$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer File: f0ba84c0-5d44-4547-a368-e574b20611e4.cer (raw, json) Hash identifier: gMcPLE5udPIBO7lrgEuYTG2CP/FMk+hW+gzUhXU/Aac= Subject key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285843CB0BE433A360B8E8FEFC3780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Nov 2023 01:45:15 +0000 Certificate not after: Sun 08 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 33040 IP: 199.48.216.0/21 IP: 2605:3d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:cb:0b:e4:33:a3:60:b8:e8:fe:fc:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 6 01:45:15 2023 GMT Not After : Feb 8 01:45:15 2026 GMT Subject: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:69:5e:40:62:f1:15:20:a2:0a:9a:a8:d6: 56:5b:f7:61:26:f6:a8:59:d9:e4:c2:72:a8:46:ad: 68:83:28:51:83:e0:33:ca:41:ce:42:b4:ac:d0:a4: cb:e3:41:d1:b4:c9:9c:03:aa:3b:53:69:1e:f2:b7: ef:1d:d9:09:ae:4d:7f:6f:6b:c8:56:f6:40:3c:34: 63:e2:f4:71:fd:11:31:0e:b4:a5:21:55:81:69:25: ad:14:52:40:7d:ac:36:ed:2c:bc:35:96:7b:a7:fc: f6:b0:2c:7f:06:c9:0e:b8:ea:9d:bb:66:22:98:02: ff:bb:9b:5a:dd:73:67:0f:71:9a:4b:0d:48:5d:1c: 0e:a2:39:7e:d8:d1:63:4a:96:25:4a:9b:be:f0:d8: 23:2e:db:00:fc:18:44:df:8c:58:23:ea:1a:9a:3e: 5d:45:48:f4:11:bb:61:b4:e6:11:68:6a:77:40:a5: 75:03:3b:d2:d5:cb:01:a9:17:27:17:b8:01:b0:91: 1e:22:e6:ca:1b:ce:bf:ad:cf:d7:5d:cb:95:dc:66: 38:be:8b:34:e4:10:dd:f5:21:69:19:a8:89:23:19: f1:22:35:40:ff:01:84:5d:80:3a:6c:ec:89:43:be: 30:1e:cb:23:50:50:b0:67:26:e0:b7:88:cd:6f:db: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 199.48.216.0/21 IPv6: 2605:3d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33040 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ce:2d:28:50:0c:ca:3c:24:5a:80:f8:71:d9:90:ce:ed:ab: 35:c6:a1:67:06:5d:3e:5b:75:4b:82:59:30:b8:6f:82:a5:ef: de:c8:2e:5f:91:a2:c5:37:74:6a:b0:df:97:b3:ef:0d:a8:d9: 83:d0:f2:6b:5f:b6:c7:73:7d:4d:b2:66:15:4f:dd:2c:25:56: 66:ba:fd:bd:4f:ab:cd:da:32:41:6b:8d:48:8a:d7:ab:e9:b5: 85:e3:fa:bf:7c:4a:8f:aa:af:b5:b0:fe:6e:d1:a3:a6:08:f0: 28:b0:28:be:33:8c:69:f5:07:6d:e6:39:2b:eb:f3:bb:db:2f: 71:6d:80:e3:9d:ac:ca:a3:49:d9:fb:8c:4e:1b:ec:51:8d:ef: d9:cc:05:87:84:d1:bd:05:49:93:0b:27:6b:cd:df:6d:bd:dc: ba:6e:36:24:a4:eb:8c:e6:38:7b:ff:ac:12:79:57:fd:ab:c4: 0a:81:01:90:11:21:61:c6:fe:67:e9:4f:86:8e:9a:50:6b:e9: 34:73:7b:f8:0e:bf:91:7f:d3:54:47:56:5a:f5:18:87:85:95: d6:18:ec:79:89:b6:e8:c3:4a:a1:ab:c1:97:86:17:b8:86:5b: c4:71:9e:92:4c:20:59:21:fd:49:d3:56:cd:60:52:40:c5:df: 37:1d:9f:8e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEPLC+Qzo2C46P78N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTIzMTEwNjAxNDUxNVoXDTI2MDIwODAxNDUxNVowLzEtMCsGA1UEAxMk ZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYxMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaZpXkBi8RUgogqaqNZWW/dhJvaoWdnkwnKo Rq1ogyhRg+AzykHOQrSs0KTL40HRtMmcA6o7U2ke8rfvHdkJrk1/b2vIVvZAPDRj 4vRx/RExDrSlIVWBaSWtFFJAfaw27Sy8NZZ7p/z2sCx/BskOuOqdu2YimAL/u5ta 3XNnD3GaSw1IXRwOojl+2NFjSpYlSpu+8NgjLtsA/BhE34xYI+oamj5dRUj0Ebth tOYRaGp3QKV1AzvS1csBqRcnF7gBsJEeIubKG86/rc/XXcuV3GY4vos05BDd9SFp GaiJIxnxIjVA/wGEXYA6bOyJQ74wHssjUFCwZybgt4jNb9sSbQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKC7Gc7n2NeqTXzlkDgPShnYe3ojMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m MGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2YwYmE4NGMwLTVkNDQtNDU0Ny1h MzY4LWU1NzRiMjA2MTFlNC9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIw NjExZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPHMNgwDQQCAAIwBwMFACYFPUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIEQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC/OLShQDMo8JFqA+HHZkM7tqzXG oWcGXT5bdUuCWTC4b4Kl797ILl+RosU3dGqw35ez7w2o2YPQ8mtftsdzfU2yZhVP 3SwlVma6/b1Pq83aMkFrjUiK16vptYXj+r98So+qr7Ww/m7Ro6YI8CiwKL4zjGn1 B23mOSvr87vbL3FtgOOdrMqjSdn7jE4b7FGN79nMBYeE0b0FSZMLJ2vN32293Lpu NiSk64zmOHv/rBJ5V/2rxAqBAZARIWHG/mfpT4aOmlBr6TRze/gOv5F/01RHVlr1 GIeFldYY7HmJtujDSqGrwZeGF7iGW8RxnpJMIFkh/UnTVs1gUkDF3zcdn44= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:32 2024 by rpki-client on console-fra.rpki-client.org