspHO3UgOFufPl+Rw5HPMcYae 3TJlaKnCw7lxei2qIpOTsaKNR8gjsHO8H4qA4fmZcCEcNpJ+owIDAQABo4IENjCC BDIwHQYDVR0OBBYEFEopNMWSZnnp6eAL/n+28Ogpdl4kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z MjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzMyNDM0NmI1LTM4NzUtNDNiMC1i YjBkLTgwNTIyNzQ1NjdkNC8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0 NTY3ZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADAwCAWwMDAIJbAwMAnoIDAwClewMEAMAFLAMEAMBU AjAbBggrBgEFBQcBCAEB/wQMMAqgCDAGAgE3AgFFMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFkXBRmmnKTR Vb+hViL7H/qTlqPpQivKq5zF27ACi9FsY4MXgNhHOCqY883G0JR7YZuRTpnz73zd cwoQgXMptBpOETRt5Ypk365EkeZurGoMU0AYGZzrXySLFraT1/nn5jaY3rfkkBHa Gj0B/cFzCu7PRIToeSr+JUvPLZG3Gz2/kMIPe+Xn11XIcNgO830IWwlhHpwdUz7T B+ueRplh1Rkd9O9uJltXNkt4jalAFiY6RwAKb9seG8WNsle/Yjnvkj9UXMtWo1Y8 PJ9EzW/5xM3fFE/KjXZCha3Cti4f0oxnk3zYAFL8qzTVXtFjNcE9TBFb3aFwAx/W z+Q/HN+9YSU= -----END CERTIFICATE-----Generated at Fri Apr 19 01:24:10 2024 by rpki-client on console-fra.rpki-client.org