$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1.cer File: 5de35d89-662a-401a-a494-7d5da6facae1.cer (raw, json) Hash identifier: xyhJ6ZQeflmoXWi0Jazf283D9maHjqZPiMQTCns4+QU= Subject key identifier: 82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285843B498A28FD6DC7EFAA1060A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Oct 2023 00:45:14 +0000 Certificate not after: Sat 31 Jan 2026 01:45:14 +0000 Subordinate resources: AS: 3833 IP: 204.227.192.0/19 IP: 206.54.64.0/18 IP: 216.67.128.0/18 IP: 2604:1300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:b4:98:a2:8f:d6:dc:7e:fa:a1:06:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 29 00:45:14 2023 GMT Not After : Jan 31 01:45:14 2026 GMT Subject: CN=5de35d89-662a-401a-a494-7d5da6facae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:9d:61:60:00:1d:2a:fb:45:af:df:a4:23: 40:63:f7:f8:a9:86:a8:7d:8e:e5:b5:47:a9:29:c1: 63:37:99:a4:65:2a:79:df:a7:83:28:12:fd:c1:e8: 65:f0:52:82:94:86:e7:5f:70:40:6f:f2:59:60:fd: f7:30:75:74:ca:61:7e:ce:89:14:df:25:c0:fb:0c: 4f:65:bb:c8:af:99:35:ae:6b:d5:a3:8b:3c:98:bc: 68:33:51:21:5f:74:23:e7:98:9d:98:e2:3f:17:65: 98:86:c7:6d:16:97:5c:bd:80:a2:29:a1:10:24:56: 33:6e:ac:60:4b:4a:a3:3a:f8:c9:47:a0:87:a1:0d: ac:2b:e9:d6:e2:2e:77:28:21:17:c2:69:a1:2f:ea: 9b:3c:f0:9a:df:ef:38:27:58:a2:8a:d1:ed:ca:65: f4:a4:b3:35:c1:89:2f:cb:79:23:9a:82:4c:ba:b9: 70:33:62:5a:32:00:8d:2b:a6:2f:c1:91:d7:9c:24: 83:c7:0d:e6:97:86:eb:d9:0d:d0:99:40:f4:53:51: d2:55:20:19:4e:ad:3b:7c:68:8d:5d:ae:0e:3c:a4: ce:85:74:d6:49:7f:ec:0b:d7:bd:b9:2b:02:f9:7d: b0:99:bc:0e:16:40:af:dc:2d:d4:5f:da:3b:52:e2: 00:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.227.192.0/19 206.54.64.0/18 216.67.128.0/18 IPv6: 2604:1300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3833 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c8:e2:25:c3:78:29:ee:13:74:83:1d:02:ff:2c:6a:32:28: fc:7b:d5:c4:74:df:94:aa:7f:c9:5e:8f:12:11:35:17:0d:88: 43:f2:d0:d0:15:cf:50:c1:4d:f6:c9:0e:60:a4:6d:81:ae:15: d9:cd:c4:da:90:dc:23:83:79:07:f9:36:7b:99:29:f8:1e:26: 41:37:e0:47:42:4f:d9:20:3d:d7:b1:13:cb:1c:a2:1e:de:d3: 70:85:0a:c7:3e:a9:41:51:7a:c3:e6:c9:72:c4:b4:e0:fa:29: 44:92:31:d3:af:4c:32:73:71:ab:2c:6b:cd:4c:7f:7c:8c:4a: 77:a7:9f:02:4a:86:19:93:d9:17:a5:31:8b:6e:c1:fe:82:64: a2:92:17:91:38:69:89:ca:cc:3d:da:42:27:a9:e6:e0:08:b8: a3:cc:b7:5b:12:36:a4:42:42:4a:ec:c1:4d:85:50:04:ec:66: 06:65:6e:6c:1f:04:9b:07:19:a2:e2:81:b5:5d:53:7a:07:41: c7:df:12:cd:6a:1f:2e:68:ce:20:b5:7c:a2:24:06:24:b7:73: 07:f9:c2:0a:dd:b9:06:d5:8e:18:95:bd:1d:20:69:96:b3:0c: a6:b8:72:90:fa:66:37:19:6f:5d:61:2e:0b:63:8e:9b:9d:ba: 15:d9:0c:83 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEO0mKKP1tx++qEGCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTAyOTAwNDUxNFoXDTI2MDEzMTAxNDUxNFowLzEtMCsGA1UEAxMk NWRlMzVkODktNjYyYS00MDFhLWE0OTQtN2Q1ZGE2ZmFjYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW2dYWAAHSr7Ra/fpCNAY/f4qYaofY7ltUep KcFjN5mkZSp536eDKBL9wehl8FKClIbnX3BAb/JZYP33MHV0ymF+zokU3yXA+wxP ZbvIr5k1rmvVo4s8mLxoM1EhX3Qj55idmOI/F2WYhsdtFpdcvYCiKaEQJFYzbqxg S0qjOvjJR6CHoQ2sK+nW4i53KCEXwmmhL+qbPPCa3+84J1iiitHtymX0pLM1wYkv y3kjmoJMurlwM2JaMgCNK6YvwZHXnCSDxw3ml4br2Q3QmUD0U1HSVSAZTq07fGiN Xa4OPKTOhXTWSX/sC9e9uSsC+X2wmbwOFkCv3C3UX9o7UuIAQwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFILCFDJHZFMKKhCxspFa4oOdQGbdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 ZGUzNWQ4OS02NjJhLTQwMWEtYTQ5NC03ZDVkYTZmYWNhZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVkZTM1ZDg5LTY2MmEtNDAxYS1h NDk0LTdkNWRhNmZhY2FlMS81ZGUzNWQ4OS02NjJhLTQwMWEtYTQ5NC03ZDVkYTZm YWNhZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAXM48ADBAbONkADBAbYQ4AwDQQCAAIwBwMFACYE EwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICDvkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADcjiJcN4Ke4T dIMdAv8sajIo/HvVxHTflKp/yV6PEhE1Fw2IQ/LQ0BXPUMFN9skOYKRtga4V2c3E 2pDcI4N5B/k2e5kp+B4mQTfgR0JP2SA917ETyxyiHt7TcIUKxz6pQVF6w+bJcsS0 4PopRJIx069MMnNxqyxrzUx/fIxKd6efAkqGGZPZF6Uxi27B/oJkopIXkThpicrM PdpCJ6nm4Ai4o8y3WxI2pEJCSuzBTYVQBOxmBmVubB8EmwcZouKBtV1TegdBx98S zWofLmjOILV8oiQGJLdzB/nCCt25BtWOGJW9HSBplrMMprhykPpmNxlvXWEuC2OO m526FdkMgw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:56 2024 by rpki-client on console-fra.rpki-client.org