$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer File: a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer (raw, json) Hash identifier: UnRkXLDlDRk0rsQoM9F1zI/bMX0Bzw7OKORnoM0bjlk= Subject key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584413A1AEECDD859D8A70AA2FD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 02 Dec 2023 01:45:16 +0000 Certificate not after: Fri 06 Mar 2026 01:45:16 +0000 Subordinate resources: AS: 400422 IP: 104.249.160.0/22 IP: 134.65.198.0/23 IP: 2606:a440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:13:a1:ae:ec:dd:85:9d:8a:70:aa:2f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 2 01:45:16 2023 GMT Not After : Mar 6 01:45:16 2026 GMT Subject: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:4e:88:74:26:6b:01:ad:9b:90:8c:95:80: c0:51:1a:e5:a0:68:67:da:6e:ae:3f:65:23:49:32: 54:1f:52:6e:7e:a1:6a:f3:5a:52:9e:44:16:82:f1: 91:d7:26:dd:82:55:ad:99:b9:26:ef:a6:ee:b4:a8: 47:78:26:a7:24:40:99:40:00:d2:fa:86:ef:70:69: f1:75:4d:26:c7:4b:0a:88:ab:f7:84:84:db:b1:a0: 55:e6:c6:5a:e5:29:2b:54:fb:f0:f4:14:b3:8e:2a: 6f:7e:c0:e2:d9:5f:3b:22:9a:df:20:de:72:17:ee: 61:cb:e9:c3:95:be:c7:43:71:55:3c:d2:bd:78:51: 90:e0:27:e1:1e:f8:73:a3:63:cb:10:2c:9e:a5:52: 9a:51:d4:ad:f2:0a:b4:b0:2a:bd:fb:dc:16:1b:43: 1d:80:e0:53:66:2c:22:d2:2e:72:18:8d:34:ed:e7: a2:cb:b4:17:53:5d:35:90:a8:bd:c0:72:2a:3f:9d: 9e:9d:ca:2a:ba:45:14:3c:35:cf:5e:64:df:62:e0: bf:53:db:1a:93:87:e0:db:1f:eb:87:ec:b8:fc:62: a4:38:39:0f:ee:11:84:0a:d1:ee:30:e7:5e:d2:16: 23:4e:0d:75:80:11:95:b4:9f:d7:1c:de:54:e6:c7: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.249.160.0/22 134.65.198.0/23 IPv6: 2606:a440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400422 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c0:c7:55:3d:8b:42:51:c6:0b:52:2b:bf:0e:20:c4:5f:91: a6:6d:39:dc:09:8a:de:3b:0e:91:87:6c:f9:15:ba:20:ea:fb: 37:38:90:d1:9d:13:ec:37:f9:0d:33:63:fa:a0:6d:89:b8:58: 30:6b:6a:08:d2:35:42:5b:a8:5a:56:5c:c4:4d:15:4a:4a:66: 17:15:0f:a1:34:62:75:5f:7e:30:63:8d:5d:09:49:89:5c:5c: d6:f4:9a:44:92:e9:90:6f:2a:bf:4c:30:0c:58:3d:f9:22:99: 94:80:73:b4:24:b8:54:6a:02:d9:5b:6c:d5:df:a0:fc:ea:2d: 4c:bc:1a:e8:63:9e:2f:d1:db:7c:2e:3c:cb:b9:40:bf:11:5d: e0:5e:62:1c:05:a2:95:87:63:28:38:b0:d9:e5:ac:b5:eb:2e: 5e:f2:24:54:7b:d7:8c:c6:60:01:d5:42:91:3b:57:63:b9:12: 53:d8:ee:82:d8:c4:ba:a5:1e:c7:d8:88:89:aa:aa:44:45:86: 28:51:32:e5:67:63:62:2a:de:6d:fd:ed:38:f7:cb:50:7a:69: d2:9a:c5:17:2b:72:6f:04:b5:60:99:69:23:c0:78:a8:64:3c: e7:86:6c:ef:96:de:48:bb:70:fc:4a:b8:4f:66:f6:c5:fc:c8: 0b:1b:ce:e6 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEQToa7s3YWdinCqL9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTIwMjAxNDUxNloXDTI2MDMwNjAxNDUxNlowLzEtMCsGA1UEAxMk YTJiODNhZTctNTJiNi00NWI0LTkyYzktYzEyZjdiYjAwOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSlOiHQmawGtm5CMlYDAURrloGhn2m6uP2Uj STJUH1JufqFq81pSnkQWgvGR1ybdglWtmbkm76butKhHeCanJECZQADS+obvcGnx dU0mx0sKiKv3hITbsaBV5sZa5SkrVPvw9BSzjipvfsDi2V87IprfIN5yF+5hy+nD lb7HQ3FVPNK9eFGQ4CfhHvhzo2PLECyepVKaUdSt8gq0sCq9+9wWG0MdgOBTZiwi 0i5yGI007eeiy7QXU101kKi9wHIqP52encoqukUUPDXPXmTfYuC/U9sak4fg2x/r h+y4/GKkODkP7hGECtHuMOde0hYjTg11gBGVtJ/XHN5U5sffCwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBkMk3GdLxVNvhJxrLW8dcgDKA4rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h MmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2JiMDA5ZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2EyYjgzYWU3LTUyYjYtNDViNC05 MmM5LWMxMmY3YmIwMDlmNC9hMmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2Ji MDA5ZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJo+aADBAGGQcYwDQQCAAIwBwMFACYGpEAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhwmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAHAx1U9i0JRxgtSK78O IMRfkaZtOdwJit47DpGHbPkVuiDq+zc4kNGdE+w3+Q0zY/qgbYm4WDBragjSNUJb qFpWXMRNFUpKZhcVD6E0YnVffjBjjV0JSYlcXNb0mkSS6ZBvKr9MMAxYPfkimZSA c7QkuFRqAtlbbNXfoPzqLUy8Guhjni/R23wuPMu5QL8RXeBeYhwFopWHYyg4sNnl rLXrLl7yJFR714zGYAHVQpE7V2O5ElPY7oLYxLqlHsfYiImqqkRFhihRMuVnY2Iq 3m397Tj3y1B6adKaxRcrcm8EtWCZaSPAeKhkPOeGbO+W3ki7cPxKuE9m9sX8yAsb zuY= -----END CERTIFICATE-----Generated at Fri Apr 19 01:54:38 2024 by rpki-client on console-ams.rpki-client.org