$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer File: 6008afb8-c913-426f-a72d-ea741ab1eb7a.cer (raw, json) Hash identifier: YX0w4QbdWd6CleQrMjdZbI1wOM3IXq61ei4dCRjrcf4= Subject key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285846B9E82E47933FB6DADE2C4320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Aug 2024 00:45:22 +0000 Certificate not after: Wed 04 Nov 2026 01:45:22 +0000 Subordinate resources: AS: 92 IP: 128.153.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:b9:e8:2e:47:93:3f:b6:da:de:2c:43:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 1 00:45:22 2024 GMT Not After : Nov 4 01:45:22 2026 GMT Subject: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:85:3d:a9:c6:0b:6e:26:36:36:33:3b:e3: 7f:fa:4b:a2:14:e3:89:e0:38:28:f9:24:ec:39:f0: 5e:40:43:40:45:15:3e:80:d7:4a:36:d2:c5:8a:4a: db:92:dd:e6:fc:81:8c:5b:01:96:62:ba:24:65:0f: 22:b3:c9:c5:2f:01:fc:b0:7c:73:31:4d:a2:5e:c4: 2c:25:7d:3a:26:7d:7c:23:4d:fa:75:6a:21:5c:6a: 88:c5:2f:0d:87:7f:66:90:20:22:45:38:b5:7d:b7: 2e:20:34:69:4e:76:ae:27:92:b8:92:58:ff:75:65: 2d:55:fd:7a:4f:70:40:e2:33:a7:63:26:b5:f1:d9: ab:b1:42:e4:c3:be:7e:a7:a5:97:04:f5:59:42:a6: 95:75:ce:3b:a8:91:5d:4a:5b:3d:13:64:da:b2:a5: 21:19:55:27:61:7e:ab:35:87:52:d7:d8:ec:59:b4: 72:86:a1:68:a3:8b:7f:31:2a:5e:b4:3a:23:49:d3: f7:a8:e5:23:55:8d:ec:5e:fd:e6:ce:db:d3:4f:55: 00:17:da:23:21:d4:44:77:3f:12:90:9d:f0:38:28: 86:22:ce:3a:fd:90:51:3b:7a:cc:2c:e8:57:d4:a4: e0:be:19:fa:a5:ac:cf:ce:7d:86:f3:06:b9:b0:9b: f3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 128.153.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e6:62:38:e7:f9:00:e1:85:e5:e6:fd:3d:74:7b:6c:17:05: d8:99:01:92:03:8f:46:51:2f:74:ad:2a:f5:01:c5:89:48:e9: 57:32:c2:4d:56:df:c3:d2:8b:1a:c8:72:78:8a:8f:23:2e:fc: 28:a2:fb:b6:96:6d:f0:25:a2:f9:c3:f6:99:a3:bd:03:18:d4: 38:c4:57:6f:2e:75:3f:27:0f:9c:70:6a:12:5a:bc:70:9a:1b: 66:d2:15:ea:06:4a:c2:c0:26:8b:c7:e9:e4:1e:d1:36:bf:40: 43:64:46:c0:3e:63:13:fc:af:19:d5:10:13:9b:18:dd:ad:e7: 70:68:90:5c:de:2a:cb:eb:29:b2:a5:e0:76:0f:36:b5:59:62: 8e:62:32:61:e2:0f:8e:f7:25:8c:c9:5d:09:bd:85:4e:ba:06: ef:a7:04:ef:67:9b:6a:50:4d:cf:d9:27:ff:db:27:48:87:a0: 9d:67:82:2a:96:15:68:d7:53:67:3f:3d:fb:f5:98:01:95:95: 30:cc:c6:96:9c:eb:db:2e:f3:c7:d5:12:45:3f:ba:19:49:38: cc:de:ef:e7:b4:15:07:08:33:9a:90:00:a4:17:b3:04:fc:0b: 67:05:3b:84:48:bc:13:e2:5b:b6:31:f9:84:f9:b0:fd:6e:b5: e9:bb:25:5a -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgIUAQ0Mn0MoWEa56C5Hkz+22t4sQyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDgwMTAwNDUyMloXDTI2MTEwNDAxNDUyMlowLzEtMCsGA1UEAxMk NjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFlYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBWFPanGC24mNjYzO+N/+kuiFOOJ4Dgo+STs OfBeQENARRU+gNdKNtLFikrbkt3m/IGMWwGWYrokZQ8is8nFLwH8sHxzMU2iXsQs JX06Jn18I036dWohXGqIxS8Nh39mkCAiRTi1fbcuIDRpTnauJ5K4klj/dWUtVf16 T3BA4jOnYya18dmrsULkw75+p6WXBPVZQqaVdc47qJFdSls9E2TasqUhGVUnYX6r NYdS19jsWbRyhqFoo4t/MSpetDojSdP3qOUjVY3sXv3mztvTT1UAF9ojIdREdz8S kJ3wOCiGIs46/ZBRO3rMLOhX1KTgvhn6pazPzn2G8wa5sJvzMwIDAQABo4IEGDCC BBQwHQYDVR0OBBYEFJJMmuydsVja1AawVh45n9JhSUrxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzYwMDhhZmI4LWM5MTMtNDI2Zi1h NzJkLWVhNzQxYWIxZWI3YS82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFi MWViN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCAmTAYBggrBgEFBQcBCAEB/wQJMAegBTADAgFc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAInmYjjn+QDhheXm/T10e2wXBdiZAZIDj0ZRL3StKvUBxYlI6Vcy wk1W38PSixrIcniKjyMu/Cii+7aWbfAlovnD9pmjvQMY1DjEV28udT8nD5xwahJa vHCaG2bSFeoGSsLAJovH6eQe0Ta/QENkRsA+YxP8rxnVEBObGN2t53BokFzeKsvr KbKl4HYPNrVZYo5iMmHiD473JYzJXQm9hU66Bu+nBO9nm2pQTc/ZJ//bJ0iHoJ1n giqWFWjXU2c/Pfv1mAGVlTDMxpac69su88fVEkU/uhlJOMze7+e0FQcIM5qQAKQX swT8C2cFO4RIvBPiW7Yx+YT5sP1utem7JVo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:35 2024 by rpki-client on console-ams.rpki-client.org