$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer File: 4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer (raw, json) Hash identifier: Ce5Y5LtJV4AbSJKBonjH+/+g1qYY0TFx4XhHmGLaYG4= Subject key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285843C28E0F36DFB4A6CD3AE6FA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Nov 2023 00:45:15 +0000 Certificate not after: Thu 05 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 394449 IP: 199.68.53.0/24 IP: 2604:3dc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:c2:8e:0f:36:df:b4:a6:cd:3a:e6:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 3 00:45:15 2023 GMT Not After : Feb 5 01:45:15 2026 GMT Subject: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:e0:f0:44:d5:74:92:58:f0:62:75:e6:99: 35:82:c7:20:ff:29:5e:23:f0:bf:19:43:59:f4:e7: b3:ec:d8:aa:c6:74:eb:75:70:2f:79:76:47:b3:d8: 16:e1:7a:a2:53:84:c8:ec:0e:2f:e0:5e:08:31:de: ca:90:f5:5a:0e:c1:d1:fd:b5:07:69:00:45:9d:7f: 67:55:c8:cb:3e:21:ff:93:88:67:3d:e9:ed:e4:4c: 81:81:c0:7b:5d:d6:5d:d9:dc:40:05:24:4c:d2:2a: f8:b5:85:97:dd:9f:66:f8:b2:10:8f:59:49:26:f9: e4:8c:5e:d5:3b:72:75:f8:c0:08:75:2c:01:01:9c: 04:5a:fc:37:cc:93:3f:c0:03:aa:4a:af:35:ac:56: 82:45:24:85:76:c5:e2:23:a9:45:52:11:22:ae:66: 7d:1e:58:c0:49:6b:9e:b0:4c:db:0d:e6:7e:97:d7: 82:21:fc:1a:06:11:52:dc:cc:7e:de:c9:0e:1f:8c: 20:2d:c7:77:06:e6:29:0a:c3:e6:5c:b7:e7:38:3a: 08:e6:8f:90:cf:18:c1:1c:2b:96:d2:87:b8:d7:d8: b2:a0:47:35:88:48:55:80:ce:93:c6:ab:5b:f5:a6: 4f:e2:fd:82:ea:30:1b:87:af:5b:d5:a4:8a:26:0c: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 199.68.53.0/24 IPv6: 2604:3dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394449 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1c:3d:0e:cf:a7:bc:34:ea:c3:e0:2e:dc:5a:a1:59:46:45: 59:09:92:84:1c:af:01:19:d1:e4:3a:c3:8a:c2:85:c7:1f:64: 57:8a:92:ca:ef:26:09:bf:3b:42:6f:0c:ee:79:4f:4b:32:d5: 62:c6:d5:34:46:42:52:4a:21:df:19:b9:96:e4:0f:93:11:c8: c3:0c:c0:f5:8f:16:5a:ee:cc:28:82:7c:54:17:33:14:71:4e: a2:90:92:b2:56:6c:0e:c6:6a:59:19:4d:44:66:37:c3:7c:49: 80:88:56:5b:9b:37:d7:ea:eb:9c:39:1f:7e:76:81:dd:0a:b6: f6:13:f4:48:a4:0a:cb:8c:33:20:e1:9d:3e:0e:b7:20:e4:d0: 42:a2:48:9d:6e:0e:45:7c:4d:15:f7:0b:e0:5a:ed:db:12:44: 80:9c:26:dc:a0:21:ce:b8:af:60:ca:05:17:60:b2:f0:1a:32: 3a:6f:e5:8a:56:12:ba:18:63:14:08:60:19:05:e2:a3:7d:a0: 40:c3:72:98:0c:86:df:06:e7:26:8f:cf:ce:f6:a3:b8:fc:1a: 1c:0a:2f:3d:bc:90:d2:4e:dc:68:40:16:8a:65:8e:99:63:a2: cb:4f:4b:14:da:85:3e:7b:7c:b1:2d:d0:b6:41:a1:3a:f5:e7: 72:ff:eb:af -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEPCjg8237SmzTrm+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTEwMzAwNDUxNVoXDTI2MDIwNTAxNDUxNVowLzEtMCsGA1UEAxMk NGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMxOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSzg8ETVdJJY8GJ15pk1gscg/yleI/C/GUNZ 9Oez7NiqxnTrdXAveXZHs9gW4XqiU4TI7A4v4F4IMd7KkPVaDsHR/bUHaQBFnX9n VcjLPiH/k4hnPent5EyBgcB7XdZd2dxABSRM0ir4tYWX3Z9m+LIQj1lJJvnkjF7V O3J1+MAIdSwBAZwEWvw3zJM/wAOqSq81rFaCRSSFdsXiI6lFUhEirmZ9HljASWue sEzbDeZ+l9eCIfwaBhFS3Mx+3skOH4wgLcd3BuYpCsPmXLfnODoI5o+QzxjBHCuW 0oe419iyoEc1iEhVgM6Txqtb9aZP4v2C6jAbh69b1aSKJgxjrQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBoIAVGC+OgwQ+dqs0XNVHKktM38MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRlODdkODNmLWI1MGMtNGE2NS05 ZDlhLWMyODQ1OGZjMTk3OS80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThm YzE5NzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADHRDUwDQQCAAIwBwMFACYEPcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgTRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFwcPQ7Pp7w06sPgLtxaoVlGRVkJ koQcrwEZ0eQ6w4rChccfZFeKksrvJgm/O0JvDO55T0sy1WLG1TRGQlJKId8ZuZbk D5MRyMMMwPWPFlruzCiCfFQXMxRxTqKQkrJWbA7GalkZTURmN8N8SYCIVlubN9fq 65w5H352gd0KtvYT9EikCsuMMyDhnT4OtyDk0EKiSJ1uDkV8TRX3C+Ba7dsSRICc JtygIc64r2DKBRdgsvAaMjpv5YpWEroYYxQIYBkF4qN9oEDDcpgMht8G5yaPz872 o7j8GhwKLz28kNJO3GhAFopljpljostPSxTahT57fLEt0LZBoTr153L/668= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:49 2024 by rpki-client on console-fra.rpki-client.org