$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer File: 9df74e6e-da16-4cba-a854-ee087e767113.cer (raw, json) Hash identifier: mEx6vQ8jhVtwOXU5szxj6Q+ffWnFVDPZanWrfDxBoQM= Subject key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584478224FDC2A7FDFD3D72009B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jan 2024 01:45:16 +0000 Certificate not after: Sat 11 Apr 2026 00:45:16 +0000 Subordinate resources: IP: 132.206.0.0/16 IP: 132.216.0.0/16 IP: 142.157.0.0/16 IP: 192.197.121.0/24 IP: 198.168.128.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:78:22:4f:dc:2a:7f:df:d3:d7:20:09:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 7 01:45:16 2024 GMT Not After : Apr 11 00:45:16 2026 GMT Subject: CN=9df74e6e-da16-4cba-a854-ee087e767113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:4b:1e:bb:a7:f1:d1:97:38:86:7a:ed:b9: 67:a4:90:d8:bc:72:5a:37:a4:a2:2a:0a:2f:00:6e: 8d:83:00:93:cf:5d:fa:f7:2d:af:53:da:19:e4:af: 72:51:08:65:75:0b:f0:77:7e:dc:77:b3:b5:37:24: 5c:39:0c:55:61:5b:0c:d3:21:fd:d4:57:d3:53:cd: 9e:d9:b0:ba:7b:d6:1a:30:8d:82:25:6e:d9:22:c3: a0:cb:2c:19:84:97:34:64:69:00:3c:70:7a:61:be: 30:94:f3:ef:56:b1:ed:ef:93:99:26:f8:24:75:c9: ac:76:d9:c7:ca:de:3d:cd:a9:34:1c:ba:6c:96:c6: 92:2c:f7:0c:6a:c2:89:6a:af:d1:43:fd:79:07:39: 4f:cb:96:23:e8:a0:ce:15:9a:29:50:12:bb:31:0e: 89:c2:1c:aa:48:7c:ff:9f:72:70:b3:b5:23:80:e9: f0:8f:4e:3d:a2:00:c5:b0:fa:a4:28:28:65:a4:9b: 3d:4f:eb:76:be:2c:e7:9a:ba:81:85:c8:b9:6e:c4: 3c:65:93:1d:11:21:f1:3b:fd:b9:6f:08:88:b6:f2: f6:be:f3:16:eb:23:c9:7c:ff:80:7e:ee:cd:2c:7b: 7d:de:c2:62:c2:f9:d0:70:a2:30:b7:a2:05:a7:35: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 132.206.0.0/16 132.216.0.0/16 142.157.0.0/16 192.197.121.0/24 198.168.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:77:4b:68:cd:ac:0e:3c:d8:5f:02:cd:03:47:d5:54:cd:10: 35:13:7c:36:48:20:78:60:3b:f2:5c:61:4d:83:22:bb:8e:5c: ab:6b:a9:f6:90:a1:50:f7:50:15:4e:40:3c:a3:b1:b2:dd:0c: 74:f1:bd:40:84:23:61:7f:2b:e3:c9:e1:ea:89:99:93:ff:f0: f0:97:89:3e:e3:fd:fb:b9:00:7b:f0:7b:0f:c2:db:71:7d:a7: 3b:04:f5:17:d3:99:70:f6:c3:58:75:74:7a:fc:13:6b:42:ea: 70:0e:ef:9a:4a:9b:ef:43:7f:24:38:4a:95:ed:81:79:db:4b: 1e:3c:5e:67:08:6c:15:f7:c6:ba:4a:77:d5:a7:81:08:ec:5b: 92:8c:25:22:2c:8a:a5:22:7e:f1:fa:23:54:90:fa:62:29:ea: 4a:f6:4b:76:de:e9:77:3a:47:0e:e7:c5:d9:ab:85:66:51:43: ec:a7:cc:a5:b9:72:d6:e8:51:ea:30:ab:bd:ab:76:ec:8b:dd: 71:92:80:98:14:3a:fe:9c:cd:d4:5d:05:4c:13:b1:d2:5c:41: f9:af:44:6a:0f:ed:db:a8:25:02:b3:d2:32:3b:5d:9a:be:0a: ec:ce:81:bb:2f:e8:1c:80:d2:6f:c4:6c:33:8a:52:7c:8a:c2: e1:b1:8a:fe -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWER4Ik/cKn/f09cgCbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDEwNzAxNDUxNloXDTI2MDQxMTAwNDUxNlowLzEtMCsGA1UEAxMk OWRmNzRlNmUtZGExNi00Y2JhLWE4NTQtZWUwODdlNzY3MTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu1LHrun8dGXOIZ67blnpJDYvHJaN6SiKgov AG6NgwCTz1369y2vU9oZ5K9yUQhldQvwd37cd7O1NyRcOQxVYVsM0yH91FfTU82e 2bC6e9YaMI2CJW7ZIsOgyywZhJc0ZGkAPHB6Yb4wlPPvVrHt75OZJvgkdcmsdtnH yt49zak0HLpslsaSLPcMasKJaq/RQ/15BzlPy5Yj6KDOFZopUBK7MQ6JwhyqSHz/ n3Jws7UjgOnwj049ogDFsPqkKChlpJs9T+t2viznmrqBhci5bsQ8ZZMdESHxO/25 bwiItvL2vvMW6yPJfP+Afu7NLHt93sJiwvnQcKIwt6IFpzVq6QIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFBKuFHIXcf8Nl0/VBolT/trw8X0YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 ZGY3NGU2ZS1kYTE2LTRjYmEtYTg1NC1lZTA4N2U3NjcxMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzlkZjc0ZTZlLWRhMTYtNGNiYS1h ODU0LWVlMDg3ZTc2NzExMy85ZGY3NGU2ZS1kYTE2LTRjYmEtYTg1NC1lZTA4N2U3 NjcxMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMCEEAgABMBsDAwCEzgMDAITYAwMAjp0DBADAxXkDBAbGqIAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAb3dLaM2sDjzYXwLNA0fVVM0QNRN8NkggeGA78lxhTYMiu45cq2up9pCh UPdQFU5APKOxst0MdPG9QIQjYX8r48nh6omZk//w8JeJPuP9+7kAe/B7D8LbcX2n OwT1F9OZcPbDWHV0evwTa0LqcA7vmkqb70N/JDhKle2BedtLHjxeZwhsFffGukp3 1aeBCOxbkowlIiyKpSJ+8fojVJD6YinqSvZLdt7pdzpHDufF2auFZlFD7KfMpbly 1uhR6jCrvat27IvdcZKAmBQ6/pzN1F0FTBOx0lxB+a9Eag/t26glArPSMjtdmr4K 7M6Buy/oHIDSb8RsM4pSfIrC4bGK/g== -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:53 2024 by rpki-client on console-fra.rpki-client.org