$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41.cer File: ae995705-0f5f-4dee-bca0-7f8caa21fe41.cer (raw, json) Hash identifier: 4YQTM+N7JfD4qA8Zs+nKBrwaXrhgJKQMRlKoNOCXeOc= Subject key identifier: 20:EF:0B:00:80:60:D0:9B:28:53:AA:22:BC:33:C3:B5:EB:CD:C6:BD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584234F82A43C563F378F4F5EE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/ae995705-0f5f-4dee-bca0-7f8caa21fe41.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Jun 2023 14:47:19 +0000 Certificate not after: Mon 15 Sep 2025 14:47:19 +0000 Subordinate resources: IP: 204.194.224.0/21 IP: 204.227.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:34:f8:2a:43:c5:63:f3:78:f4:f5:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 13 14:47:19 2023 GMT Not After : Sep 15 14:47:19 2025 GMT Subject: CN=ae995705-0f5f-4dee-bca0-7f8caa21fe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a8:92:ac:76:ef:db:0c:8f:45:a6:de:e0:7c: af:26:15:51:ed:1e:76:46:bf:c1:66:4c:9c:3b:f5: 66:08:9e:55:d1:59:47:f5:e4:87:e4:a6:b3:ce:d1: 23:67:f9:30:25:36:15:9e:3f:c9:a8:38:35:25:3d: ea:73:6f:18:e5:db:78:c2:c7:80:5c:f4:02:54:4e: 05:b8:e2:fc:2e:aa:e4:1c:2b:d1:4d:f5:f2:03:43: 42:1c:71:b1:0a:c2:15:0d:24:1d:14:30:5c:b8:ab: d3:4b:9a:c8:19:8b:2f:31:47:45:15:0f:4d:ca:15: ef:fe:37:64:04:8a:96:d5:d5:f7:16:f4:8f:62:56: 4d:1f:e9:85:5b:f7:37:8b:fb:51:51:8e:9a:5f:9a: 9d:c4:45:c7:90:ee:35:14:e9:f9:26:03:b7:63:6f: 03:70:a8:aa:2c:39:1e:bb:5e:d8:1b:ef:cf:28:6d: e8:54:b1:51:f0:54:d4:fb:93:d0:24:9f:64:3b:26: 74:75:39:f1:c3:f6:df:be:33:af:44:a0:13:97:13: 94:98:de:bd:22:8f:ca:26:db:4a:07:71:f8:26:81: 45:00:5d:77:b5:21:72:04:f6:43:b2:6c:9a:66:ab: 85:7b:41:17:c1:cf:1c:f2:c1:d3:67:36:b7:d7:df: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EF:0B:00:80:60:D0:9B:28:53:AA:22:BC:33:C3:B5:EB:CD:C6:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/ae995705-0f5f-4dee-bca0-7f8caa21fe41.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.194.224.0/21 204.227.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:aa:1a:25:33:6f:97:27:f4:96:70:72:ca:b1:45:e9:18:60: 37:1c:1b:76:9a:2f:5f:c6:05:ee:1c:fc:ba:d0:c0:d1:5d:87: 71:e5:94:b4:60:bd:7f:d1:c8:73:1a:f0:b5:fd:f4:3a:3a:c2: da:ed:b0:e4:c9:5c:04:80:61:c9:40:58:cf:33:ef:64:b7:54: ad:28:46:30:aa:fe:00:57:c4:90:f9:70:5d:ee:8e:73:44:73: 37:c1:9e:5f:da:c1:c3:63:2b:d7:b7:24:fb:4f:bb:da:47:05: 8e:a4:52:24:3b:d6:75:ec:c8:13:03:b7:f8:83:2e:2b:8f:ad: 6c:68:6f:53:cd:e8:3a:c3:2b:eb:37:35:ff:d6:60:11:a7:f7: fd:ef:be:ab:c9:3d:2e:0e:ce:61:ef:82:89:40:e9:38:29:8f: b1:e5:d1:a4:38:d7:f2:86:8a:65:be:c9:32:35:23:77:22:09: 0f:c0:45:59:eb:76:2d:eb:d4:cb:dc:39:e9:44:ef:30:4a:62: 12:60:e6:a9:3a:61:5b:e1:fd:b5:27:b2:e0:9e:93:29:74:05: 5b:0a:de:9b:fe:d5:b0:22:e7:e7:9b:2b:71:9e:28:52:b7:6c: 17:1e:98:2d:1c:06:3c:a3:a9:71:80:2a:ef:55:9d:a4:06:b1: 2a:ee:fc:b7 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEI0+CpDxWPzePT17gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDYxMzE0NDcxOVoXDTI1MDkxNTE0NDcxOVowLzEtMCsGA1UEAxMk YWU5OTU3MDUtMGY1Zi00ZGVlLWJjYTAtN2Y4Y2FhMjFmZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaiSrHbv2wyPRabe4HyvJhVR7R52Rr/BZkyc O/VmCJ5V0VlH9eSH5KazztEjZ/kwJTYVnj/JqDg1JT3qc28Y5dt4wseAXPQCVE4F uOL8LqrkHCvRTfXyA0NCHHGxCsIVDSQdFDBcuKvTS5rIGYsvMUdFFQ9NyhXv/jdk BIqW1dX3FvSPYlZNH+mFW/c3i/tRUY6aX5qdxEXHkO41FOn5JgO3Y28DcKiqLDke u17YG+/PKG3oVLFR8FTU+5PQJJ9kOyZ0dTnxw/bfvjOvRKATlxOUmN69Io/KJttK B3H4JoFFAF13tSFyBPZDsmyaZquFe0EXwc8c8sHTZza3198B/QIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFCDvCwCAYNCbKFOqIrwzw7Xrzca9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h ZTk5NTcwNS0wZjVmLTRkZWUtYmNhMC03ZjhjYWEyMWZlNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FlOTk1NzA1LTBmNWYtNGRlZS1i Y2EwLTdmOGNhYTIxZmU0MS9hZTk5NTcwNS0wZjVmLTRkZWUtYmNhMC03ZjhjYWEy MWZlNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAPMwuADBAXM42AwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAqoaJTNvlyf0 lnByyrFF6RhgNxwbdpovX8YF7hz8utDA0V2HceWUtGC9f9HIcxrwtf30OjrC2u2w 5MlcBIBhyUBYzzPvZLdUrShGMKr+AFfEkPlwXe6Oc0RzN8GeX9rBw2Mr17ck+0+7 2kcFjqRSJDvWdezIEwO3+IMuK4+tbGhvU83oOsMr6zc1/9ZgEaf3/e++q8k9Lg7O Ye+CiUDpOCmPseXRpDjX8oaKZb7JMjUjdyIJD8BFWet2LevUy9w56UTvMEpiEmDm qTphW+H9tSey4J6TKXQFWwrem/7VsCLn55srcZ4oUrdsFx6YLRwGPKOpcYAq71Wd pAaxKu78tw== -----END CERTIFICATE-----Generated at Wed May 1 01:54:54 2024 by rpki-client on console-ams.rpki-client.org