$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer File: c66b7cab-031d-4c4c-8595-19848efd3058.cer (raw, json) Hash identifier: IrTeLxdTOLpi0/TXIBJ1hjxfbpzLZe2zDmt47fJKHIY= Subject key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285847B25F18A9EB7FDDBEC153F540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Oct 2024 00:45:26 +0000 Certificate not after: Mon 01 Feb 2027 01:45:26 +0000 Subordinate resources: AS: 400339 IP: 147.136.240.0/21 IP: 2606:ab40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:5f:18:a9:eb:7f:dd:be:c1:53:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 29 00:45:26 2024 GMT Not After : Feb 1 01:45:26 2027 GMT Subject: CN=c66b7cab-031d-4c4c-8595-19848efd3058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:c3:11:3f:61:58:75:39:39:7d:3f:c3:ed: d5:18:bd:49:2a:56:c0:f8:f3:e3:fb:ab:bf:68:bb: aa:09:ba:30:d9:68:fe:bc:b8:1c:de:f4:d4:1c:8a: 9c:05:d2:06:6e:d3:6b:17:67:04:12:e3:d2:ef:46: 9e:e6:e5:4e:c3:9d:3d:36:26:21:77:81:4d:fb:5a: 5e:96:88:d6:f2:ff:84:53:69:f1:0f:cd:46:7c:45: 5b:0c:72:9c:97:d0:b6:96:79:a7:0a:f2:9a:2e:25: e8:73:6d:88:3f:8b:d4:2b:48:b0:bd:55:60:b6:49: 7d:9e:12:9d:e5:78:a8:c8:4f:a6:a8:4c:a1:f6:2b: ad:91:59:05:a9:eb:62:62:d4:f2:9a:4b:dd:ed:0c: b3:d9:1e:cc:9d:d7:33:ba:3f:ea:f9:5c:96:4b:94: 0c:86:2f:c0:e4:6e:7c:82:27:06:e8:b7:86:e1:bb: cb:fa:bf:f7:e7:2d:21:95:df:3e:37:6a:bb:3c:88: 20:f6:b3:6b:1f:cc:8a:c2:c0:66:a3:5c:58:92:5a: 3e:06:b4:92:b6:42:26:71:40:1f:29:55:fd:95:fb: 31:9e:81:b1:0b:6b:d2:9e:f9:a6:88:bd:d9:ab:f7: 2f:24:65:05:f7:9a:85:f1:32:89:c0:c5:51:55:5b: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 147.136.240.0/21 IPv6: 2606:ab40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400339 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6b:08:9e:1b:7d:7a:f8:65:bd:99:68:2a:54:97:b6:1f:f4: 99:5d:38:6e:3c:a0:f4:61:5a:09:e1:a5:f9:c6:69:61:7b:79: 89:85:3f:b2:6b:71:71:f5:58:fd:c1:85:32:7f:2c:e8:87:c0: 36:ca:f9:e4:e1:55:06:ce:5f:04:15:7e:be:67:3f:75:91:b1: ce:9b:80:c3:a7:7f:13:e9:88:28:0c:2e:07:7f:c0:ca:7c:78: 78:a7:de:cf:5a:9c:45:22:40:01:84:3b:f6:62:dc:13:98:45: 07:0d:2f:66:8c:30:32:50:59:14:e2:d1:f3:09:11:d8:ce:e9: 77:5e:bc:21:1c:bd:5a:ae:12:fe:3d:bd:e7:e4:fa:bd:c2:78: 0a:41:81:5b:c6:52:5b:50:1e:6a:d5:1c:01:bc:18:00:d4:35: a1:85:fb:bb:d1:30:94:95:ae:77:f8:41:3f:b8:f3:2a:97:2f: 20:db:55:5e:e4:cb:40:3f:56:64:ed:b5:5f:85:4d:bb:52:13: 0a:40:18:75:e2:4b:6b:60:78:4c:bf:a3:08:57:ae:66:b5:37: 5b:39:f2:66:7f:d3:80:ea:d6:50:3f:56:85:06:42:27:49:ce: e5:8f:9c:82:e5:97:cb:51:57:8a:b2:5b:81:83:63:ce:8b:9d: dc:86:a3:ba -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEeyXxip63/dvsFT9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTAyOTAwNDUyNloXDTI3MDIwMTAxNDUyNlowLzEtMCsGA1UEAxMk YzY2YjdjYWItMDMxZC00YzRjLTg1OTUtMTk4NDhlZmQzMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvvDET9hWHU5OX0/w+3VGL1JKlbA+PPj+6u/ aLuqCbow2Wj+vLgc3vTUHIqcBdIGbtNrF2cEEuPS70ae5uVOw509NiYhd4FN+1pe lojW8v+EU2nxD81GfEVbDHKcl9C2lnmnCvKaLiXoc22IP4vUK0iwvVVgtkl9nhKd 5XioyE+mqEyh9iutkVkFqetiYtTymkvd7Qyz2R7Mndczuj/q+VyWS5QMhi/A5G58 gicG6LeG4bvL+r/35y0hld8+N2q7PIgg9rNrH8yKwsBmo1xYklo+BrSStkImcUAf KVX9lfsxnoGxC2vSnvmmiL3Zq/cvJGUF95qF8TKJwMVRVVsWIwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLfFAqxN5rjHacnV9gT3GqUUSHZMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j NjZiN2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0OGVmZDMwNTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2M2NmI3Y2FiLTAzMWQtNGM0Yy04 NTk1LTE5ODQ4ZWZkMzA1OC9jNjZiN2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0OGVm ZDMwNTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOTiPAwDQQCAAIwBwMFACYGq0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhvTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAxrCJ4bfXr4Zb2ZaCpUl7Yf9Jld OG48oPRhWgnhpfnGaWF7eYmFP7JrcXH1WP3BhTJ/LOiHwDbK+eThVQbOXwQVfr5n P3WRsc6bgMOnfxPpiCgMLgd/wMp8eHin3s9anEUiQAGEO/Zi3BOYRQcNL2aMMDJQ WRTi0fMJEdjO6XdevCEcvVquEv49vefk+r3CeApBgVvGUltQHmrVHAG8GADUNaGF +7vRMJSVrnf4QT+48yqXLyDbVV7ky0A/VmTttV+FTbtSEwpAGHXiS2tgeEy/owhX rma1N1s58mZ/04Dq1lA/VoUGQidJzuWPnILll8tRV4qyW4GDY86LndyGo7o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:25 2024 by rpki-client on console-fra.rpki-client.org