$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a.cer File: 8e0d46ab-fb03-49e0-a908-80d934767a4a.cer (raw, json) Hash identifier: SMBDx3RocKCPFzbOEQD+1mwdwF+C3CsQp+CipnL3wBM= Subject key identifier: AA:18:D9:F8:A2:50:AE:AF:10:20:A8:AA:CC:70:E9:CC:F9:D2:10:A9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285843FA81844D010BB6B13F07B610 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a/8e0d46ab-fb03-49e0-a908-80d934767a4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Nov 2023 01:45:15 +0000 Certificate not after: Wed 25 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 22113 IP: 64.112.4.0/22 IP: 66.170.180.0/22 IP: 163.123.228.0/22 IP: 2606:6480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:fa:81:84:4d:01:0b:b6:b1:3f:07:b6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 23 01:45:15 2023 GMT Not After : Feb 25 01:45:15 2026 GMT Subject: CN=8e0d46ab-fb03-49e0-a908-80d934767a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:e9:0f:b8:5d:d8:04:38:90:29:e8:2f:a8: fa:74:6e:3a:12:76:9d:ab:9f:d2:89:39:ce:44:5c: d9:97:eb:45:3c:4d:90:4a:84:8c:7e:2c:b7:62:a7: 83:84:b3:b9:95:a0:1d:dd:9c:4a:05:13:45:6c:72: 3d:c8:11:24:51:36:e5:89:42:2a:f7:72:d9:9f:f4: ec:4b:f9:9a:70:8a:f0:ad:32:fc:ed:cb:b7:ce:d4: f0:cd:b2:f2:03:1b:b1:cb:bb:97:c2:7b:d0:d3:55: 50:bd:8b:8c:65:37:3f:36:5b:01:8c:a5:32:c0:c2: 33:2f:eb:f6:a5:8a:a9:8a:23:93:98:61:57:e2:40: f3:91:e6:d8:ce:b6:b0:7e:e0:12:9c:4d:b0:b4:ce: 99:7d:d6:7a:18:c9:57:e2:51:f9:15:85:62:94:2c: a4:47:5c:02:a2:ca:91:16:21:e3:15:14:69:d7:ab: 7e:0a:1f:80:5b:17:a5:e7:69:9a:57:29:a9:c8:b1: 9c:f7:27:bb:fe:42:4a:1d:79:bd:a5:5e:ff:19:86: 1d:37:a9:05:f0:8a:15:38:a6:bc:8c:cc:af:ae:fd: 20:5b:41:d5:5c:d3:a0:92:f4:09:fd:43:65:b8:de: 12:3e:b3:cf:5a:0e:bd:23:12:5c:7e:2d:b9:5f:cd: 2c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:18:D9:F8:A2:50:AE:AF:10:20:A8:AA:CC:70:E9:CC:F9:D2:10:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a/8e0d46ab-fb03-49e0-a908-80d934767a4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.112.4.0/22 66.170.180.0/22 163.123.228.0/22 IPv6: 2606:6480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22113 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fb:e9:50:11:a3:be:bb:75:4d:91:56:3b:55:e7:38:b4:34: 22:20:28:f5:b9:b8:5b:cf:65:14:34:5e:4d:9f:6f:9a:d7:fb: 5d:23:3f:45:0e:ba:ff:03:7f:33:e9:7e:bf:19:78:00:94:cd: 22:8d:5e:10:5f:f3:5b:15:9a:2d:78:c1:fc:a1:c9:ac:27:1c: a3:5b:20:d5:a1:fd:5e:d7:6e:b2:9f:55:d0:d9:2a:1f:cc:fa: 16:58:45:6f:9b:9b:b4:e3:19:52:4a:77:ef:c9:d8:f6:cb:68: 84:36:00:c3:64:6a:0d:53:cb:11:cd:7b:27:e9:91:bb:b6:78: 02:9d:75:98:c1:70:69:1c:47:ec:ec:24:90:61:00:d0:c3:91: 39:2a:b2:90:ae:e8:b0:56:a3:94:53:0c:04:74:67:c8:12:a3: d4:96:f6:2a:5c:01:f7:42:73:ed:69:d5:bb:c3:88:85:f1:9e: 88:a5:9c:2d:c3:ab:26:65:62:a1:26:0b:15:34:71:c5:3e:4c: 2f:ca:1b:0b:29:5b:c8:58:a1:88:96:74:00:26:45:7a:d0:94: 6b:a8:7d:27:4d:82:9f:b2:19:d9:fd:58:32:c4:fe:ed:e6:72: 95:83:7a:45:ce:aa:15:e8:ee:e3:e7:a9:78:8d:31:a0:80:b9: 8e:dd:8e:93 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEP6gYRNAQu2sT8HthAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTEyMzAxNDUxNVoXDTI2MDIyNTAxNDUxNVowLzEtMCsGA1UEAxMk OGUwZDQ2YWItZmIwMy00OWUwLWE5MDgtODBkOTM0NzY3YTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzzpD7hd2AQ4kCnoL6j6dG46Enadq5/SiTnO RFzZl+tFPE2QSoSMfiy3YqeDhLO5laAd3ZxKBRNFbHI9yBEkUTbliUIq93LZn/Ts S/macIrwrTL87cu3ztTwzbLyAxuxy7uXwnvQ01VQvYuMZTc/NlsBjKUywMIzL+v2 pYqpiiOTmGFX4kDzkebYzrawfuASnE2wtM6ZfdZ6GMlX4lH5FYVilCykR1wCosqR FiHjFRRp16t+Ch+AWxel52maVympyLGc9ye7/kJKHXm9pV7/GYYdN6kF8IoVOKa8 jMyvrv0gW0HVXNOgkvQJ/UNluN4SPrPPWg69IxJcfi25X80srQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFKoY2fiiUK6vECCoqsxw6cz50hCpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 ZTBkNDZhYi1mYjAzLTQ5ZTAtYTkwOC04MGQ5MzQ3NjdhNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzhlMGQ0NmFiLWZiMDMtNDllMC1h OTA4LTgwZDkzNDc2N2E0YS84ZTBkNDZhYi1mYjAzLTQ5ZTAtYTkwOC04MGQ5MzQ3 NjdhNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJAcAQDBAJCqrQDBAKje+QwDQQCAAIwBwMFACYG ZIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVmEwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEvvpUBGjvrt1 TZFWO1XnOLQ0IiAo9bm4W89lFDReTZ9vmtf7XSM/RQ66/wN/M+l+vxl4AJTNIo1e EF/zWxWaLXjB/KHJrCcco1sg1aH9Xtdusp9V0NkqH8z6FlhFb5ubtOMZUkp378nY 9stohDYAw2RqDVPLEc17J+mRu7Z4Ap11mMFwaRxH7OwkkGEA0MOROSqykK7osFaj lFMMBHRnyBKj1Jb2KlwB90Jz7WnVu8OIhfGeiKWcLcOrJmVioSYLFTRxxT5ML8ob CylbyFihiJZ0ACZFetCUa6h9J02Cn7IZ2f1YMsT+7eZylYN6Rc6qFeju4+epeI0x oIC5jt2Okw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:54 2024 by rpki-client on console-ams.rpki-client.org