$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer File: dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer (raw, json) Hash identifier: ++1GCHs3y0s+j2rQRNBODb5LNmtv2ZJBES1ExQVQEfc= Subject key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E483482EED0555F5AF629CE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Tue 13 May 2025 19:06:39 +0000 Subordinate resources: AS: 22215 IP: 198.177.154.0/24 IP: 204.52.252.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:48:2e:ed:05:55:f5:af:62:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 13 19:06:39 2025 GMT Subject: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:19:97:3d:9e:70:5e:2b:82:aa:f7:8f:77: 5c:d0:b1:a7:05:5c:39:94:47:34:3b:46:1f:29:75: ea:81:e4:7a:5a:58:c1:66:46:c4:69:3f:cd:9a:21: 52:01:eb:6c:63:f9:6e:bb:d0:51:fe:ba:03:1a:56: 58:20:75:36:dd:6d:0d:96:f1:ca:74:be:de:aa:0d: b2:e3:c4:be:ea:ec:91:15:b5:5b:d6:99:e8:b5:03: 49:da:a2:af:ee:4e:10:49:b7:cf:45:fb:a8:e5:a9: 47:73:31:a3:28:5f:1c:f1:7a:46:ab:38:ba:c9:6e: 68:ad:f5:3c:ea:1f:b8:f7:4c:64:c8:96:4d:2a:a3: 1a:e5:9e:2a:8f:e4:1a:5f:7b:ca:b0:55:9a:fa:6a: 06:b9:95:cf:06:20:c4:46:10:c3:58:c7:53:e7:3e: fa:fb:b6:98:10:45:ce:fc:41:26:00:b6:34:a5:3d: 2d:db:1d:09:be:c6:5d:79:09:57:cd:2e:53:78:98: dc:38:86:e5:0f:97:a3:d1:07:a5:d7:ed:29:74:bd: ee:df:8f:a5:66:46:a7:2c:ee:ac:07:7e:db:3c:60: eb:50:11:6b:95:dc:08:b6:da:d1:3e:ed:03:d9:22: 66:d8:50:da:2e:e3:dd:8e:7a:92:f5:6f:61:8d:6e: e6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 198.177.154.0/24 204.52.252.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22215 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:84:45:90:2b:ab:7e:6a:86:a4:e8:9b:e7:aa:89:7a:fc:1b: 14:07:35:3e:c3:47:3c:17:85:e5:ac:85:91:45:14:cd:bf:cb: 0f:fc:f0:4a:9d:4f:1c:aa:07:fd:3c:21:31:43:cb:dd:63:5d: f9:dd:73:65:e0:4e:57:c1:d3:78:9f:a0:93:43:93:a9:a4:b0: 81:75:a8:17:04:e3:90:a9:49:76:79:8d:d0:95:65:ad:7b:b7: 9e:0d:4a:7c:de:1e:b0:6a:18:80:bc:88:98:f5:50:e5:45:c8: dd:97:20:f6:6d:20:91:47:e7:74:f4:1e:17:a3:c0:c0:4a:41: dd:4d:61:8d:0b:18:fe:80:51:fb:38:b2:41:27:61:a0:8e:f7: 66:62:2e:39:40:57:0c:3c:5d:e2:ce:b5:e1:95:86:e4:56:83: ec:31:15:b0:04:b6:82:ed:54:b7:01:da:8a:3e:44:ed:71:1f: 3f:7c:1e:8d:d7:8e:19:dc:51:ce:80:b9:55:40:db:8c:a6:6a: 63:1a:72:7b:fa:68:20:22:a9:0a:94:68:0b:b6:48:c1:9c:c2: ad:93:31:9a:ca:a9:73:13:f4:c4:76:ee:b8:0f:d6:74:e0:fe: 7f:32:cb:da:61:54:92:67:14:52:33:77:b8:c3:0a:91:89:6b: b4:69:24:1c -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEHkg0gu7QVV9a9inOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUxMzE5MDYzOVowLzEtMCsGA1UEAxMk ZGNiMGE1OTctZjZlYi00Yzk3LWFhNmMtMzZkMDRiZDdjMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzUZlz2ecF4rgqr3j3dc0LGnBVw5lEc0O0Yf KXXqgeR6WljBZkbEaT/NmiFSAetsY/luu9BR/roDGlZYIHU23W0NlvHKdL7eqg2y 48S+6uyRFbVb1pnotQNJ2qKv7k4QSbfPRfuo5alHczGjKF8c8XpGqzi6yW5orfU8 6h+490xkyJZNKqMa5Z4qj+QaX3vKsFWa+moGuZXPBiDERhDDWMdT5z76+7aYEEXO /EEmALY0pT0t2x0JvsZdeQlXzS5TeJjcOIblD5ej0Qel1+0pdL3u34+lZkanLO6s B37bPGDrUBFrldwIttrRPu0D2SJm2FDaLuPdjnqS9W9hjW7mMwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFApN0S+A5S/Z+Qq2XY//wLEsZli1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k Y2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJkN2MyZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RjYjBhNTk3LWY2ZWItNGM5Ny1h YTZjLTM2ZDA0YmQ3YzJkMS9kY2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJk N2MyZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGsZoDBADMNPwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICVscwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAgoRFkCurfmqGpOib56qJevwbFAc1PsNHPBeF5ayF kUUUzb/LD/zwSp1PHKoH/TwhMUPL3WNd+d1zZeBOV8HTeJ+gk0OTqaSwgXWoFwTj kKlJdnmN0JVlrXu3ng1KfN4esGoYgLyImPVQ5UXI3Zcg9m0gkUfndPQeF6PAwEpB 3U1hjQsY/oBR+ziyQSdhoI73ZmIuOUBXDDxd4s614ZWG5FaD7DEVsAS2gu1UtwHa ij5E7XEfP3wejdeOGdxRzoC5VUDbjKZqYxpye/poICKpCpRoC7ZIwZzCrZMxmsqp cxP0xHbuuA/WdOD+fzLL2mFUkmcUUjN3uMMKkYlrtGkkHA== -----END CERTIFICATE-----Generated at Thu Apr 25 14:24:10 2024 by rpki-client on console-fra.rpki-client.org