$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer File: 35a72605-99bc-4c4b-995e-c01a3684dcbf.cer (raw, json) Hash identifier: Vc/tu3gASZhGi7UMaJ3C/YjuA6oRlsuLtgXYAHn9sVU= Subject key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285845DD5C1E00C6B9413EA6E61A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 May 2024 00:45:19 +0000 Certificate not after: Mon 17 Aug 2026 00:45:19 +0000 Subordinate resources: AS: 965 IP: 23.129.248.0/21 IP: 208.66.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:dd:5c:1e:00:c6:b9:41:3e:a6:e6:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 14 00:45:19 2024 GMT Not After : Aug 17 00:45:19 2026 GMT Subject: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:0e:6f:27:c2:f7:d8:1f:25:a1:34:cf:00: 23:10:01:f6:f1:9c:17:97:1d:a7:fc:bb:5b:02:0e: 03:33:31:a3:65:54:9b:a9:d6:33:c2:ac:77:b8:47: 32:4a:fc:0f:d4:ee:c5:7a:b9:34:52:72:76:30:e6: 97:7b:fe:8a:64:6c:81:35:ed:72:11:93:f2:b0:4a: 7e:06:fe:2d:d4:c8:24:57:7b:7c:7b:ae:ea:04:44: 31:73:af:99:a5:9f:46:e7:6e:c0:fb:89:88:03:df: ba:a1:41:79:59:58:0f:b1:b7:22:da:d2:f3:f2:08: ea:18:f0:cb:6a:a8:e1:fc:f5:f9:85:27:91:c6:fe: 85:b2:10:21:3d:69:b6:47:4c:6d:43:0b:e8:7b:b2: b3:31:52:fb:f7:62:95:45:8c:ac:b1:35:36:8d:79: 27:e1:bc:c8:78:19:b1:fe:c4:a5:eb:4e:ee:a9:20: 4d:41:0c:5e:77:4f:59:07:95:8b:41:1c:d0:53:c4: bb:71:15:39:77:ec:33:ec:4d:a0:f2:a4:d5:dd:d5: cd:81:37:84:43:79:5f:b7:f6:e7:de:7d:8e:22:bb: 75:ac:16:d8:e7:df:12:b4:28:05:89:80:4d:0c:9b: f1:72:ee:fe:66:a3:19:fe:22:99:04:cd:26:15:b7: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.129.248.0/21 208.66.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 965 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:08:20:bc:1e:5e:eb:af:6d:6d:87:ed:48:d4:06:e7:50:67: 5e:01:dd:29:91:c3:b4:49:78:42:c1:19:ea:c5:82:f2:5b:2b: bd:e9:bb:e6:17:95:87:11:cf:6f:c0:7f:a0:23:7f:cc:45:a0: 4d:a6:0c:0d:5c:4b:e0:de:8c:6a:68:ee:0b:f8:62:49:91:fd: 06:ec:57:21:86:3d:1a:49:e2:0a:35:49:1d:93:c1:51:0d:08: ce:73:af:5b:0f:fd:74:ed:5a:da:26:5c:a1:c4:c1:ee:23:44: d4:21:ce:4d:cc:a7:b5:50:04:37:93:02:84:3a:7e:0a:41:2c: 95:b1:53:b0:43:6b:19:a1:8a:39:35:92:d4:da:c4:42:f5:c9: a4:9a:05:0c:84:a1:c6:f0:b4:67:a3:95:a8:8e:1c:2e:d2:9a: 83:0b:71:b6:b3:31:7a:75:66:5a:c5:fb:72:18:53:fb:5c:15: b4:2a:b9:9f:ae:3e:56:9b:ad:cf:94:68:58:11:ca:72:44:f7: 3d:77:1a:71:cd:b4:33:79:01:73:98:15:76:1f:a0:b4:ef:14: 38:80:ee:20:c4:90:5a:24:4f:c2:d4:df:4d:8c:e9:65:5d:c0: a9:c3:67:00:9b:5f:14:62:8a:22:10:b8:69:9f:a1:4a:ce:b9: 4c:40:1a:fc -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEXdXB4AxrlBPqbmGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDUxNDAwNDUxOVoXDTI2MDgxNzAwNDUxOVowLzEtMCsGA1UEAxMk MzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRkY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoUObyfC99gfJaE0zwAjEAH28ZwXlx2n/Ltb Ag4DMzGjZVSbqdYzwqx3uEcySvwP1O7Ferk0UnJ2MOaXe/6KZGyBNe1yEZPysEp+ Bv4t1MgkV3t8e67qBEQxc6+ZpZ9G527A+4mIA9+6oUF5WVgPsbci2tLz8gjqGPDL aqjh/PX5hSeRxv6FshAhPWm2R0xtQwvoe7KzMVL792KVRYyssTU2jXkn4bzIeBmx /sSl607uqSBNQQxed09ZB5WLQRzQU8S7cRU5d+wz7E2g8qTV3dXNgTeEQ3lft/bn 3n2OIrt1rBbY598StCgFiYBNDJvxcu7+ZqMZ/iKZBM0mFbfQGQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFJ0nnWZXxMYo1w4TvpXNOn/XK4RQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z NWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzM1YTcyNjA1LTk5YmMtNGM0Yi05 OTVlLWMwMWEzNjg0ZGNiZi8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4 NGRjYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAMXgfgDBALQQlwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICA8UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAGQggvB5e669tbYftSNQG51BnXgHdKZHDtEl4QsEZ 6sWC8lsrvem75heVhxHPb8B/oCN/zEWgTaYMDVxL4N6MamjuC/hiSZH9BuxXIYY9 GkniCjVJHZPBUQ0IznOvWw/9dO1a2iZcocTB7iNE1CHOTcyntVAEN5MChDp+CkEs lbFTsENrGaGKOTWS1NrEQvXJpJoFDIShxvC0Z6OVqI4cLtKagwtxtrMxenVmWsX7 chhT+1wVtCq5n64+Vputz5RoWBHKckT3PXcacc20M3kBc5gVdh+gtO8UOIDuIMSQ WiRPwtTfTYzpZV3AqcNnAJtfFGKKIhC4aZ+hSs65TEAa/A== -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:26 2024 by rpki-client on console-ams.rpki-client.org