$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer File: d4cafeea-cee5-442f-9f6c-530abebc6186.cer (raw, json) Hash identifier: zHB7TUtBJmxrlNfYLOSJnEYPWc34efoM1IxKJ+8eWCg= Subject key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858466537F7F6A977C251C82080C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jul 2024 16:42:26 +0000 Certificate not after: Sun 04 Oct 2026 16:42:26 +0000 Subordinate resources: AS: 396328 IP: 2607:c0c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:65:37:f7:f6:a9:77:c2:51:c8:20:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 1 16:42:26 2024 GMT Not After : Oct 4 16:42:26 2026 GMT Subject: CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:c3:d6:de:b8:c9:b3:dd:0f:e6:fb:76:86: 70:02:d1:cc:64:2b:45:35:f2:1e:e5:e9:09:b2:4c: 2d:74:cd:d5:44:67:57:e8:2d:45:32:88:d5:fb:13: 3f:10:5a:66:d4:78:e4:cc:ad:38:87:89:06:3e:c9: 06:ac:57:3a:8a:3d:cf:85:8a:8c:70:65:af:1d:01: 78:39:20:cf:a2:5c:a6:43:d9:07:f6:c7:8f:6d:08: 16:c4:77:6e:b9:09:f7:ef:6d:af:3b:11:19:8c:30: 73:66:69:84:ba:fc:20:b0:4c:5b:26:c3:a3:a5:58: d2:4c:50:d9:9e:53:3f:90:ff:f3:c8:c4:01:46:05: 35:78:58:32:7c:8a:30:81:ad:ca:51:a4:db:37:5a: 89:16:af:39:99:f2:f1:61:60:ef:0e:99:ef:ac:4a: 5e:44:a9:ca:f1:13:3d:f8:62:96:d0:bc:33:ff:f3: a5:68:b5:17:16:d2:79:4d:4e:39:29:6b:10:e0:2b: e7:86:39:d9:4a:12:5d:f2:e5:84:48:2c:b3:73:2e: 8d:4a:75:17:a2:0d:93:de:19:77:bb:66:4f:9a:16: e5:0f:d8:a5:4d:c8:53:1f:35:38:82:64:3d:ce:3d: a3:fd:7c:c6:f9:fd:6b:c5:b8:14:0b:e5:cd:7b:24: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2607:c0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cc:18:bf:fd:58:ff:51:44:a0:6c:a4:b2:f5:1f:da:94:27: 08:ad:21:52:21:8e:3d:4f:5d:3a:4b:70:ff:c0:b7:97:88:b7: 09:35:32:0b:cd:09:ee:c9:04:c0:71:18:86:1b:8e:be:37:5e: 23:c8:fe:e2:84:aa:0b:8a:da:24:23:b5:6e:49:69:cd:ee:8d: 2f:b4:e4:89:e3:89:0c:19:19:9b:7b:ac:e6:95:5b:08:2f:f8: 7e:2a:6b:df:87:0b:cd:44:9d:02:94:0d:c3:93:03:2b:e7:99: e2:14:40:7a:40:61:85:76:ac:cc:92:fb:db:a9:45:da:29:f1: 19:ba:e3:18:e3:45:ba:09:97:81:7d:3f:9b:e0:07:00:7a:2d: 3d:8d:98:b3:82:15:d9:7f:4b:bf:20:9f:cf:d3:ba:6b:fa:68: 55:e2:cf:c7:f6:a6:41:4a:d5:54:49:68:60:28:1c:4e:24:77: 5d:7a:cf:04:b1:1d:58:f0:2b:8c:e4:83:5e:b6:e9:43:24:ce: b7:95:c2:bd:35:f8:19:79:ad:6b:6e:6f:d2:3a:3a:28:94:04: 3c:00:1b:8d:c5:87:b1:c9:df:c1:0e:4a:58:e3:9a:bf:bd:dc: 7f:18:f6:33:fb:f3:50:e6:89:18:85:84:59:09:68:04:35:e4: fd:e3:d7:43 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEZlN/f2qXfCUcgggMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDcwMTE2NDIyNloXDTI2MTAwNDE2NDIyNlowLzEtMCsGA1UEAxMk ZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoDD1t64ybPdD+b7doZwAtHMZCtFNfIe5ekJ skwtdM3VRGdX6C1FMojV+xM/EFpm1HjkzK04h4kGPskGrFc6ij3PhYqMcGWvHQF4 OSDPolymQ9kH9sePbQgWxHduuQn3722vOxEZjDBzZmmEuvwgsExbJsOjpVjSTFDZ nlM/kP/zyMQBRgU1eFgyfIowga3KUaTbN1qJFq85mfLxYWDvDpnvrEpeRKnK8RM9 +GKW0Lwz//OlaLUXFtJ5TU45KWsQ4CvnhjnZShJd8uWESCyzcy6NSnUXog2T3hl3 u2ZPmhblD9ilTchTHzU4gmQ9zj2j/XzG+f1rxbgUC+XNeySWjQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFFlfV/Hkz48xNqILQ3Z+Sq3XjoniMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k NGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Q0Y2FmZWVhLWNlZTUtNDQyZi05 ZjZjLTUzMGFiZWJjNjE4Ni9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmVi YzYxODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB8DAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYMKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBYzBi//Vj/UUSgbKSy9R/alCcIrSFSIY49T106S3D/wLeX iLcJNTILzQnuyQTAcRiGG46+N14jyP7ihKoLitokI7VuSWnN7o0vtOSJ44kMGRmb e6zmlVsIL/h+KmvfhwvNRJ0ClA3DkwMr55niFEB6QGGFdqzMkvvbqUXaKfEZuuMY 40W6CZeBfT+b4AcAei09jZizghXZf0u/IJ/P07pr+mhV4s/H9qZBStVUSWhgKBxO JHddes8EsR1Y8CuM5INetulDJM63lcK9NfgZea1rbm/SOjoolAQ8ABuNxYexyd/B DkpY45q/vdx/GPYz+/NQ5okYhYRZCWgENeT949dD -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:27 2024 by rpki-client on console-fra.rpki-client.org