$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d.cer File: bea0e2f1-9a59-4dd3-a808-a412bd43f25d.cer (raw, json) Hash identifier: 2BuGXd68MuGig9lnFlb5hP8gEQL991zMUoKstotbQBk= Subject key identifier: 24:31:2C:7B:4F:6F:15:26:0B:89:1B:9F:10:C2:D2:16:84:B1:01:35 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858421D00C722978F78C657E07A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/bea0e2f1-9a59-4dd3-a808-a412bd43f25d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Jun 2023 00:45:16 +0000 Certificate not after: Sun 07 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 399287 IP: 45.42.181.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:1d:00:c7:22:97:8f:78:c6:57:e0:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 5 00:45:16 2023 GMT Not After : Sep 7 00:45:16 2025 GMT Subject: CN=bea0e2f1-9a59-4dd3-a808-a412bd43f25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:5f:9c:e2:14:88:06:dd:b7:43:44:e5:62: f8:98:15:51:f7:f2:34:8a:26:ad:70:2f:dd:6a:93: a2:41:11:9c:56:d0:e1:0a:39:ed:d8:c0:45:5c:4b: 01:d3:f7:99:09:74:48:04:21:7e:9a:1f:e3:56:0f: 30:80:e3:e7:3c:32:74:54:c3:55:8a:3d:c0:b1:75: ae:b2:ac:c0:2d:f5:1c:ac:c9:e2:4e:1d:1f:ab:dd: 32:4a:ad:f0:e6:74:66:b2:5c:b1:a5:35:6b:c9:51: 91:e8:d8:6e:89:15:7f:8a:d6:2b:83:70:9f:e9:a1: fd:42:6d:3b:4d:54:d4:6f:3e:26:77:57:fe:72:01: 26:c3:88:8d:26:c7:95:44:d1:5e:fc:99:9a:a5:68: 2e:8f:7b:25:74:70:73:19:cd:a1:bc:a1:aa:a0:eb: ac:6e:c2:bf:a9:0d:8f:bb:25:37:46:04:86:a5:e7: 58:3d:a2:ff:0b:2d:ac:22:5a:25:24:1d:3c:b4:37: 28:07:d8:75:3a:2f:c1:ca:be:3d:7b:cb:d2:4f:4a: 7e:0a:9e:de:06:13:f5:f5:30:26:4c:cb:9d:27:3c: e8:80:a3:94:f0:f6:a2:b6:a5:c1:3e:72:cd:14:67: 34:e7:bb:70:f0:9f:7a:52:4f:04:1f:43:19:99:e9: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:31:2C:7B:4F:6F:15:26:0B:89:1B:9F:10:C2:D2:16:84:B1:01:35 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bea0e2f1-9a59-4dd3-a808-a412bd43f25d/bea0e2f1-9a59-4dd3-a808-a412bd43f25d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.42.181.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399287 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6f:ae:a9:2c:c0:14:ef:fb:9d:c3:b0:4c:71:6e:2b:44:d0: a3:73:c7:42:88:e3:32:10:8b:0c:c4:48:a2:ac:b3:56:b3:be: 45:2e:36:47:f7:78:cf:aa:d2:e3:7a:4c:aa:d0:42:d3:00:5d: 1a:c2:6d:94:2e:d1:f6:c7:b0:0d:4e:e3:ca:f2:68:4b:87:06: 82:43:77:c6:58:71:ce:e5:cb:3f:98:dd:6e:37:b5:88:34:2d: 61:02:31:2a:9c:a1:3d:1f:e9:02:68:e4:25:3f:b7:aa:a5:25: 85:89:10:24:d0:7c:66:95:6b:3c:d1:f7:d9:9c:53:79:d8:b7: fa:7d:5d:05:98:be:f4:b0:fb:99:2b:98:f9:c5:cf:70:0b:53: 63:2c:46:f1:31:0a:8d:4b:ef:eb:48:7f:d7:dd:1d:bb:cc:88: 5c:6c:b0:06:07:4b:09:0d:f2:b5:97:37:3b:43:bc:6d:28:02: 49:49:94:58:64:73:70:d4:d5:60:37:e7:22:87:fa:39:b6:2f: fa:75:d1:0b:56:9c:79:54:7c:8b:14:8a:91:b2:de:37:7b:1e: 8e:d5:6c:d9:3b:be:aa:e5:7d:3f:52:b7:4e:57:0e:f4:62:65: 51:11:33:5e:72:19:83:f8:a2:11:d8:8d:c1:cb:7f:d4:0e:f5: d6:87:7c:b5 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEIdAMcil494xlfgegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDYwNTAwNDUxNloXDTI1MDkwNzAwNDUxNlowLzEtMCsGA1UEAxMk YmVhMGUyZjEtOWE1OS00ZGQzLWE4MDgtYTQxMmJkNDNmMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOdfnOIUiAbdt0NE5WL4mBVR9/I0iiatcC/d apOiQRGcVtDhCjnt2MBFXEsB0/eZCXRIBCF+mh/jVg8wgOPnPDJ0VMNVij3AsXWu sqzALfUcrMniTh0fq90ySq3w5nRmslyxpTVryVGR6NhuiRV/itYrg3Cf6aH9Qm07 TVTUbz4md1f+cgEmw4iNJseVRNFe/JmapWguj3sldHBzGc2hvKGqoOusbsK/qQ2P uyU3RgSGpedYPaL/Cy2sIlolJB08tDcoB9h1Oi/Byr49e8vST0p+Cp7eBhP19TAm TMudJzzogKOU8PaitqXBPnLNFGc057tw8J96Uk8EH0MZmelY+wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCQxLHtPbxUmC4kbnxDC0haEsQE1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i ZWEwZTJmMS05YTU5LTRkZDMtYTgwOC1hNDEyYmQ0M2YyNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2JlYTBlMmYxLTlhNTktNGRkMy1h ODA4LWE0MTJiZDQzZjI1ZC9iZWEwZTJmMS05YTU5LTRkZDMtYTgwOC1hNDEyYmQ0 M2YyNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtKrUwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bhe3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHRvrqkswBTv+53DsExxbitE0KNzx0KI4zIQiwzESKKss1az vkUuNkf3eM+q0uN6TKrQQtMAXRrCbZQu0fbHsA1O48ryaEuHBoJDd8ZYcc7lyz+Y 3W43tYg0LWECMSqcoT0f6QJo5CU/t6qlJYWJECTQfGaVazzR99mcU3nYt/p9XQWY vvSw+5krmPnFz3ALU2MsRvExCo1L7+tIf9fdHbvMiFxssAYHSwkN8rWXNztDvG0o AklJlFhkc3DU1WA35yKH+jm2L/p10QtWnHlUfIsUipGy3jd7Ho7VbNk7vqrlfT9S t05XDvRiZVERM15yGYP4ohHYjcHLf9QO9daHfLU= -----END CERTIFICATE-----Generated at Thu Mar 28 02:04:57 2024 by rpki-client on console-fra.rpki-client.org