$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer File: 74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer (raw, json) Hash identifier: Fq9tFYPOV2Rqv/py5xN3UNF/lWyJVbmFT/NpkFRev9g= Subject key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E483450736E6A429AD10D600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Mon 21 Apr 2025 19:06:39 +0000 Subordinate resources: IP: 23.247.160.0/22 IP: 2602:80c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:45:07:36:e6:a4:29:ad:10:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : Apr 21 19:06:39 2025 GMT Subject: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:b7:7e:24:68:e6:cc:ba:f1:81:f7:68:59: b0:96:66:16:54:73:1f:56:6b:f3:35:25:27:2e:8e: 5a:15:73:d7:ba:b0:12:54:6e:dd:80:4d:98:4a:f0: ed:39:52:09:0a:43:e9:6d:7e:68:9f:98:3e:c8:93: 8f:99:66:03:d9:28:82:b5:c2:e7:98:0e:b6:26:fa: ae:7c:37:ff:38:f0:74:03:79:0a:fe:23:2c:94:ce: e5:04:fd:23:ff:b3:59:65:93:76:45:e0:88:bd:95: a4:c2:14:0c:80:21:ac:11:f6:51:f3:03:79:47:89: 00:57:8c:c9:3f:39:4a:be:cf:16:53:6d:e3:69:32: a5:13:38:7d:fb:34:57:a8:5b:2e:14:e7:c4:2d:ed: 60:d9:a2:d7:44:03:48:17:cf:e7:ba:0a:7a:7a:45: f3:ea:2e:ee:3c:bf:7c:af:ab:66:ab:02:a6:4f:3b: d5:5a:a7:3e:52:fe:07:36:d6:46:e9:2d:55:f3:33: b7:20:05:35:09:23:4c:ec:1f:d9:b8:d3:b7:2b:a2: a7:f7:8b:a8:62:25:ce:c6:9e:9a:5b:48:91:0c:fe: a6:f0:65:84:c0:db:bd:da:ad:42:19:56:48:8d:3c: 08:2d:b4:af:c8:62:42:e6:79:b9:59:d3:e2:0a:4b: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.247.160.0/22 IPv6: 2602:80c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e5:c2:99:ac:17:7e:21:6b:dd:38:f1:f3:68:65:de:bb:5d: 4b:ca:76:06:db:b5:e5:8f:57:cc:78:4c:52:a5:2c:8e:2a:d3: cd:13:ea:02:a9:1c:9e:30:d0:25:55:9c:95:a0:b6:67:44:c2: e5:19:41:36:f7:f8:2d:ed:4b:ad:b5:fb:d1:ec:03:18:86:76: 1f:8c:2e:1a:19:1d:e1:fc:40:31:77:3a:6f:0c:0e:80:b3:da: f2:1f:11:60:79:ea:ae:22:a4:47:ad:26:e0:19:63:c9:d0:e9: 1d:59:8a:36:1b:08:cc:8b:93:42:ea:41:57:71:70:2c:5a:1c: a8:aa:0d:7e:9d:4f:fc:cd:22:f2:1a:9d:eb:b6:cd:37:02:5e: 72:10:52:df:bd:07:27:7a:58:0b:1e:54:6d:29:1f:5d:64:da: ed:9a:82:36:5a:2c:82:f9:55:fa:8a:92:a6:f2:41:59:93:55: 51:53:0a:79:3a:5a:84:ea:82:7a:ee:1a:89:62:45:ab:c9:eb: 87:4d:08:96:22:bd:ba:e3:ff:b2:2f:68:55:ca:cf:74:75:22: 72:32:70:17:2d:2c:23:e0:94:b3:51:c8:b6:a0:d8:5c:ec:43: 6d:b8:ca:1f:a7:0d:5c:9f:60:c9:8c:c0:87:d5:21:c1:c1:35: e9:90:4d:6c -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEHkg0UHNuakKa0Q1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDQyMTE5MDYzOVowLzEtMCsGA1UEAxMk NzRjN2YzMGUtNzBiZS00ZjhjLWJjOGYtNjBiODVkMWI2OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bm3fiRo5sy68YH3aFmwlmYWVHMfVmvzNSUn Lo5aFXPXurASVG7dgE2YSvDtOVIJCkPpbX5on5g+yJOPmWYD2SiCtcLnmA62Jvqu fDf/OPB0A3kK/iMslM7lBP0j/7NZZZN2ReCIvZWkwhQMgCGsEfZR8wN5R4kAV4zJ PzlKvs8WU23jaTKlEzh9+zRXqFsuFOfELe1g2aLXRANIF8/nugp6ekXz6i7uPL98 r6tmqwKmTzvVWqc+Uv4HNtZG6S1V8zO3IAU1CSNM7B/ZuNO3K6Kn94uoYiXOxp6a W0iRDP6m8GWEwNu92q1CGVZIjTwILbSvyGJC5nm5WdPiCkuEcQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFL0/Hd8u8E7vH141RoF8VBPhpe1DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQxYjY4ZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc0YzdmMzBlLTcwYmUtNGY4Yy1i YzhmLTYwYjg1ZDFiNjhmNy83NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQx YjY4ZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAIX96AwDgQCAAIwCAMGACYCCAwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGblwpmsF34ha9048fNoZd67XUvKdgbbteWPV8x4TFKlLI4q080T6gKpHJ4w0CVV nJWgtmdEwuUZQTb3+C3tS621+9HsAxiGdh+MLhoZHeH8QDF3Om8MDoCz2vIfEWB5 6q4ipEetJuAZY8nQ6R1ZijYbCMyLk0LqQVdxcCxaHKiqDX6dT/zNIvIaneu2zTcC XnIQUt+9Byd6WAseVG0pH11k2u2agjZaLIL5VfqKkqbyQVmTVVFTCnk6WoTqgnru GoliRavJ64dNCJYivbrj/7IvaFXKz3R1InIycBctLCPglLNRyLag2FzsQ224yh+n DVyfYMmMwIfVIcHBNemQTWw= -----END CERTIFICATE-----Generated at Thu Mar 28 16:59:50 2024 by rpki-client on console-fra.rpki-client.org