$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer File: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer (raw, json) Hash identifier: MnjgNJL+1BNDSZD3XyUhuSkFfNPtamSmc5ERQ3b4Xvo= Subject key identifier: 92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858446FC23F75735772E2E32C0320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Jan 2024 01:45:15 +0000 Certificate not after: Wed 08 Apr 2026 00:45:15 +0000 Subordinate resources: AS: 396052 IP: 139.60.128.0/20 IP: 139.180.232.0/21 IP: 198.17.52.0/24 IP: 208.69.48.0/21 IP: 2604:e240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:6f:c2:3f:75:73:57:72:e2:e3:2c:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 4 01:45:15 2024 GMT Not After : Apr 8 00:45:15 2026 GMT Subject: CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:c0:d1:9b:07:d4:c1:b4:35:4e:54:59:ed: 42:21:34:8a:70:bb:e4:64:1d:2d:32:d6:cf:cf:44: 45:af:25:f2:3b:73:c7:50:95:bf:ee:54:d6:15:86: 88:44:59:26:d5:0d:95:47:10:d7:4c:78:9b:69:1c: eb:f3:74:84:d5:2a:66:21:ff:01:e2:64:e8:71:3c: b2:51:52:66:5c:6f:d0:ff:27:dd:37:78:72:43:48: c4:bf:d4:33:02:7b:df:6a:6d:01:4b:72:b6:3b:09: 96:c4:e1:3d:98:62:9f:66:41:b6:3d:50:f3:da:ec: dd:53:b3:e5:c4:fb:93:05:69:79:92:b2:ce:d1:60: 90:f3:ca:5b:eb:3e:ca:e8:29:a7:a5:0f:e2:df:5c: 53:9a:e2:fc:a9:55:72:e6:4f:70:91:74:67:d4:d8: e4:17:ec:68:30:b9:30:61:29:a7:20:e6:5c:da:a4: 77:e9:4e:81:97:bb:47:53:16:d9:45:5c:9d:e1:b3: ab:7f:20:4a:35:15:02:ef:cc:f0:50:cc:46:37:cf: 47:0b:9a:66:f3:46:c6:a0:90:fa:fe:b4:7c:47:b8: 0c:3d:ef:1e:b4:cb:b2:14:fa:5e:56:8c:19:14:57: 15:8a:ab:cf:e8:68:f0:94:d9:2e:31:74:8c:09:02: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 139.60.128.0/20 139.180.232.0/21 198.17.52.0/24 208.69.48.0/21 IPv6: 2604:e240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396052 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f2:79:c7:5f:7d:55:89:37:d1:f4:5e:58:3b:81:0d:6c:ec: fe:20:a7:e9:74:7d:b3:35:f0:23:12:f5:fb:e0:f6:51:98:6d: 48:03:5e:e5:16:fe:95:49:d4:c2:cf:eb:03:af:0f:ee:33:15: 2c:33:9e:8d:d1:42:b2:6e:dd:78:de:11:bd:4c:80:5d:45:22: ba:cb:9e:f5:19:75:0c:5e:5c:05:56:2b:76:60:6d:ec:4e:e0: d0:88:00:52:f9:fb:10:79:69:e1:e3:b9:17:2c:b9:36:da:9c: a8:29:16:dd:1c:53:48:b7:5d:83:0e:5c:66:39:9f:0b:f2:62: dd:2c:a0:ce:20:68:d8:17:26:41:fb:bf:0f:39:6b:42:9e:3d: a3:62:9c:47:b8:81:79:e5:a0:12:71:61:39:04:26:33:c2:81: 8a:2c:fe:8a:a1:ad:e1:23:ab:81:6b:39:4f:13:c0:7a:9f:69: 56:cf:30:3c:f3:b1:88:7b:40:5d:68:bb:71:85:91:ab:e9:42: 94:5d:53:bc:35:34:4f:86:65:ca:a2:3a:12:54:e5:27:e4:88: 18:ba:20:26:49:85:cb:bc:86:58:9c:ab:51:aa:50:d7:6d:cc: d8:f5:67:b3:f5:33:db:46:cb:d7:d9:65:e5:9b:c5:70:37:ce: 2d:49:1f:3c -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWERvwj91c1dy4uMsAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDEwNDAxNDUxNVoXDTI2MDQwODAwNDUxNVowLzEtMCsGA1UEAxMk M2NjYjllZDAtNzg3MC00YTRhLWJmMjgtY2I4NmJjYTQ5MTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviPA0ZsH1MG0NU5UWe1CITSKcLvkZB0tMtbP z0RFryXyO3PHUJW/7lTWFYaIRFkm1Q2VRxDXTHibaRzr83SE1SpmIf8B4mTocTyy UVJmXG/Q/yfdN3hyQ0jEv9QzAnvfam0BS3K2OwmWxOE9mGKfZkG2PVDz2uzdU7Pl xPuTBWl5krLO0WCQ88pb6z7K6CmnpQ/i31xTmuL8qVVy5k9wkXRn1NjkF+xoMLkw YSmnIOZc2qR36U6Bl7tHUxbZRVyd4bOrfyBKNRUC78zwUMxGN89HC5pm80bGoJD6 /rR8R7gMPe8etMuyFPpeVowZFFcViqvP6GjwlNkuMXSMCQLd+QIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFJKofjbhKuO5Aq3Ne83qQu+xjSAiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z Y2NiOWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2YmNhNDkxMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzNjY2I5ZWQwLTc4NzAtNGE0YS1i ZjI4LWNiODZiY2E0OTEzNy8zY2NiOWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2YmNh NDkxMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBASLPIADBAOLtOgDBADGETQDBAPQRTAwDQQCAAIw BwMFACYE4kAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgsUMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD7y ecdffVWJN9H0Xlg7gQ1s7P4gp+l0fbM18CMS9fvg9lGYbUgDXuUW/pVJ1MLP6wOv D+4zFSwzno3RQrJu3XjeEb1MgF1FIrrLnvUZdQxeXAVWK3ZgbexO4NCIAFL5+xB5 aeHjuRcsuTbanKgpFt0cU0i3XYMOXGY5nwvyYt0soM4gaNgXJkH7vw85a0KePaNi nEe4gXnloBJxYTkEJjPCgYos/oqhreEjq4FrOU8TwHqfaVbPMDzzsYh7QF1ou3GF kavpQpRdU7w1NE+GZcqiOhJU5SfkiBi6ICZJhcu8hlicq1GqUNdtzNj1Z7P1M9tG y9fZZeWbxXA3zi1JHzw= -----END CERTIFICATE-----Generated at Sat Apr 20 02:48:07 2024 by rpki-client on console-ams.rpki-client.org