$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer File: 3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer (raw, json) Hash identifier: p5o7U/ChogjydxrJ4PVFvx2sG7aH2lHPW2ex4p2vSeQ= Subject key identifier: F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285842792159ED993624F975752B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 08 Jul 2023 00:45:16 +0000 Certificate not after: Fri 10 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 31974 IP: 208.93.72.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:79:21:59:ed:99:36:24:f9:75:75:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 8 00:45:16 2023 GMT Not After : Oct 10 00:45:16 2025 GMT Subject: CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bf:7b:c0:aa:64:9c:25:84:7c:01:73:cc:18: 0c:43:89:cf:7a:b3:a6:cb:5f:37:3e:4c:75:c7:b4: 47:b9:94:fa:db:7f:bf:9b:f5:c0:5c:0a:9b:43:5f: 75:f5:37:bf:58:41:3c:a8:69:4d:a0:4a:60:03:07: 54:45:3e:d2:74:8c:92:12:55:44:9a:b6:f3:55:de: 02:9f:2e:cd:e6:98:fd:c3:f6:a3:34:f5:a7:da:3a: aa:c3:0c:75:77:6a:41:e5:a9:13:c0:bc:3b:d4:6c: 33:4b:ab:f1:61:29:ae:37:07:4e:4d:4d:b5:48:07: 21:2c:88:a9:40:5d:34:7b:2e:40:2f:45:e9:da:2c: 70:aa:c8:c1:bd:47:28:52:61:55:b9:86:15:db:25: dd:e4:5c:b2:83:62:23:c8:79:36:cd:80:29:77:3a: b5:58:ea:da:0c:2b:a6:e3:85:ad:f8:a2:d6:c1:dc: 88:46:c4:17:60:a9:1a:4e:ba:ff:a0:6e:58:53:bd: ee:11:67:4b:ec:26:18:2c:8d:c7:30:9d:93:2d:de: df:e6:07:cc:0e:db:c5:a0:6d:09:71:5b:a4:a2:65: b2:c0:cf:1f:9c:2b:82:d2:50:ec:ba:f8:61:6e:fd: 3e:c8:c4:28:e4:28:81:d6:0f:49:c9:5b:f1:ec:4a: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 208.93.72.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31974 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a7:4c:8c:2a:a1:57:3d:90:6c:ff:5c:d8:53:34:dc:fc:d9: 0c:3a:50:76:03:93:d6:2d:b0:d4:cf:28:e1:47:59:9b:7d:36: 29:aa:40:03:ca:db:30:fd:05:c5:f3:a9:18:10:78:58:df:57: ad:ed:f3:4e:fc:f8:48:58:48:f5:ab:7b:da:6f:96:a0:45:10: af:41:d5:18:7a:f6:aa:b5:79:ef:32:fb:c3:b5:7f:92:02:f4: a1:3f:02:52:17:a2:b3:dc:35:10:85:c8:4c:68:d2:76:c5:60: 3b:25:08:75:51:e5:bf:b1:75:27:58:ed:26:b2:92:c1:71:b2: 98:e8:04:09:c2:d6:ab:e0:39:e8:b9:41:e0:ae:97:dc:dd:32: dd:fc:3d:d4:57:d9:9c:5b:88:e9:69:f4:b2:17:24:8d:38:d9: 67:dc:24:1c:a4:98:23:5b:64:c3:f0:4c:ac:0f:5b:d3:92:5d: 4b:c3:20:e7:78:74:80:eb:04:a8:f8:1d:2c:0a:50:06:29:5f: 21:87:a9:aa:7e:d5:9b:f1:af:65:b3:73:6a:1c:fb:30:d2:ae: ac:a6:cd:29:1f:96:d4:c8:d1:bd:b2:7b:8f:4a:f6:96:0c:68: 4c:2a:82:17:66:08:e6:08:08:e4:82:4b:a5:43:4b:6c:1e:66: 81:e1:02:9d -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEJ5IVntmTYk+XV1K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDcwODAwNDUxNloXDTI1MTAxMDAwNDUxNlowLzEtMCsGA1UEAxMk M2E2ZDQwOWYtZjZjNi00YmE1LWE2NzQtNmI2MzY4ZDI0NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh797wKpknCWEfAFzzBgMQ4nPerOmy183Pkx1 x7RHuZT623+/m/XAXAqbQ1919Te/WEE8qGlNoEpgAwdURT7SdIySElVEmrbzVd4C ny7N5pj9w/ajNPWn2jqqwwx1d2pB5akTwLw71GwzS6vxYSmuNwdOTU21SAchLIip QF00ey5AL0Xp2ixwqsjBvUcoUmFVuYYV2yXd5Fyyg2IjyHk2zYApdzq1WOraDCum 44Wt+KLWwdyIRsQXYKkaTrr/oG5YU73uEWdL7CYYLI3HMJ2TLd7f5gfMDtvFoG0J cVukomWywM8fnCuC0lDsuvhhbv0+yMQo5CiB1g9JyVvx7EpjeQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPbUlNY0eWQiVZkes0Nl0FjE9bBoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z YTZkNDA5Zi1mNmM2LTRiYTUtYTY3NC02YjYzNjhkMjQ3OGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzNhNmQ0MDlmLWY2YzYtNGJhNS1h Njc0LTZiNjM2OGQyNDc4YS8zYTZkNDA5Zi1mNmM2LTRiYTUtYTY3NC02YjYzNjhk MjQ3OGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQXUgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fOYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAQqdMjCqhVz2QbP9c2FM03PzZDDpQdgOT1i2w1M8o4UdZm302 KapAA8rbMP0FxfOpGBB4WN9Xre3zTvz4SFhI9at72m+WoEUQr0HVGHr2qrV57zL7 w7V/kgL0oT8CUheis9w1EIXITGjSdsVgOyUIdVHlv7F1J1jtJrKSwXGymOgECcLW q+A56LlB4K6X3N0y3fw91FfZnFuI6Wn0shckjTjZZ9wkHKSYI1tkw/BMrA9b05Jd S8Mg53h0gOsEqPgdLApQBilfIYepqn7Vm/GvZbNzahz7MNKurKbNKR+W1MjRvbJ7 j0r2lgxoTCqCF2YI5ggI5IJLpUNLbB5mgeECnQ== -----END CERTIFICATE-----Generated at Wed Apr 24 02:06:30 2024 by rpki-client on console-ams.rpki-client.org