$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer File: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer (raw, json) Hash identifier: A+5QGgEybgSVpatFzoez6wc6gHQ+QeWymIW4KgDGwj8= Subject key identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584554909CCF94225815FD306680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 Mar 2024 00:45:21 +0000 Certificate not after: Mon 29 Jun 2026 00:45:21 +0000 Subordinate resources: AS: 20149 IP: 69.72.16.0/21 IP: 98.97.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:54:90:9c:cf:94:22:58:15:fd:30:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 26 00:45:21 2024 GMT Not After : Jun 29 00:45:21 2026 GMT Subject: CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:91:51:20:6f:34:42:ab:3b:a7:aa:52:66: 63:b7:b1:f0:4e:b5:77:f9:b2:93:34:10:a3:9a:78: 50:a3:03:fb:8d:22:ef:b5:67:9e:96:86:8f:a0:72: 04:2b:54:49:98:fb:e1:56:16:65:4d:01:be:34:58: 8a:3e:ac:f3:98:16:bd:84:1a:73:34:ee:e6:c7:bd: 69:b6:4e:73:64:15:91:db:90:43:99:bc:e7:12:7f: 86:de:cc:70:f4:67:ec:1a:68:06:d9:6a:2b:96:5c: 6f:25:ec:72:c7:02:92:3a:0b:e0:33:59:62:40:4e: 8f:5d:1b:f9:7e:e8:8d:8a:14:ff:00:d1:ca:d3:35: d4:18:7c:df:00:d5:33:c1:c8:7b:a9:a8:93:5c:e7: 61:c2:fa:f8:b0:da:7f:1f:43:29:d0:d8:0b:f3:7d: b6:e6:5c:9e:02:c7:b7:ac:ae:0d:42:86:56:10:f1: 55:d9:96:b2:a5:51:7b:e2:d3:ee:8a:19:bb:8c:72: be:f0:63:b1:9d:86:ec:95:57:b5:0f:f7:e5:13:5d: 8a:a7:f5:6b:1e:e0:18:7d:a2:69:7c:ec:9f:60:8c: 33:63:89:78:5c:fa:9f:ad:8f:4e:2d:bf:4b:ff:2d: c9:75:c5:3e:3f:aa:d6:86:92:7d:9b:e5:94:c7:01: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 69.72.16.0/21 98.97.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20149 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e3:1c:cb:87:8a:d7:a4:71:a3:b2:26:5d:7a:f7:63:11:3b: 5b:65:d6:28:2a:5d:bd:a9:5e:63:aa:9a:2d:d1:4b:ea:14:12: 3d:66:2a:b9:13:c2:ac:41:40:35:4f:2a:a8:96:6b:d8:e5:87: b0:63:9f:07:e4:cc:f2:1f:a6:17:4e:33:bb:29:d5:3e:b3:82: 01:b9:55:6c:7a:34:8c:7c:ae:4a:e2:e8:14:c7:a1:d5:c5:cc: 4f:7d:0b:a5:0d:5d:03:ef:83:4c:b6:8a:51:b5:36:c1:14:82: f9:5f:60:c1:e1:13:02:78:af:08:19:40:b9:d7:21:c6:d7:bf: 05:f7:1c:30:9e:10:7e:2e:f9:c7:fd:0c:21:0a:77:e4:05:41: 6a:a8:89:67:1c:9b:80:62:1e:ce:cd:d1:c7:ae:e6:44:13:79: 5e:01:6e:33:bf:80:e4:bb:3b:f9:96:89:40:26:21:c4:78:7c: 5b:d6:ff:b6:36:f1:75:cc:e3:1c:e6:11:63:3b:6d:7e:53:16: 20:e9:b9:26:63:d5:b4:b0:e2:a1:c9:6c:6f:12:f0:c9:1a:5b: fe:8e:ac:3b:64:d2:33:7c:4b:1d:b6:ae:00:e5:16:59:12:e4: 28:2c:95:09:56:e6:b1:a0:a0:ef:d6:eb:23:dd:73:0f:f3:f1: fd:cd:c3:ca -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEVUkJzPlCJYFf0wZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDMyNjAwNDUyMVoXDTI2MDYyOTAwNDUyMVowLzEtMCsGA1UEAxMk NDk5NDUwYmQtNjQzMi00ZTVkLWEyOWYtMWMzOGMxZWExNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofqRUSBvNEKrO6eqUmZjt7HwTrV3+bKTNBCj mnhQowP7jSLvtWeeloaPoHIEK1RJmPvhVhZlTQG+NFiKPqzzmBa9hBpzNO7mx71p tk5zZBWR25BDmbznEn+G3sxw9GfsGmgG2WorllxvJexyxwKSOgvgM1liQE6PXRv5 fuiNihT/ANHK0zXUGHzfANUzwch7qaiTXOdhwvr4sNp/H0Mp0NgL83225lyeAse3 rK4NQoZWEPFV2ZaypVF74tPuihm7jHK+8GOxnYbslVe1D/flE12Kp/VrHuAYfaJp fOyfYIwzY4l4XPqfrY9OLb9L/y3JdcU+P6rWhpJ9m+WUxwFnTQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFFecff2HMAS3tEeNAzBZEF2Uk3nxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFlYTE0YzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ5OTQ1MGJkLTY0MzItNGU1ZC1h MjlmLTFjMzhjMWVhMTRjNi80OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFl YTE0YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANFSBADBAViYcAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICTrUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEASOMcy4eK16Rxo7ImXXr3YxE7W2XWKCpdvaleY6qa LdFL6hQSPWYquRPCrEFANU8qqJZr2OWHsGOfB+TM8h+mF04zuynVPrOCAblVbHo0 jHyuSuLoFMeh1cXMT30LpQ1dA++DTLaKUbU2wRSC+V9gweETAnivCBlAudchxte/ BfccMJ4Qfi75x/0MIQp35AVBaqiJZxybgGIezs3Rx67mRBN5XgFuM7+A5Ls7+ZaJ QCYhxHh8W9b/tjbxdczjHOYRYzttflMWIOm5JmPVtLDioclsbxLwyRpb/o6sO2TS M3xLHbauAOUWWRLkKCyVCVbmsaCg79brI91zD/Px/c3Dyg== -----END CERTIFICATE-----Generated at Wed Apr 24 01:57:32 2024 by rpki-client on console-fra.rpki-client.org