$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer (raw, json) Hash identifier: UX4QDgbMSMkXhIOjaNM1hFhGAfiRAq1fW76RM5/eInw= Subject key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858467B3A460865E0E1EBBCBC19BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Jul 2024 13:54:51 +0000 Certificate not after: Mon 12 Oct 2026 13:54:51 +0000 Subordinate resources: AS: 54579 IP: 65.255.130.0/24 IP: 65.255.144.0/20 IP: 68.68.184.0/22 IP: 76.8.144.0/20 IP: 199.36.80.0/22 IP: 2606:5780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:7b:3a:46:08:65:e0:e1:eb:bc:bc:19:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 9 13:54:51 2024 GMT Not After : Oct 12 13:54:51 2026 GMT Subject: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:35:b3:83:6b:8e:4b:a5:79:36:a1:cd:70: 92:e5:6e:db:7e:f4:c0:fa:f5:31:00:92:6a:6d:6d: f4:d2:e2:42:f1:72:da:8d:4d:f5:47:ef:20:f8:a8: 34:4f:c6:72:1e:15:59:9b:22:a9:23:16:dd:bc:2e: c8:59:f8:ff:57:9e:76:69:ec:1a:9a:fb:e6:32:d4: 6a:93:6e:cb:cb:cb:c1:26:d5:8b:17:5e:f0:6e:d3: 80:a0:0e:9e:bd:ec:84:e7:83:c8:f8:0a:96:13:15: 5f:82:29:07:25:ec:b3:cb:7e:f7:8c:e1:b8:34:d6: 02:b8:92:8d:8e:6b:16:25:5e:f0:b3:8d:95:1f:18: 82:87:8b:40:4a:20:35:9d:1e:7d:ac:ff:a5:bf:89: 50:d2:4a:55:af:37:28:3c:c6:96:e6:cf:58:59:ce: f1:ca:69:7a:07:8f:50:f3:d0:c0:20:0b:cd:76:bc: 24:b4:55:34:c9:22:db:56:d6:a9:17:fb:8c:02:27: 38:aa:09:c8:dd:f0:f2:10:b0:38:fc:d2:8b:bd:4e: f1:36:6b:5d:72:43:2f:b7:5f:63:14:cb:1d:12:76: 0a:ac:bd:ff:5d:4f:07:9e:28:60:90:78:fd:c6:6a: fc:6a:85:21:98:e5:53:19:15:55:82:be:df:05:94: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 65.255.130.0/24 65.255.144.0/20 68.68.184.0/22 76.8.144.0/20 199.36.80.0/22 IPv6: 2606:5780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54579 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:dc:eb:c3:d2:9d:bb:c4:b9:e2:04:92:57:05:71:24:5e:9a: fb:d0:36:13:e7:1d:75:7d:e9:01:57:bd:67:12:f3:5c:8c:f6: b4:f1:f8:9c:1a:8e:af:5f:45:f5:4f:a9:15:a9:89:eb:7b:ae: 27:7f:02:78:50:51:19:28:b5:c3:bc:a8:1b:69:ad:23:d7:c7: a8:52:c2:36:4b:70:56:da:c5:1c:1b:fc:da:92:56:d6:f2:4e: 62:60:91:87:8d:23:b5:06:e9:be:a0:7c:89:c2:e4:01:16:83: 82:9f:ff:ab:2a:31:6d:31:94:a9:9a:a1:ec:62:c5:6d:e5:31: e2:15:a9:ed:3b:25:d3:ce:52:89:0f:ce:db:f9:a7:37:29:fa: b6:6e:3b:a5:62:f6:d5:fe:6b:50:58:97:c0:c2:71:42:1c:8b: c1:9e:cc:56:6e:97:fc:e9:12:ba:0e:3e:e8:d3:59:75:52:75: 0d:8f:a1:c8:73:14:3b:8a:8e:ef:5d:fe:9f:e3:fa:fe:2b:0f: 11:fa:46:f9:43:60:aa:9f:3f:78:9f:53:10:0e:76:24:bb:56: eb:96:48:88:14:c2:b7:66:05:7f:8c:16:4a:0e:56:71:40:c4: 8f:e9:e6:15:bd:aa:3d:d7:92:7d:79:85:6f:d5:19:4a:6d:80: 12:fc:48:9f -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEZ7OkYIZeDh67y8GbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDcwOTEzNTQ1MVoXDTI2MTAxMjEzNTQ1MVowLzEtMCsGA1UEAxMk NGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4k1s4NrjkuleTahzXCS5W7bfvTA+vUxAJJq bW300uJC8XLajU31R+8g+Kg0T8ZyHhVZmyKpIxbdvC7IWfj/V552aewamvvmMtRq k27Ly8vBJtWLF17wbtOAoA6eveyE54PI+AqWExVfgikHJeyzy373jOG4NNYCuJKN jmsWJV7ws42VHxiCh4tASiA1nR59rP+lv4lQ0kpVrzcoPMaW5s9YWc7xyml6B49Q 89DAIAvNdrwktFU0ySLbVtapF/uMAic4qgnI3fDyELA4/NKLvU7xNmtdckMvt19j FMsdEnYKrL3/XU8HnihgkHj9xmr8aoUhmOVTGRVVgr7fBZROxwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFEwxQ0FLexh1DaWDQEIRfU2VDqMMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRjODVlNDJkLTIxNzEtNGY2ZC04 MzdmLTNmN2JhYzlkOWEzZC80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5 ZDlhM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBABB/4IDBARB/5ADBAJERLgDBARMCJADBALHJFAw DQQCAAIwBwMFACYGV4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANUzMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAHXc68PSnbvEueIEklcFcSRemvvQNhPnHXV96QFXvWcS81yM9rTx+Jwajq9f RfVPqRWpiet7rid/AnhQURkotcO8qBtprSPXx6hSwjZLcFbaxRwb/NqSVtbyTmJg kYeNI7UG6b6gfInC5AEWg4Kf/6sqMW0xlKmaoexixW3lMeIVqe07JdPOUokPztv5 pzcp+rZuO6Vi9tX+a1BYl8DCcUIci8GezFZul/zpEroOPujTWXVSdQ2PochzFDuK ju9d/p/j+v4rDxH6RvlDYKqfP3ifUxAOdiS7VuuWSIgUwrdmBX+MFkoOVnFAxI/p 5hW9qj3Xkn15hW/VGUptgBL8SJ8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:28 2024 by rpki-client on console-fra.rpki-client.org