$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer File: e3604708-3e0f-4ea6-b151-4d2f7408d326.cer (raw, json) Hash identifier: WkMPn57NPpb4xJqgBb3rMlc0QFnIN1vAFakVsuci+Ng= Subject key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848775DCE51DFE01A10019F3040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 14:17:05 +0000 Certificate not after: Mon 12 Apr 2027 13:17:05 +0000 Subordinate resources: AS: 40788 IP: 23.182.0.0/24 IP: 45.40.64.0/20 IP: 64.140.112.0/20 IP: 96.46.192.0/20 IP: 96.47.176.0/20 IP: 104.153.24.0/22 IP: 104.193.64.0/21 IP: 104.243.80.0/20 IP: 162.250.196.0/22 IP: 162.255.112.0/22 IP: 172.87.80.0/20 IP: 184.171.208.0/20 IP: 192.64.8.0/22 IP: 2600:1600::/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:5d:ce:51:df:e0:1a:10:01:9f:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 7 14:17:05 2025 GMT Not After : Apr 12 13:17:05 2027 GMT Subject: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:a1:d5:03:e4:31:9a:75:2b:54:3c:50:58: 1f:dd:b8:ba:09:3c:14:e1:a1:61:b6:e4:fe:de:83: 51:e9:4f:76:b8:bb:c5:cc:b3:ba:99:7a:1b:3d:c6: 4d:b0:1e:8a:d8:8e:e6:f8:05:b3:1e:cc:04:5a:91: a8:76:e2:36:a5:29:ca:81:f0:71:1c:cb:b8:35:bd: 25:b9:50:5b:29:e9:00:1c:cc:30:97:1c:5a:40:dc: 08:dd:b4:92:40:6e:cb:e3:b5:34:83:50:51:3f:49: be:ab:89:9a:30:11:e2:ef:bb:12:63:f6:3d:cd:d2: 45:22:b9:93:81:21:b8:af:70:85:71:27:60:32:aa: 5b:4f:96:ea:b2:12:e3:6e:45:49:f8:88:5c:86:57: ed:8d:1f:e9:07:6b:11:f3:4b:82:6f:a1:d8:d5:08: 7c:4e:c2:ec:b9:09:46:16:b4:cd:41:ef:6e:a0:00: 7d:c0:80:77:d4:e1:d3:8e:df:66:c0:81:e4:f4:22: 74:c3:38:85:62:61:ba:e6:28:12:89:de:85:35:97: 49:9b:b4:17:20:13:80:60:01:2e:31:7c:31:b0:d8: fb:7f:73:48:85:74:c0:0d:36:2b:59:b0:5c:42:1c: 6b:64:4b:a6:b0:16:bf:03:5f:bc:5d:e8:1e:79:33: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.182.0.0/24 45.40.64.0/20 64.140.112.0/20 96.46.192.0/20 96.47.176.0/20 104.153.24.0/22 104.193.64.0/21 104.243.80.0/20 162.250.196.0/22 162.255.112.0/22 172.87.80.0/20 184.171.208.0/20 192.64.8.0/22 IPv6: 2600:1600::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40788 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:43:95:6e:6d:b8:85:47:d8:33:d0:72:d3:02:7f:7c:f5:5c: d7:0b:e1:b3:87:f2:a8:ac:dd:55:37:54:f4:3f:47:63:d8:9d: da:c6:29:b2:1a:4d:01:14:fc:d8:50:ca:2e:ac:7d:77:ec:83: c5:10:b9:15:76:ed:c5:9a:c2:9b:3a:cd:31:ef:dc:d4:10:d8: 2d:b3:04:22:42:1c:2b:a2:c4:04:dd:c0:24:e7:62:49:c1:30: 18:03:53:76:5d:67:e7:e8:cc:23:6e:59:8a:3d:0a:4e:6f:df: f2:7e:c0:4f:48:cd:33:33:be:18:97:b8:ba:aa:ec:44:03:f7: 22:7c:3c:47:9e:83:19:41:0d:8f:5a:46:50:11:e8:01:77:be: c1:90:df:bb:ee:03:8b:0a:bc:ea:4c:ec:3c:6a:17:72:84:dc: 6d:b0:d1:01:33:1b:1e:c8:3e:26:c2:bc:ee:e3:52:a3:84:07: 0a:71:46:e2:94:53:04:71:18:4d:eb:7b:cb:b7:35:48:22:7a: 1c:6f:c9:ec:bf:34:44:eb:8d:e7:bf:d5:01:c0:44:bc:2e:5c: 6f:cd:e3:18:fe:90:2b:32:e4:02:f0:c8:e3:76:cc:d7:17:f5: 62:af:3d:7c:b7:71:69:c9:d3:34:e4:24:01:f9:1a:e8:16:bf: 42:78:24:23 -----BEGIN CERTIFICATE----- MIIHXzCCBkegAwIBAgIUAQ0Mn0MoWEh3Xc5R3+AaEAGfMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDEwNzE0MTcwNVoXDTI3MDQxMjEzMTcwNVowLzEtMCsGA1UEAxMk ZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhkMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFGh1QPkMZp1K1Q8UFgf3bi6CTwU4aFhtuT+ 3oNR6U92uLvFzLO6mXobPcZNsB6K2I7m+AWzHswEWpGoduI2pSnKgfBxHMu4Nb0l uVBbKekAHMwwlxxaQNwI3bSSQG7L47U0g1BRP0m+q4maMBHi77sSY/Y9zdJFIrmT gSG4r3CFcSdgMqpbT5bqshLjbkVJ+IhchlftjR/pB2sR80uCb6HY1Qh8TsLsuQlG FrTNQe9uoAB9wIB31OHTjt9mwIHk9CJ0wziFYmG65igSid6FNZdJm7QXIBOAYAEu MXwxsNj7f3NIhXTADTYrWbBcQhxrZEumsBa/A1+8XegeeTOYBwIDAQABo4IEcTCC BG0wHQYDVR0OBBYEFOS5VV91IZCaGDINOFTkIbonYOkUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l MzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2UzNjA0NzA4LTNlMGYtNGVhNi1i MTUxLTRkMmY3NDA4ZDMyNi9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQw OGQzMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwdQYIKwYBBQUH AQcBAf8EZjBkMFQEAgABME4DBAAXtgADBAQtKEADBARAjHADBARgLsADBARgL7AD BAJomRgDBANowUADBARo81ADBAKi+sQDBAKi/3ADBASsV1ADBAS4q9ADBALAQAgw DAQCAAIwBgMEACYAFjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAn1QwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAhkOVbm24hUfYM9By0wJ/fPVc1wvhs4fyqKzdVTdU9D9HY9id2sYpshpNART8 2FDKLqx9d+yDxRC5FXbtxZrCmzrNMe/c1BDYLbMEIkIcK6LEBN3AJOdiScEwGANT dl1n5+jMI25Zij0KTm/f8n7AT0jNMzO+GJe4uqrsRAP3Inw8R56DGUENj1pGUBHo AXe+wZDfu+4Diwq86kzsPGoXcoTcbbDRATMbHsg+JsK87uNSo4QHCnFG4pRTBHEY Tet7y7c1SCJ6HG/J7L80ROuN57/VAcBEvC5cb83jGP6QKzLkAvDI43bM1xf1Yq89 fLdxacnTNOQkAfka6Ba/QngkIw== -----END CERTIFICATE-----Generated at Wed Feb 5 12:51:34 2025 by rpki-client