$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer File: 81fb7701-7454-4b9b-810d-3d604f504467.cer (raw, json) Hash identifier: EfAKF6iqDqBn0yfxPmVBai16526QeDTHevMsOGLZ8Eg= Subject key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E48349E12C4C366E0FDCD500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sun 25 May 2025 19:06:39 +0000 Subordinate resources: IP: 148.177.0.0/16 IP: 199.65.0.0 -- 199.65.191.255 IP: 199.65.200.0 -- 199.65.255.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:49:e1:2c:4c:36:6e:0f:dc:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 25 19:06:39 2025 GMT Subject: CN=81fb7701-7454-4b9b-810d-3d604f504467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:37:82:4f:3c:19:25:cb:e1:8b:85:48:02: 43:90:0b:06:54:ee:a0:e0:ea:ee:35:0e:96:ed:e0: 6a:d5:1a:cc:a7:03:95:26:49:f2:b1:83:2b:0b:58: 74:93:ed:9e:be:a9:aa:b1:8b:86:c4:a1:37:94:2b: e6:b0:1c:f3:ce:dd:5c:0a:9e:6d:d0:12:59:6a:78: 56:b0:66:80:5a:99:fb:95:1e:15:c4:cb:e2:d6:82: ca:e8:ea:08:8d:fc:f4:40:fb:ad:83:e8:b9:b3:de: fb:af:ec:1a:b7:71:f6:bc:c6:06:04:da:f9:2d:6a: 4f:6d:91:f2:52:bb:1b:85:80:4c:67:bf:64:46:75: 4a:c5:9f:b9:e7:af:45:80:34:ca:86:39:40:38:21: 7c:3a:df:85:2b:9c:63:9d:26:e6:29:d1:19:c1:a5: 95:52:52:a4:dc:c5:e1:da:41:c0:7f:a4:ae:ea:0f: 0d:7c:85:03:33:18:24:ec:72:f6:ff:fc:43:ad:84: 09:5e:81:f9:08:fe:9a:0c:a9:4a:21:02:f4:80:19: 6e:90:29:2b:00:0a:b6:8f:4c:96:17:96:1e:03:39: d2:c9:c9:f2:c6:96:b9:9e:a8:19:5a:a9:db:4e:88: d5:b4:f9:95:53:9b:2e:2b:cb:7b:a6:c0:d4:76:9a: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 148.177.0.0/16 199.65.0.0-199.65.191.255 199.65.200.0-199.65.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cc:ce:65:cd:2e:25:ae:fe:ac:94:9d:a8:5f:60:ae:0f:07: e1:ad:b0:19:2e:2c:53:e1:8b:90:ae:f5:8c:18:8c:20:d3:44: cf:e1:d5:7c:8d:ea:80:16:e1:80:13:d0:37:a1:9b:b8:bc:84: 5a:3b:b5:21:ed:35:8a:39:f9:7c:47:4d:bc:d1:53:5c:80:e5: b5:b6:ab:c4:33:60:70:a5:eb:63:a7:0d:a8:8f:d6:1b:fb:fd: 4e:e8:c8:2b:c5:de:2f:36:3d:99:cf:7c:92:00:b2:85:7a:51: 78:9d:da:c2:e6:db:5f:ba:0b:f8:0d:37:64:a9:88:01:c2:be: ed:a8:50:04:9d:50:09:cd:54:35:af:7c:e6:e6:ee:4d:af:74: f4:c7:1d:4b:58:76:49:8a:0d:02:68:a5:d0:be:b7:3c:75:14: 54:48:3e:be:40:93:63:71:a0:67:af:21:4f:2a:d9:74:02:7f: 7d:75:db:ae:fd:67:01:c4:9b:09:6a:e2:61:4d:7d:07:55:13: 68:5e:4b:9a:60:b2:99:67:d0:07:28:4d:4e:84:57:03:61:d1: b9:59:f3:39:8e:e5:f7:66:8b:c5:99:f3:a8:f4:c9:0f:25:62: 52:c2:70:c7:ca:21:3d:bc:52:c6:fe:6e:05:fd:bf:dc:fa:b6: 1a:00:c5:6c -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgIUAQ0Mn0MoWEHkg0nhLEw2bg/c1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUyNTE5MDYzOVowLzEtMCsGA1UEAxMk ODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0NDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnU3gk88GSXL4YuFSAJDkAsGVO6g4OruNQ6W 7eBq1RrMpwOVJknysYMrC1h0k+2evqmqsYuGxKE3lCvmsBzzzt1cCp5t0BJZanhW sGaAWpn7lR4VxMvi1oLK6OoIjfz0QPutg+i5s977r+wat3H2vMYGBNr5LWpPbZHy UrsbhYBMZ79kRnVKxZ+5569FgDTKhjlAOCF8Ot+FK5xjnSbmKdEZwaWVUlKk3MXh 2kHAf6Su6g8NfIUDMxgk7HL2//xDrYQJXoH5CP6aDKlKIQL0gBlukCkrAAq2j0yW F5YeAznSycnyxpa5nqgZWqnbTojVtPmVU5suK8t7psDUdppVYQIDAQABo4IEGDCC BBQwHQYDVR0OBBYEFEbaEBC7A8JQQxvTMdbWpppcFQrOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgxZmI3NzAxLTc0NTQtNGI5Yi04 MTBkLTNkNjA0ZjUwNDQ2Ny84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1 MDQ0NjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMCUEAgABMB8DAwCUsTALAwMAx0EDBAbHQYAwCwMEA8dByAMDAcdA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3MzmXNLiWu/qyUnahfYK4PB+GtsBkuLFPhi5Cu9YwYjCDTRM/h 1XyN6oAW4YAT0Dehm7i8hFo7tSHtNYo5+XxHTbzRU1yA5bW2q8QzYHCl62OnDaiP 1hv7/U7oyCvF3i82PZnPfJIAsoV6UXid2sLm21+6C/gNN2SpiAHCvu2oUASdUAnN VDWvfObm7k2vdPTHHUtYdkmKDQJopdC+tzx1FFRIPr5Ak2NxoGevIU8q2XQCf311 2679ZwHEmwlq4mFNfQdVE2heS5pgspln0AcoTU6EVwNh0blZ8zmO5fdmi8WZ86j0 yQ8lYlLCcMfKIT28Usb+bgX9v9z6thoAxWw= -----END CERTIFICATE-----Generated at Fri Apr 19 19:27:02 2024 by rpki-client on console-ams.rpki-client.org