$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.cer (raw, json) Hash identifier: wgstxZbRDNaiEA9bSqo5/qk4vCSnY0Wcku6je4/cEjE= Subject key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285846959D4A49FD19C70BE4B81180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Jul 2024 00:45:22 +0000 Certificate not after: Thu 22 Oct 2026 00:45:22 +0000 Subordinate resources: AS: 399717 IP: 23.179.176.0/24 IP: 64.112.106.0/24 IP: 2602:fc7e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:95:9d:4a:49:fd:19:c7:0b:e4:b8:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 19 00:45:22 2024 GMT Not After : Oct 22 00:45:22 2026 GMT Subject: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:94:d3:45:c2:ff:d0:39:d3:aa:f6:05:7b: d1:25:8a:79:29:8c:21:f1:dd:fd:34:0c:7e:32:da: 69:3f:d0:a2:58:42:a2:4f:1b:02:3a:4d:ce:2d:e4: 21:b5:fc:22:80:70:38:52:86:b6:26:07:3b:d8:a8: 7b:c2:da:00:1b:e9:b2:9c:dc:73:ff:e1:d1:3b:5b: b0:a0:df:46:c6:9b:8a:95:d0:5e:ff:c9:1c:19:9c: 02:29:70:25:a0:5c:1c:48:e8:4e:b1:b5:5c:64:b8: c3:15:69:10:ab:e8:2c:a6:e8:56:36:74:d7:82:43: e0:dd:0f:2b:c6:bb:1c:06:b8:77:96:cc:db:8f:95: 06:f0:ad:4d:4a:ae:0a:fc:e8:95:83:59:bb:8b:7a: 71:9c:1c:c8:18:b4:8c:fb:4b:ad:fd:45:9f:25:f8: 34:a4:fe:16:be:f7:f7:f6:99:36:56:73:7a:14:22: 30:f4:03:57:73:07:6f:b8:6e:be:f8:1f:dc:f5:ac: 8e:44:4a:c2:55:1b:fc:e3:0a:eb:05:6a:62:d0:4f: 44:be:6f:d5:2d:0f:7f:95:82:64:c6:3c:71:9d:07: 04:ee:dc:95:1b:05:1e:d4:cc:fd:6d:b0:1d:9c:2a: 57:78:e4:95:29:f7:a4:f9:d9:c8:7d:2a:46:de:4d: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.179.176.0/24 64.112.106.0/24 IPv6: 2602:fc7e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399717 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:20:b2:11:e8:a6:bf:64:6c:8f:a6:a3:b6:03:6a:7c:3d:3a: f7:0c:77:58:94:1b:60:47:cb:60:18:a6:06:59:02:60:e6:7d: eb:cc:e4:00:94:04:d2:b9:8e:72:0a:fb:d1:e8:ed:b7:9f:c3: 06:7c:e7:f2:92:c3:5e:25:a1:b2:89:56:09:02:3c:d4:76:6e: 99:36:0c:63:30:57:e4:49:21:53:58:fc:35:06:64:b1:3c:b4: 62:77:b6:32:d4:47:52:4d:99:6e:e9:ef:8f:49:00:6c:1e:ab: 22:e8:3d:01:02:ed:71:d6:35:ac:6c:70:30:3d:fc:b5:a4:e8: c9:9e:b0:03:36:3f:02:dc:3f:4b:41:cf:36:2b:e9:96:8f:b0: 2f:87:28:e9:2c:cd:9c:e7:c4:d4:55:c7:80:f4:98:0f:ac:32: e4:f1:a9:e2:51:33:2b:11:69:e5:0d:93:51:b5:d0:d2:00:83: 66:e0:f2:dd:a2:c4:6f:ed:d6:f9:64:67:52:f0:97:e8:4e:89: 9e:fb:75:f5:90:41:fa:75:1c:bb:f8:dc:a0:4a:da:8d:ca:c8: e8:8a:f2:93:68:71:d8:e2:80:da:2f:55:13:f8:e5:94:2c:f3: 1e:e5:bf:18:0a:3e:a1:c6:3d:e9:f5:9a:2c:b3:d6:aa:16:02: 95:af:2f:6e -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEaVnUpJ/RnHC+S4EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDcxOTAwNDUyMloXDTI2MTAyMjAwNDUyMlowLzEtMCsGA1UEAxMk MzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdhZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqeU00XC/9A506r2BXvRJYp5KYwh8d39NAx+ MtppP9CiWEKiTxsCOk3OLeQhtfwigHA4Uoa2Jgc72Kh7wtoAG+mynNxz/+HRO1uw oN9GxpuKldBe/8kcGZwCKXAloFwcSOhOsbVcZLjDFWkQq+gspuhWNnTXgkPg3Q8r xrscBrh3lszbj5UG8K1NSq4K/OiVg1m7i3pxnBzIGLSM+0ut/UWfJfg0pP4Wvvf3 9pk2VnN6FCIw9ANXcwdvuG6++B/c9ayORErCVRv84wrrBWpi0E9Evm/VLQ9/lYJk xjxxnQcE7tyVGwUe1Mz9bbAdnCpXeOSVKfek+dnIfSpG3k2+mwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBYuEER81arPujYoA6tE4+oOrUlcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z OGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzM4YTk2YTlhLTYyNTctNGE2My1h MTQ5LTIxZjZhZDY3YWUxNS8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2 N2FlMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXs7ADBABAcGowDgQCAAIwCAMGACYC/H4AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYZZTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRILIR6Ka/ZGyPpqO2 A2p8PTr3DHdYlBtgR8tgGKYGWQJg5n3rzOQAlATSuY5yCvvR6O23n8MGfOfyksNe JaGyiVYJAjzUdm6ZNgxjMFfkSSFTWPw1BmSxPLRid7Yy1EdSTZlu6e+PSQBsHqsi 6D0BAu1x1jWsbHAwPfy1pOjJnrADNj8C3D9LQc82K+mWj7AvhyjpLM2c58TUVceA 9JgPrDLk8aniUTMrEWnlDZNRtdDSAINm4PLdosRv7db5ZGdS8JfoTome+3X1kEH6 dRy7+NygStqNysjoivKTaHHY4oDaL1UT+OWULPMe5b8YCj6hxj3p9Zoss9aqFgKV ry9u -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:27 2024 by rpki-client on console-ams.rpki-client.org