$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer File: 60853e5b-d7a9-4bc8-8250-635257ad49bd.cer (raw, json) Hash identifier: VLN7htKhsCMM4liPRztfJW7zk4wN8hYo2AXlfWb6MtY= Subject key identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858442F8C853FA1C9CBA83C17F040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Dec 2023 01:45:15 +0000 Certificate not after: Mon 16 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 11996 IP: 192.189.147.0/24 IP: 207.251.48.0/20 IP: 208.64.92.0/22 IP: 216.243.96.0/20 IP: 2605:6800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:2f:8c:85:3f:a1:c9:cb:a8:3c:17:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 12 01:45:15 2023 GMT Not After : Mar 16 00:45:15 2026 GMT Subject: CN=60853e5b-d7a9-4bc8-8250-635257ad49bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:5b:89:64:92:18:0d:a4:86:89:dd:97:0b: 81:dc:6c:e4:42:77:29:8d:d2:ae:08:cc:f3:4d:fa: ef:23:3c:b3:25:be:36:f1:5b:d1:39:7b:dc:7c:bb: 37:bf:bd:8a:d6:d5:94:f1:97:e1:7f:20:be:b0:c9: 64:71:9c:81:6a:d8:ab:ea:d0:21:f3:e6:ec:4c:bb: 73:24:e5:8e:c6:1e:83:2e:44:f2:b8:0b:0b:79:77: ea:53:39:56:c1:99:6d:8f:5f:15:7a:0d:60:f1:c7: 2e:a3:1c:4d:1e:0c:b1:5f:9d:a1:00:8f:79:33:9b: ba:82:b0:a1:fd:3d:b0:a4:ee:b7:c8:cf:97:bf:2b: 2f:08:e0:fe:d4:da:a2:67:b1:b9:81:4e:34:d8:04: 09:ac:f8:f9:4f:76:33:6c:8e:14:22:11:a7:6e:d9: 42:5b:5d:aa:c4:5d:8f:0e:3f:cf:56:01:97:db:e8: ee:40:0e:4b:3f:01:71:2b:cb:69:7d:9c:bb:e7:05: b2:be:56:61:3e:df:ce:5d:f9:ee:1d:49:2f:03:3b: 94:06:3e:35:cd:03:75:d1:e0:4c:d0:db:34:d1:e1: 76:64:af:c0:7b:80:63:a4:8a:3a:dd:d8:68:66:79: b5:af:71:17:b0:04:e1:55:f3:2b:dc:5f:9f:4e:8f: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.189.147.0/24 207.251.48.0/20 208.64.92.0/22 216.243.96.0/20 IPv6: 2605:6800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11996 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:44:9f:a8:68:16:e7:0e:0f:33:69:dc:dd:68:23:e7:59:6c: 82:a6:01:30:37:57:15:5a:05:d8:f2:a5:da:b8:76:c4:a6:08: ef:b5:1b:9f:07:98:76:5e:1a:b0:4d:a0:8e:f0:11:c6:7b:56: 5f:e3:34:10:08:da:69:c5:23:3c:e5:25:fd:05:01:b0:9a:83: 22:73:ba:cb:8e:98:fd:6a:49:d2:9c:a3:98:c4:31:a1:f5:69: 72:f3:b7:bb:9a:4e:c5:78:a5:fb:f3:52:e9:c0:61:b9:bf:d9: bd:0b:ea:a8:e9:da:c3:f9:29:70:5c:09:71:05:cb:67:5a:4b: 5b:7f:e5:a6:0c:32:fc:49:36:25:15:1e:32:02:ae:f9:5a:e1: 17:e4:17:79:12:52:3a:75:14:2e:55:02:56:4e:d4:bf:a1:6f: 90:0e:32:60:5d:0c:25:6e:69:82:fd:ab:81:40:89:90:c9:2e: b6:27:2f:a1:d2:44:3b:69:01:05:75:ee:4e:91:e7:50:2e:2e: 17:f8:5b:d3:a2:92:2e:ef:6b:e2:29:96:55:94:44:e2:df:ac: 26:0a:17:6e:d8:12:91:a2:e2:6e:5d:ef:9f:69:ab:50:e7:63: a7:c5:ab:c1:14:3d:cc:a0:f4:ad:a7:a9:ec:b7:4a:e9:c5:7c: f9:63:7d:8b -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEQvjIU/ocnLqDwX8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTIxMjAxNDUxNVoXDTI2MDMxNjAwNDUxNVowLzEtMCsGA1UEAxMk NjA4NTNlNWItZDdhOS00YmM4LTgyNTAtNjM1MjU3YWQ0OWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMpbiWSSGA2khondlwuB3GzkQncpjdKuCMzz TfrvIzyzJb428VvROXvcfLs3v72K1tWU8ZfhfyC+sMlkcZyBatir6tAh8+bsTLtz JOWOxh6DLkTyuAsLeXfqUzlWwZltj18Veg1g8ccuoxxNHgyxX52hAI95M5u6grCh /T2wpO63yM+XvysvCOD+1NqiZ7G5gU402AQJrPj5T3YzbI4UIhGnbtlCW12qxF2P Dj/PVgGX2+juQA5LPwFxK8tpfZy75wWyvlZhPt/OXfnuHUkvAzuUBj41zQN10eBM 0Ns00eF2ZK/Ae4BjpIo63dhoZnm1r3EXsAThVfMr3F+fTo9YKQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFEuq4ADwORIyjFvABCLJrA87NQ8oMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 MDg1M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUyNTdhZDQ5YmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzYwODUzZTViLWQ3YTktNGJjOC04 MjUwLTYzNTI1N2FkNDliZC82MDg1M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUyNTdh ZDQ5YmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBADAvZMDBATP+zADBALQQFwDBATY82AwDQQCAAIw BwMFACYFaAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLtwwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALUSf qGgW5w4PM2nc3Wgj51lsgqYBMDdXFVoF2PKl2rh2xKYI77UbnweYdl4asE2gjvAR xntWX+M0EAjaacUjPOUl/QUBsJqDInO6y46Y/WpJ0pyjmMQxofVpcvO3u5pOxXil +/NS6cBhub/ZvQvqqOnaw/kpcFwJcQXLZ1pLW3/lpgwy/Ek2JRUeMgKu+VrhF+QX eRJSOnUULlUCVk7Uv6FvkA4yYF0MJW5pgv2rgUCJkMkuticvodJEO2kBBXXuTpHn UC4uF/hb06KSLu9r4imWVZRE4t+sJgoXbtgSkaLibl3vn2mrUOdjp8WrwRQ9zKD0 raep7LdK6cV8+WN9iw== -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:34 2024 by rpki-client on console-fra.rpki-client.org