$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer File: cea06048-7bc3-4b65-8443-4c600b73bc11.cer (raw, json) Hash identifier: vAahcVVV2KWpAQkWTFRNQvoPUZHC+0Cu4OCkuVHbfDk= Subject key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285844ED6311A5F14493F9E21F24C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 18 Feb 2024 01:45:19 +0000 Certificate not after: Sat 23 May 2026 00:45:19 +0000 Subordinate resources: IP: 159.91.0.0/16 IP: 192.76.179.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ed:63:11:a5:f1:44:93:f9:e2:1f:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 18 01:45:19 2024 GMT Not After : May 23 00:45:19 2026 GMT Subject: CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:cf:3a:26:f9:88:35:24:26:40:11:d2:52: 2c:0e:fe:fa:6f:10:a8:3c:c0:fe:3d:81:83:27:34: f2:ec:87:5c:12:4a:f9:b1:29:ae:23:71:a5:fa:3f: d8:62:77:e2:db:de:b9:06:11:8e:a3:0a:33:87:07: 77:d1:7e:fb:9b:d9:bd:9c:23:2a:92:73:7a:ca:d0: 09:f1:58:f8:1a:fc:15:6b:51:f8:43:fd:d3:f1:d7: 45:d5:88:f4:a4:b1:e4:35:7e:ff:a2:a2:3f:db:8d: 4f:da:24:ea:3e:0b:2f:f5:70:bc:93:d1:7b:7e:c6: 4a:7c:8e:a4:5a:f5:47:a1:1e:e4:3e:f2:2c:9b:7c: 75:fe:03:29:2d:4e:7e:18:b5:dc:90:51:08:ae:34: 30:77:c7:63:ea:a9:e6:7b:d5:54:aa:59:50:9a:d3: 25:51:ca:18:56:7a:b7:58:e8:d2:5b:66:17:0c:8c: 74:f3:57:fe:5c:ef:1b:63:bb:14:61:4d:7b:26:77: 41:38:3e:50:d8:60:f1:18:2e:0f:40:dd:89:e3:27: 2d:18:eb:18:19:44:6e:4b:3b:e3:dc:6b:fb:16:8e: ef:fc:c5:09:16:7a:8a:15:ed:f7:50:11:a3:71:8e: f4:e5:f1:fd:c4:6f:1d:35:b9:1c:d1:ee:3e:81:e4: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 159.91.0.0/16 192.76.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1b:2b:00:15:e7:9c:2c:29:98:f0:ed:26:a2:08:c6:36:d2: 2a:ce:89:44:1e:89:47:86:7f:67:1e:dd:29:b5:7c:84:ed:3e: e0:7f:36:0d:4e:57:2c:d9:0e:9d:cb:bf:a9:6c:f9:35:3e:89: ae:26:3b:36:fa:a9:a3:11:ad:e2:26:d6:57:e3:ec:bd:24:5e: 81:d9:76:19:9a:4b:e0:be:d5:8e:d0:14:89:d4:3a:a5:f2:7f: 5f:db:1a:d7:b4:73:81:ea:9e:3b:7b:eb:cd:5e:97:66:0f:6c: e9:99:7d:aa:a7:6b:90:15:d3:fb:c0:f1:06:c8:60:34:31:aa: b2:60:f7:c3:35:62:ed:a4:6d:9d:70:9a:bb:7a:07:be:a9:5a: 2f:5c:a6:65:b7:ce:3c:5c:b0:24:b7:98:3b:58:1f:41:a3:9f: a6:1f:c1:de:42:88:a6:89:62:fd:8e:5f:11:bd:7f:53:92:59: 86:84:6e:6f:03:96:97:f9:65:83:4e:34:7c:86:7f:c7:92:f7: 44:15:6e:6d:02:12:c2:e1:c8:5e:74:99:5c:c7:5a:8b:42:de: 72:09:2f:5f:94:41:a6:02:74:59:4e:f8:7b:c6:75:74:c7:cb: d3:98:91:70:b5:93:61:13:49:43:aa:23:47:7e:91:6f:59:74: cf:5f:a4:96 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWETtYxGl8UST+eIfJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDIxODAxNDUxOVoXDTI2MDUyMzAwNDUxOVowLzEtMCsGA1UEAxMk Y2VhMDYwNDgtN2JjMy00YjY1LTg0NDMtNGM2MDBiNzNiYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB/POib5iDUkJkAR0lIsDv76bxCoPMD+PYGD JzTy7IdcEkr5sSmuI3Gl+j/YYnfi2965BhGOowozhwd30X77m9m9nCMqknN6ytAJ 8Vj4GvwVa1H4Q/3T8ddF1Yj0pLHkNX7/oqI/241P2iTqPgsv9XC8k9F7fsZKfI6k WvVHoR7kPvIsm3x1/gMpLU5+GLXckFEIrjQwd8dj6qnme9VUqllQmtMlUcoYVnq3 WOjSW2YXDIx081f+XO8bY7sUYU17JndBOD5Q2GDxGC4PQN2J4yctGOsYGURuSzvj 3Gv7Fo7v/MUJFnqKFe33UBGjcY705fH9xG8dNbkc0e4+geShcQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFHL+fRkLV5re22Fe1djLYF0fUK7ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j ZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3M2JjMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2NlYTA2MDQ4LTdiYzMtNGI2NS04 NDQzLTRjNjAwYjczYmMxMS9jZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3 M2JjMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCfWwMEAMBMszBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiGysAFeecLCmY 8O0mogjGNtIqzolEHolHhn9nHt0ptXyE7T7gfzYNTlcs2Q6dy7+pbPk1PomuJjs2 +qmjEa3iJtZX4+y9JF6B2XYZmkvgvtWO0BSJ1Dql8n9f2xrXtHOB6p47e+vNXpdm D2zpmX2qp2uQFdP7wPEGyGA0MaqyYPfDNWLtpG2dcJq7ege+qVovXKZlt848XLAk t5g7WB9Bo5+mH8HeQoimiWL9jl8RvX9TklmGhG5vA5aX+WWDTjR8hn/HkvdEFW5t AhLC4chedJlcx1qLQt5yCS9flEGmAnRZTvh7xnV0x8vTmJFwtZNhE0lDqiNHfpFv WXTPX6SW -----END CERTIFICATE-----Generated at Fri Apr 26 11:13:22 2024 by rpki-client on console-ams.rpki-client.org