$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483.cer File: 7a054d1e-8326-42a7-b1ad-02b30287b483.cer (raw, json) Hash identifier: dLxfeLrPsHEZKY2PHmjYSQ77J3Rg6bayVj5f8cgeJjI= Subject key identifier: F2:DE:B8:9E:39:0F:18:FF:F6:E9:CB:D1:1E:E3:F1:88:C9:AF:44:1D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285844B75F61449DD85FAFB3F67F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/7a054d1e-8326-42a7-b1ad-02b30287b483.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Jan 2024 17:24:15 +0000 Certificate not after: Sat 05 Apr 2025 19:06:39 +0000 Subordinate resources: AS: 62489 IP: 23.149.152.0/24 IP: 2606:b0c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:b7:5f:61:44:9d:d8:5f:af:b3:f6:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 29 17:24:15 2024 GMT Not After : Apr 5 19:06:39 2025 GMT Subject: CN=7a054d1e-8326-42a7-b1ad-02b30287b483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:aa:19:57:a1:fa:e7:f5:a6:a6:a3:23:83: 9a:21:f8:72:48:90:5a:41:a6:6e:89:00:86:59:1c: d1:25:80:34:cc:3a:f3:9e:67:13:54:82:79:a3:32: ee:84:4b:a3:68:41:b0:8c:8c:04:7a:d6:85:89:62: 13:d4:98:7c:6d:4b:5b:b4:82:25:f9:02:f7:fa:cd: 28:b0:51:75:1d:3a:7a:9d:04:b2:5b:c2:27:1e:26: 71:52:b4:7a:04:0c:40:f5:78:15:1e:ba:12:0c:62: 13:52:12:e4:c8:df:23:38:da:53:3b:0e:8b:06:a8: 93:1b:60:ff:6e:fe:b0:8d:79:71:1d:1a:41:62:b6: f2:bf:1b:af:33:e5:c6:c7:61:08:d3:d5:16:e0:ba: 0a:09:e6:53:f9:fa:aa:fc:96:33:4e:24:b5:ee:9a: 7f:07:46:1d:32:2a:a5:38:5c:e9:dd:3f:90:dc:23: 90:ee:b8:17:32:37:fb:6b:80:d9:5c:be:7d:bf:a2: 34:42:82:f0:de:e1:65:b3:e6:5f:16:31:be:6a:db: bf:6b:37:b1:f2:54:80:0a:1b:13:98:b6:75:38:50: d8:5e:15:03:06:33:96:31:4b:29:a1:c1:d4:cb:2f: 18:04:c7:9a:53:d8:52:cf:dd:3d:d7:35:f3:b0:fd: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DE:B8:9E:39:0F:18:FF:F6:E9:CB:D1:1E:E3:F1:88:C9:AF:44:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/7a054d1e-8326-42a7-b1ad-02b30287b483.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.149.152.0/24 IPv6: 2606:b0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62489 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:43:49:51:18:21:36:68:60:30:80:82:12:7e:19:f6:b3:37: 42:98:0d:fa:40:62:ed:61:12:d9:2e:f0:1a:3f:4d:67:06:33: 7c:5e:55:f2:32:d0:3e:da:b6:b3:9a:07:1a:5c:57:10:4d:89: 69:2d:41:23:f1:50:b0:cb:af:96:a9:3f:9b:7b:7d:07:90:a3: d1:27:23:49:21:da:56:d3:97:17:f0:d5:a2:69:6f:b1:bf:05: d1:64:75:42:dd:e5:e3:90:63:2a:bb:ec:61:86:3f:f4:e8:57: d3:46:a6:e3:92:dd:dd:6c:04:a9:41:9d:32:aa:83:a6:eb:7d: 1e:bb:83:13:0d:61:9e:50:db:f1:09:e1:5c:64:2e:b7:0d:ff: ff:6d:a0:77:4e:46:9e:2e:55:39:fc:94:a9:22:b1:09:23:de: d7:fa:01:0e:5b:8c:6e:f3:26:9e:64:cb:2b:78:c7:91:00:81: fb:e1:83:3f:a4:5d:aa:bd:55:5f:17:22:22:ba:be:84:7d:f8: 36:35:2b:8f:0e:8e:33:9b:4a:92:d3:f7:dd:16:fc:1b:6f:d3: 86:e4:f6:b7:83:fc:88:38:a1:d2:fb:a9:e4:84:60:28:5f:9e: 18:8d:77:df:9e:c8:ea:82:7f:1b:4d:77:03:2f:21:14:3a:20: ae:8c:87:51 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWES3X2FEndhfr7P2f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDEyOTE3MjQxNVoXDTI1MDQwNTE5MDYzOVowLzEtMCsGA1UEAxMk N2EwNTRkMWUtODMyNi00MmE3LWIxYWQtMDJiMzAyODdiNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsWqGVeh+uf1pqajI4OaIfhySJBaQaZuiQCG WRzRJYA0zDrznmcTVIJ5ozLuhEujaEGwjIwEetaFiWIT1Jh8bUtbtIIl+QL3+s0o sFF1HTp6nQSyW8InHiZxUrR6BAxA9XgVHroSDGITUhLkyN8jONpTOw6LBqiTG2D/ bv6wjXlxHRpBYrbyvxuvM+XGx2EI09UW4LoKCeZT+fqq/JYzTiS17pp/B0YdMiql OFzp3T+Q3COQ7rgXMjf7a4DZXL59v6I0QoLw3uFls+ZfFjG+atu/azex8lSAChsT mLZ1OFDYXhUDBjOWMUspocHUyy8YBMeaU9hSz9091zXzsP2oSwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPLeuJ45Dxj/9unL0R7j8YjJr0QdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 YTA1NGQxZS04MzI2LTQyYTctYjFhZC0wMmIzMDI4N2I0ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdhMDU0ZDFlLTgzMjYtNDJhNy1i MWFkLTAyYjMwMjg3YjQ4My83YTA1NGQxZS04MzI2LTQyYTctYjFhZC0wMmIzMDI4 N2I0ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXlZgwDQQCAAIwBwMFACYGsMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPQZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC1DSVEYITZoYDCAghJ+GfazN0KY DfpAYu1hEtku8Bo/TWcGM3xeVfIy0D7atrOaBxpcVxBNiWktQSPxULDLr5apP5t7 fQeQo9EnI0kh2lbTlxfw1aJpb7G/BdFkdULd5eOQYyq77GGGP/ToV9NGpuOS3d1s BKlBnTKqg6brfR67gxMNYZ5Q2/EJ4VxkLrcN//9toHdORp4uVTn8lKkisQkj3tf6 AQ5bjG7zJp5kyyt4x5EAgfvhgz+kXaq9VV8XIiK6voR9+DY1K48OjjObSpLT990W /Btv04bk9reD/Ig4odL7qeSEYChfnhiNd9+eyOqCfxtNdwMvIRQ6IK6Mh1E= -----END CERTIFICATE-----Generated at Fri Mar 29 02:30:10 2024 by rpki-client on console-ams.rpki-client.org