$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer File: 7d31536a-f667-4473-abbf-040b249fa39f.cer (raw, json) Hash identifier: Nn4BNEK/BhlxvcDfyd7SkTR3iYi37Boj5PpNkMR7fac= Subject key identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285845ADE6805DCFBC38CD0AF80880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Apr 2024 00:45:21 +0000 Certificate not after: Fri 31 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 399892 IP: 216.73.152.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ad:e6:80:5d:cf:bc:38:cd:0a:f8:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 27 00:45:21 2024 GMT Not After : Jul 31 00:45:21 2026 GMT Subject: CN=7d31536a-f667-4473-abbf-040b249fa39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:d5:3c:07:23:c7:39:7e:b0:56:ac:e1:ce: 3a:aa:35:c2:2c:ba:0f:c7:9e:bd:70:a5:4c:b8:0f: 59:4f:44:35:53:18:d1:42:93:5f:91:ba:53:18:3d: ac:9b:e7:4f:db:3c:0b:6b:8a:9b:1e:13:bd:64:0e: 58:29:08:cd:14:86:da:16:e7:9b:2a:c6:36:aa:5a: 70:04:9f:96:14:78:21:79:e3:8d:51:6d:f3:54:bc: 3d:fc:c4:1c:06:90:f7:84:9b:47:4a:76:63:42:ad: 2e:c4:fc:aa:a4:9b:eb:fc:29:5e:5d:e0:85:ab:9e: fd:dd:b9:1a:74:dd:f7:13:06:ba:db:6c:65:38:5b: 04:e9:f5:79:25:40:33:76:63:9d:27:22:8c:8d:a8: 50:8a:39:39:25:94:94:fa:75:28:85:c3:a9:9c:be: d4:05:10:85:1a:76:b1:a4:90:8e:79:35:fd:24:31: e6:4c:06:84:a7:06:bf:f9:16:75:66:30:40:7d:1c: c6:61:ad:ce:4b:80:77:d7:09:cb:a1:fd:2c:34:c3: 90:7f:ea:35:49:6f:a1:c8:8a:9f:00:ba:8a:35:31: 6c:84:16:2b:cd:df:af:7c:2f:f6:b0:42:d2:eb:14: c4:65:67:b6:f5:ef:8a:57:b7:0c:dc:d3:87:1d:46: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 216.73.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399892 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1c:29:0a:6b:d8:d7:d2:5c:ab:58:0f:65:ec:55:4c:73:58: 02:3a:e2:51:b9:8d:ed:7a:14:a3:40:22:f5:a3:37:d6:15:12: b0:c7:ff:67:d1:41:44:7f:88:70:05:e2:eb:ec:35:79:15:1d: d1:a5:43:9b:8f:02:54:38:97:9b:d3:d8:f1:2c:a6:33:6b:da: d1:7a:6c:6b:21:d3:e9:13:44:de:a4:17:aa:48:66:63:11:85: cb:01:8d:9b:32:1f:64:95:27:51:8c:43:e8:c3:a6:21:72:1b: c9:92:f7:60:98:cc:d2:e5:98:de:10:08:34:f6:ab:6f:36:01: c2:79:3d:58:d5:ca:5e:22:36:bc:3c:be:b8:3d:31:5f:9b:39: c8:7c:25:eb:0b:42:9d:0d:6a:f7:ee:72:0b:4b:12:72:dd:76: 4d:c4:74:37:69:96:8e:83:4d:fe:b6:ba:03:20:d6:2b:60:16: c7:dc:67:a3:2e:ce:95:dc:42:0a:91:1e:95:0d:2d:bf:cc:93: a0:a0:a9:dd:e9:4f:77:0b:fc:f5:d1:6e:14:77:1c:d1:36:58: b2:bd:c5:4f:03:de:f2:7c:12:85:51:8b:b0:58:52:9d:dc:60: 4a:ce:d5:16:12:7b:0b:3c:e8:a4:b8:1a:90:8d:96:02:15:dd: ab:4c:e4:0a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEWt5oBdz7w4zQr4CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDQyNzAwNDUyMVoXDTI2MDczMTAwNDUyMVowLzEtMCsGA1UEAxMk N2QzMTUzNmEtZjY2Ny00NDczLWFiYmYtMDQwYjI0OWZhMzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8zVPAcjxzl+sFas4c46qjXCLLoPx569cKVM uA9ZT0Q1UxjRQpNfkbpTGD2sm+dP2zwLa4qbHhO9ZA5YKQjNFIbaFuebKsY2qlpw BJ+WFHgheeONUW3zVLw9/MQcBpD3hJtHSnZjQq0uxPyqpJvr/CleXeCFq5793bka dN33Ewa622xlOFsE6fV5JUAzdmOdJyKMjahQijk5JZSU+nUohcOpnL7UBRCFGnax pJCOeTX9JDHmTAaEpwa/+RZ1ZjBAfRzGYa3OS4B31wnLof0sNMOQf+o1SW+hyIqf ALqKNTFshBYrzd+vfC/2sELS6xTEZWe29e+KV7cM3NOHHUZbQQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNLSAKcphpw31yr1E1kfVIjn6GW2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZDMxNTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBiMjQ5ZmEzOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdkMzE1MzZhLWY2NjctNDQ3My1h YmJmLTA0MGIyNDlmYTM5Zi83ZDMxNTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBiMjQ5 ZmEzOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALYSZgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhoUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA0cKQpr2NfSXKtYD2XsVUxzWAI64lG5je16FKNAIvWjN9YV ErDH/2fRQUR/iHAF4uvsNXkVHdGlQ5uPAlQ4l5vT2PEspjNr2tF6bGsh0+kTRN6k F6pIZmMRhcsBjZsyH2SVJ1GMQ+jDpiFyG8mS92CYzNLlmN4QCDT2q282AcJ5PVjV yl4iNrw8vrg9MV+bOch8JesLQp0NavfucgtLEnLddk3EdDdplo6DTf62ugMg1itg FsfcZ6MuzpXcQgqRHpUNLb/Mk6Cgqd3pT3cL/PXRbhR3HNE2WLK9xU8D3vJ8EoVR i7BYUp3cYErO1RYSews86KS4GpCNlgIV3atM5Ao= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:02 2024 by rpki-client on console-fra.rpki-client.org