$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer File: 4696412f-57d7-49ba-b514-6b1c6ab433a4.cer (raw, json) Hash identifier: 17Zyv/kXrOmSsqzv4jfHziCgTpKx2BqDHEchBXAxmgw= Subject key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E48355AB06A8461C283DE7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Thu 14 Aug 2025 19:06:39 +0000 Subordinate resources: IP: 45.59.16.0/20 IP: 172.102.192.0/19 IP: 216.158.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:55:ab:06:a8:46:1c:28:3d:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 14 19:06:39 2025 GMT Subject: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:48:bb:e8:4c:79:28:41:b7:4f:6b:6a:0e: c3:d1:df:9d:16:16:19:62:b8:46:17:61:72:cf:1e: 0f:a4:21:fb:15:9d:ce:84:70:8f:43:ec:24:fc:71: 9f:27:39:ed:fd:33:63:b6:22:1f:4d:8f:22:4f:a0: f7:0f:f9:be:95:1e:68:10:f7:82:31:83:87:01:0e: 7d:3a:eb:ee:f1:38:75:6f:09:28:a1:42:d6:a3:aa: 58:4e:46:25:73:e0:e7:74:a4:18:11:72:f0:83:12: f0:37:8c:f9:e6:dd:95:48:1d:33:c5:c7:c4:40:bb: 21:10:3f:0b:ea:d3:b8:a4:1a:0f:32:20:f5:95:51: c2:64:39:8c:d4:93:1e:a4:c6:e0:30:92:bb:29:7f: ee:5c:32:5f:6d:5f:83:29:c2:bd:0f:1c:95:82:7e: e0:50:44:b4:0e:32:08:ff:fd:b7:99:20:b5:21:fc: 05:a7:f9:a6:fd:3e:30:23:20:5d:ac:b4:63:f0:e8: de:cf:ed:ce:73:aa:a7:1e:2d:9d:78:89:f7:76:f3: 60:46:1c:d1:12:37:4b:0e:97:d6:5f:a9:aa:9f:13: 1f:a1:79:a2:18:d7:3e:4b:61:4e:3a:9f:e9:c8:17: 11:03:f7:72:61:72:47:97:90:c7:ee:61:9e:2f:20: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.59.16.0/20 172.102.192.0/19 216.158.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9d:1f:c7:14:52:38:06:c3:12:34:e6:03:e1:11:6f:88:09: 2a:07:94:39:88:75:41:c7:95:9b:6c:ae:68:de:41:a1:9f:be: d1:a2:59:da:fa:8a:f1:2f:4a:48:e3:8c:26:ba:a7:b2:47:da: c7:1e:65:1e:2a:a9:ac:59:07:77:b3:f3:90:ea:0d:0c:67:19: 9f:67:b6:70:cf:e7:b8:86:8e:4f:9e:47:7f:92:7b:e4:19:50: aa:99:53:c2:46:29:9e:ba:d9:96:2a:2f:bc:58:3d:bf:74:22: ba:34:e4:d9:61:90:e0:3a:c1:76:cd:07:73:0c:d5:e1:34:3a: ab:82:57:14:2f:8e:0c:bb:e5:31:80:d6:c5:b2:5b:23:46:3b: 8b:7f:1e:57:e9:e4:ad:ff:31:6c:19:f6:5d:9f:f1:f3:b6:e4: 87:35:3d:a2:92:a7:a6:e9:51:2d:2c:29:b0:a7:4a:2b:55:29: 63:80:aa:71:87:08:7a:48:12:8b:a4:33:6d:70:79:ec:09:91: c1:ad:2f:2f:b3:d7:f8:64:0d:85:a4:94:8c:11:78:b5:6c:ad: 19:e7:74:63:5f:59:79:54:90:30:42:01:11:bf:14:9f:d5:ae: c0:df:1b:01:40:6a:a5:74:c9:93:0a:a5:1d:16:99:5f:37:36: d6:cc:43:1a -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEHkg1WrBqhGHCg958AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgxNDE5MDYzOVowLzEtMCsGA1UEAxMk NDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQzM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUhIu+hMeShBt09rag7D0d+dFhYZYrhGF2Fy zx4PpCH7FZ3OhHCPQ+wk/HGfJznt/TNjtiIfTY8iT6D3D/m+lR5oEPeCMYOHAQ59 Ouvu8Th1bwkooULWo6pYTkYlc+DndKQYEXLwgxLwN4z55t2VSB0zxcfEQLshED8L 6tO4pBoPMiD1lVHCZDmM1JMepMbgMJK7KX/uXDJfbV+DKcK9DxyVgn7gUES0DjII //23mSC1IfwFp/mm/T4wIyBdrLRj8Ojez+3Oc6qnHi2deIn3dvNgRhzREjdLDpfW X6mqnxMfoXmiGNc+S2FOOp/pyBcRA/dyYXJHl5DH7mGeLyA9swIDAQABo4IECzCC BAcwHQYDVR0OBBYEFAxKlImdZs8PGRKPH/ZZpIFHWDXYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ2OTY0MTJmLTU3ZDctNDliYS1i NTE0LTZiMWM2YWI0MzNhNC80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFi NDMzYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAQtOxADBAWsZsADBAXYnsAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALZ0f xxRSOAbDEjTmA+ERb4gJKgeUOYh1QceVm2yuaN5BoZ++0aJZ2vqK8S9KSOOMJrqn skfaxx5lHiqprFkHd7PzkOoNDGcZn2e2cM/nuIaOT55Hf5J75BlQqplTwkYpnrrZ liovvFg9v3QiujTk2WGQ4DrBds0HcwzV4TQ6q4JXFC+ODLvlMYDWxbJbI0Y7i38e V+nkrf8xbBn2XZ/x87bkhzU9opKnpulRLSwpsKdKK1UpY4CqcYcIekgSi6QzbXB5 7AmRwa0vL7PX+GQNhaSUjBF4tWytGed0Y19ZeVSQMEIBEb8Un9WuwN8bAUBqpXTJ kwqlHRaZXzc21sxDGg== -----END CERTIFICATE-----Generated at Fri Apr 26 11:12:33 2024 by rpki-client on console-ams.rpki-client.org