$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c.cer File: eda66d50-f8db-4ce4-92d6-1b50bf737a3c.cer (raw, json) Hash identifier: 2qWBIdPDNw6l8gP4Zuu5jF3dyFuK1akuP3Bv0q06PwE= Subject key identifier: 9B:14:D1:09:B9:F6:F4:B1:82:3D:CD:CB:77:9C:B7:B8:46:D8:87:22 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584511ADF8EB442B9A27D522AA60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/eda66d50-f8db-4ce4-92d6-1b50bf737a3c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 02 Mar 2024 01:45:21 +0000 Certificate not after: Fri 05 Jun 2026 00:45:21 +0000 Subordinate resources: AS: 54368 IP: 204.174.75.0 -- 204.174.79.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:11:ad:f8:eb:44:2b:9a:27:d5:22:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 2 01:45:21 2024 GMT Not After : Jun 5 00:45:21 2026 GMT Subject: CN=eda66d50-f8db-4ce4-92d6-1b50bf737a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:5b:d4:ea:c2:2a:f4:60:83:45:4c:f8:f6: 53:60:e3:77:1a:af:a9:db:76:a9:ad:4f:0b:ad:72: 6e:c6:b4:9b:3f:cd:74:5c:10:74:72:f1:d0:f7:34: df:53:be:fa:63:d3:79:1c:1b:43:00:6f:f2:87:1b: 5c:48:ae:d5:18:f5:0b:00:51:8d:57:08:bd:60:c4: 0c:4b:eb:62:9d:1f:13:73:a6:1e:cc:d9:a1:d1:bc: a0:3e:57:1b:28:7d:5a:bc:10:34:9e:f0:83:fe:72: 15:eb:a5:7e:da:65:3b:08:eb:6c:30:46:8b:c9:73: c0:64:5b:79:27:69:ff:41:63:d0:9d:81:45:9d:c7: 89:83:21:cf:75:e0:da:0f:5c:39:04:f3:ef:07:58: 19:32:44:76:29:9e:2f:92:4f:5a:61:ec:52:1e:7f: b3:3b:8d:21:d0:06:8b:e2:9d:55:6e:a0:83:8a:bb: 04:17:4f:23:9c:31:72:6c:f4:37:e9:33:2f:2f:2f: a1:b7:47:0a:6c:10:69:ab:51:3c:31:ef:6b:c8:06: 95:9d:fe:82:bf:c0:08:e5:3c:82:45:77:ab:e3:73: 58:64:c0:0d:14:9e:10:59:07:cb:e3:16:b6:41:7f: 96:c4:6f:42:86:3e:46:15:00:a1:b4:ed:26:48:e5: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:14:D1:09:B9:F6:F4:B1:82:3D:CD:CB:77:9C:B7:B8:46:D8:87:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/eda66d50-f8db-4ce4-92d6-1b50bf737a3c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.174.75.0-204.174.79.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:06:8b:aa:ed:96:e4:5a:e3:2a:00:7a:33:68:14:21:7c:e5: 25:8a:9a:22:1b:72:56:6b:aa:b4:ae:d5:14:d9:60:83:bf:5f: 49:55:de:bf:4f:c2:92:a0:a4:57:f4:18:ac:ab:32:ec:c3:6f: 0d:1d:4e:26:84:34:9a:62:06:2b:30:04:a8:93:4d:10:7f:86: 53:da:63:97:95:06:3d:2b:35:5a:a7:f1:41:74:27:aa:44:5a: 13:63:b9:ec:ad:56:73:6d:6f:e2:fe:8a:02:19:fd:ee:31:e5: fa:26:a7:b5:8e:b5:9c:81:63:05:12:83:21:c2:e2:32:bf:a8: 9b:24:dd:00:60:9e:2d:7c:f0:e1:88:e6:41:fb:bc:db:4a:f7: 49:62:79:6d:2a:bd:67:ad:61:a9:f5:f7:de:03:d4:8c:c4:d1: 67:34:6e:a2:3b:a6:5e:f3:b4:70:96:33:93:ee:f7:d3:92:10: 7b:f9:d7:65:1d:ea:2d:66:2d:85:88:4e:8e:69:59:82:e9:0e: fe:c3:0e:36:96:be:e9:e6:e3:f9:7c:3e:18:52:0f:7b:4d:12: 27:d8:2d:0e:80:84:44:73:2f:18:16:61:af:c2:12:9f:d7:e2: 4b:f9:d7:f1:f1:e7:60:f8:03:99:bb:a6:fa:f6:bd:a1:29:43: a8:40:19:bf -----BEGIN CERTIFICATE----- MIIHETCCBfmgAwIBAgIUAQ0Mn0MoWEURrfjrRCuaJ9UiqmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDMwMjAxNDUyMVoXDTI2MDYwNTAwNDUyMVowLzEtMCsGA1UEAxMk ZWRhNjZkNTAtZjhkYi00Y2U0LTkyZDYtMWI1MGJmNzM3YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdBb1OrCKvRgg0VM+PZTYON3Gq+p23aprU8L rXJuxrSbP810XBB0cvHQ9zTfU776Y9N5HBtDAG/yhxtcSK7VGPULAFGNVwi9YMQM S+tinR8Tc6YezNmh0bygPlcbKH1avBA0nvCD/nIV66V+2mU7COtsMEaLyXPAZFt5 J2n/QWPQnYFFnceJgyHPdeDaD1w5BPPvB1gZMkR2KZ4vkk9aYexSHn+zO40h0AaL 4p1VbqCDirsEF08jnDFybPQ36TMvLy+ht0cKbBBpq1E8Me9ryAaVnf6Cv8AI5TyC RXer43NYZMANFJ4QWQfL4xa2QX+WxG9Chj5GFQChtO0mSOWb5wIDAQABo4IEIzCC BB8wHQYDVR0OBBYEFJsU0Qm59vSxgj3Ny3ect7hG2IciMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l ZGE2NmQ1MC1mOGRiLTRjZTQtOTJkNi0xYjUwYmY3MzdhM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VkYTY2ZDUwLWY4ZGItNGNlNC05 MmQ2LTFiNTBiZjczN2EzYy9lZGE2NmQ1MC1mOGRiLTRjZTQtOTJkNi0xYjUwYmY3 MzdhM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMyuSwMEBMyuQDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMA1GAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEADgaLqu2W5FrjKgB6M2gUIXzlJYqaIhtyVmuq tK7VFNlgg79fSVXev0/CkqCkV/QYrKsy7MNvDR1OJoQ0mmIGKzAEqJNNEH+GU9pj l5UGPSs1WqfxQXQnqkRaE2O57K1Wc21v4v6KAhn97jHl+iantY61nIFjBRKDIcLi Mr+omyTdAGCeLXzw4YjmQfu820r3SWJ5bSq9Z61hqfX33gPUjMTRZzRuojumXvO0 cJYzk+7305IQe/nXZR3qLWYthYhOjmlZgukO/sMONpa+6ebj+Xw+GFIPe00SJ9gt DoCERHMvGBZhr8ISn9fiS/nX8fHnYPgDmbum+va9oSlDqEAZvw== -----END CERTIFICATE-----Generated at Fri Apr 19 01:25:01 2024 by rpki-client on console-fra.rpki-client.org