$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792.cer File: d85aedc6-8da7-416f-825e-fe535fa92792.cer (raw, json) Hash identifier: a9IFrUZK4BZcWwauR04cGXvgle09WLAceA9ADAk2SKo= Subject key identifier: 36:9D:65:01:F1:D7:12:D8:D2:09:09:78:CA:97:9C:01:B0:28:1C:71 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285843BFC3622907E2DA0F0BDE1300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/d85aedc6-8da7-416f-825e-fe535fa92792.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Nov 2023 00:45:16 +0000 Certificate not after: Wed 04 Feb 2026 01:45:16 +0000 Subordinate resources: AS: 7260 IP: 23.147.32.0/24 IP: 172.82.56.0/22 IP: 2602:fe49::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:bf:c3:62:29:07:e2:da:0f:0b:de:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 2 00:45:16 2023 GMT Not After : Feb 4 01:45:16 2026 GMT Subject: CN=d85aedc6-8da7-416f-825e-fe535fa92792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:4e:60:5b:26:ec:1b:fe:f4:b7:10:dc:88: 92:8f:ef:c5:2c:0c:b8:76:7b:15:23:de:aa:5a:eb: 8d:61:0f:82:af:78:9b:dd:5b:f2:4c:51:bf:4c:a3: 61:ec:91:26:49:17:cf:72:5c:4c:d6:b5:2b:e0:da: 3d:9b:e4:ad:1c:e4:92:e7:b2:b8:22:a8:bd:c7:59: b8:41:26:8b:ec:14:07:d5:5d:82:2d:8e:96:bc:e0: 8a:07:3a:9d:ef:d1:d5:8f:c5:50:4f:00:f5:f7:f0: 20:f5:c7:a2:5d:80:c2:01:06:03:54:46:33:71:96: 77:16:c9:96:ba:a8:03:3d:46:e9:8c:77:a2:81:3d: 4c:cb:7b:e2:5f:bf:d9:d8:8b:2d:5f:d0:20:ca:db: 8e:16:be:f2:cb:de:cd:66:23:47:bc:63:b9:11:f7: 77:62:c0:c0:73:12:ab:1c:7e:3c:57:e5:3c:4c:e2: ac:93:9c:63:04:85:f0:8c:27:24:35:d6:90:58:e7: 0f:a0:39:50:8a:6f:0d:f1:85:2c:d4:7f:e7:5c:03: 82:e3:ac:a0:bb:04:ce:dd:36:4b:a0:d1:b1:bf:b7: 83:f9:bc:ac:d0:1f:42:ea:c2:4f:ea:5b:c3:ce:f8: 62:6b:78:4b:99:ad:8a:b5:4f:f1:b6:ab:59:e6:15: 13:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9D:65:01:F1:D7:12:D8:D2:09:09:78:CA:97:9C:01:B0:28:1C:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/d85aedc6-8da7-416f-825e-fe535fa92792.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.147.32.0/24 172.82.56.0/22 IPv6: 2602:fe49::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7260 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:45:e7:b6:b5:d5:13:9a:a2:9b:89:e7:ca:3b:2a:32:1e:55: 4b:db:98:4e:82:69:9a:75:c0:9d:78:78:ec:68:05:fe:4a:12: 51:47:43:9c:9a:39:48:ad:a5:08:84:bd:09:cb:a7:c3:3b:dc: 81:5c:12:82:f0:71:44:18:37:5b:63:99:5b:ad:3c:d9:8f:17: d8:b6:16:24:21:57:6f:74:49:80:d0:44:24:51:9e:b1:7b:05: 7c:01:f0:90:ab:5f:fc:c4:2e:4d:db:20:0b:39:b1:0e:fe:ea: cf:31:b6:62:20:b3:b4:39:19:e3:b5:54:85:e8:3f:52:56:8b: 4e:f0:f1:83:fc:fe:a8:da:fd:f8:1f:3e:69:44:30:ad:6d:62: e1:51:9b:a3:be:81:3b:4d:c2:69:9d:69:b0:27:5e:a8:89:8e: 01:a1:12:65:4e:78:ca:9a:29:cb:9a:8b:82:33:82:87:fa:a4: f3:e2:a7:08:ef:cf:8a:9e:4a:f1:40:20:d6:30:00:56:50:55: 55:c4:29:e5:ca:31:f6:ce:79:11:a5:8d:94:31:d8:a0:d5:b2: 10:25:36:45:03:6e:30:f3:d4:78:e3:60:d4:5f:82:6f:70:f6: f8:40:b3:1c:1c:52:d0:25:8b:cd:a4:e6:94:d8:bf:14:07:4e: 71:62:65:8b -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEO/w2IpB+LaDwveEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTEwMjAwNDUxNloXDTI2MDIwNDAxNDUxNlowLzEtMCsGA1UEAxMk ZDg1YWVkYzYtOGRhNy00MTZmLTgyNWUtZmU1MzVmYTkyNzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2tOYFsm7Bv+9LcQ3IiSj+/FLAy4dnsVI96q WuuNYQ+Cr3ib3VvyTFG/TKNh7JEmSRfPclxM1rUr4No9m+StHOSS57K4Iqi9x1m4 QSaL7BQH1V2CLY6WvOCKBzqd79HVj8VQTwD19/Ag9ceiXYDCAQYDVEYzcZZ3FsmW uqgDPUbpjHeigT1My3viX7/Z2IstX9AgytuOFr7yy97NZiNHvGO5Efd3YsDAcxKr HH48V+U8TOKsk5xjBIXwjCckNdaQWOcPoDlQim8N8YUs1H/nXAOC46yguwTO3TZL oNGxv7eD+bys0B9C6sJP6lvDzvhia3hLma2KtU/xtqtZ5hUTbQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFDadZQHx1xLY0gkJeMqXnAGwKBxxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k ODVhZWRjNi04ZGE3LTQxNmYtODI1ZS1mZTUzNWZhOTI3OTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Q4NWFlZGM2LThkYTctNDE2Zi04 MjVlLWZlNTM1ZmE5Mjc5Mi9kODVhZWRjNi04ZGE3LTQxNmYtODI1ZS1mZTUzNWZh OTI3OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkyADBAKsUjgwDgQCAAIwCAMGBCYC/kkAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhxcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHFF57a11ROaopuJ58o7 KjIeVUvbmE6CaZp1wJ14eOxoBf5KElFHQ5yaOUitpQiEvQnLp8M73IFcEoLwcUQY N1tjmVutPNmPF9i2FiQhV290SYDQRCRRnrF7BXwB8JCrX/zELk3bIAs5sQ7+6s8x tmIgs7Q5GeO1VIXoP1JWi07w8YP8/qja/fgfPmlEMK1tYuFRm6O+gTtNwmmdabAn XqiJjgGhEmVOeMqaKcuai4Izgof6pPPipwjvz4qeSvFAINYwAFZQVVXEKeXKMfbO eRGljZQx2KDVshAlNkUDbjDz1HjjYNRfgm9w9vhAsxwcUtAli82k5pTYvxQHTnFi ZYs= -----END CERTIFICATE-----Generated at Tue Apr 16 20:25:15 2024 by rpki-client on console-fra.rpki-client.org