$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer File: 8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer (raw, json) Hash identifier: C+83kKGbXv3m/xKrCDj1QDmlkfiUuUcWZD4omM3Fioo= Subject key identifier: 09:9F:D9:1E:F3:20:0D:AB:E7:49:DF:FE:56:9F:3B:09:81:5D:D8:0C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584270C14DE16FE5A7DF81104600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Jul 2023 00:45:16 +0000 Certificate not after: Tue 07 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 400290 IP: 23.131.104.0/24 IP: 2606:a4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:70:c1:4d:e1:6f:e5:a7:df:81:10:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 5 00:45:16 2023 GMT Not After : Oct 7 00:45:16 2025 GMT Subject: CN=8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:7d:96:21:8b:88:64:29:58:b9:6f:43:c0: ee:63:36:af:82:37:d6:ab:fd:e5:88:2c:c4:f1:e8: bb:5e:7a:15:bd:82:41:c7:15:20:06:95:90:59:96: 8c:a1:c6:84:30:46:9e:40:d4:50:ae:97:a6:7b:93: 39:38:65:ad:c5:41:2e:28:70:af:f8:83:08:31:ad: ad:4a:42:bb:ac:c4:bf:ec:71:50:45:fa:fe:d7:9c: 0d:c9:a1:8c:28:11:dc:02:f8:40:6b:fa:99:7b:f9: a9:06:21:e6:1f:be:20:9d:e2:31:3f:42:0f:2b:b7: 1c:03:27:d5:da:c3:21:17:e9:57:73:43:e4:46:98: 68:77:6e:c4:15:6b:07:8b:d9:3e:72:25:4a:36:17: 25:2f:36:c0:d5:87:6f:53:af:af:87:f1:00:e7:c2: ef:17:6d:58:ea:f0:fb:1d:3d:46:c8:0a:28:58:54: 42:62:bd:e2:ec:b0:aa:e3:59:8c:6c:39:52:77:a9: d4:c6:5a:10:38:40:66:b2:ae:fa:13:6e:af:e9:22: 4d:0c:d6:84:0e:4a:04:c7:1c:95:02:68:94:01:7f: 71:d3:4b:3d:95:02:14:33:e4:f7:d5:07:69:9a:84: c0:b9:ca:e5:0e:bb:71:49:d4:66:1c:88:37:22:af: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9F:D9:1E:F3:20:0D:AB:E7:49:DF:FE:56:9F:3B:09:81:5D:D8:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.131.104.0/24 IPv6: 2606:a4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400290 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a7:05:70:e2:ba:c7:2e:82:b7:b6:d7:42:b6:df:ac:2c:7e: 18:10:27:2e:c3:ea:43:6b:79:31:8f:f9:60:ed:a6:ac:f5:69: 9f:e7:80:09:62:01:f1:39:d9:65:4b:f3:d8:e1:28:05:ed:d6: 65:2b:a9:ee:3b:b1:e1:94:cb:64:04:6d:7c:3b:9e:bf:19:7b: 0d:2a:97:0c:74:f5:ed:59:48:17:fe:d8:7d:62:4b:ab:9b:23: b9:4c:8e:9b:2c:1e:5d:c0:5a:dd:e0:5e:58:b1:36:28:4c:0c: 94:69:89:9b:bc:81:02:04:d6:07:54:69:77:32:8c:a6:9d:06: 1e:d7:10:f6:aa:d7:ee:6f:75:a0:83:41:18:ca:ae:c5:b9:2d: 93:f9:2b:77:a9:2c:80:02:6f:ec:c8:aa:20:43:94:0b:8b:bc: f0:33:33:4d:74:5a:de:33:3b:cb:5c:07:fe:6f:35:7a:b4:8d: af:b2:cf:a7:10:06:d2:0f:91:5d:01:f6:8b:24:43:d2:82:8e: 7d:25:e1:69:70:b2:66:d9:c5:b3:64:a5:a1:c8:d4:d0:88:8d: 81:b7:25:24:8f:30:d4:39:d4:db:93:0c:b9:73:61:53:31:9b: cc:78:8c:08:03:f7:ac:8a:01:b0:44:60:2f:4f:4c:80:3f:2b: 2e:3e:4d:01 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEJwwU3hb+Wn34EQRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDcwNTAwNDUxNloXDTI1MTAwNzAwNDUxNlowLzEtMCsGA1UEAxMk OGIzNzI4YzctNmVmZC00ZDI0LWIwYTktZGMyOWNlNmVlOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFF9liGLiGQpWLlvQ8DuYzavgjfWq/3liCzE 8ei7XnoVvYJBxxUgBpWQWZaMocaEMEaeQNRQrpeme5M5OGWtxUEuKHCv+IMIMa2t SkK7rMS/7HFQRfr+15wNyaGMKBHcAvhAa/qZe/mpBiHmH74gneIxP0IPK7ccAyfV 2sMhF+lXc0PkRphod27EFWsHi9k+ciVKNhclLzbA1YdvU6+vh/EA58LvF21Y6vD7 HT1GyAooWFRCYr3i7LCq41mMbDlSd6nUxloQOEBmsq76E26v6SJNDNaEDkoExxyV AmiUAX9x00s9lQIUM+T31QdpmoTAucrlDrtxSdRmHIg3Iq/MMwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAmf2R7zIA2r50nf/lafOwmBXdgMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 YjM3MjhjNy02ZWZkLTRkMjQtYjBhOS1kYzI5Y2U2ZWU4ZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzhiMzcyOGM3LTZlZmQtNGQyNC1i MGE5LWRjMjljZTZlZThkMS84YjM3MjhjNy02ZWZkLTRkMjQtYjBhOS1kYzI5Y2U2 ZWU4ZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXg2gwDQQCAAIwBwMFACYGpMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhuiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABKnBXDiuscugre210K236wsfhgQ Jy7D6kNreTGP+WDtpqz1aZ/ngAliAfE52WVL89jhKAXt1mUrqe47seGUy2QEbXw7 nr8Zew0qlwx09e1ZSBf+2H1iS6ubI7lMjpssHl3AWt3gXlixNihMDJRpiZu8gQIE 1gdUaXcyjKadBh7XEPaq1+5vdaCDQRjKrsW5LZP5K3epLIACb+zIqiBDlAuLvPAz M010Wt4zO8tcB/5vNXq0ja+yz6cQBtIPkV0B9oskQ9KCjn0l4WlwsmbZxbNkpaHI 1NCIjYG3JSSPMNQ51NuTDLlzYVMxm8x4jAgD96yKAbBEYC9PTIA/Ky4+TQE= -----END CERTIFICATE-----Generated at Sat Apr 20 01:56:01 2024 by rpki-client on console-fra.rpki-client.org