$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer File: de848e16-b429-4505-9234-f6d889fd1438.cer (raw, json) Hash identifier: GuZf9o2kA9sqA+9eVROVhA5pCj2VbuE6LCccd15agVQ= Subject key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858435E0D7ECC828F9063E1D9C580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Sep 2023 00:45:22 +0000 Certificate not after: Wed 31 Dec 2025 01:45:22 +0000 Subordinate resources: AS: 399820 IP: 23.146.184.0/24 IP: 204.137.14.0/24 IP: 2602:fc2f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:5e:0d:7e:cc:82:8f:90:63:e1:d9:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 28 00:45:22 2023 GMT Not After : Dec 31 01:45:22 2025 GMT Subject: CN=de848e16-b429-4505-9234-f6d889fd1438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4e:8e:ff:77:19:d6:e0:c3:6b:b4:f7:39:d6: 6b:4e:c5:26:bd:50:fe:bb:d9:0c:20:7c:c1:af:84: b1:36:55:7e:2a:7f:4b:49:34:88:87:bc:48:2e:c2: c4:4b:70:e2:ca:0d:11:de:17:a9:bf:67:9d:d9:71: 4a:57:46:3e:6d:01:4e:38:df:92:c6:91:b4:85:ec: 50:04:93:56:c9:93:09:b9:04:c1:ec:c7:83:1d:12: c4:7f:03:08:ce:be:0e:c0:2a:f6:20:5e:7f:c2:99: 19:2c:85:8e:e1:bc:e3:d7:7c:11:75:af:f4:c8:45: 53:c0:ff:b6:b0:1c:49:75:27:e4:70:48:f2:41:da: 69:2d:22:bb:5e:32:d7:4c:5b:27:a7:d1:ee:68:7c: 12:32:c3:2f:d3:97:3a:b4:a7:73:dd:f6:67:5c:25: 44:7c:3d:6f:3e:35:a3:23:8c:b8:6f:76:1e:a7:83: a1:5d:13:83:1c:6d:ed:0d:38:71:5e:02:30:4f:38: 81:98:df:9a:d2:9e:b1:11:32:d9:41:6c:8f:6e:f7: 29:dd:b1:5e:b1:35:7d:a1:ad:d6:c9:89:43:0a:ba: a2:79:5e:66:94:1e:c2:0a:08:5c:0c:90:1b:d4:d1: c3:19:c0:3c:21:69:a2:f3:fa:77:c5:91:1b:ff:17: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.146.184.0/24 204.137.14.0/24 IPv6: 2602:fc2f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399820 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:91:2c:ae:fd:44:ac:0d:32:ec:eb:7b:d9:7c:fb:76:2b:7b: fb:e3:d0:07:82:76:58:58:75:6e:e5:55:8b:8c:1a:23:5d:32: 01:88:f2:91:95:91:eb:31:67:ca:37:1f:9e:e3:6e:3a:91:a4: 9d:72:9b:39:5c:84:f1:98:17:ea:74:51:09:cb:2a:2b:32:39: b8:18:4f:fd:b2:b2:ea:a5:ce:ee:0f:4a:27:f8:cb:2c:b8:21: 62:a6:a2:4c:56:45:ae:0a:51:c6:66:eb:22:89:ad:00:a8:61: a5:fc:50:26:e5:7c:a2:98:02:7b:c6:6a:0f:6c:51:b4:3b:7f: ae:97:ca:b1:7a:64:d2:88:1c:92:1d:f0:08:58:b3:19:ed:2b: 98:b7:45:e1:91:f4:e3:dc:c4:a2:cd:53:23:f9:22:3a:df:eb: 0b:87:5b:f4:aa:77:35:ed:9a:43:af:1a:a5:04:e5:08:7c:47: 03:1f:34:70:01:64:6e:78:a1:6f:cb:33:48:ab:6d:fc:f3:bc: c2:93:bb:34:f4:8e:fb:94:f3:e7:f8:e2:70:c3:2c:13:55:b6: ca:09:05:38:c5:e1:cc:5d:c7:01:46:21:7f:89:bb:2d:6a:04: 5e:ab:79:2d:3d:6e:4f:33:8b:05:8a:ad:bf:62:7e:d6:3b:0c: f0:b9:2a:7f -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWENeDX7Mgo+QY+HZxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDkyODAwNDUyMloXDTI1MTIzMTAxNDUyMlowLzEtMCsGA1UEAxMk ZGU4NDhlMTYtYjQyOS00NTA1LTkyMzQtZjZkODg5ZmQxNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk06O/3cZ1uDDa7T3OdZrTsUmvVD+u9kMIHzB r4SxNlV+Kn9LSTSIh7xILsLES3Diyg0R3hepv2ed2XFKV0Y+bQFOON+SxpG0hexQ BJNWyZMJuQTB7MeDHRLEfwMIzr4OwCr2IF5/wpkZLIWO4bzj13wRda/0yEVTwP+2 sBxJdSfkcEjyQdppLSK7XjLXTFsnp9HuaHwSMsMv05c6tKdz3fZnXCVEfD1vPjWj I4y4b3Yep4OhXRODHG3tDThxXgIwTziBmN+a0p6xETLZQWyPbvcp3bFesTV9oa3W yYlDCrqieV5mlB7CCghcDJAb1NHDGcA8IWmi8/p3xZEb/xfTowIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFB7J0JdTa5SKK4PA2igoZZ3rYmfkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k ZTg0OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4ODlmZDE0MzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RlODQ4ZTE2LWI0MjktNDUwNS05 MjM0LWY2ZDg4OWZkMTQzOC9kZTg0OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4ODlm ZDE0MzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkrgDBADMiQ4wDgQCAAIwCAMGBCYC/C8AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYZzDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXkSyu/USsDTLs63vZ fPt2K3v749AHgnZYWHVu5VWLjBojXTIBiPKRlZHrMWfKNx+e4246kaSdcps5XITx mBfqdFEJyyorMjm4GE/9srLqpc7uD0on+MssuCFipqJMVkWuClHGZusiia0AqGGl /FAm5XyimAJ7xmoPbFG0O3+ul8qxemTSiBySHfAIWLMZ7SuYt0XhkfTj3MSizVMj +SI63+sLh1v0qnc17ZpDrxqlBOUIfEcDHzRwAWRueKFvyzNIq23887zCk7s09I77 lPPn+OJwwywTVbbKCQU4xeHMXccBRiF/ibstagReq3ktPW5PM4sFiq2/Yn7WOwzw uSp/ -----END CERTIFICATE-----Generated at Fri Apr 26 03:00:15 2024 by rpki-client on console-ams.rpki-client.org