$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer File: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer (raw, json) Hash identifier: WkK2IDaJ6DPyIDqNpLUNvxeC6rFY6XeAI7pFBVMvvHo= Subject key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858427EB6B85A97D78E45B1EDD210 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Jul 2023 00:45:16 +0000 Certificate not after: Sun 12 Oct 2025 00:45:16 +0000 Subordinate resources: IP: 23.165.48.0/24 IP: 199.33.210.0/24 IP: 2602:fd1c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:7e:b6:b8:5a:97:d7:8e:45:b1:ed:d2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 10 00:45:16 2023 GMT Not After : Oct 12 00:45:16 2025 GMT Subject: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:89:8f:5d:2d:63:73:7c:df:48:e2:cc:a8: 44:d4:aa:58:1c:5b:0d:df:2b:8d:85:eb:c4:11:19: 47:7a:59:42:7f:6c:f6:d4:2d:90:b0:2a:db:3a:30: fb:99:15:3d:66:88:8a:0e:d6:26:d0:7f:f8:db:be: 4d:78:78:9d:e9:ef:1d:96:76:cd:74:50:61:2d:09: a3:98:ea:2c:b6:88:94:fc:62:cc:06:68:fd:11:53: 4b:54:df:06:c1:6c:f9:e2:4a:ad:4b:a2:09:77:47: 47:de:5f:dc:2d:9e:4d:86:c5:88:92:16:81:da:b0: b8:9e:a5:b6:09:77:0e:84:29:ce:cd:52:52:8b:3c: 40:cf:d2:67:10:e6:65:b3:2e:c2:0a:7d:9b:67:c9: 78:82:26:0f:a0:77:15:c2:3c:9b:eb:54:86:34:70: 6a:13:02:34:af:f9:f4:bc:c6:c7:77:4a:65:9f:64: c0:1e:c0:d5:c5:95:18:73:47:0c:d0:06:0b:51:e5: 7d:c7:25:ec:2d:25:f1:04:76:4c:1d:42:ee:8f:ab: 21:b0:c0:c8:01:3a:aa:c8:ab:f5:6b:9e:c0:ab:bb: 69:ad:8a:13:d9:f4:91:1e:0a:e3:16:e1:30:68:f8: 20:b9:b4:69:5f:b1:fa:70:53:fc:ff:f1:6b:74:a3: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.165.48.0/24 199.33.210.0/24 IPv6: 2602:fd1c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1a:e3:80:88:92:0e:e3:e4:8c:34:bc:03:ea:b7:61:67:88: 79:87:14:c0:0c:f2:52:ec:1a:c3:ba:d7:3a:cc:89:5e:5c:9f: 63:1d:27:41:99:4e:84:3e:c0:40:70:d2:3f:54:2d:03:06:33: b3:09:58:52:ae:c7:a8:a0:29:33:48:f0:5a:2f:9c:10:11:1b: c9:3e:3e:47:11:b8:9b:e3:67:94:49:1f:a9:a4:af:c2:17:49: 46:a0:4c:19:6a:5a:9f:87:ea:b1:1f:01:0d:31:a2:dc:78:50: b9:42:48:f5:0b:36:b7:01:25:e3:39:20:ec:73:15:b7:d0:4d: 46:bb:24:e9:12:3a:6c:4a:c2:b1:ee:ff:6c:49:32:e4:92:60: bf:96:98:ea:75:3e:60:98:6e:09:d1:74:0d:4b:02:83:42:c9: a7:cb:95:94:5b:29:a3:05:04:5b:e7:e3:1c:ee:a5:3b:14:47: f4:f8:fe:4e:5d:1a:3e:79:24:2d:e1:79:b8:9d:05:9a:e2:cd: bc:7e:ca:36:fe:b0:8e:a8:3f:b8:9c:12:56:39:a7:a3:f6:3f: a1:f9:13:b9:25:f1:f4:d9:08:53:a6:39:fd:d4:b8:f4:33:5c: 1d:6b:c3:67:e7:81:26:b9:83:d7:08:c9:7b:b3:24:e1:7f:00: e9:4a:ed:af -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEJ+trhal9eORbHt0hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDcxMDAwNDUxNloXDTI1MTAxMjAwNDUxNlowLzEtMCsGA1UEAxMk Yzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVjYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WKJj10tY3N830jizKhE1KpYHFsN3yuNhevE ERlHellCf2z21C2QsCrbOjD7mRU9ZoiKDtYm0H/4275NeHid6e8dlnbNdFBhLQmj mOostoiU/GLMBmj9EVNLVN8GwWz54kqtS6IJd0dH3l/cLZ5NhsWIkhaB2rC4nqW2 CXcOhCnOzVJSizxAz9JnEOZlsy7CCn2bZ8l4giYPoHcVwjyb61SGNHBqEwI0r/n0 vMbHd0pln2TAHsDVxZUYc0cM0AYLUeV9xyXsLSXxBHZMHULuj6shsMDIATqqyKv1 a57Aq7tprYoT2fSRHgrjFuEwaPggubRpX7H6cFP8//FrdKOnrwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFMLfZBPCcQZFTvB+6EeZIs5i5IabMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j ODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2M4NWYzYjJjLWMzOTEtNDllMy1h M2E1LWVhNDMwMjM1Y2M2Yi9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIz NWNjNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXpTADBADHIdIwDgQCAAIwCAMGBCYC/RwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYa44CIkg7j5Iw0vAPqt2FniHmHFMAM8lLsGsO61zrMiV5cn2MdJ0GZ ToQ+wEBw0j9ULQMGM7MJWFKux6igKTNI8FovnBARG8k+PkcRuJvjZ5RJH6mkr8IX SUagTBlqWp+H6rEfAQ0xotx4ULlCSPULNrcBJeM5IOxzFbfQTUa7JOkSOmxKwrHu /2xJMuSSYL+WmOp1PmCYbgnRdA1LAoNCyafLlZRbKaMFBFvn4xzupTsUR/T4/k5d Gj55JC3hebidBZrizbx+yjb+sI6oP7icElY5p6P2P6H5E7kl8fTZCFOmOf3UuPQz XB1rw2fngSa5g9cIyXuzJOF/AOlK7a8= -----END CERTIFICATE-----Generated at Thu Apr 25 14:11:01 2024 by rpki-client on console-ams.rpki-client.org