$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer (raw, json) Hash identifier: blmolUdP9PI+jS0zv6YgKyI48jdEkNOABJgrPCiLqh0= Subject key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285847C33D02771B28ECF4308BA4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Nov 2024 01:45:30 +0000 Certificate not after: Sun 07 Feb 2027 01:45:30 +0000 Subordinate resources: AS: 400564 IP: 23.134.136.0/24 IP: 207.174.20.0/24 IP: 2602:fb9f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:3d:02:77:1b:28:ec:f4:30:8b:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 4 01:45:30 2024 GMT Not After : Feb 7 01:45:30 2027 GMT Subject: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:80:95:a0:af:58:b6:d4:5e:23:8d:5f:e7:82: 88:97:c6:83:e9:ef:9c:e0:f1:dd:0b:79:64:43:5f: c1:a4:c3:f8:96:13:ff:71:aa:ea:6f:9b:08:ff:1a: a7:96:c2:f7:1e:a1:cc:8f:73:ca:28:6b:c5:a5:bc: bc:fc:d7:49:4e:1c:f3:2f:29:97:32:65:d9:82:e3: e0:97:c5:5b:09:91:d2:b2:20:f9:60:b0:ac:8e:10: a3:95:19:31:d7:61:42:99:8c:13:82:2c:82:c8:30: 56:01:55:7b:53:c6:e7:00:00:60:07:38:ed:f6:b2: 71:1d:6f:cd:0a:e4:4c:40:4c:77:dc:e7:52:8b:8e: ee:9f:64:d8:01:6a:ab:26:70:02:06:4d:7a:d4:c8: d6:cd:2d:0d:e4:4c:14:53:81:94:3b:8e:21:5a:ee: a6:2c:0c:63:fb:1e:6a:15:5f:81:fc:8e:e1:ac:63: ff:70:bc:15:f0:01:58:06:4c:fa:f6:43:26:c0:d8: 44:d9:78:e0:35:6d:57:a5:6f:61:ed:1b:3a:ee:ea: 51:ad:97:6f:d6:18:c4:c0:86:2f:61:32:6b:d4:ca: 31:5d:69:9f:11:d6:8b:6b:58:89:75:90:5b:f0:af: e2:c2:a1:04:1d:cc:90:6c:a9:53:27:46:5f:0e:ca: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.134.136.0/24 207.174.20.0/24 IPv6: 2602:fb9f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400564 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:95:dd:2a:29:f3:75:00:31:22:77:1c:89:16:6e:71:31:f8: 01:ef:75:a0:3a:ff:6f:18:6e:d4:7d:aa:87:b3:ba:d3:62:84: 51:ac:dc:ef:0b:68:58:80:0c:56:bc:7e:80:3e:59:c3:2a:1e: 12:c9:59:8c:ed:7c:2d:73:7d:f5:73:10:62:bc:27:4f:70:17: 97:10:c7:a9:26:4f:61:27:52:a5:fa:40:af:5a:b2:4f:3e:ff: a1:eb:46:bd:fe:7b:a8:39:2f:07:f9:62:6a:22:93:26:98:ca: 69:88:83:be:43:d5:b1:37:62:a0:ef:5a:0d:70:92:be:55:ea: 64:bd:74:60:3e:de:b0:c8:e5:33:06:69:91:af:27:d2:5c:4e: 70:6c:f5:07:c5:fb:1d:9b:35:3b:b7:5e:65:4b:35:e4:4a:fa: 5e:1d:9f:4b:12:58:92:e5:b8:cb:83:38:8a:f5:a1:2b:53:e5: 1c:f5:ae:d1:06:ec:df:14:41:74:26:15:f1:5f:9c:24:73:72: ba:55:f1:64:97:f5:7e:39:dc:dc:8b:44:07:ac:9a:04:fc:67: 56:72:2b:86:ef:88:e0:59:f0:19:d1:ad:d7:0a:a0:e8:b1:63: 20:2d:4d:2d:9d:4d:6b:81:b6:e8:8e:54:1b:79:30:7a:56:28: 63:f6:7c:e2 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEfDPQJ3Gyjs9DCLpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTEwNDAxNDUzMFoXDTI3MDIwNzAxNDUzMFowLzEtMCsGA1UEAxMk ZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNiMThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4CVoK9YttReI41f54KIl8aD6e+c4PHdC3lk Q1/BpMP4lhP/carqb5sI/xqnlsL3HqHMj3PKKGvFpby8/NdJThzzLymXMmXZguPg l8VbCZHSsiD5YLCsjhCjlRkx12FCmYwTgiyCyDBWAVV7U8bnAABgBzjt9rJxHW/N CuRMQEx33OdSi47un2TYAWqrJnACBk161MjWzS0N5EwUU4GUO44hWu6mLAxj+x5q FV+B/I7hrGP/cLwV8AFYBkz69kMmwNhE2XjgNW1XpW9h7Rs67upRrZdv1hjEwIYv YTJr1MoxXWmfEdaLa1iJdZBb8K/iwqEEHcyQbKlTJ0ZfDsqwowIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFPcbHyRUBYB/bsZdRhuCoonn7YLGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k ZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RlODkzOWE2LTZhY2ItNDhlNS1h ZjlhLWQxZjdjY2EzYjE4ZS9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2Nh M2IxOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXhogDBADPrhQwDgQCAAIwCAMGBCYC+58AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYctDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjld0qKfN1ADEidxyJ Fm5xMfgB73WgOv9vGG7UfaqHs7rTYoRRrNzvC2hYgAxWvH6APlnDKh4SyVmM7Xwt c331cxBivCdPcBeXEMepJk9hJ1Kl+kCvWrJPPv+h60a9/nuoOS8H+WJqIpMmmMpp iIO+Q9WxN2Kg71oNcJK+VepkvXRgPt6wyOUzBmmRryfSXE5wbPUHxfsdmzU7t15l SzXkSvpeHZ9LEliS5bjLgziK9aErU+Uc9a7RBuzfFEF0JhXxX5wkc3K6VfFkl/V+ Odzci0QHrJoE/GdWciuG74jgWfAZ0a3XCqDosWMgLU0tnU1rgbbojlQbeTB6Vihj 9nzi -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:30 2024 by rpki-client on console-fra.rpki-client.org