$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.cer (raw, json) Hash identifier: fsXY9UBN3usmQ1+NaPVy0gOyTu1k9mRTcfasbzRi0D4= Subject key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285845D4FC154A68AC26F1F67F7C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 May 2024 00:45:21 +0000 Certificate not after: Fri 14 Aug 2026 00:45:21 +0000 Subordinate resources: AS: 395523 IP: 148.59.60.0/24 IP: 148.59.78.0/24 IP: 2620:2a:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d4:fc:15:4a:68:ac:26:f1:f6:7f:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 11 00:45:21 2024 GMT Not After : Aug 14 00:45:21 2026 GMT Subject: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:7a:2c:0d:1f:8d:8b:ce:ad:e8:5d:9f:90: f3:a2:dd:71:c5:3c:25:f4:02:a1:05:9a:35:d2:c6: f3:ab:91:01:c8:df:37:5d:c1:7b:f3:f5:b5:69:a0: 5e:e7:6c:8c:50:9d:e5:e0:21:b7:c7:9e:c7:f9:10: 20:37:e3:74:b2:e5:a4:11:67:c8:b7:c8:24:e4:28: 97:25:43:09:7f:dd:b3:89:7c:93:ef:5a:e2:8b:1d: 57:5b:59:7c:2a:ed:70:d7:fc:16:51:c5:d5:d6:5e: e8:a0:6c:8f:d0:0c:c2:f0:88:a0:53:0e:72:f5:35: 56:76:6a:2d:ea:62:3a:85:0f:86:a8:ec:b5:15:e3: 3d:d0:b8:a0:f3:e9:93:70:19:99:ab:f2:1f:37:15: eb:03:24:11:8b:f0:3f:52:8b:c6:91:37:41:f6:fa: b7:1e:ab:6d:92:ed:50:9e:a8:54:d1:66:85:20:ec: 7c:a6:1a:94:8b:14:39:29:82:55:b6:b7:dc:fd:f6: b9:be:6c:d1:91:bb:88:0c:aa:2b:da:34:bb:c9:c4: 4a:00:ce:3a:df:eb:f0:d1:82:c7:e7:47:4a:eb:03: 06:21:11:73:7c:4d:b1:c3:9d:e9:61:8e:4e:78:48: a5:c0:55:31:a4:07:ad:32:32:18:81:46:86:77:50: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 148.59.60.0/24 148.59.78.0/24 IPv6: 2620:2a:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395523 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0e:ef:6d:c9:e2:ab:75:a5:56:3f:d5:db:e6:c3:b9:d5:61: 84:76:86:b5:70:3c:c7:56:96:e3:6a:76:f4:0b:fd:a3:7d:dc: 9f:74:47:94:40:64:c3:97:69:8d:41:fe:49:55:59:e3:e9:5c: 6a:61:3b:61:b1:00:28:98:f9:ef:f7:a2:7e:0c:8c:ae:dd:35: cd:0b:30:ba:bc:eb:a2:ce:5c:aa:58:70:e3:24:48:8e:72:f8: c9:84:7f:c0:6c:be:d6:0b:3a:fe:13:31:ec:ba:53:96:26:6a: d4:60:d6:ed:fa:0b:11:ca:10:34:37:a8:a0:6e:b2:db:47:24: d2:e7:17:9a:be:1c:69:46:d3:35:e2:e9:5b:04:48:5d:f0:89: d9:2c:77:cf:6d:01:d5:a6:48:61:90:fb:14:13:cf:e0:ff:60: 12:b1:d4:4a:05:db:0d:81:a7:fe:74:4a:a1:7a:40:02:00:bc: d4:f2:f4:38:5d:ab:ab:6d:6f:9f:88:5a:a8:36:63:0e:cc:88: ec:a0:97:b9:f9:f2:2b:c9:bf:71:17:41:b5:2d:11:7c:ef:d4: 65:b5:5a:cc:4b:b2:59:f2:e9:51:21:18:f0:58:0e:bd:2a:93: e5:45:07:f0:5f:77:1f:e6:bf:d4:c3:5f:ae:e8:2b:26:9b:9e: 00:bd:f1:88 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEXU/BVKaKwm8fZ/fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDUxMTAwNDUyMVoXDTI2MDgxNDAwNDUyMVowLzEtMCsGA1UEAxMk M2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4MTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0B6LA0fjYvOrehdn5Dzot1xxTwl9AKhBZo1 0sbzq5EByN83XcF78/W1aaBe52yMUJ3l4CG3x57H+RAgN+N0suWkEWfIt8gk5CiX JUMJf92ziXyT71riix1XW1l8Ku1w1/wWUcXV1l7ooGyP0AzC8IigUw5y9TVWdmot 6mI6hQ+GqOy1FeM90Lig8+mTcBmZq/IfNxXrAyQRi/A/UovGkTdB9vq3Hqttku1Q nqhU0WaFIOx8phqUixQ5KYJVtrfc/fa5vmzRkbuIDKor2jS7ycRKAM463+vw0YLH 50dK6wMGIRFzfE2xw53pYY5OeEilwFUxpAetMjIYgUaGd1DfzwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFIvOQPFePuOVPDVCtgQ8PtFhBzcjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z YTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzNhNjM2YWZkLWVjZTUtNGUyMy1h NTRmLWM0M2UwZmMwODEyNC8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZj MDgxMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBACUOzwDBACUO04wDwQCAAIwCQMHACYgACqgADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGCQMwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFg7vbcniq3WlVj/V 2+bDudVhhHaGtXA8x1aW42p29Av9o33cn3RHlEBkw5dpjUH+SVVZ4+lcamE7YbEA KJj57/eifgyMrt01zQswurzros5cqlhw4yRIjnL4yYR/wGy+1gs6/hMx7LpTliZq 1GDW7foLEcoQNDeooG6y20ck0ucXmr4caUbTNeLpWwRIXfCJ2Sx3z20B1aZIYZD7 FBPP4P9gErHUSgXbDYGn/nRKoXpAAgC81PL0OF2rq21vn4haqDZjDsyI7KCXufny K8m/cRdBtS0RfO/UZbVazEuyWfLpUSEY8FgOvSqT5UUH8F93H+a/1MNfrugrJpue AL3xiA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:27 2024 by rpki-client on console-ams.rpki-client.org