$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f.cer File: 988579cf-7343-453f-ab13-f97f89eece8f.cer (raw, json) Hash identifier: KYLq71iDTWTJwWvwI4w5/18Vq68BZ46G3kHDR2VFgY0= Subject key identifier: 25:74:49:A1:95:F7:F2:D3:92:40:5F:18:DC:14:0E:BF:0F:16:2C:DD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285842EE6220B513EE5F4F6FE05100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f/988579cf-7343-453f-ab13-f97f89eece8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Aug 2023 00:45:21 +0000 Certificate not after: Fri 21 Nov 2025 01:45:21 +0000 Subordinate resources: AS: 394501 IP: 23.150.0.0/24 IP: 45.45.172.0/22 IP: 134.195.32.0/22 IP: 2605:1ec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ee:62:20:b5:13:ee:5f:4f:6f:e0:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 19 00:45:21 2023 GMT Not After : Nov 21 01:45:21 2025 GMT Subject: CN=988579cf-7343-453f-ab13-f97f89eece8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:0b:05:87:35:da:0e:a0:0d:63:88:a5:1b: 36:fa:9c:db:d8:e4:47:d7:e4:01:f4:e6:74:f9:b0: d5:cd:f2:21:66:2f:cc:ae:0b:6e:95:4e:71:e9:89: 4a:42:74:7f:cd:dd:77:7e:ad:e8:95:a1:26:07:fb: ab:29:43:ac:13:55:f8:16:fa:e6:37:09:4e:74:9c: ce:6d:b6:ec:0f:89:80:a2:11:5c:11:ea:78:15:16: 4b:6c:29:10:55:db:f7:74:57:47:30:4c:3c:38:7f: 2f:dc:1f:e5:47:61:99:0f:a3:a1:5d:79:2f:87:ff: cd:7d:d9:d6:d4:02:b3:2c:14:7c:fe:0a:c5:f3:04: 31:49:99:18:31:f4:2e:8f:e7:61:cd:0c:d8:6e:bd: 81:76:2f:48:a3:c1:37:8a:e5:45:f2:23:cd:5f:52: 1e:1f:77:7c:94:c4:7c:80:3f:87:91:71:13:5a:88: ff:c2:6f:dc:e6:e7:df:0d:61:b5:4d:fc:8e:df:e7: 22:dd:6f:e4:a8:7e:69:db:a1:6c:fe:b9:fb:bc:4a: 32:58:d4:a1:dd:0b:a5:39:f1:28:64:09:d9:33:0c: da:71:3a:61:cf:50:de:5f:da:02:9a:ae:db:d9:00: 5c:74:88:89:bb:6a:2b:f3:78:da:a7:3f:05:a0:97: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:74:49:A1:95:F7:F2:D3:92:40:5F:18:DC:14:0E:BF:0F:16:2C:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f/988579cf-7343-453f-ab13-f97f89eece8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.150.0.0/24 45.45.172.0/22 134.195.32.0/22 IPv6: 2605:1ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394501 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b1:5e:02:c1:a6:64:32:3b:4c:e4:d1:44:db:7c:72:f6:cb: fd:ac:15:23:ac:2f:70:98:97:33:ca:fa:d5:2e:f7:f5:48:dd: 20:22:a0:90:c9:ea:11:1d:ed:87:bc:e5:22:b7:be:59:0f:e4: 91:49:01:20:71:0d:5a:d0:92:be:00:ae:49:bb:90:70:a9:c0: 00:98:1c:64:28:50:9e:01:81:53:90:7a:9c:8f:03:56:a5:a2: 95:d0:14:e2:13:c7:2d:f6:d1:58:2a:e8:ef:d8:17:8f:0d:53: 79:99:90:ef:8a:7f:0a:5b:3f:59:03:2e:e2:0d:a2:1c:79:76: 80:bd:5b:2b:39:08:e7:4e:e4:3d:7f:5e:e1:d9:16:f6:d4:28: e7:68:2b:2c:31:95:54:92:e3:5a:5e:75:a1:b4:05:1c:ec:a6: 3b:3f:0e:86:99:bc:2f:e6:63:35:5c:95:7a:dc:3e:59:14:af: 57:a4:5b:05:6f:8a:c6:20:fd:87:f8:20:a9:39:80:f1:94:3d: a1:01:72:bb:51:a5:cf:a4:13:2f:68:e2:da:cf:85:cb:24:e6: 3a:f9:7d:45:ac:11:5b:31:a6:90:25:66:6f:de:33:cc:14:8e: c3:0c:6b:f2:fe:18:b9:3a:7e:b1:1e:98:1f:bb:9d:87:3a:ed: 1d:72:fd:a8 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWELuYiC1E+5fT2/gUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDgxOTAwNDUyMVoXDTI1MTEyMTAxNDUyMVowLzEtMCsGA1UEAxMk OTg4NTc5Y2YtNzM0My00NTNmLWFiMTMtZjk3Zjg5ZWVjZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndgLBYc12g6gDWOIpRs2+pzb2ORH1+QB9OZ0 +bDVzfIhZi/MrgtulU5x6YlKQnR/zd13fq3olaEmB/urKUOsE1X4FvrmNwlOdJzO bbbsD4mAohFcEep4FRZLbCkQVdv3dFdHMEw8OH8v3B/lR2GZD6OhXXkvh//NfdnW 1AKzLBR8/grF8wQxSZkYMfQuj+dhzQzYbr2Bdi9Io8E3iuVF8iPNX1IeH3d8lMR8 gD+HkXETWoj/wm/c5uffDWG1TfyO3+ci3W/kqH5p26Fs/rn7vEoyWNSh3QulOfEo ZAnZMwzacTphz1DeX9oCmq7b2QBcdIiJu2or83japz8FoJf3aQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFCV0SaGV9/LTkkBfGNwUDr8PFizdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 ODg1NzljZi03MzQzLTQ1M2YtYWIxMy1mOTdmODllZWNlOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk4ODU3OWNmLTczNDMtNDUzZi1h YjEzLWY5N2Y4OWVlY2U4Zi85ODg1NzljZi03MzQzLTQ1M2YtYWIxMy1mOTdmODll ZWNlOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXlgADBAItLawDBAKGwyAwDQQCAAIwBwMFACYF HsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgUFMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGqxXgLBpmQy O0zk0UTbfHL2y/2sFSOsL3CYlzPK+tUu9/VI3SAioJDJ6hEd7Ye85SK3vlkP5JFJ ASBxDVrQkr4Arkm7kHCpwACYHGQoUJ4BgVOQepyPA1alopXQFOITxy320Vgq6O/Y F48NU3mZkO+KfwpbP1kDLuINohx5doC9Wys5COdO5D1/XuHZFvbUKOdoKywxlVSS 41pedaG0BRzspjs/DoaZvC/mYzVclXrcPlkUr1ekWwVvisYg/Yf4IKk5gPGUPaEB crtRpc+kEy9o4trPhcsk5jr5fUWsEVsxppAlZm/eM8wUjsMMa/L+GLk6frEemB+7 nYc67R1y/ag= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:53 2024 by rpki-client on console-fra.rpki-client.org