$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer File: 6c5be2bd-61a2-464a-be54-34e87a4a9584.cer (raw, json) Hash identifier: /qIcyq5KXXXWRMcx3JlDTy5UO3Zsol+0yk9hjPm+6Ck= Subject key identifier: 8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285845EE1C3A4F56EB11808016EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 May 2024 00:45:20 +0000 Certificate not after: Sun 23 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 31851 IP: 104.219.188.0/22 IP: 167.88.52.0/22 IP: 216.38.236.0/22 IP: 216.146.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ee:1c:3a:4f:56:eb:11:80:80:16:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 20 00:45:20 2024 GMT Not After : Aug 23 00:45:20 2026 GMT Subject: CN=6c5be2bd-61a2-464a-be54-34e87a4a9584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:aa:ac:65:9e:7b:86:22:b6:b0:fd:fb:b0: 44:4f:8a:c1:7c:df:b5:51:0a:37:23:26:f7:f5:f8: 7f:0c:04:9e:02:26:7e:74:e0:79:61:15:30:e2:0f: b7:fa:dc:6d:78:bb:1c:9c:a5:d8:e5:a3:3c:3f:1b: a2:37:a1:10:16:79:5a:2a:12:2e:31:e4:9d:79:90: a6:d1:09:ef:d8:3d:bf:6c:b0:2d:23:e1:d7:2d:dc: 73:75:6d:24:3b:e7:1a:ce:2d:48:78:0e:30:91:c8: 86:a4:39:ed:9a:d0:b3:9f:ab:6c:85:26:bd:d3:82: b1:0d:78:94:94:8c:d6:0b:fb:67:b0:dd:71:35:88: e4:01:00:31:a1:59:b9:a4:de:fd:9d:16:c3:b0:ce: 79:bf:3a:81:a1:d3:a1:03:62:8a:e7:b8:ec:6a:e5: a8:74:d7:42:16:72:00:2f:5a:68:eb:76:54:2b:2c: c4:8a:ae:fd:2c:43:6d:71:64:a3:06:54:d1:38:7b: 28:68:f6:a0:8c:f9:c9:78:c1:53:42:99:92:ca:78: 38:3c:46:32:a4:66:f7:7e:e7:bd:86:af:2c:16:f6: 21:4f:cf:a8:4b:63:be:41:4e:36:ce:8b:3f:ad:9e: 80:49:67:9a:7a:cd:14:ba:7d:7f:2e:3b:cd:3a:88: a0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.219.188.0/22 167.88.52.0/22 216.38.236.0/22 216.146.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31851 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3b:a5:a1:6c:92:e0:2e:fc:1e:f5:8e:95:6b:cc:39:6d:94: ca:15:09:07:d1:d5:71:35:9b:98:37:bc:e4:42:5e:e6:fb:66: 41:6b:a8:89:bc:03:8b:91:58:96:64:44:36:a6:4e:f7:4f:af: 91:d3:af:03:50:dd:17:08:86:97:3f:5f:8b:ee:0b:90:66:9b: 45:23:4b:44:fc:c1:ac:41:86:a8:55:40:78:c2:23:d6:c4:c6: 55:d0:17:82:de:b5:b5:b6:70:4a:66:84:c0:dd:be:a4:12:7d: 62:95:89:da:00:d5:e7:a1:ed:83:d1:3a:0a:aa:d6:69:f5:7c: ff:78:f2:5c:f4:9e:40:c2:b9:38:7e:73:b8:a6:2f:35:61:b0: 70:04:73:5d:88:89:89:47:ad:a1:43:86:74:af:b8:49:1a:14: d6:f3:a0:e1:e7:7e:61:a9:41:27:21:7c:63:f0:c1:aa:40:5e: 4e:3e:ac:d7:ed:c8:a4:00:fe:6a:77:71:e7:1a:47:15:ed:d0: e0:2a:00:2b:55:44:8a:ba:06:96:ac:99:ba:c6:79:04:6b:ff: 80:62:9c:2d:27:42:78:43:af:58:d4:46:9f:02:a2:fa:44:49: 87:aa:b5:18:b8:73:25:02:70:d3:5f:c4:d6:98:72:3f:a9:3d: d2:b2:4a:64 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEXuHDpPVusRgIAW6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDUyMDAwNDUyMFoXDTI2MDgyMzAwNDUyMFowLzEtMCsGA1UEAxMk NmM1YmUyYmQtNjFhMi00NjRhLWJlNTQtMzRlODdhNGE5NTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+OqrGWee4YitrD9+7BET4rBfN+1UQo3Iyb3 9fh/DASeAiZ+dOB5YRUw4g+3+txteLscnKXY5aM8PxuiN6EQFnlaKhIuMeSdeZCm 0Qnv2D2/bLAtI+HXLdxzdW0kO+cazi1IeA4wkciGpDntmtCzn6tshSa904KxDXiU lIzWC/tnsN1xNYjkAQAxoVm5pN79nRbDsM55vzqBodOhA2KK57jsauWodNdCFnIA L1po63ZUKyzEiq79LENtcWSjBlTROHsoaPagjPnJeMFTQpmSyng4PEYypGb3fue9 hq8sFvYhT8+oS2O+QU42zos/rZ6ASWeaes0Uun1/LjvNOoighQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFIzBQvScEQX06LB7Gn/FKsR3g9BxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 YzViZTJiZC02MWEyLTQ2NGEtYmU1NC0zNGU4N2E0YTk1ODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZjNWJlMmJkLTYxYTItNDY0YS1i ZTU0LTM0ZTg3YTRhOTU4NC82YzViZTJiZC02MWEyLTQ2NGEtYmU1NC0zNGU4N2E0 YTk1ODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAJo27wDBAKnWDQDBALYJuwDBALYkgwwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICfGswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALzuloWyS4C78HvWOlWvMOW2U yhUJB9HVcTWbmDe85EJe5vtmQWuoibwDi5FYlmRENqZO90+vkdOvA1DdFwiGlz9f i+4LkGabRSNLRPzBrEGGqFVAeMIj1sTGVdAXgt61tbZwSmaEwN2+pBJ9YpWJ2gDV 56Htg9E6CqrWafV8/3jyXPSeQMK5OH5zuKYvNWGwcARzXYiJiUetoUOGdK+4SRoU 1vOg4ed+YalBJyF8Y/DBqkBeTj6s1+3IpAD+andx5xpHFe3Q4CoAK1VEiroGlqyZ usZ5BGv/gGKcLSdCeEOvWNRGnwKi+kRJh6q1GLhzJQJw01/E1phyP6k90rJKZA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:59 2024 by rpki-client on console-fra.rpki-client.org