$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer File: 95437874-24a3-4971-a87b-95b645e257bb.cer (raw, json) Hash identifier: LcmNDnocEpaCz+nNZxlmUgYVwPEiPF93cRhyI4PpoWg= Subject key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584733459771719857AA4C8C0780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Sep 2024 12:06:24 +0000 Certificate not after: Sun 12 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 36556 IP: 66.148.32.0/19 IP: 96.9.112.0/21 IP: 98.96.128.0/19 IP: 104.151.192.0/19 IP: 170.176.224.0/20 IP: 204.144.160.0/20 IP: 2602:fdfc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:33:45:97:71:71:98:57:aa:4c:8c:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 13 12:06:24 2024 GMT Not After : Jul 12 00:45:20 2026 GMT Subject: CN=95437874-24a3-4971-a87b-95b645e257bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:f2:09:51:6b:00:5b:f9:1a:71:95:18:b2: da:92:6a:85:cc:a3:cd:1a:1d:40:21:f6:f2:4c:77: f0:c3:de:46:7a:e6:b7:b8:b5:48:c0:9f:ba:de:f5: ea:7d:33:81:4e:b0:20:f3:a4:df:01:5e:b0:67:ea: 4b:67:f3:55:f6:9e:13:ed:54:5a:56:06:62:db:a5: 7f:9f:a5:40:94:62:5f:d8:f8:58:4f:29:0a:49:0d: 66:df:32:83:62:21:c0:6f:8e:07:dd:80:83:00:56: e3:77:69:32:39:3f:e9:26:5f:a3:7b:1f:c9:d3:51: c8:21:8f:d0:df:6f:40:fb:3b:7b:34:34:da:e3:6f: 84:01:2b:b9:cb:5f:18:8d:ff:9e:14:63:96:e6:c1: 95:72:c9:97:de:b0:94:89:54:83:d8:c8:21:03:26: a8:6b:a0:a9:e1:6e:a3:92:68:33:9c:2f:b5:13:e4: c5:9c:df:07:66:ac:7f:5b:61:8b:1d:9d:10:b6:ae: 6f:92:ab:90:b0:a9:8d:f9:96:46:22:11:39:bc:c6: 2e:d0:e1:f0:54:16:c3:c4:ea:db:af:20:43:f6:07: fb:d7:73:2a:10:10:cb:fc:80:5c:70:ad:77:f4:03: 06:49:39:d6:6a:0d:98:27:71:9f:2a:e7:6e:8c:f1: f2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.148.32.0/19 96.9.112.0/21 98.96.128.0/19 104.151.192.0/19 170.176.224.0/20 204.144.160.0/20 IPv6: 2602:fdfc::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36556 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:77:eb:93:bb:08:3f:b9:94:db:32:e7:16:a6:b2:5e:c8:7a: ed:3a:61:01:48:17:c9:9f:6f:11:3c:35:80:2d:a6:67:fe:31: cb:00:92:ae:7c:dc:13:9b:22:82:6c:4d:16:6d:7a:39:c6:b4: 7e:65:fc:6d:10:3c:31:b3:5e:71:82:a0:1c:2d:00:fd:bb:64: 4d:a1:72:60:1e:53:cf:b7:35:1e:84:e5:c2:c2:e1:38:4b:b7: 9c:1f:ed:e1:24:05:05:96:a1:db:89:70:1c:83:49:63:af:5a: ec:1e:16:a5:a4:c1:f9:51:39:84:d5:b8:6e:61:c1:35:e2:f4: 07:50:60:0a:a6:7d:be:82:9a:5f:e9:90:d3:52:31:8f:ba:2f: 24:aa:07:14:1a:91:bd:10:fc:82:b4:f4:de:8f:a5:84:fb:dd: 5b:34:a0:c3:80:ef:b9:e3:40:e5:bf:05:f8:5e:b1:57:0b:90: c4:cb:36:78:e9:16:3b:1b:e7:8f:d2:46:ed:dd:88:a4:0c:be: 5a:79:56:d7:1d:f1:fb:7a:3b:93:94:74:a6:86:21:23:7e:97: 64:60:d8:88:cb:e3:de:c2:41:5a:bb:f3:c8:4e:8e:3d:24:d6: bc:b3:cd:55:a6:37:18:2f:38:2e:d6:5e:30:68:06:41:07:f4: 19:d1:19:0b -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWEczRZdxcZhXqkyMB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDkxMzEyMDYyNFoXDTI2MDcxMjAwNDUyMFowLzEtMCsGA1UEAxMk OTU0Mzc4NzQtMjRhMy00OTcxLWE4N2ItOTViNjQ1ZTI1N2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf7yCVFrAFv5GnGVGLLakmqFzKPNGh1AIfby THfww95Geua3uLVIwJ+63vXqfTOBTrAg86TfAV6wZ+pLZ/NV9p4T7VRaVgZi26V/ n6VAlGJf2PhYTykKSQ1m3zKDYiHAb44H3YCDAFbjd2kyOT/pJl+jex/J01HIIY/Q 329A+zt7NDTa42+EASu5y18Yjf+eFGOW5sGVcsmX3rCUiVSD2MghAyaoa6Cp4W6j kmgznC+1E+TFnN8HZqx/W2GLHZ0Qtq5vkquQsKmN+ZZGIhE5vMYu0OHwVBbDxOrb ryBD9gf713MqEBDL/IBccK139AMGSTnWag2YJ3GfKudujPHy3QIDAQABo4IESTCC BEUwHQYDVR0OBBYEFA2aWGm8M8DRlZw9ALkAO7lDik5pMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVlMjU3YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk1NDM3ODc0LTI0YTMtNDk3MS1h ODdiLTk1YjY0NWUyNTdiYi85NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVl MjU3YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAVClCADBANgCXADBAViYIADBAVol8ADBASqsOAD BATMkKAwDgQCAAIwCAMGBCYC/fwAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCO zDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAzd+uTuwg/uZTbMucWprJeyHrtOmEBSBfJn28RPDWALaZn/jHL AJKufNwTmyKCbE0WbXo5xrR+ZfxtEDwxs15xgqAcLQD9u2RNoXJgHlPPtzUehOXC wuE4S7ecH+3hJAUFlqHbiXAcg0ljr1rsHhalpMH5UTmE1bhuYcE14vQHUGAKpn2+ gppf6ZDTUjGPui8kqgcUGpG9EPyCtPTej6WE+91bNKDDgO+540DlvwX4XrFXC5DE yzZ46RY7G+eP0kbt3YikDL5aeVbXHfH7ejuTlHSmhiEjfpdkYNiIy+PewkFau/PI To49JNa8s81VpjcYLzgu1l4waAZBB/QZ0RkL -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:12 2024 by rpki-client on console-ams.rpki-client.org