$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer File: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer (raw, json) Hash identifier: lKVqhjs4033QT39kvRHWEFA/Prdazo5d8k/0Hxv2qwQ= Subject key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285847EF754205D733547FC11F6380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 Nov 2024 21:54:24 +0000 Certificate not after: Sat 01 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 22413 IP: 69.173.192.0 -- 69.173.239.255 IP: 192.96.23.0/24 IP: 192.124.126.0/24 IP: 199.66.96.0/22 IP: 199.68.224.0/21 IP: 2604:f140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:75:42:05:d7:33:54:7f:c1:1f:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 19 21:54:24 2024 GMT Not After : Aug 1 00:45:20 2026 GMT Subject: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:df:74:cd:56:51:1e:01:72:47:83:9f:df: be:72:db:cd:54:56:f4:0d:d5:c2:9c:a0:84:d0:1e: 4d:df:43:f3:78:61:fe:83:5e:25:3a:64:1a:22:1f: 36:91:00:a3:57:94:dd:ae:37:5c:b6:3d:89:ee:77: fb:ee:1d:2b:1a:64:7c:b9:e4:e1:c0:4c:11:99:36: 6c:01:77:25:62:55:5f:16:a9:56:17:b7:98:fd:fd: fd:52:4f:30:c2:e5:df:37:df:a6:45:c4:ac:d3:9c: 0f:b2:9f:5b:b6:8a:14:da:61:51:ae:a8:d3:bc:3b: 65:e5:eb:df:b1:f5:36:2d:25:e5:ec:f8:61:91:cd: 25:16:90:e2:17:e4:bd:65:fa:35:d8:d7:b8:0d:13: 34:87:db:ea:3f:be:c0:ba:32:e0:2c:9c:f9:bb:5a: b5:fe:0c:47:9f:89:3c:1d:6e:f4:5c:b8:59:ad:f6: 64:22:61:7a:14:75:cf:d4:fe:e3:d9:c3:f1:d7:c7: 25:ef:ff:94:fa:19:de:a6:e1:fc:d7:56:55:e9:76: 9b:0a:36:48:9c:76:8e:aa:cd:92:25:8a:32:95:d3: 56:a4:19:c3:10:6c:99:41:21:53:7f:50:46:29:e5: 40:de:db:0e:70:e7:8a:70:fc:c2:28:df:1e:6f:3c: 1a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 69.173.192.0-69.173.239.255 192.96.23.0/24 192.124.126.0/24 199.66.96.0/22 199.68.224.0/21 IPv6: 2604:f140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22413 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:34:ac:c6:1e:40:5b:10:c4:53:96:dc:cf:3f:5e:fb:61:ce: 5a:e9:b0:af:99:3e:17:cb:77:69:01:5c:50:bd:14:65:e1:14: c4:f2:d9:8e:79:df:db:7a:1b:08:2c:53:bd:ae:af:1d:11:37: 4b:26:c6:f8:e4:a6:a8:1b:8f:a3:e5:dd:a2:c6:79:3d:32:3f: 0d:52:2d:5e:6d:fc:cb:1b:dd:f0:3a:ec:e1:4e:da:9c:5f:60: 57:3e:2f:c2:a8:4f:31:ad:f2:72:13:a4:dd:23:b5:ef:2c:cd: f2:e9:9d:30:81:64:77:54:33:c6:1a:10:77:e8:07:5a:16:6c: 67:2b:a9:d3:0e:71:11:28:39:55:e7:6f:b3:a1:1b:fc:d6:b5: 33:b2:63:9c:8e:6f:b2:2e:06:a7:d3:67:81:b9:f0:68:88:4e: b7:70:54:05:f7:fd:08:96:ff:5f:63:f6:8f:0b:9d:25:60:a4: 6f:ca:13:b4:e4:96:a1:a2:bf:1a:8b:ee:20:b1:d3:de:87:0d: 74:7f:0d:2f:d2:62:47:15:6d:39:f9:5f:fe:70:3d:4f:ee:e0: e1:c2:61:1f:1e:05:26:a5:1f:39:73:89:b7:39:fe:80:ac:80: 53:aa:41:37:57:c6:39:14:fe:03:06:85:63:8d:79:c1:01:99: cd:83:83:f7 -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWEfvdUIF1zNUf8EfY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTExOTIxNTQyNFoXDTI2MDgwMTAwNDUyMFowLzEtMCsGA1UEAxMk NWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRvfdM1WUR4BckeDn9++ctvNVFb0DdXCnKCE 0B5N30PzeGH+g14lOmQaIh82kQCjV5Tdrjdctj2J7nf77h0rGmR8ueThwEwRmTZs AXclYlVfFqlWF7eY/f39Uk8wwuXfN9+mRcSs05wPsp9btooU2mFRrqjTvDtl5evf sfU2LSXl7Phhkc0lFpDiF+S9Zfo12Ne4DRM0h9vqP77AujLgLJz5u1q1/gxHn4k8 HW70XLhZrfZkImF6FHXP1P7j2cPx18cl7/+U+hnepuH811ZV6XabCjZInHaOqs2S JYoyldNWpBnDEGyZQSFTf1BGKeVA3tsOcOeKcPzCKN8ebzwaJQIDAQABo4IESTCC BEUwHQYDVR0OBBYEFJZUZDqwHYilToDvVJ4zLs9bo1npMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVhYmE0YjdhLWRlN2ItNGU4NC1i OTEzLWExYmVkYmU1OGY5YS81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJl NThmOWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MCwEAgABMCYwDAMEBkWtwAMEBEWt4AMEAMBgFwMEAMB8fgMEAsdC YAMEA8dE4DANBAIAAjAHAwUAJgTxQDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJX jTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBQNKzGHkBbEMRTltzPP177Yc5a6bCvmT4Xy3dpAVxQvRRl4RTE 8tmOed/behsILFO9rq8dETdLJsb45KaoG4+j5d2ixnk9Mj8NUi1ebfzLG93wOuzh TtqcX2BXPi/CqE8xrfJyE6TdI7XvLM3y6Z0wgWR3VDPGGhB36AdaFmxnK6nTDnER KDlV52+zoRv81rUzsmOcjm+yLgan02eBufBoiE63cFQF9/0Ilv9fY/aPC50lYKRv yhO05Jahor8ai+4gsdPehw10fw0v0mJHFW05+V/+cD1P7uDhwmEfHgUmpR85c4m3 Of6ArIBTqkE3V8Y5FP4DBoVjjXnBAZnNg4P3 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:31 2024 by rpki-client on console-ams.rpki-client.org