$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15.cer File: 64ec5258-02d3-4bd3-af76-7496ec09cb15.cer (raw, json) Hash identifier: QjLBqq4uSDxdxQCrb6lT0dfd4zRYV0/YGsnJM3V08zw= Subject key identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858481C92EC977D49ECB144F74380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Dec 2024 01:45:33 +0000 Certificate not after: Thu 11 Mar 2027 01:45:33 +0000 Subordinate resources: AS: 63375 AS: 399897 IP: 23.187.80.0/24 IP: 192.34.112.0/23 IP: 216.146.16.0/22 IP: 2606:6fc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:92:ec:97:7d:49:ec:b1:44:f7:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 6 01:45:33 2024 GMT Not After : Mar 11 01:45:33 2027 GMT Subject: CN=64ec5258-02d3-4bd3-af76-7496ec09cb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:c1:b7:95:13:c8:60:c2:c2:3a:53:d3:12: 37:ca:63:5f:83:9b:36:97:e0:a4:ea:35:84:ce:17: 0d:c8:86:ac:64:c0:85:7b:8e:1e:a0:f6:cf:c7:54: 78:42:d7:b0:4e:2a:0c:84:47:f0:e6:bf:6f:02:7f: 5a:40:a1:47:be:5f:6f:d7:59:ce:74:9e:19:28:ba: e7:34:42:4b:09:7f:70:a5:d7:64:d4:80:d7:c3:aa: 9e:4b:6a:39:91:f5:a4:33:57:b4:83:d7:55:53:b7: 74:4b:2c:03:ad:6f:ad:60:35:fb:fa:c4:7e:96:b8: 16:3b:95:77:f1:99:bc:b2:a9:a6:df:c6:b9:8f:e6: bd:8b:fd:6c:fd:e1:b8:e7:3a:80:38:ef:c7:fa:a1: 6b:b7:3c:07:0d:49:f2:02:59:8f:23:c0:5d:5c:a1: b1:5d:c9:1d:8a:1e:99:1b:cc:40:27:31:1b:b2:73: 52:fb:d4:fa:52:8c:ea:a4:69:1e:6c:29:9b:85:f6: 7d:b4:2b:a9:0f:6e:1b:26:c2:80:8b:93:ce:e1:e0: 75:94:56:79:ba:a0:ac:22:03:b3:a8:9c:5e:f3:0a: 1a:30:fc:e7:8c:2d:d3:aa:02:71:74:59:b8:f2:ba: 52:7c:b1:c7:60:86:18:19:2d:9b:5a:cf:23:01:75: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:26:E1:4E:E0:54:4B:F6:C3:E0:F2:14:45:44:EA:0B:24:FB:D5:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64ec5258-02d3-4bd3-af76-7496ec09cb15/64ec5258-02d3-4bd3-af76-7496ec09cb15.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.187.80.0/24 192.34.112.0/23 216.146.16.0/22 IPv6: 2606:6fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63375 399897 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:97:6f:0c:1c:eb:13:50:18:41:f9:0a:be:93:b1:ba:bf:ca: 6b:54:f4:c8:1c:c5:2d:76:27:4f:5f:a7:00:9f:1c:6e:4e:ee: f1:be:9d:92:e8:96:4c:f3:dc:b7:5a:ab:9e:da:31:f7:fd:69: 9a:be:ed:93:e5:b6:b6:49:a2:7d:e1:56:8d:79:f4:7e:44:32: 7b:e5:c1:7d:2b:d5:2b:49:76:d2:a6:33:55:be:bb:12:9a:51: 51:88:08:1a:e2:98:6c:63:8e:e5:d6:69:07:10:c2:56:93:d3: 80:00:35:76:b7:83:c9:69:4f:64:34:74:27:7d:6a:d4:5d:2d: fd:bb:cc:0d:d8:02:2d:e7:63:ad:86:75:fe:cd:df:84:f2:69: 36:07:79:7b:a3:e5:4e:a3:1c:c5:5f:e7:53:d9:0a:a5:19:ea: 5f:92:0e:79:45:28:73:82:ee:af:47:4f:1b:86:13:db:d5:ec: fa:38:eb:e1:39:b2:e8:0d:57:41:da:55:61:90:50:79:1d:18: d5:a8:65:b5:e5:a4:7b:8f:3f:17:f0:15:4e:8a:a1:8a:29:56: c6:19:ba:0c:f7:ad:4d:e8:03:80:aa:79:a0:bf:31:a4:87:a9: 37:22:a7:64:79:8c:ac:0a:28:37:20:02:9a:13:a8:57:00:13: d8:b2:f1:89 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEgckuyXfUnssUT3Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTIwNjAxNDUzM1oXDTI3MDMxMTAxNDUzM1owLzEtMCsGA1UEAxMk NjRlYzUyNTgtMDJkMy00YmQzLWFmNzYtNzQ5NmVjMDljYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gLBt5UTyGDCwjpT0xI3ymNfg5s2l+Ck6jWE zhcNyIasZMCFe44eoPbPx1R4QtewTioMhEfw5r9vAn9aQKFHvl9v11nOdJ4ZKLrn NEJLCX9wpddk1IDXw6qeS2o5kfWkM1e0g9dVU7d0SywDrW+tYDX7+sR+lrgWO5V3 8Zm8sqmm38a5j+a9i/1s/eG45zqAOO/H+qFrtzwHDUnyAlmPI8BdXKGxXckdih6Z G8xAJzEbsnNS+9T6UozqpGkebCmbhfZ9tCupD24bJsKAi5PO4eB1lFZ5uqCsIgOz qJxe8woaMPznjC3TqgJxdFm48rpSfLHHYIYYGS2bWs8jAXV12QIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFD8m4U7gVEv2w+DyFEVE6gsk+9UnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 NGVjNTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2ZWMwOWNiMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY0ZWM1MjU4LTAyZDMtNGJkMy1h Zjc2LTc0OTZlYzA5Y2IxNS82NGVjNTI1OC0wMmQzLTRiZDMtYWY3Ni03NDk2ZWMw OWNiMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXu1ADBAHAInADBALYkhAwDQQCAAIwBwMFACYG b8AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAPePAgMGGhkwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMZdv DBzrE1AYQfkKvpOxur/Ka1T0yBzFLXYnT1+nAJ8cbk7u8b6dkuiWTPPct1qrntox 9/1pmr7tk+W2tkmifeFWjXn0fkQye+XBfSvVK0l20qYzVb67EppRUYgIGuKYbGOO 5dZpBxDCVpPTgAA1dreDyWlPZDR0J31q1F0t/bvMDdgCLedjrYZ1/s3fhPJpNgd5 e6PlTqMcxV/nU9kKpRnqX5IOeUUoc4Lur0dPG4YT29Xs+jjr4Tmy6A1XQdpVYZBQ eR0Y1ahlteWke48/F/AVToqhiilWxhm6DPetTegDgKp5oL8xpIepNyKnZHmMrAoo NyACmhOoVwAT2LLxiQ== -----END CERTIFICATE-----Generated at Tue Apr 8 17:09:33 2025 by rpki-client