$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa.cer File: c94c0914-a172-4fb0-8470-ddd477b64efa.cer (raw, json) Hash identifier: sXmnj58Ae8wJ0I5ihhTjp/g2eO1sOtiyQlG5Y3AvdNo= Subject key identifier: 9C:A3:0E:19:C8:79:B1:73:63:F9:8D:70:BD:4B:34:CB:B2:CE:2A:0A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858462B072DAB1E3DD6F9D6F9E2D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/c94c0914-a172-4fb0-8470-ddd477b64efa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Jun 2024 20:27:14 +0000 Certificate not after: Tue 16 Jun 2026 00:45:20 +0000 Subordinate resources: AS: 53632 IP: 104.37.104.0/22 IP: 149.97.64.0/20 IP: 149.97.83.0 -- 149.97.89.255 IP: 149.97.92.0 -- 149.97.97.255 IP: 149.97.100.0 -- 149.97.115.255 IP: 199.19.64.0/21 IP: 199.189.188.0/22 IP: 208.71.164.0/22 IP: 2605:9500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:2b:07:2d:ab:1e:3d:d6:f9:d6:f9:e2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 10 20:27:14 2024 GMT Not After : Jun 16 00:45:20 2026 GMT Subject: CN=c94c0914-a172-4fb0-8470-ddd477b64efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:50:26:ce:8d:62:d8:36:93:a0:08:65:31:32: 14:d4:a7:49:4a:72:ff:74:cf:8e:da:08:7a:a5:5b: ac:27:61:43:43:56:cd:4e:71:86:9f:d6:82:77:60: 56:2c:21:b6:45:72:80:3b:59:2e:c5:44:a1:dc:dd: dd:a6:d9:23:ce:94:54:34:b9:f6:9c:4d:fa:8c:f1: f1:62:d1:06:a9:ec:4f:a7:97:b0:fb:d5:3c:c4:7f: 34:48:f2:25:16:17:85:c9:38:19:c1:3e:0f:48:f8: 39:e6:b1:a2:91:e2:aa:11:e2:15:a3:92:74:3f:5b: 18:64:f7:02:83:b4:27:60:b1:f6:ca:d2:e6:5a:e7: 63:60:b0:f8:44:8e:3d:b7:5e:6c:11:39:76:04:6f: ae:44:fb:0c:81:59:fd:9a:af:5e:fe:b0:03:76:90: f9:64:e4:bd:cc:02:08:ce:76:de:35:b5:e9:19:9a: ff:88:fa:9d:08:c6:52:81:17:76:17:66:01:1f:cd: f7:28:f8:dd:b7:88:76:20:68:21:17:6d:5f:c4:75: 64:94:1a:d1:30:d1:83:ba:74:1c:ca:b3:39:0c:66: d6:f9:b6:b0:74:01:64:01:06:7c:a3:af:86:b5:cf: 45:f3:67:f9:5e:b0:db:97:37:cb:b6:05:09:5c:1d: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A3:0E:19:C8:79:B1:73:63:F9:8D:70:BD:4B:34:CB:B2:CE:2A:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/c94c0914-a172-4fb0-8470-ddd477b64efa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.37.104.0/22 149.97.64.0/20 149.97.83.0-149.97.89.255 149.97.92.0-149.97.97.255 149.97.100.0-149.97.115.255 199.19.64.0/21 199.189.188.0/22 208.71.164.0/22 IPv6: 2605:9500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53632 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:fd:af:d5:a7:3a:4f:22:9a:32:ac:b3:bc:52:55:d1:4b:85: 6a:d4:39:54:3f:aa:1d:3c:30:f1:71:cf:7b:49:12:48:a4:55: bd:84:85:db:19:73:5c:35:df:6a:cf:d3:1b:ae:d2:9b:37:6f: fc:b1:e7:b0:92:73:dd:2a:1c:82:9a:10:db:74:56:a6:60:25: bd:ee:d7:f4:b9:d2:d0:90:1e:8e:d6:95:1e:57:38:f1:d5:fa: bf:54:ba:aa:38:61:e5:88:af:94:eb:72:7c:e8:77:62:cf:46: ff:cf:11:3c:28:0c:b5:e5:02:bd:b5:12:08:5d:3d:c2:af:e2: 38:3a:b5:9b:2e:04:7b:ed:ff:58:d2:89:37:24:24:9c:c0:97: 00:fe:44:8c:0b:f4:89:79:4c:5f:2c:cd:d0:16:2f:51:0f:f1: b6:15:84:c2:a5:7d:31:68:53:2d:d0:13:d0:4e:fb:89:54:24: 6c:42:fa:22:06:ae:e0:75:91:41:3a:e9:d2:33:a0:19:62:21: 51:99:9b:77:9a:c2:81:35:db:22:88:f7:06:76:e9:6d:5c:36: c8:df:2f:0a:b8:2d:48:74:c3:b4:7c:c4:4f:3d:f9:00:11:82: 1c:21:fe:e8:20:82:d3:a9:0b:1b:eb:10:ad:24:6a:47:a5:10: ff:0c:af:92 -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWEYrBy2rHj3W+db54tIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDYxMDIwMjcxNFoXDTI2MDYxNjAwNDUyMFowLzEtMCsGA1UEAxMk Yzk0YzA5MTQtYTE3Mi00ZmIwLTg0NzAtZGRkNDc3YjY0ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFAmzo1i2DaToAhlMTIU1KdJSnL/dM+O2gh6 pVusJ2FDQ1bNTnGGn9aCd2BWLCG2RXKAO1kuxUSh3N3dptkjzpRUNLn2nE36jPHx YtEGqexPp5ew+9U8xH80SPIlFheFyTgZwT4PSPg55rGikeKqEeIVo5J0P1sYZPcC g7QnYLH2ytLmWudjYLD4RI49t15sETl2BG+uRPsMgVn9mq9e/rADdpD5ZOS9zAII znbeNbXpGZr/iPqdCMZSgRd2F2YBH833KPjdt4h2IGghF21fxHVklBrRMNGDunQc yrM5DGbW+bawdAFkAQZ8o6+Gtc9F82f5XrDblzfLtgUJXB0P7wIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFJyjDhnIebFzY/mNcL1LNMuyzioKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j OTRjMDkxNC1hMTcyLTRmYjAtODQ3MC1kZGQ0NzdiNjRlZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2M5NGMwOTE0LWExNzItNGZiMC04 NDcwLWRkZDQ3N2I2NGVmYS9jOTRjMDkxNC1hMTcyLTRmYjAtODQ3MC1kZGQ0Nzdi NjRlZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBAJoJWgDBASVYUAwDAMEAJVhUwMEAZVhWDAMAwQC lWFcAwQBlWFgMAwDBAKVYWQDBAKVYXADBAPHE0ADBALHvbwDBALQR6QwDQQCAAIw BwMFACYFlQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANGAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA39 r9WnOk8imjKss7xSVdFLhWrUOVQ/qh08MPFxz3tJEkikVb2EhdsZc1w132rP0xuu 0ps3b/yx57CSc90qHIKaENt0VqZgJb3u1/S50tCQHo7WlR5XOPHV+r9Uuqo4YeWI r5Trcnzod2LPRv/PETwoDLXlAr21EghdPcKv4jg6tZsuBHvt/1jSiTckJJzAlwD+ RIwL9Il5TF8szdAWL1EP8bYVhMKlfTFoUy3QE9BO+4lUJGxC+iIGruB1kUE66dIz oBliIVGZm3eawoE12yKI9wZ26W1cNsjfLwq4LUh0w7R8xE89+QARghwh/ugggtOp CxvrEK0kakelEP8Mr5I= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:25 2024 by rpki-client on console-fra.rpki-client.org