$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer File: e51abfb2-ff55-4866-8f32-d2fc9346d303.cer (raw, json) Hash identifier: tqewfSONJA1YF8swzK4lQCpoziG9f9iiT2gA3VEZbLw= Subject key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285841E483479F45FD80D72EB5CF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Fri 09 May 2025 19:06:39 +0000 Subordinate resources: AS: 40287 IP: 208.78.4.0/22 IP: 2620:20:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:47:9f:45:fd:80:d7:2e:b5:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 9 19:06:39 2025 GMT Subject: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:aa:c2:8c:ba:05:2d:27:6c:79:c0:2c:d2: d7:86:24:70:ef:b0:dd:88:1a:a2:17:a9:03:52:53: 80:8e:59:f2:e0:2b:37:81:ad:37:98:a1:15:3a:27: 76:e4:9f:53:87:f6:33:e9:d5:af:e0:73:a3:73:67: bc:e5:45:fb:2c:d2:83:2c:6e:79:b6:27:b3:83:db: 3c:27:13:a6:5f:9f:92:a1:40:93:e6:00:57:48:51: 53:b1:6a:ae:de:09:d7:08:0e:81:92:ac:f6:4b:4d: e1:a5:93:8b:e7:77:20:4a:0f:5b:a7:34:48:c5:27: 68:aa:d3:0c:ae:9e:bc:21:13:57:ef:d7:ac:8b:d2: e9:5d:63:08:98:a4:e8:6e:0d:7f:70:e7:ce:c8:89: 43:be:26:9f:ff:f2:df:96:a0:b5:41:37:31:8f:6a: ae:25:de:31:80:9b:64:70:38:5b:24:65:54:7c:6c: a1:00:9c:cf:f9:17:4e:0d:ad:20:4c:7e:84:96:a9: 88:6e:87:6b:4b:cf:21:50:c6:a2:b8:d5:67:d2:c6: 48:c3:91:da:72:c8:5b:35:73:35:94:a7:a0:7b:eb: 49:27:2e:44:33:b2:67:ba:9a:38:df:a2:49:59:48: a3:a6:c7:40:34:29:c0:4a:9d:fe:6c:ff:57:9d:ea: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 208.78.4.0/22 IPv6: 2620:20:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40287 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:06:ea:80:b9:8c:db:64:41:44:81:aa:5b:52:94:5b:2a:42: 47:c6:85:96:7d:97:6d:06:60:49:78:50:8f:d1:af:76:70:b5: e0:e7:71:6d:cc:36:51:62:43:fd:d4:d6:36:d1:02:52:63:1d: 4f:ab:78:3c:f6:7f:d5:72:30:12:08:72:78:e8:17:cd:f9:b5: 1c:f8:b2:1b:2e:97:b0:ec:93:cc:86:5f:a1:82:c9:56:58:44: 41:3d:19:b9:b3:d2:3f:d3:42:5b:b1:ce:c9:d9:f6:ef:cb:96: ff:b0:07:f9:4f:5e:ca:20:ea:e3:57:26:26:ba:bc:61:22:61: 0e:3d:13:c9:a6:cc:ca:dd:82:b9:b6:c5:db:93:0b:c2:f2:4e: 41:a2:2a:2a:07:36:4a:9e:e9:f2:33:ec:d6:84:46:86:70:6f: 8e:48:36:d7:63:cd:14:37:66:92:10:b1:d9:04:d3:3c:2a:1b: 95:c0:3b:cb:08:bc:8a:bc:0a:8a:d8:4c:a5:6a:e1:0e:b2:99: 82:c3:44:9b:8e:47:c8:87:a4:fb:4e:05:6e:79:50:a5:99:5a: 0f:96:c8:77:c2:d9:9f:7c:7f:fe:6d:61:ba:cf:32:41:e1:f4: bd:58:05:3b:ac:fa:28:e4:54:31:0d:53:57:8d:b9:75:6c:c4: a9:c5:e9:d6 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEHkg0efRf2A1y61z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUwOTE5MDYzOVowLzEtMCsGA1UEAxMk ZTUxYWJmYjItZmY1NS00ODY2LThmMzItZDJmYzkzNDZkMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzSqwoy6BS0nbHnALNLXhiRw77DdiBqiF6kD UlOAjlny4Cs3ga03mKEVOid25J9Th/Yz6dWv4HOjc2e85UX7LNKDLG55tiezg9s8 JxOmX5+SoUCT5gBXSFFTsWqu3gnXCA6Bkqz2S03hpZOL53cgSg9bpzRIxSdoqtMM rp68IRNX79esi9LpXWMImKTobg1/cOfOyIlDviaf//LflqC1QTcxj2quJd4xgJtk cDhbJGVUfGyhAJzP+RdODa0gTH6ElqmIbodrS88hUMaiuNVn0sZIw5HacshbNXM1 lKege+tJJy5EM7Jnupo436JJWUijpsdANCnASp3+bP9Xnep7VwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFA70+Sbi/eCaBeSVQ1KmJsMZoet0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l NTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0NmQzMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U1MWFiZmIyLWZmNTUtNDg2Ni04 ZjMyLWQyZmM5MzQ2ZDMwMy9lNTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0 NmQzMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBALQTgQwDwQCAAIwCQMHACYgACCAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAnV8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASAbqgLmM22RBRIGqW1KUWypC R8aFln2XbQZgSXhQj9GvdnC14Odxbcw2UWJD/dTWNtECUmMdT6t4PPZ/1XIwEghy eOgXzfm1HPiyGy6XsOyTzIZfoYLJVlhEQT0ZubPSP9NCW7HOydn278uW/7AH+U9e yiDq41cmJrq8YSJhDj0TyabMyt2CubbF25MLwvJOQaIqKgc2Sp7p8jPs1oRGhnBv jkg212PNFDdmkhCx2QTTPCoblcA7ywi8irwKithMpWrhDrKZgsNEm45HyIek+04F bnlQpZlaD5bId8LZn3x//m1hus8yQeH0vVgFO6z6KORUMQ1TV425dWzEqcXp1g== -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:56 2024 by rpki-client on console-fra.rpki-client.org