$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02.cer File: 846d9d67-c485-4d9c-a479-6ee876000b02.cer (raw, json) Hash identifier: ofK2bc2K6wokh+IbNgcQ+j3W36tUT3gNXB0MygO62A8= Subject key identifier: 12:36:AB:D7:EF:ED:03:0C:83:79:19:64:A0:11:87:4E:85:FC:CA:6D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858440876F2217A3C9EF53575FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/846d9d67-c485-4d9c-a479-6ee876000b02.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Nov 2023 01:45:16 +0000 Certificate not after: Mon 02 Mar 2026 01:45:16 +0000 Subordinate resources: IP: 148.59.154.0/24 IP: 161.199.16.0/24 IP: 167.94.160.0/24 IP: 192.107.243.0/24 IP: 2602:ff1c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:08:76:f2:21:7a:3c:9e:f5:35:75:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 28 01:45:16 2023 GMT Not After : Mar 2 01:45:16 2026 GMT Subject: CN=846d9d67-c485-4d9c-a479-6ee876000b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:b6:e0:f6:63:7e:3b:2c:59:c2:0b:55:91: 94:ea:e3:18:b6:dc:d0:63:e7:bd:c7:e9:ff:aa:8c: f8:68:ac:76:a9:7f:10:66:d5:47:11:b9:f8:f8:7a: 40:59:d9:e1:08:53:a6:ec:a7:b9:67:e1:71:36:aa: c8:11:5a:a5:84:9e:95:d4:c0:f9:7f:1d:46:98:84: b1:f7:7e:aa:9b:c1:09:3b:94:41:8f:97:67:5c:7b: 84:00:d0:91:a7:16:98:20:94:3d:57:24:fc:cb:43: c8:d5:af:14:db:d4:c7:60:4e:eb:53:28:99:91:7c: 92:a6:c2:61:b7:d1:5d:62:6f:36:bd:d1:bc:49:f5: 80:6b:ae:b7:65:a7:69:39:63:a7:3e:47:13:3f:e0: 70:7a:30:55:8b:f5:c7:63:9b:83:93:8b:74:2c:b2: 74:84:4d:9d:00:a0:5c:cc:9f:7b:ef:58:8e:c8:8a: 2d:dc:72:50:aa:6b:aa:74:b1:78:0d:21:71:0b:96: 7a:0d:ad:c9:62:be:5f:79:e0:b4:95:b8:10:68:34: 35:67:59:9e:3d:ba:22:04:6a:de:db:60:c0:8b:12: f5:3f:7e:09:47:84:13:5c:a9:21:ad:45:65:de:ec: 5c:ce:52:56:1c:2b:64:15:a5:e5:6f:3f:c1:34:bc: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:36:AB:D7:EF:ED:03:0C:83:79:19:64:A0:11:87:4E:85:FC:CA:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/846d9d67-c485-4d9c-a479-6ee876000b02.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 148.59.154.0/24 161.199.16.0/24 167.94.160.0/24 192.107.243.0/24 IPv6: 2602:ff1c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:66:f3:38:45:b6:98:42:d1:e3:07:e5:0b:5b:51:90:c0:c6: 63:1e:71:3d:da:1c:15:03:b5:ff:87:bc:ba:30:f3:89:b6:cd: 20:52:3c:62:6f:76:72:9a:cb:f1:31:1d:23:4e:4f:21:f0:40: fe:64:08:78:a9:b7:fd:c9:33:2e:46:75:d7:59:80:4b:40:3b: c7:fa:04:2d:4c:00:bb:1e:d4:9d:8e:71:48:52:58:21:8d:4d: d7:1c:2a:75:d4:03:64:25:8f:a0:da:80:90:29:e1:b7:f0:87: d4:6f:99:d6:fa:a6:93:73:83:cd:a4:fa:a5:b7:a3:69:14:a3: 5b:bf:a2:0c:f3:2c:83:be:1d:30:f3:de:94:7a:c6:81:60:9a: 4e:fe:1b:4e:58:c9:df:26:9a:c6:47:01:d7:06:55:ca:1c:05: 9f:7a:bd:1b:a7:1f:4d:90:e7:1d:2f:50:3e:d1:74:d6:ff:00: aa:97:94:1e:c0:f6:82:b3:3a:33:ef:6f:32:7b:e9:b4:d5:69: 2f:cf:d2:41:bc:84:7c:58:2c:03:89:ef:83:6a:7e:93:1e:a3: 56:6a:3f:2c:ad:1f:e5:a8:e7:b0:e4:08:7e:5e:af:87:ff:86: 33:8d:84:2d:fd:93:c7:b5:23:57:34:29:91:cf:1e:2d:19:d8: be:4a:b5:0b -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEQIdvIhejye9TV1/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTEyODAxNDUxNloXDTI2MDMwMjAxNDUxNlowLzEtMCsGA1UEAxMk ODQ2ZDlkNjctYzQ4NS00ZDljLWE0NzktNmVlODc2MDAwYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyam24PZjfjssWcILVZGU6uMYttzQY+e9x+n/ qoz4aKx2qX8QZtVHEbn4+HpAWdnhCFOm7Ke5Z+FxNqrIEVqlhJ6V1MD5fx1GmISx 936qm8EJO5RBj5dnXHuEANCRpxaYIJQ9VyT8y0PI1a8U29THYE7rUyiZkXySpsJh t9FdYm82vdG8SfWAa663ZadpOWOnPkcTP+BwejBVi/XHY5uDk4t0LLJ0hE2dAKBc zJ9771iOyIot3HJQqmuqdLF4DSFxC5Z6Da3JYr5feeC0lbgQaDQ1Z1mePboiBGre 22DAixL1P34JR4QTXKkhrUVl3uxczlJWHCtkFaXlbz/BNLzhxwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFBI2q9fv7QMMg3kZZKARh06F/MptMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 NDZkOWQ2Ny1jNDg1LTRkOWMtYTQ3OS02ZWU4NzYwMDBiMDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzg0NmQ5ZDY3LWM0ODUtNGQ5Yy1h NDc5LTZlZTg3NjAwMGIwMi84NDZkOWQ2Ny1jNDg1LTRkOWMtYTQ3OS02ZWU4NzYw MDBiMDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBACUO5oDBAChxxADBACnXqADBADAa/MwDgQCAAIw CAMGBCYC/xwAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC1m8zhFtphC0eMH5QtbUZDAxmMecT3aHBUDtf+H vLow84m2zSBSPGJvdnKay/ExHSNOTyHwQP5kCHipt/3JMy5GdddZgEtAO8f6BC1M ALse1J2OcUhSWCGNTdccKnXUA2Qlj6DagJAp4bfwh9Rvmdb6ppNzg82k+qW3o2kU o1u/ogzzLIO+HTDz3pR6xoFgmk7+G05Yyd8mmsZHAdcGVcocBZ96vRunH02Q5x0v UD7RdNb/AKqXlB7A9oKzOjPvbzJ76bTVaS/P0kG8hHxYLAOJ74NqfpMeo1ZqPyyt H+Wo57DkCH5er4f/hjONhC39k8e1I1c0KZHPHi0Z2L5KtQs= -----END CERTIFICATE-----Generated at Fri Apr 26 08:38:51 2024 by rpki-client on console-ams.rpki-client.org