$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer File: 4696412f-57d7-49ba-b514-6b1c6ab433a4.cer (raw, json) Hash identifier: 0hchMrp/a/RYYWg51L8QxW5stV3VxyAaFJSpHYkv8yE= Subject key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285846E0FDC87E5B7111F48982D540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Aug 2024 00:45:25 +0000 Certificate not after: Wed 18 Nov 2026 01:45:25 +0000 Subordinate resources: IP: 45.59.16.0/20 IP: 172.102.192.0/19 IP: 216.158.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:e0:fd:c8:7e:5b:71:11:f4:89:82:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 15 00:45:25 2024 GMT Not After : Nov 18 01:45:25 2026 GMT Subject: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:48:bb:e8:4c:79:28:41:b7:4f:6b:6a:0e: c3:d1:df:9d:16:16:19:62:b8:46:17:61:72:cf:1e: 0f:a4:21:fb:15:9d:ce:84:70:8f:43:ec:24:fc:71: 9f:27:39:ed:fd:33:63:b6:22:1f:4d:8f:22:4f:a0: f7:0f:f9:be:95:1e:68:10:f7:82:31:83:87:01:0e: 7d:3a:eb:ee:f1:38:75:6f:09:28:a1:42:d6:a3:aa: 58:4e:46:25:73:e0:e7:74:a4:18:11:72:f0:83:12: f0:37:8c:f9:e6:dd:95:48:1d:33:c5:c7:c4:40:bb: 21:10:3f:0b:ea:d3:b8:a4:1a:0f:32:20:f5:95:51: c2:64:39:8c:d4:93:1e:a4:c6:e0:30:92:bb:29:7f: ee:5c:32:5f:6d:5f:83:29:c2:bd:0f:1c:95:82:7e: e0:50:44:b4:0e:32:08:ff:fd:b7:99:20:b5:21:fc: 05:a7:f9:a6:fd:3e:30:23:20:5d:ac:b4:63:f0:e8: de:cf:ed:ce:73:aa:a7:1e:2d:9d:78:89:f7:76:f3: 60:46:1c:d1:12:37:4b:0e:97:d6:5f:a9:aa:9f:13: 1f:a1:79:a2:18:d7:3e:4b:61:4e:3a:9f:e9:c8:17: 11:03:f7:72:61:72:47:97:90:c7:ee:61:9e:2f:20: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.59.16.0/20 172.102.192.0/19 216.158.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:34:1b:7b:36:bf:f2:fc:dc:e3:6a:40:3a:42:d4:b0:a3:86: 1d:11:3c:3b:39:0a:7b:90:f1:50:ac:13:a9:2a:84:88:21:4c: 22:5a:38:f9:3d:ee:6c:30:14:8a:3c:4d:4a:41:c4:b2:c3:6e: 3c:9e:96:a8:4d:0a:9d:d1:63:4d:57:e1:e7:69:6b:83:0f:02: ba:93:2d:cd:c8:3a:a4:9d:34:cf:05:1a:3c:48:da:55:40:aa: 9d:b1:06:55:83:f9:b0:64:3d:7a:51:6a:97:49:b7:64:f9:a5: 68:1c:fb:d0:a0:00:7b:e2:fb:dc:0d:d7:1e:82:29:35:13:cb: 1f:a5:e0:90:df:36:ad:ad:fd:b4:c2:40:77:67:8a:d2:6f:c0: 98:5e:82:04:c8:f8:4c:e6:8c:8c:43:61:c3:8e:39:8a:23:81: a0:6e:74:9b:32:a7:7e:8f:2f:5a:18:ba:57:d5:8f:eb:a4:9e: 50:b8:59:e8:96:01:78:4b:9f:97:9c:31:63:09:65:af:33:9b: 07:0b:a7:0b:28:16:b2:1b:10:79:f7:27:41:f0:60:c8:0a:24: c1:4b:a5:0b:d5:23:ca:1b:c7:bd:7d:c3:e0:65:2f:ab:f7:22: 20:2f:90:9f:4a:fb:47:ad:7b:91:56:7d:f8:d0:7d:f0:e0:7b: 54:45:c8:de -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEbg/ch+W3ER9ImC1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDgxNTAwNDUyNVoXDTI2MTExODAxNDUyNVowLzEtMCsGA1UEAxMk NDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQzM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUhIu+hMeShBt09rag7D0d+dFhYZYrhGF2Fy zx4PpCH7FZ3OhHCPQ+wk/HGfJznt/TNjtiIfTY8iT6D3D/m+lR5oEPeCMYOHAQ59 Ouvu8Th1bwkooULWo6pYTkYlc+DndKQYEXLwgxLwN4z55t2VSB0zxcfEQLshED8L 6tO4pBoPMiD1lVHCZDmM1JMepMbgMJK7KX/uXDJfbV+DKcK9DxyVgn7gUES0DjII //23mSC1IfwFp/mm/T4wIyBdrLRj8Ojez+3Oc6qnHi2deIn3dvNgRhzREjdLDpfW X6mqnxMfoXmiGNc+S2FOOp/pyBcRA/dyYXJHl5DH7mGeLyA9swIDAQABo4IECzCC BAcwHQYDVR0OBBYEFAxKlImdZs8PGRKPH/ZZpIFHWDXYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ2OTY0MTJmLTU3ZDctNDliYS1i NTE0LTZiMWM2YWI0MzNhNC80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFi NDMzYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAQtOxADBAWsZsADBAXYnsAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkzQb eza/8vzc42pAOkLUsKOGHRE8OzkKe5DxUKwTqSqEiCFMIlo4+T3ubDAUijxNSkHE ssNuPJ6WqE0KndFjTVfh52lrgw8CupMtzcg6pJ00zwUaPEjaVUCqnbEGVYP5sGQ9 elFql0m3ZPmlaBz70KAAe+L73A3XHoIpNRPLH6XgkN82ra39tMJAd2eK0m/AmF6C BMj4TOaMjENhw445iiOBoG50mzKnfo8vWhi6V9WP66SeULhZ6JYBeEufl5wxYwll rzObBwunCygWshsQefcnQfBgyAokwUulC9UjyhvHvX3D4GUvq/ciIC+Qn0r7R617 kVZ9+NB98OB7VEXI3g== -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:30 2024 by rpki-client on console-ams.rpki-client.org