$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer File: 80a5a637-2442-4c3f-b791-5a2e260822af.cer (raw, json) Hash identifier: rmWrafW+Vrl1JrEk4j/wBuW+2vJ+VwD9HNXHgXxNm1A= Subject key identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858433F57F8BC7ED054FCA2F79FA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Sep 2023 00:45:22 +0000 Certificate not after: Sat 20 Dec 2025 01:45:22 +0000 Subordinate resources: AS: 394688 IP: 98.142.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:3f:57:f8:bc:7e:d0:54:fc:a2:f7:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 17 00:45:22 2023 GMT Not After : Dec 20 01:45:22 2025 GMT Subject: CN=80a5a637-2442-4c3f-b791-5a2e260822af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:1e:25:08:a3:41:c5:29:f7:1a:92:cd:47: e0:7e:6b:9b:23:25:8e:e9:67:50:78:6c:11:65:52: 46:8d:ff:28:32:bd:0a:34:6d:ba:1f:eb:f1:5c:bd: 14:ac:b4:52:86:5a:6a:e5:31:2f:dd:db:75:1a:0f: a3:42:15:83:8a:ec:91:24:06:1d:8a:90:94:0d:b8: 87:e1:41:8e:48:40:3b:a2:d1:0a:c0:c1:71:ba:0d: f9:9d:de:06:53:04:68:cb:be:56:17:5a:89:05:ed: 50:3f:36:fc:3f:65:2f:c8:fa:18:e6:e6:b2:0f:2c: 94:6a:c1:4a:21:7d:64:99:23:10:b3:fc:68:3e:e6: 71:0f:81:7f:c0:7b:f8:c3:8f:8d:42:8e:1b:bc:63: 29:34:f0:43:9e:b5:1d:98:30:b5:e6:a8:fd:db:23: fc:d5:e2:c3:bf:8f:b7:e1:d9:05:de:1b:9d:de:46: 61:78:f4:84:0c:af:e7:9a:23:f4:5c:45:ee:63:c6: b8:ea:03:4c:b7:5c:ee:70:67:a2:d2:09:26:8d:7e: c0:b6:f1:43:e0:33:61:98:46:ab:e9:27:37:0d:0d: 91:a4:8b:7b:7d:cb:8e:a6:09:19:dc:5a:60:42:65: b5:ba:9c:5f:88:9b:80:a4:36:13:8f:ff:e8:78:71: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 98.142.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394688 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:47:fb:8f:82:57:ae:7d:cc:51:0d:53:81:27:0e:05:8d:54: 5f:be:b6:64:54:b2:da:ab:76:dd:5a:a9:c1:72:15:79:fc:ae: 98:cc:b2:2d:57:71:b5:ec:cc:c3:a2:76:91:0f:dd:b2:2d:12: 3c:67:c9:c3:32:1b:54:09:37:10:1a:27:4f:0c:a9:12:1d:0e: c3:3f:d6:56:b2:19:5d:3c:ae:84:ca:20:7f:f1:02:56:76:ec: 76:30:69:c3:df:b2:e4:e9:b7:ee:30:b1:fa:66:ad:62:41:9f: 50:89:3e:10:0f:de:7b:e2:9d:4d:b2:1b:bc:e4:24:4f:70:fd: 6f:e7:01:04:d1:45:ee:42:46:3e:45:44:e0:e5:d6:f0:fe:67: 6d:da:b1:3b:c5:0b:16:43:ce:bb:42:98:31:75:e4:0a:15:b9: 5f:c8:42:41:38:f7:c6:28:46:8f:41:27:b3:d1:b5:7e:f5:20: 86:07:9d:26:12:c0:fa:94:62:7b:79:6b:a2:1d:c2:79:81:d3: 5b:1e:33:81:6d:f5:16:aa:bd:82:79:8a:50:9a:eb:2a:1c:23: 6f:33:36:d2:dc:4c:40:a1:f0:6e:f6:62:52:e7:4b:2b:db:51: c8:84:21:02:d6:7b:c5:ec:90:12:24:bb:38:49:06:39:4c:6b: c7:ec:0a:c0 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEM/V/i8ftBU/KL3n6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDkxNzAwNDUyMloXDTI1MTIyMDAxNDUyMlowLzEtMCsGA1UEAxMk ODBhNWE2MzctMjQ0Mi00YzNmLWI3OTEtNWEyZTI2MDgyMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoYeJQijQcUp9xqSzUfgfmubIyWO6WdQeGwR ZVJGjf8oMr0KNG26H+vxXL0UrLRShlpq5TEv3dt1Gg+jQhWDiuyRJAYdipCUDbiH 4UGOSEA7otEKwMFxug35nd4GUwRoy75WF1qJBe1QPzb8P2UvyPoY5uayDyyUasFK IX1kmSMQs/xoPuZxD4F/wHv4w4+NQo4bvGMpNPBDnrUdmDC15qj92yP81eLDv4+3 4dkF3hud3kZhePSEDK/nmiP0XEXuY8a46gNMt1zucGei0gkmjX7AtvFD4DNhmEar 6Sc3DQ2RpIt7fcuOpgkZ3FpgQmW1upxfiJuApDYTj//oeHFVlwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIo5kLFpmO9k8N8GVZqBFPXjeXLzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 MGE1YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJlMjYwODIyYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgwYTVhNjM3LTI0NDItNGMzZi1i NzkxLTVhMmUyNjA4MjJhZi84MGE1YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJlMjYw ODIyYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJijrwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgXAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGdH+4+CV659zFENU4EnDgWNVF++tmRUstqrdt1aqcFyFXn8 rpjMsi1XcbXszMOidpEP3bItEjxnycMyG1QJNxAaJ08MqRIdDsM/1layGV08roTK IH/xAlZ27HYwacPfsuTpt+4wsfpmrWJBn1CJPhAP3nvinU2yG7zkJE9w/W/nAQTR Re5CRj5FRODl1vD+Z23asTvFCxZDzrtCmDF15AoVuV/IQkE498YoRo9BJ7PRtX71 IIYHnSYSwPqUYnt5a6IdwnmB01seM4Ft9RaqvYJ5ilCa6yocI28zNtLcTECh8G72 YlLnSyvbUciEIQLWe8XskBIkuzhJBjlMa8fsCsA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:48 2024 by rpki-client on console-ams.rpki-client.org