$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer File: e91007f4-8b69-443f-87b7-248480814a0d.cer (raw, json) Hash identifier: ZTAIQOcak3MpdIaWk8BeieaMLOKpVSH4dE7zHwUynD4= Subject key identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285846D5D3059D7FD1D545AF86FA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Aug 2024 00:45:22 +0000 Certificate not after: Sat 14 Nov 2026 01:45:22 +0000 Subordinate resources: IP: 128.164.0.0/16 IP: 161.253.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:d5:d3:05:9d:7f:d1:d5:45:af:86:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 11 00:45:22 2024 GMT Not After : Nov 14 01:45:22 2026 GMT Subject: CN=e91007f4-8b69-443f-87b7-248480814a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:35:28:39:19:ff:32:c3:69:87:5f:ea:81: 10:80:81:ee:a3:8d:9b:90:df:fc:95:dd:06:aa:a0: 51:d2:10:2d:78:50:b4:4f:5e:74:59:5b:3e:87:21: 91:4b:f1:f5:f4:9e:95:7c:19:a2:c7:b6:5f:b7:e3: 5d:b9:c9:ca:ff:9a:ff:d9:46:ad:d2:2a:a5:e6:be: ab:0c:b4:60:45:81:41:8f:aa:3c:72:84:89:d0:5a: fe:37:86:eb:ff:3e:ba:35:34:69:e6:d9:8b:bd:3d: c9:bc:92:98:61:89:01:06:1c:b7:b9:9f:e6:74:32: 95:52:33:a5:bb:9e:fe:1c:1a:7d:52:73:86:c4:a7: 09:76:b8:a5:bb:b5:de:63:fa:22:8c:90:0d:5a:ff: 1b:d4:63:fb:57:5f:8d:4c:37:ff:28:dd:5e:9d:73: 6c:60:46:25:6c:0d:d2:dc:e6:b7:4e:2b:09:d8:99: 85:e2:3b:62:02:e9:10:93:96:e7:15:bb:39:33:2d: c5:28:04:00:dc:9a:2e:d9:ec:ef:8f:e9:c6:b5:00: 1f:42:e3:34:cd:aa:29:52:3d:9e:84:78:6e:55:73: 3e:f8:cd:db:35:74:1c:fa:36:de:ee:7d:2d:42:54: 6a:e1:c5:fc:c4:83:05:f0:9b:f4:1b:99:62:6d:10: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 128.164.0.0/16 161.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:07:fe:39:e1:ef:2b:67:95:f7:65:90:71:cc:04:dc:10:94: 3d:17:e5:ce:2d:c7:eb:d7:ed:78:b7:d4:7b:9d:e3:1d:c7:3d: 41:a4:43:a4:56:ca:39:10:1f:30:e7:65:c5:52:e0:e1:09:3a: 6c:39:5c:43:fd:f2:e4:d0:15:8e:30:0c:4e:e9:b0:31:00:1e: 5c:1d:5e:d8:35:52:1c:64:a1:bc:22:1f:1d:76:97:a1:df:c8: 0b:66:bc:76:87:f4:da:d5:a5:79:9d:3f:fd:82:7c:61:cd:c8: 89:78:db:85:81:4d:36:e2:49:bd:df:fe:ce:6c:19:54:e1:76: eb:7c:a0:c8:62:5c:04:4d:8c:34:66:46:79:bb:95:e7:9a:15: ca:67:c9:44:05:c9:c1:af:71:d0:3e:93:1c:26:22:55:48:c8: 83:4d:22:eb:f4:a3:a1:1c:0a:12:10:c7:2e:c7:3c:20:da:c8: f7:62:32:0e:7a:36:c6:23:41:a5:91:49:c3:5c:cb:bc:12:ba: ce:b4:66:38:9f:08:95:1c:8b:ea:20:40:4c:01:43:fc:9e:fa: bc:8b:b1:68:28:f9:5f:ff:d7:ec:fa:f3:09:cb:4c:a7:b3:db: 30:83:8f:ea:72:31:27:ee:ce:86:cc:3c:89:7e:52:f0:0d:dc: fd:8a:63:69 -----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgIUAQ0Mn0MoWEbV0wWdf9HVRa+G+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDgxMTAwNDUyMloXDTI2MTExNDAxNDUyMlowLzEtMCsGA1UEAxMk ZTkxMDA3ZjQtOGI2OS00NDNmLTg3YjctMjQ4NDgwODE0YTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEU1KDkZ/zLDaYdf6oEQgIHuo42bkN/8ld0G qqBR0hAteFC0T150WVs+hyGRS/H19J6VfBmix7Zft+NducnK/5r/2Uat0iql5r6r DLRgRYFBj6o8coSJ0Fr+N4br/z66NTRp5tmLvT3JvJKYYYkBBhy3uZ/mdDKVUjOl u57+HBp9UnOGxKcJdrilu7XeY/oijJANWv8b1GP7V1+NTDf/KN1enXNsYEYlbA3S 3Oa3TisJ2JmF4jtiAukQk5bnFbs5My3FKAQA3Jou2ezvj+nGtQAfQuM0zaopUj2e hHhuVXM++M3bNXQc+jbe7n0tQlRq4cX8xIMF8Jv0G5libRCtsQIDAQABo4IEAzCC A/8wHQYDVR0OBBYEFKeVo6jhMXOMOkzcYeggr45PcOCPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l OTEwMDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0ODA4MTRhMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U5MTAwN2Y0LThiNjktNDQzZi04 N2I3LTI0ODQ4MDgxNGEwZC9lOTEwMDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0ODA4 MTRhMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIwYIKwYBBQUH AQcBAf8EFDASMBAEAgABMAoDAwCApAMDAKH9MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFAH/jnh7ytnlfdl kHHMBNwQlD0X5c4tx+vX7Xi31Hud4x3HPUGkQ6RWyjkQHzDnZcVS4OEJOmw5XEP9 8uTQFY4wDE7psDEAHlwdXtg1UhxkobwiHx12l6HfyAtmvHaH9NrVpXmdP/2CfGHN yIl424WBTTbiSb3f/s5sGVThdut8oMhiXARNjDRmRnm7leeaFcpnyUQFycGvcdA+ kxwmIlVIyINNIuv0o6EcChIQxy7HPCDayPdiMg56NsYjQaWRScNcy7wSus60Zjif CJUci+ogQEwBQ/ye+ryLsWgo+V//1+z68wnLTKez2zCDj+pyMSfuzobMPIl+UvAN 3P2KY2k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:31 2024 by rpki-client on console-fra.rpki-client.org