$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer File: cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer (raw, json) Hash identifier: orbN0Ly0IiAlZtZxr3UF1RqYT74ygDzkbzP2A+NemHI= Subject key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858432BCD2C63BA25AB127FC2DF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Sep 2023 00:45:21 +0000 Certificate not after: Sat 13 Dec 2025 01:45:21 +0000 Subordinate resources: AS: 395332 IP: 23.146.104.0/24 IP: 206.81.106.0/24 IP: 2602:fb69::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:2b:cd:2c:63:ba:25:ab:12:7f:c2:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 10 00:45:21 2023 GMT Not After : Dec 13 01:45:21 2025 GMT Subject: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:a5:75:3a:8b:91:4e:f4:f3:44:e6:0c:e9: a5:59:d4:4b:69:99:24:7f:a9:22:e4:d3:8f:ef:4e: 95:1f:fc:1b:b7:be:dc:b2:93:d4:fd:29:6e:70:ed: e8:04:10:f0:62:ae:b4:9c:02:f5:1b:3f:88:1a:59: ca:46:e1:18:ef:33:57:fb:1e:dc:e1:d9:81:4f:ee: c8:b6:e9:09:37:77:7d:0e:0c:fb:0c:54:c6:0f:76: ad:d4:64:49:77:6c:96:c0:b7:83:c5:7d:fd:ca:9e: f7:d3:be:42:79:7d:c2:c3:a6:ae:03:6b:21:2b:70: e8:d9:74:0e:22:1e:37:61:45:a4:5b:14:66:b8:a1: e8:49:c5:bd:67:7d:79:fc:dd:c5:ae:4e:20:6b:a1: a0:6d:e6:95:47:4b:d3:b1:99:34:57:11:a9:0b:1b: 4f:49:1a:b1:56:36:6a:ee:ef:77:11:2b:c3:de:90: 99:12:3a:4e:d4:97:c7:37:a5:24:1a:fe:39:99:9f: 76:c9:21:0c:f5:f1:63:55:a5:8f:33:a7:c5:5f:f9: 72:a7:40:09:a5:93:78:8c:fb:ac:cc:bc:51:91:99: c3:60:09:86:83:da:6d:82:0f:ea:c1:6c:fc:64:34: 04:bd:ca:2c:91:d0:8f:1a:66:03:35:e1:4f:33:7a: f1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.146.104.0/24 206.81.106.0/24 IPv6: 2602:fb69::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395332 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:58:16:0e:b8:8a:dd:32:49:3c:a5:a8:58:21:3e:4c:9f:a1: 90:2d:66:f8:71:2b:e2:81:b1:e3:2a:41:77:e6:f9:33:99:16: d0:49:51:44:66:e6:aa:e2:93:45:fd:30:c1:b0:a8:69:cc:56: 82:7f:ba:6b:b5:94:c9:b3:50:30:03:9f:0b:b4:a7:3f:53:a8: 62:d1:c7:97:78:ab:58:e1:7c:79:5d:6e:aa:96:7c:85:b6:66: 81:72:9d:9b:6d:c2:da:97:8e:a2:49:80:ea:7f:fb:83:71:57: 36:f4:6a:9b:ea:72:9f:66:2f:9b:40:8b:aa:d3:a9:48:5d:53: d1:49:c5:26:aa:c8:df:e8:54:63:c4:3f:30:64:8a:18:d0:57: d0:9d:c3:f6:10:a5:02:be:e9:ef:1a:3a:b1:e2:58:05:72:af: ff:e7:f7:64:02:d6:70:24:c8:93:17:d1:fc:ca:6a:b2:c8:7b: ca:dc:98:d1:9c:8f:43:1c:e4:90:a1:69:52:62:73:ef:f2:93: 6b:aa:f1:86:dd:cd:fc:69:c2:75:3f:6d:81:3a:35:66:4d:fd: 28:2a:ad:5c:bf:bb:cb:3e:61:3f:89:70:1d:bc:f9:6d:e2:8c: 0e:c1:17:67:e1:d7:c7:5d:d1:f2:fc:fb:dd:c5:09:35:6a:c6: a4:9a:62:ed -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEMrzSxjuiWrEn/C3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDkxMDAwNDUyMVoXDTI1MTIxMzAxNDUyMVowLzEtMCsGA1UEAxMk Y2MyYjA4ZjktYjNkYy00Y2Y2LTg3MGMtYTczMGI4NjBjNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPaldTqLkU7080TmDOmlWdRLaZkkf6ki5NOP 706VH/wbt77cspPU/SlucO3oBBDwYq60nAL1Gz+IGlnKRuEY7zNX+x7c4dmBT+7I tukJN3d9Dgz7DFTGD3at1GRJd2yWwLeDxX39yp73075CeX3Cw6auA2shK3Do2XQO Ih43YUWkWxRmuKHoScW9Z315/N3Frk4ga6GgbeaVR0vTsZk0VxGpCxtPSRqxVjZq 7u93ESvD3pCZEjpO1JfHN6UkGv45mZ92ySEM9fFjVaWPM6fFX/lyp0AJpZN4jPus zLxRkZnDYAmGg9ptgg/qwWz8ZDQEvcoskdCPGmYDNeFPM3rxEwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFOEfvyjq8EsGi+ArUcq9YDuNxxiYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j YzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2MGM0OTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2NjMmIwOGY5LWIzZGMtNGNmNi04 NzBjLWE3MzBiODYwYzQ5MS9jYzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2 MGM0OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkmgDBADOUWowDgQCAAIwCAMGACYC+2kAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYIRDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIWBYOuIrdMkk8pahY IT5Mn6GQLWb4cSvigbHjKkF35vkzmRbQSVFEZuaq4pNF/TDBsKhpzFaCf7prtZTJ s1AwA58LtKc/U6hi0ceXeKtY4Xx5XW6qlnyFtmaBcp2bbcLal46iSYDqf/uDcVc2 9Gqb6nKfZi+bQIuq06lIXVPRScUmqsjf6FRjxD8wZIoY0FfQncP2EKUCvunvGjqx 4lgFcq//5/dkAtZwJMiTF9H8ymqyyHvK3JjRnI9DHOSQoWlSYnPv8pNrqvGG3c38 acJ1P22BOjVmTf0oKq1cv7vLPmE/iXAdvPlt4owOwRdn4dfHXdHy/PvdxQk1asak mmLt -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:25 2024 by rpki-client on console-fra.rpki-client.org