$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer File: 458edb4b-8474-44dc-8841-30a6c66f33d7.cer (raw, json) Hash identifier: i7m03Fgvo50FsSIcd+rr8D9BcGc/aAedlPEcnm82vTw= Subject key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858441C01B98A904A4AB3C286E6D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Dec 2023 01:45:14 +0000 Certificate not after: Mon 09 Mar 2026 00:45:14 +0000 Subordinate resources: AS: 395831 AS: 399742 IP: 158.115.128.0/19 IP: 209.206.48.0/20 IP: 216.157.128.0/20 IP: 2606:6940::/32 IP: 2606:7bc0::/32 IP: 2620:12f:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:1c:01:b9:8a:90:4a:4a:b3:c2:86:e6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 5 01:45:14 2023 GMT Not After : Mar 9 00:45:14 2026 GMT Subject: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:7a:93:99:d5:cf:a4:e1:86:f3:5f:e4:2b: 22:ff:f6:25:ba:00:c7:7e:9a:11:fb:4e:57:97:80: 83:1a:7e:3f:8b:85:9a:19:ee:f6:63:c5:60:2a:89: 0b:19:89:55:4a:11:1f:9b:d5:5c:ab:17:d3:1d:70: 03:5e:2a:6c:99:d5:8a:aa:e2:70:db:b2:b3:65:ec: c8:d1:73:8b:46:95:56:e9:f0:5c:23:d1:32:c7:b7: 28:ac:9f:8a:88:0d:00:31:72:f2:3d:e9:06:aa:54: aa:93:fa:03:b0:11:b9:f7:b2:5d:8b:3e:08:1f:2a: ea:d8:ce:ab:48:ee:9f:b8:1e:ff:4e:18:29:c6:77: bb:71:db:7e:62:0a:23:cf:39:31:b1:c7:eb:7d:85: ee:11:81:b9:73:c4:53:3d:ec:ed:cd:24:81:6f:80: 9d:f2:ae:6a:75:6e:ee:4f:d6:20:df:39:38:18:cb: f4:b4:e2:f1:67:f4:20:3d:cc:b7:1e:19:bd:5a:a8: 4d:cd:2c:3a:7c:02:3a:ed:4b:89:14:f7:42:0c:12: 27:91:45:1f:3f:7c:22:fa:f6:f9:ac:0c:98:63:49: df:87:98:2d:27:37:b2:59:fd:27:c9:9c:44:c4:48: bf:91:fc:2d:4b:17:30:d0:d3:6a:ac:9e:30:c5:c6: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 158.115.128.0/19 209.206.48.0/20 216.157.128.0/20 IPv6: 2606:6940::/32 2606:7bc0::/32 2620:12f:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395831 399742 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:1c:7b:25:04:31:4e:37:b0:c6:1c:14:15:11:0c:39:5d:1c: 9b:d8:e6:60:78:6f:5f:85:c1:5a:ee:f1:0e:ef:31:a8:a5:e8: 37:a4:1f:33:f3:e7:77:7c:53:53:24:57:26:56:ee:65:1d:29: 56:aa:58:a1:aa:b0:a0:dd:7a:2f:3c:65:16:03:8c:13:e0:40: 9a:b8:0a:eb:3e:4e:28:a4:4b:47:87:5c:24:2c:13:74:d5:84: f6:63:be:1d:44:cc:a1:0a:15:e3:17:c3:0c:7e:4b:c7:3a:27: 80:db:43:2f:0b:54:10:0c:55:f1:b3:1c:4e:b7:28:36:00:ae: a9:07:27:2a:33:28:e7:4a:34:6e:38:4c:94:45:37:d4:cd:20: 90:b6:bf:cd:e8:56:99:35:57:02:49:63:73:71:94:6a:61:d9: 78:6f:fd:80:b3:8b:91:bb:1e:c9:83:96:1b:98:57:ec:af:3b: 85:66:ec:dc:12:b1:41:af:f0:b0:07:e8:d3:3c:c4:b9:49:69: dd:dd:df:07:e3:2d:b1:1a:f2:e8:a1:7f:67:50:d7:09:1f:54: 0d:b7:36:c9:15:4e:05:02:a7:7e:93:62:ea:f0:5f:13:77:94: 2d:63:90:78:94:d6:01:55:e3:45:39:dd:e5:2a:cf:c8:58:0d: a2:7f:e2:23 -----BEGIN CERTIFICATE----- MIIHOTCCBiGgAwIBAgIUAQ0Mn0MoWEQcAbmKkEpKs8KG5tgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTIwNTAxNDUxNFoXDTI2MDMwOTAwNDUxNFowLzEtMCsGA1UEAxMk NDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYzM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk16k5nVz6ThhvNf5Csi//YlugDHfpoR+05X l4CDGn4/i4WaGe72Y8VgKokLGYlVShEfm9VcqxfTHXADXipsmdWKquJw27KzZezI 0XOLRpVW6fBcI9Eyx7corJ+KiA0AMXLyPekGqlSqk/oDsBG597Jdiz4IHyrq2M6r SO6fuB7/Thgpxne7cdt+YgojzzkxscfrfYXuEYG5c8RTPeztzSSBb4Cd8q5qdW7u T9Yg3zk4GMv0tOLxZ/QgPcy3Hhm9WqhNzSw6fAI67UuJFPdCDBInkUUfP3wi+vb5 rAyYY0nfh5gtJzeyWf0nyZxExEi/kfwtSxcw0NNqrJ4wxcYkZQIDAQABo4IESzCC BEcwHQYDVR0OBBYEFCRS+K1JvltSuab/wkEpkT7ny/GSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ1OGVkYjRiLTg0NzQtNDRkYy04 ODQxLTMwYTZjNjZmMzNkNy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2 ZjMzZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwSgYIKwYBBQUH AQcBAf8EOzA5MBgEAgABMBIDBAWec4ADBATRzjADBATYnYAwHQQCAAIwFwMFACYG aUADBQAmBnvAAwcEJiABL8AAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwYKNwID Bhl+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGIceyUEMU43sMYcFBURDDldHJvY5mB4b1+FwVru8Q7vMail 6DekHzPz53d8U1MkVyZW7mUdKVaqWKGqsKDdei88ZRYDjBPgQJq4Cus+TiikS0eH XCQsE3TVhPZjvh1EzKEKFeMXwwx+S8c6J4DbQy8LVBAMVfGzHE63KDYArqkHJyoz KOdKNG44TJRFN9TNIJC2v83oVpk1VwJJY3NxlGph2Xhv/YCzi5G7HsmDlhuYV+yv O4Vm7NwSsUGv8LAH6NM8xLlJad3d3wfjLbEa8uihf2dQ1wkfVA23NskVTgUCp36T YurwXxN3lC1jkHiU1gFV40U53eUqz8hYDaJ/4iM= -----END CERTIFICATE-----Generated at Thu Apr 25 21:27:27 2024 by rpki-client on console-ams.rpki-client.org