$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer File: ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer (raw, json) Hash identifier: cWyEAnNjuAqHg3mCFSnjQtP3xDhJ+PGVee8vW+BJJCc= Subject key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E4834F8B44D793DA51BF3F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Thu 03 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 13880 AS: 26887 IP: 64.57.32.0/20 IP: 216.230.48.0/20 IP: 2620:110:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4f:8b:44:d7:93:da:51:bf:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 3 19:06:39 2025 GMT Subject: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:7c:c8:21:47:03:41:a0:23:ac:c2:d9:84: ff:97:2b:25:0f:3d:a9:07:f2:55:10:e2:f3:c5:eb: 50:cd:f4:0a:d3:84:07:8b:97:ae:42:e0:ce:eb:da: 10:b5:f6:77:42:c8:e7:26:20:fa:6e:f9:fb:ad:b1: 25:7a:31:ef:99:10:d0:ed:16:fd:b4:c8:c7:14:8a: 5d:f5:60:36:86:92:23:3b:90:0f:56:02:fd:da:61: e6:e5:fb:a3:93:5a:1a:ba:5c:20:f0:6e:4e:b7:c5: c7:1c:15:99:f3:88:1f:3d:64:fb:1a:13:06:c5:23: cf:67:2f:a2:cd:94:22:3b:c9:87:05:7f:f9:86:81: 3e:1d:92:38:6c:f5:a3:6b:94:08:00:bb:df:7a:b6: 8d:15:b4:5f:7e:43:fb:cb:59:7b:3c:11:16:2d:c0: 21:8d:93:4f:8b:f8:4b:b4:b7:35:d2:d2:b9:1d:40: d8:0f:48:9e:c1:e8:7a:ee:e4:7a:70:65:ca:d0:82: 54:d8:d3:11:cd:fe:50:fd:73:07:01:c0:13:cf:dd: 8c:e1:74:54:34:f8:b3:ea:f6:a6:ef:bf:d4:11:94: a6:eb:a1:0b:27:c8:fe:f2:ab:38:df:34:de:5c:2a: 23:18:b0:e6:16:f1:b6:16:1f:e9:ac:a6:6e:47:7f: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.57.32.0/20 216.230.48.0/20 IPv6: 2620:110:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13880 26887 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:26:8f:b8:57:36:aa:33:02:32:69:d2:d1:82:ea:41:3d:ab: 11:6a:89:3a:2b:39:7a:9b:b8:32:17:03:84:ce:28:c9:89:6f: d1:3c:29:b8:16:4b:95:2e:fc:72:52:fd:5f:73:9e:a1:06:31: 7d:86:e5:07:2f:02:11:28:58:d1:d2:05:b7:25:17:a7:ad:a3: bb:c7:9a:75:d9:e0:3e:29:d7:ec:4d:c5:ea:fc:7b:8d:73:b0: 81:22:e9:f7:81:d1:a9:c4:f1:28:b9:39:37:8c:1b:0d:ab:36: a0:f0:83:28:82:a8:92:6e:57:19:48:cc:8c:0e:7a:b3:81:b3: 08:30:29:c2:7f:56:20:68:1a:a4:e9:f7:ce:4e:54:f4:21:b7: e8:9b:19:08:64:0c:7d:b1:a6:55:a4:1a:e0:e1:85:3b:c3:22: ea:c8:15:c4:ca:64:33:82:9f:e9:0f:f6:c8:f9:f5:5f:21:88: 96:c3:85:b5:49:30:11:27:87:dd:de:45:71:f7:6a:92:71:11: 78:dc:07:86:6c:ff:9e:2f:65:be:b3:e3:ff:aa:4e:24:51:eb: e0:9a:84:cf:cf:98:30:93:c9:65:19:9d:8a:96:e4:1c:03:36: 04:34:d5:2d:83:a4:45:c2:36:a9:7d:e6:44:f6:cc:d8:ea:92: e2:42:8b:b5 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEHkg0+LRNeT2lG/P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcwMzE5MDYzOVowLzEtMCsGA1UEAxMk YWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZhZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/B8yCFHA0GgI6zC2YT/lyslDz2pB/JVEOLz xetQzfQK04QHi5euQuDO69oQtfZ3QsjnJiD6bvn7rbElejHvmRDQ7Rb9tMjHFIpd 9WA2hpIjO5APVgL92mHm5fujk1oaulwg8G5Ot8XHHBWZ84gfPWT7GhMGxSPPZy+i zZQiO8mHBX/5hoE+HZI4bPWja5QIALvferaNFbRffkP7y1l7PBEWLcAhjZNPi/hL tLc10tK5HUDYD0ieweh67uR6cGXK0IJU2NMRzf5Q/XMHAcATz92M4XRUNPiz6vam 77/UEZSm66ELJ8j+8qs43zTeXCojGLDmFvG2Fh/prKZuR3+BzwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFIjf25gwwdFM1bcxhOyn/GD0X/LTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h ZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FkM2Y2NjIwLTA1NzYtNDZkOC1i MDVkLTNlMmNkZDA2YWZhMy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQw NmFmYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBARAOSADBATY5jAwDwQCAAIwCQMHBCYgARBwADAd BggrBgEFBQcBCAEB/wQOMAygCjAIAgI2OAICaQcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhyaPuFc2qjMC MmnS0YLqQT2rEWqJOis5epu4MhcDhM4oyYlv0TwpuBZLlS78clL9X3OeoQYxfYbl By8CEShY0dIFtyUXp62ju8eaddngPinX7E3F6vx7jXOwgSLp94HRqcTxKLk5N4wb Das2oPCDKIKokm5XGUjMjA56s4GzCDApwn9WIGgapOn3zk5U9CG36JsZCGQMfbGm VaQa4OGFO8Mi6sgVxMpkM4Kf6Q/2yPn1XyGIlsOFtUkwESeH3d5FcfdqknEReNwH hmz/ni9lvrPj/6pOJFHr4JqEz8+YMJPJZRmdipbkHAM2BDTVLYOkRcI2qX3mRPbM 2OqS4kKLtQ== -----END CERTIFICATE-----Generated at Thu Mar 28 22:26:48 2024 by rpki-client on console-fra.rpki-client.org