$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba3340c-f02d-4a7e-bf2e-19e70c2a9943.cer File: 7ba3340c-f02d-4a7e-bf2e-19e70c2a9943.cer (raw, json) Hash identifier: bajlwwvrGGvVDIOsC3N/kj+PHDWa0slnIGfv0ZclIbM= Subject key identifier: 17:EB:BC:4B:95:AD:06:04:2F:EA:D0:5F:27:18:4D:70:A3:E3:C7:CC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858432637D1B8EAFADCC6E5D27D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba3340c-f02d-4a7e-bf2e-19e70c2a9943/7ba3340c-f02d-4a7e-bf2e-19e70c2a9943.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba3340c-f02d-4a7e-bf2e-19e70c2a9943/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Sep 2023 00:45:23 +0000 Certificate not after: Thu 11 Dec 2025 01:45:23 +0000 Subordinate resources: AS: 400565 IP: 23.135.216.0/24 IP: 206.168.194.0/23 IP: 2602:fb83::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:26:37:d1:b8:ea:fa:dc:c6:e5:d2:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 8 00:45:23 2023 GMT Not After : Dec 11 01:45:23 2025 GMT Subject: CN=7ba3340c-f02d-4a7e-bf2e-19e70c2a9943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:f5:f5:f3:52:59:c1:3a:39:03:30:e7:7e: 14:fc:de:26:3f:28:6f:28:40:b2:d8:eb:a1:70:e2: 84:a0:5a:13:ed:ac:95:d0:5e:28:29:54:28:ad:d4: c6:63:c9:48:d4:8d:27:44:6b:54:d8:15:27:9b:50: 69:cb:22:f4:41:fe:c1:79:69:2d:10:75:32:68:86: e6:a8:1c:1c:1b:8a:2f:58:fa:95:36:b2:08:7e:34: 7f:8c:07:d6:c1:6e:51:0f:af:c7:ac:7b:d3:d7:44: 1d:51:53:0a:a7:02:44:e7:99:28:51:c9:34:bd:40: e1:a7:54:1d:3d:47:dc:22:5e:ba:d9:95:07:af:55: fa:e0:25:43:c3:e3:e7:92:7f:43:b2:f9:8e:fb:7d: 87:89:51:4b:de:00:be:b9:ae:f5:52:3b:87:91:90: dd:f3:31:3f:92:c4:55:32:77:04:b3:09:be:79:e0: a8:90:37:cd:bc:1e:27:79:88:3a:40:92:c8:38:c1: 44:c2:49:49:14:bb:a6:a0:69:a4:16:ee:41:c3:a7: de:e3:30:72:03:a4:30:d8:79:42:62:66:d2:f3:27: 41:cd:b8:20:fe:6d:35:3e:1c:93:7e:2c:40:9d:83: 5f:00:d2:b2:e0:56:6f:99:69:dd:83:7d:d5:88:2b: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EB:BC:4B:95:AD:06:04:2F:EA:D0:5F:27:18:4D:70:A3:E3:C7:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba3340c-f02d-4a7e-bf2e-19e70c2a9943/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba3340c-f02d-4a7e-bf2e-19e70c2a9943/7ba3340c-f02d-4a7e-bf2e-19e70c2a9943.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.135.216.0/24 206.168.194.0/23 IPv6: 2602:fb83::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400565 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:16:b8:fd:8b:dc:d5:54:45:58:27:1a:1f:a6:36:18:93:cf: e1:4a:cc:0b:8c:30:3c:c6:57:bd:50:2d:16:01:13:37:0d:9f: 3f:da:07:71:b5:4c:59:c7:66:f6:e4:e3:7c:0d:a5:01:26:78: 9e:f5:2f:a9:90:b2:bd:7d:f7:88:29:0b:59:b7:01:77:0c:23: c6:27:2c:bb:7c:d9:47:f7:65:38:5a:13:98:3d:50:95:1f:91: 34:55:19:f4:25:34:4e:54:01:09:e0:d4:2b:21:d1:dd:10:d7: f5:7a:7f:c2:9b:9e:21:7d:c4:de:c9:d8:9e:f9:03:0c:f7:b2: 59:9b:99:fc:b9:e2:38:84:43:b9:0c:c3:9b:1f:50:0b:30:a5: 89:18:31:1d:09:c7:36:03:6b:17:0a:4f:96:f4:a3:47:74:c5: b2:ca:3d:33:ea:34:13:fa:a4:b5:d5:8b:ab:33:e6:ab:73:03: 55:e5:22:58:fb:b6:58:88:2e:66:22:85:08:c1:51:a4:04:c0: 02:ea:07:2c:bc:cd:ae:70:66:9e:02:6c:83:8e:85:2d:04:d9: 8c:69:a9:3d:a8:ab:69:87:69:05:95:4f:25:4a:cd:d8:c5:21: 88:97:ab:91:b4:dc:80:37:fb:99:53:f6:64:0d:11:c0:e1:60: 1a:52:e8:96 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEMmN9G46vrcxuXSfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDkwODAwNDUyM1oXDTI1MTIxMTAxNDUyM1owLzEtMCsGA1UEAxMk N2JhMzM0MGMtZjAyZC00YTdlLWJmMmUtMTllNzBjMmE5OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh719fNSWcE6OQMw534U/N4mPyhvKECy2Ouh cOKEoFoT7ayV0F4oKVQordTGY8lI1I0nRGtU2BUnm1BpyyL0Qf7BeWktEHUyaIbm qBwcG4ovWPqVNrIIfjR/jAfWwW5RD6/HrHvT10QdUVMKpwJE55koUck0vUDhp1Qd PUfcIl662ZUHr1X64CVDw+Pnkn9DsvmO+32HiVFL3gC+ua71UjuHkZDd8zE/ksRV MncEswm+eeCokDfNvB4neYg6QJLIOMFEwklJFLumoGmkFu5Bw6fe4zByA6Qw2HlC YmbS8ydBzbgg/m01PhyTfixAnYNfANKy4FZvmWndg33ViCs9BQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBfrvEuVrQYEL+rQXycYTXCj48fMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 YmEzMzQwYy1mMDJkLTRhN2UtYmYyZS0xOWU3MGMyYTk5NDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdiYTMzNDBjLWYwMmQtNGE3ZS1i ZjJlLTE5ZTcwYzJhOTk0My83YmEzMzQwYy1mMDJkLTRhN2UtYmYyZS0xOWU3MGMy YTk5NDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXh9gDBAHOqMIwDgQCAAIwCAMGBCYC+4MAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYctTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXFrj9i9zVVEVYJxof pjYYk8/hSswLjDA8xle9UC0WARM3DZ8/2gdxtUxZx2b25ON8DaUBJnie9S+pkLK9 ffeIKQtZtwF3DCPGJyy7fNlH92U4WhOYPVCVH5E0VRn0JTROVAEJ4NQrIdHdENf1 en/Cm54hfcTeydie+QMM97JZm5n8ueI4hEO5DMObH1ALMKWJGDEdCcc2A2sXCk+W 9KNHdMWyyj0z6jQT+qS11YurM+arcwNV5SJY+7ZYiC5mIoUIwVGkBMAC6gcsvM2u cGaeAmyDjoUtBNmMaak9qKtph2kFlU8lSs3YxSGIl6uRtNyAN/uZU/ZkDRHA4WAa UuiW -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:35 2024 by rpki-client on console-fra.rpki-client.org