$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer File: 7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer (raw, json) Hash identifier: NWK/Ef3msa1rk6iQTkZaLW4YLNJfDbfSJvJYE9Ju9zk= Subject key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858440016E3C322E07011C0C90020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Nov 2023 01:45:15 +0000 Certificate not after: Fri 27 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 2013 IP: 130.19.0.0/16 IP: 131.89.0.0 -- 131.90.255.255 IP: 192.68.118.0 -- 192.68.125.255 IP: 192.80.215.0 -- 192.80.254.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:00:16:e3:c3:22:e0:70:11:c0:c9:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 25 01:45:15 2023 GMT Not After : Feb 27 01:45:15 2026 GMT Subject: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:94:73:57:38:0f:2a:ac:ad:ab:ac:97:e0:f9: af:b9:ea:79:91:6a:23:4d:ef:e4:92:f8:95:ee:22: de:6b:7d:18:0f:21:24:64:b8:87:cd:03:be:6e:52: 5b:06:74:41:2f:b0:fd:e9:85:b6:81:5c:a9:71:58: 73:f9:70:68:80:e3:6b:c7:75:b3:51:11:b6:40:0f: 2b:ae:95:9e:6b:76:1a:1b:87:4a:8e:fb:3c:de:dc: 1d:67:54:ea:f4:0f:1a:d0:06:81:eb:70:40:a2:d5: f3:8d:58:a4:de:1d:49:0e:71:6a:68:30:dc:e6:d7: 2b:46:64:25:8e:89:db:88:45:de:20:45:22:37:f9: ac:8b:b4:91:f3:4a:4f:b9:91:ac:5d:bf:82:34:76: 9a:d9:b0:36:9f:4f:e6:f9:43:d1:49:49:93:b1:0a: f9:4e:1c:1f:42:1f:62:01:7e:e0:b5:74:d7:60:57: 71:0b:f0:9e:9c:37:ab:6b:3d:97:6c:63:c5:a5:91: ad:89:e7:70:42:19:ea:2d:ed:14:fa:3f:fb:bf:10: dd:94:21:52:47:65:79:21:f8:72:77:bb:3e:75:48: 1a:8b:df:f8:78:ae:0b:79:5c:a0:b1:9e:bc:ec:61: f5:52:d2:02:82:9d:fc:f9:4b:63:4d:d9:ce:f6:f9: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 130.19.0.0/16 131.89.0.0-131.90.255.255 192.68.118.0-192.68.125.255 192.80.215.0-192.80.254.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2013 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:28:fa:5a:c4:5a:cf:eb:b6:eb:0d:33:a8:e1:42:6d:c0:0f: 11:07:7d:47:45:61:70:16:76:b9:d4:c0:f8:7b:b8:d3:64:59: 76:a3:6e:25:4f:65:bd:a7:9c:ac:be:e7:69:2e:36:10:b2:9d: a9:4f:af:75:65:57:62:c7:5b:b9:ee:b7:df:08:74:bf:e7:f0: e1:b6:03:fc:f8:86:37:3b:18:53:cf:b0:67:81:17:c3:32:28: 3e:90:0e:7e:06:08:e0:c3:76:76:e3:f8:8f:80:61:94:05:cc: 67:09:1e:f4:53:0c:2e:77:e8:bb:ea:1b:ca:03:bd:29:68:d3: 7c:fc:a6:1b:e0:71:5b:39:8a:5c:09:be:4a:17:10:8b:9e:d9: ad:99:bc:f4:77:59:32:40:a3:5b:b2:84:91:b8:f0:cf:28:4c: 1a:33:ac:43:4e:d5:2b:87:16:67:cd:e8:29:42:8e:bc:6c:10: 06:ee:2d:4a:e3:d7:63:a0:24:dc:05:53:54:00:b0:95:c8:25: 75:6b:0c:e2:05:83:af:91:38:37:98:1c:73:de:fb:5d:7f:29: c8:fc:58:b5:eb:de:63:1e:1b:44:1f:70:6a:c8:f0:11:2d:89: c7:49:57:07:1f:97:4f:f8:6b:49:a0:bb:41:45:fa:80:30:6a: 01:2d:1f:dd -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEQAFuPDIuBwEcDJACAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTEyNTAxNDUxNVoXDTI2MDIyNzAxNDUxNVowLzEtMCsGA1UEAxMk N2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipRzVzgPKqytq6yX4Pmvuep5kWojTe/kkviV 7iLea30YDyEkZLiHzQO+blJbBnRBL7D96YW2gVypcVhz+XBogONrx3WzURG2QA8r rpWea3YaG4dKjvs83twdZ1Tq9A8a0AaB63BAotXzjVik3h1JDnFqaDDc5tcrRmQl jonbiEXeIEUiN/msi7SR80pPuZGsXb+CNHaa2bA2n0/m+UPRSUmTsQr5ThwfQh9i AX7gtXTXYFdxC/CenDeraz2XbGPFpZGtiedwQhnqLe0U+j/7vxDdlCFSR2V5Ifhy d7s+dUgai9/4eK4LeVygsZ687GH1UtICgp38+UtjTdnO9vnSRQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFNnBDW3s+unEVYHWNQEewG3WcEqqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdiYTc0N2NlLTlhNGQtNDcwYy1i M2ExLWRmYzM2ZjljNzhkZC83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5 Yzc4ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MDMEAgABMC0DAwCCEzAKAwMAg1kDAwCDWjAMAwQBwER2AwQBwER8 MAwDBADAUNcDBADAUP4wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICB90wVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAYij6WsRaz+u26w0zqOFCbcAPEQd9R0VhcBZ2udTA+Hu402RZdqNuJU9lvaec rL7naS42ELKdqU+vdWVXYsdbue633wh0v+fw4bYD/PiGNzsYU8+wZ4EXwzIoPpAO fgYI4MN2duP4j4BhlAXMZwke9FMMLnfou+obygO9KWjTfPymG+BxWzmKXAm+ShcQ i57ZrZm89HdZMkCjW7KEkbjwzyhMGjOsQ07VK4cWZ83oKUKOvGwQBu4tSuPXY6Ak 3AVTVACwlcgldWsM4gWDr5E4N5gcc977XX8pyPxYteveYx4bRB9wasjwES2Jx0lX Bx+XT/hrSaC7QUX6gDBqAS0f3Q== -----END CERTIFICATE-----Generated at Wed Apr 24 14:33:55 2024 by rpki-client on console-fra.rpki-client.org