$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer File: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer (raw, json) Hash identifier: +gOFKBLcRbnBXe47eugXON0Ie8LP3ixrTmIodiL+rbg= Subject key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858466627A3BA9EBABDB93145B800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Jul 2024 00:45:19 +0000 Certificate not after: Mon 05 Oct 2026 00:45:19 +0000 Subordinate resources: AS: 11444 IP: 161.129.73.0/24 IP: 2620:47:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:66:27:a3:ba:9e:ba:bd:b9:31:45:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 2 00:45:19 2024 GMT Not After : Oct 5 00:45:19 2026 GMT Subject: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:36:8f:9c:89:45:08:9b:c4:c6:64:f3:a9:20: 38:8a:fa:6a:78:45:b2:e3:14:a3:8f:0f:37:60:1b: 4b:73:97:0d:fd:25:a4:50:e3:52:93:b5:30:55:a8: 02:e6:3f:f6:92:da:50:09:ce:6c:1d:26:26:ad:91: a2:9b:16:96:96:49:de:a1:a2:e2:f4:73:12:72:72: a1:01:25:87:12:f4:f3:b1:8d:23:c3:c5:b2:8f:a2: 15:9a:71:7c:b4:d9:02:60:31:3f:51:ff:53:8e:70: 44:46:86:92:7e:58:b2:c6:90:67:1d:34:f1:41:a6: 85:37:76:d9:b3:9e:66:86:01:02:4a:d9:2d:4c:95: d5:c7:bc:3b:df:25:07:23:0b:69:b8:29:8b:fb:d3: 70:49:4d:13:04:32:32:4b:07:6f:cb:c0:79:8b:e8: 40:46:f2:1c:3d:34:c5:8b:b4:e5:ca:25:0f:e0:96: c1:72:e6:dd:69:fc:4b:06:fc:13:66:cc:53:f9:cd: 94:fa:33:a4:2f:8e:2f:e1:56:a9:8c:1d:50:c4:3e: 92:9f:2e:2f:fd:c2:c4:a6:82:e7:d9:cd:4b:bf:c2: 1d:c6:6b:ab:e8:6f:4f:66:c9:ac:bf:e0:82:da:32: 4a:fd:65:a6:73:53:51:16:a3:36:f6:53:9f:3c:77: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 161.129.73.0/24 IPv6: 2620:47:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11444 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:51:e1:d9:b9:d8:92:c8:31:67:ca:55:8e:58:02:7e:13:ec: ac:f2:3e:1e:b8:42:29:2c:5b:63:f6:92:af:f5:4a:76:6f:93: 82:f8:e7:b7:9f:c8:2b:96:c2:c5:86:43:86:b1:16:c4:42:87: 4f:59:aa:bc:97:58:d1:1a:3c:e4:55:a7:35:d5:20:92:38:20: 8e:96:d5:df:79:e1:f2:af:e7:e2:9f:d1:e3:95:8a:fd:9a:f2: c6:c2:b8:73:3b:c4:bd:c4:23:44:7f:af:a1:8c:c3:8f:90:c1: 81:36:a5:9f:e6:99:1e:b7:67:43:07:d7:98:84:64:b7:54:2c: 84:1a:e9:cb:6b:dd:28:e1:f9:fa:41:a6:39:4e:7f:4b:7d:05: 04:b2:a3:c3:6d:aa:f9:53:fe:c1:61:c7:74:d3:37:20:c0:50: 85:71:7d:83:18:38:54:53:72:6a:c8:20:1d:11:50:78:92:7a: 11:ac:a8:aa:eb:67:92:88:7b:7a:f9:20:fc:cc:c9:e3:62:28: 01:62:5b:f7:77:bc:24:9b:d6:e7:2f:fe:b6:47:19:de:6c:b3: ee:81:2b:6e:ed:dd:d2:da:67:ba:b6:32:ea:2e:72:cf:94:fc: 29:e7:49:d3:a4:c3:2b:25:36:46:60:0e:28:75:7b:1c:5f:9d: 58:23:94:f1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEZmJ6O6nrq9uTFFuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDcwMjAwNDUxOVoXDTI2MTAwNTAwNDUxOVowLzEtMCsGA1UEAxMk NjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhiZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzaPnIlFCJvExmTzqSA4ivpqeEWy4xSjjw83 YBtLc5cN/SWkUONSk7UwVagC5j/2ktpQCc5sHSYmrZGimxaWlkneoaLi9HMScnKh ASWHEvTzsY0jw8Wyj6IVmnF8tNkCYDE/Uf9TjnBERoaSfliyxpBnHTTxQaaFN3bZ s55mhgECStktTJXVx7w73yUHIwtpuCmL+9NwSU0TBDIySwdvy8B5i+hARvIcPTTF i7TlyiUP4JbBcubdafxLBvwTZsxT+c2U+jOkL44v4VapjB1QxD6Sny4v/cLEpoLn 2c1Lv8Idxmur6G9PZsmsv+CC2jJK/WWmc1NRFqM29lOfPHeC8QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPcYXoi6lPHRtsEU//bP1QnFql/nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY0YTYwMDlkLTEyYjgtNGIzNC05 NWY5LWQyNjE4MGQ4YmY0Yy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBk OGJmNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAChgUkwDwQCAAIwCQMHACYgAEegADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIstDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXUeHZudiSyDFnylWOWAJ+E+ys 8j4euEIpLFtj9pKv9Up2b5OC+Oe3n8grlsLFhkOGsRbEQodPWaq8l1jRGjzkVac1 1SCSOCCOltXfeeHyr+fin9HjlYr9mvLGwrhzO8S9xCNEf6+hjMOPkMGBNqWf5pke t2dDB9eYhGS3VCyEGunLa90o4fn6QaY5Tn9LfQUEsqPDbar5U/7BYcd00zcgwFCF cX2DGDhUU3JqyCAdEVB4knoRrKiq62eSiHt6+SD8zMnjYigBYlv3d7wkm9bnL/62 RxnebLPugStu7d3S2me6tjLqLnLPlPwp50nTpMMrJTZGYA4odXscX51YI5Tx -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:36 2024 by rpki-client on console-ams.rpki-client.org