$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer File: e8c29e38-a8df-415c-a28b-a1465f9a4d01.cer (raw, json) Hash identifier: NESeIzJ1Ngrd7hS2a/hlFgtgPDjf6QwYy9R+WULsVSs= Subject key identifier: 78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285844CA9FB7D38CD695AED42BEE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Feb 2024 14:54:14 +0000 Certificate not after: Thu 01 Jan 2026 01:45:21 +0000 Subordinate resources: AS: 11491 IP: 216.120.130.0/24 IP: 216.120.144.0/23 IP: 216.120.169.0/24 IP: 216.120.184.0/24 IP: 2605:7a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ca:9f:b7:d3:8c:d6:95:ae:d4:2b:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 5 14:54:14 2024 GMT Not After : Jan 1 01:45:21 2026 GMT Subject: CN=e8c29e38-a8df-415c-a28b-a1465f9a4d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:d3:53:29:5a:a1:61:18:56:c7:39:39:15: 92:0b:98:28:9e:d7:98:b8:f5:eb:a7:2f:8b:5e:48: e2:b6:20:47:e2:17:c1:42:29:f0:51:6c:c5:05:4a: 7d:c0:cb:8f:f8:3f:56:e2:3d:e0:01:e8:79:80:21: 09:86:ee:ef:44:8c:2d:ec:8b:2f:9e:4c:04:2f:4a: d9:13:8f:bd:a7:06:2c:92:73:a0:2b:52:84:4f:eb: 5a:c4:45:32:10:92:54:1d:13:5c:7c:ef:3b:8d:7b: 4d:96:d1:43:e2:bc:49:ec:b5:be:1c:95:d6:0d:f5: 90:2c:c8:c4:55:85:a7:e2:3e:f7:b7:5a:78:d5:7f: 7a:f2:8c:22:c2:02:11:c2:9a:75:85:de:c8:d1:92: be:7d:1f:11:42:fb:27:01:60:c7:27:3e:8b:48:bf: f1:a1:03:3c:16:0f:45:e8:d8:df:fb:7c:57:c3:be: c0:a5:38:97:6f:0f:aa:4a:56:99:ac:42:bc:b1:aa: a6:57:5a:89:42:42:6d:87:e9:a3:1f:7b:ce:d6:21: f9:30:59:2b:0f:dc:be:4e:8d:a3:6a:d4:f1:39:17: d7:79:f1:6d:c2:b7:0d:08:ac:b8:67:ed:92:58:f2: c8:c5:c3:1b:3e:bc:82:2d:c7:34:dd:7b:e3:d7:d0: c9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:07:BA:34:E1:85:CB:C3:29:00:BA:E9:62:F3:AE:E6:41:B3:32:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8c29e38-a8df-415c-a28b-a1465f9a4d01/e8c29e38-a8df-415c-a28b-a1465f9a4d01.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 216.120.130.0/24 216.120.144.0/23 216.120.169.0/24 216.120.184.0/24 IPv6: 2605:7a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11491 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d0:42:79:3a:b0:df:7e:14:bf:70:c7:53:c5:0e:a0:50:26: 16:d9:9d:64:df:82:fd:a4:f2:c7:43:0a:96:51:a3:4c:c0:a3: a2:fc:61:dd:e0:e9:4f:8a:e0:bf:99:1d:30:8f:cd:cd:c4:73: 93:fe:b2:44:4a:41:c6:af:e9:f4:0e:4f:a0:00:3e:0f:a5:99: b2:b2:9e:1e:09:b5:87:09:63:49:3a:c9:46:a5:a2:d6:15:bc: 1c:5b:e6:73:ab:6f:ba:28:ca:71:d1:d0:f4:5e:d7:35:18:80: 07:a9:2b:dc:10:89:ab:de:70:0f:40:b0:bc:f9:b1:17:04:62: 03:4b:ef:31:e4:41:cf:e0:24:91:95:97:63:41:76:5e:8c:c0: 77:81:ba:54:48:b2:e7:39:1f:04:1d:45:b2:7f:7b:f2:f8:5b: 29:07:62:d6:b5:48:93:98:af:d4:d5:ad:11:5d:74:aa:fe:02: 76:16:c9:03:7a:87:e8:11:73:4e:1a:1b:bc:05:70:2f:48:8b: e5:d1:c6:1f:68:83:df:3b:f7:84:08:cf:6a:e7:a9:5b:0e:4b: 1d:3c:07:9e:bb:e6:09:1e:f4:38:e8:3b:ac:8b:56:3c:41:d8: dc:50:fd:75:56:2a:bd:a6:ba:d7:13:b7:08:38:1f:dc:c2:2f: a6:4a:5c:93 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWETKn7fTjNaVrtQr7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDIwNTE0NTQxNFoXDTI2MDEwMTAxNDUyMVowLzEtMCsGA1UEAxMk ZThjMjllMzgtYThkZi00MTVjLWEyOGItYTE0NjVmOWE0ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDzTUylaoWEYVsc5ORWSC5gonteYuPXrpy+L XkjitiBH4hfBQinwUWzFBUp9wMuP+D9W4j3gAeh5gCEJhu7vRIwt7IsvnkwEL0rZ E4+9pwYsknOgK1KET+taxEUyEJJUHRNcfO87jXtNltFD4rxJ7LW+HJXWDfWQLMjE VYWn4j73t1p41X968owiwgIRwpp1hd7I0ZK+fR8RQvsnAWDHJz6LSL/xoQM8Fg9F 6Njf+3xXw77ApTiXbw+qSlaZrEK8saqmV1qJQkJth+mjH3vO1iH5MFkrD9y+To2j atTxORfXefFtwrcNCKy4Z+2SWPLIxcMbPryCLcc03Xvj19DJwQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFHgHujThhcvDKQC66WLzruZBszILMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l OGMyOWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2NWY5YTRkMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U4YzI5ZTM4LWE4ZGYtNDE1Yy1h MjhiLWExNDY1ZjlhNGQwMS9lOGMyOWUzOC1hOGRmLTQxNWMtYTI4Yi1hMTQ2NWY5 YTRkMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBADYeIIDBAHYeJADBADYeKkDBADYeLgwDQQCAAIw BwMFACYFegAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLOMwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV9BC eTqw334Uv3DHU8UOoFAmFtmdZN+C/aTyx0MKllGjTMCjovxh3eDpT4rgv5kdMI/N zcRzk/6yREpBxq/p9A5PoAA+D6WZsrKeHgm1hwljSTrJRqWi1hW8HFvmc6tvuijK cdHQ9F7XNRiAB6kr3BCJq95wD0CwvPmxFwRiA0vvMeRBz+AkkZWXY0F2XozAd4G6 VEiy5zkfBB1Fsn978vhbKQdi1rVIk5iv1NWtEV10qv4CdhbJA3qH6BFzThobvAVw L0iL5dHGH2iD3zv3hAjPauepWw5LHTwHnrvmCR70OOg7rItWPEHY3FD9dVYqvaa6 1xO3CDgf3MIvpkpckw== -----END CERTIFICATE-----Generated at Fri Apr 26 11:13:24 2024 by rpki-client on console-ams.rpki-client.org