$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer File: 74aa5b22-bda2-4141-8bdf-98a78696dd03.cer (raw, json) Hash identifier: M+vTIZZ9viL5RvMAaWUzW8fxM401muJ1ZdvRaoRMR0g= Subject key identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858456AE61630C230C0B6E496E600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Apr 2024 00:45:21 +0000 Certificate not after: Tue 07 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 400402 IP: 23.134.168.0/24 IP: 2602:fb94::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6a:e6:16:30:c2:30:c0:b6:e4:96:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 3 00:45:21 2024 GMT Not After : Jul 7 00:45:21 2026 GMT Subject: CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:69:d0:fc:2e:8f:78:44:cb:95:5f:33:66: 1c:76:da:6a:12:fe:ea:83:51:76:57:e7:3a:8b:fb: a8:72:78:76:c3:80:90:94:59:49:42:9f:e1:63:df: 03:02:bb:da:aa:62:fb:66:e4:f0:28:1d:94:6f:47: f7:de:fc:99:b8:6f:8b:7e:6b:d2:58:73:60:3f:7f: 40:95:0e:d0:17:92:b9:99:61:85:7b:f4:75:de:b8: cf:7f:76:68:86:d1:4a:49:e7:aa:8e:cd:99:02:ab: c9:c2:4b:e5:0d:31:44:72:52:98:ce:89:22:bc:12: ab:30:cb:ef:ad:ee:32:54:f1:8c:c0:67:b5:22:b1: 4b:45:b1:34:7f:65:74:4b:eb:c9:ed:b6:c6:f2:7a: e3:e5:10:1f:3c:4c:a1:4b:ec:1f:f1:85:56:30:24: 7e:1c:74:52:05:da:08:23:a4:72:00:a0:62:8e:29: 67:87:bf:58:52:39:87:6f:07:14:30:fe:9c:cc:0d: d8:03:32:a2:0b:d0:26:df:76:40:17:4a:4e:6c:2f: 67:83:b0:3d:38:56:0a:99:26:13:3b:24:54:8f:17: d1:1f:04:51:31:c0:46:ae:59:a3:f2:e4:56:c6:76: 09:c3:7e:48:ea:cd:9f:4b:d9:8d:c2:de:1d:9b:ce: ba:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.134.168.0/24 IPv6: 2602:fb94::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400402 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b8:08:eb:a2:ca:7b:28:c6:bd:38:d3:45:bc:27:27:81:fb: d7:dc:db:c8:11:25:5b:23:40:08:f5:a9:4c:7a:1f:03:09:23: 48:8f:d3:bd:a4:ce:49:d1:39:57:ef:22:37:fd:7c:f1:09:53: c9:01:1e:e3:14:81:00:d2:20:92:66:d8:77:ed:e6:bd:b8:37: 39:06:a9:bf:f3:68:1b:3e:b5:8d:21:df:c3:96:44:22:14:06: 7f:93:59:f8:ec:ac:99:7f:e8:01:a4:8d:2b:b6:ec:5d:77:fd: f4:35:c9:31:e1:aa:91:b6:88:84:48:43:92:67:9f:b9:87:bb: 9b:5d:d9:11:72:3a:d3:59:26:63:03:bd:4a:b1:ca:cc:2f:8b: 2b:90:72:2d:2a:f7:2e:12:57:ca:ca:c7:97:b1:1c:60:13:3a: 9b:4c:e1:7b:ba:8b:29:3d:06:be:1b:41:84:54:13:2c:df:c7: f6:ff:14:3f:22:1d:2f:71:1a:9f:f1:26:04:6d:cd:26:45:dc: da:b3:2a:22:3a:a3:90:c5:f0:06:a0:9c:84:f7:7f:cc:28:5a: d9:b6:e1:d6:2b:a9:14:90:e3:84:df:57:ea:92:9c:11:f3:19: eb:34:fc:47:23:99:24:48:4a:f6:e5:70:e1:60:b1:50:ac:72: 4f:89:51:88 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEVq5hYwwjDAtuSW5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDQwMzAwNDUyMVoXDTI2MDcwNzAwNDUyMVowLzEtMCsGA1UEAxMk NzRhYTViMjItYmRhMi00MTQxLThiZGYtOThhNzg2OTZkZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBVp0Pwuj3hEy5VfM2YcdtpqEv7qg1F2V+c6 i/uocnh2w4CQlFlJQp/hY98DArvaqmL7ZuTwKB2Ub0f33vyZuG+LfmvSWHNgP39A lQ7QF5K5mWGFe/R13rjPf3ZohtFKSeeqjs2ZAqvJwkvlDTFEclKYzokivBKrMMvv re4yVPGMwGe1IrFLRbE0f2V0S+vJ7bbG8nrj5RAfPEyhS+wf8YVWMCR+HHRSBdoI I6RyAKBijilnh79YUjmHbwcUMP6czA3YAzKiC9Am33ZAF0pObC9ng7A9OFYKmSYT OyRUjxfRHwRRMcBGrlmj8uRWxnYJw35I6s2fS9mNwt4dm8669QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFN6qfbFFI0ATAb54t9r/zs/P1POvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 NGFhNWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3ODY5NmRkMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc0YWE1YjIyLWJkYTItNDE0MS04 YmRmLTk4YTc4Njk2ZGQwMy83NGFhNWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3ODY5 NmRkMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhqgwDgQCAAIwCAMGACYC+5QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYcEjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuuAjrosp7KMa9ONNFvCcngfvX 3NvIESVbI0AI9alMeh8DCSNIj9O9pM5J0TlX7yI3/XzxCVPJAR7jFIEA0iCSZth3 7ea9uDc5Bqm/82gbPrWNId/DlkQiFAZ/k1n47KyZf+gBpI0rtuxdd/30Nckx4aqR toiESEOSZ5+5h7ubXdkRcjrTWSZjA71KscrML4srkHItKvcuElfKyseXsRxgEzqb TOF7uospPQa+G0GEVBMs38f2/xQ/Ih0vcRqf8SYEbc0mRdzasyoiOqOQxfAGoJyE 93/MKFrZtuHWK6kUkOOE31fqkpwR8xnrNPxHI5kkSEr25XDhYLFQrHJPiVGI -----END CERTIFICATE-----Generated at Fri Apr 19 01:24:36 2024 by rpki-client on console-fra.rpki-client.org