$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer File: 8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer (raw, json) Hash identifier: MFNubWJfI2OTRpqNW3r7aOI0YizqvbBSmmtT4DnScSI= Subject key identifier: 09:9F:D9:1E:F3:20:0D:AB:E7:49:DF:FE:56:9F:3B:09:81:5D:D8:0C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584774F4086F6192B4AD35B41580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Oct 2024 00:45:24 +0000 Certificate not after: Sun 10 Jan 2027 01:45:24 +0000 Subordinate resources: AS: 400290 IP: 23.131.104.0/24 IP: 2606:a4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:f4:08:6f:61:92:b4:ad:35:b4:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 7 00:45:24 2024 GMT Not After : Jan 10 01:45:24 2027 GMT Subject: CN=8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:7d:96:21:8b:88:64:29:58:b9:6f:43:c0: ee:63:36:af:82:37:d6:ab:fd:e5:88:2c:c4:f1:e8: bb:5e:7a:15:bd:82:41:c7:15:20:06:95:90:59:96: 8c:a1:c6:84:30:46:9e:40:d4:50:ae:97:a6:7b:93: 39:38:65:ad:c5:41:2e:28:70:af:f8:83:08:31:ad: ad:4a:42:bb:ac:c4:bf:ec:71:50:45:fa:fe:d7:9c: 0d:c9:a1:8c:28:11:dc:02:f8:40:6b:fa:99:7b:f9: a9:06:21:e6:1f:be:20:9d:e2:31:3f:42:0f:2b:b7: 1c:03:27:d5:da:c3:21:17:e9:57:73:43:e4:46:98: 68:77:6e:c4:15:6b:07:8b:d9:3e:72:25:4a:36:17: 25:2f:36:c0:d5:87:6f:53:af:af:87:f1:00:e7:c2: ef:17:6d:58:ea:f0:fb:1d:3d:46:c8:0a:28:58:54: 42:62:bd:e2:ec:b0:aa:e3:59:8c:6c:39:52:77:a9: d4:c6:5a:10:38:40:66:b2:ae:fa:13:6e:af:e9:22: 4d:0c:d6:84:0e:4a:04:c7:1c:95:02:68:94:01:7f: 71:d3:4b:3d:95:02:14:33:e4:f7:d5:07:69:9a:84: c0:b9:ca:e5:0e:bb:71:49:d4:66:1c:88:37:22:af: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9F:D9:1E:F3:20:0D:AB:E7:49:DF:FE:56:9F:3B:09:81:5D:D8:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.131.104.0/24 IPv6: 2606:a4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400290 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c8:55:a2:41:50:c3:63:a2:62:bf:b7:e3:dd:00:10:7a:93: 31:a0:6b:f3:d8:3f:55:10:c1:e3:af:fa:bb:5c:b0:26:0f:9b: 51:90:82:23:e9:26:d2:5c:c9:13:bb:ad:98:2f:a7:c2:f6:ff: 10:89:c0:b5:f2:d8:55:21:22:0e:b0:45:26:0b:11:94:57:8d: fc:d4:90:53:38:97:9b:eb:7a:d3:5a:63:46:e0:04:a1:32:75: d7:ed:8f:78:d0:54:85:85:a7:6d:7a:06:39:22:2c:6b:60:ae: f3:2a:af:a2:db:87:7c:c8:1d:91:db:b9:e4:6f:a8:51:aa:87: 71:d9:27:bd:8f:de:39:af:4f:19:98:18:89:8b:8c:92:76:7d: c1:e0:15:74:52:95:ce:e0:5f:0d:fc:d5:76:79:5f:e7:d9:fc: e4:bc:e5:3b:f4:6f:89:9c:3a:06:ae:96:28:e7:fc:66:3d:13: 7b:11:0a:3a:01:cd:f2:0d:51:0c:7c:fb:23:72:5d:a4:84:ae: bb:95:db:96:50:cc:3b:c9:88:29:da:9a:fb:26:bc:ad:87:96: fa:87:23:65:ff:94:90:ad:74:f7:e2:13:4d:21:a3:43:88:0d: 85:7e:d0:df:c4:79:b8:41:c9:68:df:05:e5:bf:d9:40:c7:a9: b5:ff:7f:a8 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEd09AhvYZK0rTW0FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTAwNzAwNDUyNFoXDTI3MDExMDAxNDUyNFowLzEtMCsGA1UEAxMk OGIzNzI4YzctNmVmZC00ZDI0LWIwYTktZGMyOWNlNmVlOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFF9liGLiGQpWLlvQ8DuYzavgjfWq/3liCzE 8ei7XnoVvYJBxxUgBpWQWZaMocaEMEaeQNRQrpeme5M5OGWtxUEuKHCv+IMIMa2t SkK7rMS/7HFQRfr+15wNyaGMKBHcAvhAa/qZe/mpBiHmH74gneIxP0IPK7ccAyfV 2sMhF+lXc0PkRphod27EFWsHi9k+ciVKNhclLzbA1YdvU6+vh/EA58LvF21Y6vD7 HT1GyAooWFRCYr3i7LCq41mMbDlSd6nUxloQOEBmsq76E26v6SJNDNaEDkoExxyV AmiUAX9x00s9lQIUM+T31QdpmoTAucrlDrtxSdRmHIg3Iq/MMwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAmf2R7zIA2r50nf/lafOwmBXdgMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 YjM3MjhjNy02ZWZkLTRkMjQtYjBhOS1kYzI5Y2U2ZWU4ZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzhiMzcyOGM3LTZlZmQtNGQyNC1i MGE5LWRjMjljZTZlZThkMS84YjM3MjhjNy02ZWZkLTRkMjQtYjBhOS1kYzI5Y2U2 ZWU4ZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXg2gwDQQCAAIwBwMFACYGpMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhuiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACvIVaJBUMNjomK/t+PdABB6kzGg a/PYP1UQweOv+rtcsCYPm1GQgiPpJtJcyRO7rZgvp8L2/xCJwLXy2FUhIg6wRSYL EZRXjfzUkFM4l5vretNaY0bgBKEyddftj3jQVIWFp216BjkiLGtgrvMqr6Lbh3zI HZHbueRvqFGqh3HZJ72P3jmvTxmYGImLjJJ2fcHgFXRSlc7gXw381XZ5X+fZ/OS8 5Tv0b4mcOgaulijn/GY9E3sRCjoBzfINUQx8+yNyXaSErruV25ZQzDvJiCnamvsm vK2HlvqHI2X/lJCtdPfiE00ho0OIDYV+0N/EebhByWjfBeW/2UDHqbX/f6g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:07 2024 by rpki-client on console-fra.rpki-client.org