$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer (raw, json) Hash identifier: QLLsxqPgrpWRr5l5bydrrCNOtwd5UONjJRHH2QZZ168= Subject key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858474B13C9A7773E170E8F2DFA20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Sep 2024 00:45:26 +0000 Certificate not after: Sat 26 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 64210 IP: 137.57.0.0/16 IP: 146.152.0.0/16 IP: 192.55.32.0 -- 192.55.45.255 IP: 192.55.233.0/24 IP: 204.128.183.0/24 IP: 204.130.196.0/24 IP: 2620:104:9000::/44 IP: 2620:148::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:13:c9:a7:77:3e:17:0e:8f:2d:fa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 22 00:45:26 2024 GMT Not After : Dec 26 01:45:26 2026 GMT Subject: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:dc:1a:dc:66:8a:c6:df:f3:a5:e6:d6:7b: 27:ee:98:12:ef:ba:90:21:7b:af:69:f3:92:e2:c6: b7:9d:6d:08:e2:42:3b:1c:2a:14:d1:30:5d:22:07: 57:28:a7:61:f3:73:b2:74:06:d2:ef:33:f5:74:ea: 81:79:ce:4a:0a:30:89:57:b1:21:bf:f3:41:71:dd: e9:a4:95:8a:e6:83:54:dc:5c:e0:71:aa:36:c5:7f: 06:5e:1d:92:07:7b:95:45:63:c0:b5:2a:91:72:99: e4:a3:b0:be:be:50:29:1a:28:fe:d1:08:5e:f4:4f: 9a:25:35:24:2b:bd:68:b2:e0:81:50:28:c4:c1:e3: ee:3b:fc:0e:d0:91:5c:88:be:74:08:f1:26:3f:69: 18:dc:04:fd:8c:2c:17:f2:f5:9c:1f:fc:69:b4:50: 51:46:4e:aa:21:bc:13:7d:d7:88:04:6d:06:2c:e5: a9:cd:02:12:ac:20:85:ba:bc:42:4f:5a:41:cf:59: 68:5f:da:6f:1b:b1:2d:16:b1:d0:a1:b8:0e:bb:0c: ae:18:17:15:1e:b4:a4:e9:f2:aa:ad:c8:49:28:8e: c3:35:27:bf:81:50:b8:14:4d:65:09:24:dd:4f:ab: 9d:00:b1:78:6d:4b:2e:af:d0:2c:82:d5:32:1d:9f: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 137.57.0.0/16 146.152.0.0/16 192.55.32.0-192.55.45.255 192.55.233.0/24 204.128.183.0/24 204.130.196.0/24 IPv6: 2620:104:9000::/44 2620:148::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64210 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d6:68:1a:99:80:04:45:2f:4f:14:2a:fb:31:52:f9:68:e6: 9b:79:7f:83:8d:d9:ce:aa:6b:14:87:e0:07:90:45:e6:ef:26: 73:84:f8:0f:4d:db:56:86:80:75:91:4c:cc:6f:27:19:5e:fe: f9:4e:fe:c2:ad:6f:c6:7f:0b:9a:ce:51:4d:49:43:6f:1b:1f: f8:fe:69:11:cd:f0:ee:64:63:ad:d5:94:d4:24:80:ee:b2:d9: 85:29:4e:4c:88:33:91:2d:41:f2:98:da:70:9c:2e:85:02:1d: c2:bd:65:4b:dc:38:79:d4:b5:4d:87:6e:e2:d6:6a:0e:6f:e4: de:76:67:84:5b:56:26:81:36:c4:a6:8d:41:74:93:69:c3:f6: 13:97:57:a8:3c:33:02:4f:ae:f6:80:03:91:a4:31:1b:03:c5: c0:47:01:38:34:a6:07:40:5f:98:ff:c6:4b:c2:fa:06:bb:10: 9b:f5:6b:99:66:18:58:44:1a:fc:5a:a1:3f:5b:4f:0f:17:0c: ab:64:08:66:e3:50:8d:c0:52:c2:c2:6e:a7:b6:64:9a:55:08: 05:c5:b5:d5:29:ea:8b:9d:11:f0:0b:a4:dd:c4:db:39:ae:ae: b8:9a:f5:1f:97:cb:74:1a:e9:87:c2:06:99:82:50:3d:b5:b5: 09:09:cf:fd -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEdLE8mndz4XDo8t+iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDkyMjAwNDUyNloXDTI2MTIyNjAxNDUyNlowLzEtMCsGA1UEAxMk NzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzcGtxmisbf86Xm1nsn7pgS77qQIXuvafOS 4sa3nW0I4kI7HCoU0TBdIgdXKKdh83OydAbS7zP1dOqBec5KCjCJV7Ehv/NBcd3p pJWK5oNU3Fzgcao2xX8GXh2SB3uVRWPAtSqRcpnko7C+vlApGij+0Qhe9E+aJTUk K71osuCBUCjEwePuO/wO0JFciL50CPEmP2kY3AT9jCwX8vWcH/xptFBRRk6qIbwT fdeIBG0GLOWpzQISrCCFurxCT1pBz1loX9pvG7EtFrHQobgOuwyuGBcVHrSk6fKq rchJKI7DNSe/gVC4FE1lCSTdT6udALF4bUsur9AsgtUyHZ/zmQIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFFIt1muHBQab4kQ+jUHLtTfMODGXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzcwNGE3NjFmLWI3MWEtNGZhMi1i MGU3LWRiNTI3OGUyM2RjMy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhl MjNkYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDAEAgABMCoDAwCJOQMDAJKYMAwDBAXANyADBAHANywDBADAN+kD BADMgLcDBADMgsQwFwQCAAIwEQMHBCYgAQSQAAMGBCYgAUgAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwD60jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAx1mgamYAERS9PFCr7MVL5aOabeX+D jdnOqmsUh+AHkEXm7yZzhPgPTdtWhoB1kUzMbycZXv75Tv7CrW/GfwuazlFNSUNv Gx/4/mkRzfDuZGOt1ZTUJIDustmFKU5MiDORLUHymNpwnC6FAh3CvWVL3Dh51LVN h27i1moOb+TedmeEW1YmgTbEpo1BdJNpw/YTl1eoPDMCT672gAORpDEbA8XARwE4 NKYHQF+Y/8ZLwvoGuxCb9WuZZhhYRBr8WqE/W08PFwyrZAhm41CNwFLCwm6ntmSa VQgFxbXVKeqLnRHwC6TdxNs5rq64mvUfl8t0GumHwgaZglA9tbUJCc/9 -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:59 2024 by rpki-client on console-fra.rpki-client.org