$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer File: ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer (raw, json) Hash identifier: 6Qyv/gFzPFOb8ManCg+Pu85F1uC6DI5KTPti5BjNVqI= Subject key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858466BBD069DD01D0B35AABDB190 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Jul 2024 00:45:22 +0000 Certificate not after: Wed 07 Oct 2026 00:45:22 +0000 Subordinate resources: AS: 13880 AS: 26887 IP: 64.57.32.0/20 IP: 216.230.48.0/20 IP: 2620:110:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:6b:bd:06:9d:d0:1d:0b:35:aa:bd:b1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 4 00:45:22 2024 GMT Not After : Oct 7 00:45:22 2026 GMT Subject: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:7c:c8:21:47:03:41:a0:23:ac:c2:d9:84: ff:97:2b:25:0f:3d:a9:07:f2:55:10:e2:f3:c5:eb: 50:cd:f4:0a:d3:84:07:8b:97:ae:42:e0:ce:eb:da: 10:b5:f6:77:42:c8:e7:26:20:fa:6e:f9:fb:ad:b1: 25:7a:31:ef:99:10:d0:ed:16:fd:b4:c8:c7:14:8a: 5d:f5:60:36:86:92:23:3b:90:0f:56:02:fd:da:61: e6:e5:fb:a3:93:5a:1a:ba:5c:20:f0:6e:4e:b7:c5: c7:1c:15:99:f3:88:1f:3d:64:fb:1a:13:06:c5:23: cf:67:2f:a2:cd:94:22:3b:c9:87:05:7f:f9:86:81: 3e:1d:92:38:6c:f5:a3:6b:94:08:00:bb:df:7a:b6: 8d:15:b4:5f:7e:43:fb:cb:59:7b:3c:11:16:2d:c0: 21:8d:93:4f:8b:f8:4b:b4:b7:35:d2:d2:b9:1d:40: d8:0f:48:9e:c1:e8:7a:ee:e4:7a:70:65:ca:d0:82: 54:d8:d3:11:cd:fe:50:fd:73:07:01:c0:13:cf:dd: 8c:e1:74:54:34:f8:b3:ea:f6:a6:ef:bf:d4:11:94: a6:eb:a1:0b:27:c8:fe:f2:ab:38:df:34:de:5c:2a: 23:18:b0:e6:16:f1:b6:16:1f:e9:ac:a6:6e:47:7f: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.57.32.0/20 216.230.48.0/20 IPv6: 2620:110:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13880 26887 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:38:c9:7c:b8:e4:ab:b5:3e:bd:72:fd:5f:b7:ef:42:3a:37: 32:4a:f5:1a:4c:97:16:47:67:a6:5b:4a:d3:d7:54:d1:f2:c7: f9:44:78:b5:53:e6:03:6c:78:59:9e:d7:f6:24:0b:9b:6d:ed: 81:57:97:14:a4:36:ed:fc:88:b8:3e:19:dc:cb:d2:69:fc:48: 02:3d:f4:22:46:4e:14:9e:16:30:77:5b:56:60:a8:78:d2:f2: 90:5e:68:4f:2f:ad:29:b0:00:9f:09:50:b7:63:81:33:d2:a1: 8b:66:89:15:24:82:b4:4a:9c:d8:62:9c:5a:8d:da:f7:1c:ff: 03:be:0e:cb:b4:bb:40:bc:f2:89:63:66:9d:cb:cb:f0:ff:af: 3f:4c:ba:c8:bf:49:16:b6:b1:b7:3d:71:03:ad:1f:71:9b:65: 3a:40:ea:39:80:3d:5b:e6:6f:50:f5:6a:24:53:08:2b:a4:f7: fa:fa:e1:7f:73:fb:6d:53:9a:9d:a7:d2:dd:e1:0b:d3:3f:bd: eb:82:8a:1e:37:56:f0:e5:65:ca:42:5c:97:b9:ed:63:3e:64: 3f:49:fb:e2:7f:23:35:5a:ee:69:7d:e5:a0:e1:e4:ef:a3:88: be:ef:b6:ca:fc:b6:01:2a:d7:0e:8f:8c:bc:22:a8:3e:4f:d4: 15:1a:91:14 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEZrvQad0B0LNaq9sZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDcwNDAwNDUyMloXDTI2MTAwNzAwNDUyMlowLzEtMCsGA1UEAxMk YWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZhZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/B8yCFHA0GgI6zC2YT/lyslDz2pB/JVEOLz xetQzfQK04QHi5euQuDO69oQtfZ3QsjnJiD6bvn7rbElejHvmRDQ7Rb9tMjHFIpd 9WA2hpIjO5APVgL92mHm5fujk1oaulwg8G5Ot8XHHBWZ84gfPWT7GhMGxSPPZy+i zZQiO8mHBX/5hoE+HZI4bPWja5QIALvferaNFbRffkP7y1l7PBEWLcAhjZNPi/hL tLc10tK5HUDYD0ieweh67uR6cGXK0IJU2NMRzf5Q/XMHAcATz92M4XRUNPiz6vam 77/UEZSm66ELJ8j+8qs43zTeXCojGLDmFvG2Fh/prKZuR3+BzwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFIjf25gwwdFM1bcxhOyn/GD0X/LTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h ZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FkM2Y2NjIwLTA1NzYtNDZkOC1i MDVkLTNlMmNkZDA2YWZhMy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQw NmFmYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBARAOSADBATY5jAwDwQCAAIwCQMHBCYgARBwADAd BggrBgEFBQcBCAEB/wQOMAygCjAIAgI2OAICaQcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPTjJfLjkq7U+ vXL9X7fvQjo3Mkr1GkyXFkdnpltK09dU0fLH+UR4tVPmA2x4WZ7X9iQLm23tgVeX FKQ27fyIuD4Z3MvSafxIAj30IkZOFJ4WMHdbVmCoeNLykF5oTy+tKbAAnwlQt2OB M9Khi2aJFSSCtEqc2GKcWo3a9xz/A74Oy7S7QLzyiWNmncvL8P+vP0y6yL9JFrax tz1xA60fcZtlOkDqOYA9W+ZvUPVqJFMIK6T3+vrhf3P7bVOanafS3eEL0z+964KK HjdW8OVlykJcl7ntYz5kP0n74n8jNVruaX3loOHk76OIvu+2yvy2ASrXDo+MvCKo Pk/UFRqRFA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:23 2024 by rpki-client on console-fra.rpki-client.org