$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer File: cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer (raw, json) Hash identifier: PLn7Bk92RrPcFe/apykmNxydYU2QJgsjsJV7h2cRtfI= Subject key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848301DB5FC08EC213FA2F7A320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Dec 2024 01:45:33 +0000 Certificate not after: Thu 18 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 395332 IP: 23.146.104.0/24 IP: 206.81.106.0/24 IP: 2602:fb69::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:30:1d:b5:fc:08:ec:21:3f:a2:f7:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 13 01:45:33 2024 GMT Not After : Mar 18 00:45:33 2027 GMT Subject: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:a5:75:3a:8b:91:4e:f4:f3:44:e6:0c:e9: a5:59:d4:4b:69:99:24:7f:a9:22:e4:d3:8f:ef:4e: 95:1f:fc:1b:b7:be:dc:b2:93:d4:fd:29:6e:70:ed: e8:04:10:f0:62:ae:b4:9c:02:f5:1b:3f:88:1a:59: ca:46:e1:18:ef:33:57:fb:1e:dc:e1:d9:81:4f:ee: c8:b6:e9:09:37:77:7d:0e:0c:fb:0c:54:c6:0f:76: ad:d4:64:49:77:6c:96:c0:b7:83:c5:7d:fd:ca:9e: f7:d3:be:42:79:7d:c2:c3:a6:ae:03:6b:21:2b:70: e8:d9:74:0e:22:1e:37:61:45:a4:5b:14:66:b8:a1: e8:49:c5:bd:67:7d:79:fc:dd:c5:ae:4e:20:6b:a1: a0:6d:e6:95:47:4b:d3:b1:99:34:57:11:a9:0b:1b: 4f:49:1a:b1:56:36:6a:ee:ef:77:11:2b:c3:de:90: 99:12:3a:4e:d4:97:c7:37:a5:24:1a:fe:39:99:9f: 76:c9:21:0c:f5:f1:63:55:a5:8f:33:a7:c5:5f:f9: 72:a7:40:09:a5:93:78:8c:fb:ac:cc:bc:51:91:99: c3:60:09:86:83:da:6d:82:0f:ea:c1:6c:fc:64:34: 04:bd:ca:2c:91:d0:8f:1a:66:03:35:e1:4f:33:7a: f1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.146.104.0/24 206.81.106.0/24 IPv6: 2602:fb69::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395332 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a9:17:96:7a:bb:cc:a6:d2:87:70:4f:bb:cb:8b:4f:e2:4a: eb:53:96:b9:a9:b1:5c:98:b3:83:8c:56:e2:92:63:0b:c0:bf: 94:82:c8:45:4f:44:ae:09:df:82:34:39:0f:ee:b4:05:51:3e: 82:7b:3a:cc:43:6d:6a:a7:7b:2f:5b:cf:f7:86:f0:2c:42:1c: 59:17:ed:76:f8:9c:93:49:a8:16:27:cf:88:b8:8a:aa:e6:df: 87:57:29:5e:72:68:28:cc:6b:63:46:f7:2e:09:99:6a:90:00: ec:e0:e3:f6:34:b6:76:9b:4a:2d:19:fa:36:de:7a:ac:7b:ce: 3f:3f:57:23:e8:25:0a:0c:0c:7b:5e:83:4f:10:ae:2e:e9:fa: 50:96:1d:4c:4a:58:ee:a5:2b:6b:af:3b:48:b0:47:d4:db:80: 2a:00:b3:93:7f:56:61:bd:f5:81:bc:65:81:9e:74:97:5f:65: d8:12:e8:4c:e5:65:8c:e2:e8:58:f2:20:94:08:07:5a:c5:db: d0:0e:96:27:64:c9:32:53:a5:37:e9:fd:eb:47:ea:e8:b5:4b: f6:9d:fa:d4:e5:17:47:48:dc:10:d0:29:a3:a7:c0:21:0b:09: 8b:89:7d:9f:9f:6f:36:a9:08:66:5e:35:20:c9:82:95:6c:55: 1c:65:4a:34 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEgwHbX8COwhP6L3oyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTIxMzAxNDUzM1oXDTI3MDMxODAwNDUzM1owLzEtMCsGA1UEAxMk Y2MyYjA4ZjktYjNkYy00Y2Y2LTg3MGMtYTczMGI4NjBjNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPaldTqLkU7080TmDOmlWdRLaZkkf6ki5NOP 706VH/wbt77cspPU/SlucO3oBBDwYq60nAL1Gz+IGlnKRuEY7zNX+x7c4dmBT+7I tukJN3d9Dgz7DFTGD3at1GRJd2yWwLeDxX39yp73075CeX3Cw6auA2shK3Do2XQO Ih43YUWkWxRmuKHoScW9Z315/N3Frk4ga6GgbeaVR0vTsZk0VxGpCxtPSRqxVjZq 7u93ESvD3pCZEjpO1JfHN6UkGv45mZ92ySEM9fFjVaWPM6fFX/lyp0AJpZN4jPus zLxRkZnDYAmGg9ptgg/qwWz8ZDQEvcoskdCPGmYDNeFPM3rxEwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFOEfvyjq8EsGi+ArUcq9YDuNxxiYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j YzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2MGM0OTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2NjMmIwOGY5LWIzZGMtNGNmNi04 NzBjLWE3MzBiODYwYzQ5MS9jYzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2 MGM0OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkmgDBADOUWowDgQCAAIwCAMGACYC+2kAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYIRDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7qReWervMptKHcE+7 y4tP4krrU5a5qbFcmLODjFbikmMLwL+UgshFT0SuCd+CNDkP7rQFUT6CezrMQ21q p3svW8/3hvAsQhxZF+12+JyTSagWJ8+IuIqq5t+HVylecmgozGtjRvcuCZlqkADs 4OP2NLZ2m0otGfo23nqse84/P1cj6CUKDAx7XoNPEK4u6fpQlh1MSljupStrrztI sEfU24AqALOTf1ZhvfWBvGWBnnSXX2XYEuhM5WWM4uhY8iCUCAdaxdvQDpYnZMky U6U36f3rR+rotUv2nfrU5RdHSNwQ0Cmjp8AhCwmLiX2fn282qQhmXjUgyYKVbFUc ZUo0 -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:54 2025 by rpki-client