$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer File: ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer (raw, json) Hash identifier: B/liI6Aophp7F6vcsVTmCOWf3kOqBNGWZSayX3/49ls= Subject key identifier: EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E4834C7C814B3AC4773FA700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Thu 12 Jun 2025 19:06:39 +0000 Subordinate resources: AS: 27644 AS: 400635 IP: 192.124.129.0/24 IP: 207.167.126.0/23 IP: 2620:11e:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4c:7c:81:4b:3a:c4:77:3f:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jun 12 19:06:39 2025 GMT Subject: CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:d6:ac:8c:d0:8d:07:f6:77:55:8c:78:17: d6:3e:2c:91:db:7c:69:fa:d5:0c:d0:0e:02:89:ee: e9:3b:e7:ed:29:78:68:20:5c:3c:03:57:0a:9d:b6: 74:98:05:6d:3d:c5:4e:39:e7:11:0d:44:37:ea:1a: 6f:84:e1:2e:1c:10:46:f4:50:77:f0:a1:a8:d8:ec: 63:a4:12:dd:22:d8:df:c5:f9:a4:67:58:50:44:75: 91:a3:91:5f:a8:4f:c2:ae:31:a7:63:ad:35:4e:59: fb:e3:65:24:23:c8:9f:c1:8e:6c:eb:f4:53:b3:53: 9b:64:a3:9b:98:46:1d:15:05:fa:e7:fa:c8:f0:d1: c1:c1:8a:0a:ad:c4:8b:15:75:f2:e3:06:7e:f7:aa: 52:ec:1c:07:a9:02:26:7f:67:83:95:f6:90:dd:c9: 13:56:89:86:23:80:50:91:53:a9:6e:d5:05:8c:41: 9e:d3:e2:7b:84:a5:05:80:8e:11:35:08:29:c3:37: 77:a3:8d:4b:b3:8a:0f:52:06:73:81:cb:16:38:9a: 3f:8c:9f:af:c6:fe:fc:01:32:d0:76:69:40:f0:05: e8:09:a1:4a:cb:e2:15:0c:b7:98:5e:48:82:05:a3: 87:95:ee:81:40:26:fc:0d:ec:44:be:6b:86:d5:bf: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.124.129.0/24 207.167.126.0/23 IPv6: 2620:11e:f000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27644 400635 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7f:ac:c7:a6:ac:96:46:b7:da:03:61:12:77:f6:31:35:7f: 37:73:84:34:38:18:44:6c:96:74:92:46:ae:06:3a:e0:a1:f8: c0:29:af:64:70:e3:a0:3c:41:d5:c7:aa:9c:3d:73:e7:6d:ca: c0:6a:25:5a:ea:2d:7a:78:81:67:0f:25:0a:0b:a2:78:8c:e7: 2c:70:81:d2:99:84:25:a9:c2:e6:0b:04:6f:58:c0:ea:c6:cc: 7f:f2:ef:1e:9e:60:29:3e:8f:6d:31:27:c3:3e:6a:25:88:7d: b2:a8:55:89:d5:8b:f7:f2:b2:e1:f6:db:a0:01:7f:f8:d6:4f: df:85:7c:ec:86:77:68:b8:ea:d9:70:df:2b:fb:e9:f8:9a:7a: 2d:0e:7e:d1:73:da:e1:50:27:ce:87:87:31:fe:44:b8:4a:eb: fb:88:d5:a8:b2:c0:ed:bc:85:4f:5e:7f:17:f3:84:52:1b:c5: d4:e6:75:ca:94:d6:8d:75:f4:95:e5:55:93:cf:d2:51:82:8f: 3c:d9:1f:68:bf:a1:a4:c6:e5:33:c0:a5:8d:d3:05:cf:94:09: 9e:d9:44:df:d6:d3:23:56:2f:bf:42:fd:84:fe:0d:8d:8c:03: a6:a1:2f:cc:16:ae:d8:63:bf:51:1a:4c:73:09:c3:20:36:b4: d3:ef:4d:2a -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEHkg0x8gUs6xHc/pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYxMjE5MDYzOVowLzEtMCsGA1UEAxMk YWMyNjBmMDQtZDg1Ni00ZTlmLTlkY2MtZjE2ZDkzYzNhYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eLWrIzQjQf2d1WMeBfWPiyR23xp+tUM0A4C ie7pO+ftKXhoIFw8A1cKnbZ0mAVtPcVOOecRDUQ36hpvhOEuHBBG9FB38KGo2Oxj pBLdItjfxfmkZ1hQRHWRo5FfqE/CrjGnY601Tln742UkI8ifwY5s6/RTs1ObZKOb mEYdFQX65/rI8NHBwYoKrcSLFXXy4wZ+96pS7BwHqQImf2eDlfaQ3ckTVomGI4BQ kVOpbtUFjEGe0+J7hKUFgI4RNQgpwzd3o41Ls4oPUgZzgcsWOJo/jJ+vxv78ATLQ dmlA8AXoCaFKy+IVDLeYXkiCBaOHle6BQCb8DexEvmuG1b8pHQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFO8hIeSfzfOgU6GMDB+9AWuZbIubMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h YzI2MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZkOTNjM2FiNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FjMjYwZjA0LWQ4NTYtNGU5Zi05 ZGNjLWYxNmQ5M2MzYWI1Ni9hYzI2MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZkOTNj M2FiNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBADAfIEDBAHPp34wDwQCAAIwCQMHBCYgAR7wADAe BggrBgEFBQcBCAEB/wQPMA2gCzAJAgJr/AIDBhz7MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACJ/rMemrJZG t9oDYRJ39jE1fzdzhDQ4GERslnSSRq4GOuCh+MApr2Rw46A8QdXHqpw9c+dtysBq JVrqLXp4gWcPJQoLoniM5yxwgdKZhCWpwuYLBG9YwOrGzH/y7x6eYCk+j20xJ8M+ aiWIfbKoVYnVi/fysuH226ABf/jWT9+FfOyGd2i46tlw3yv76fiaei0OftFz2uFQ J86HhzH+RLhK6/uI1aiywO28hU9efxfzhFIbxdTmdcqU1o119JXlVZPP0lGCjzzZ H2i/oaTG5TPApY3TBc+UCZ7ZRN/W0yNWL79C/YT+DY2MA6ahL8wWrthjv1EaTHMJ wyA2tNPvTSo= -----END CERTIFICATE-----Generated at Fri Mar 29 02:30:30 2024 by rpki-client on console-ams.rpki-client.org