$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer File: f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer (raw, json) Hash identifier: IphPa895VxYrp9uhAusNNg25ZWVaKIeDvlpfIBTPL0U= Subject key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285846FCE8A1AB5920B5AC27C3FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Aug 2024 00:45:26 +0000 Certificate not after: Sat 28 Nov 2026 01:45:26 +0000 Subordinate resources: IP: 67.21.36.0/24 IP: 69.166.11.0/24 IP: 192.169.0.0/23 IP: 207.34.0.0/24 IP: 216.21.0.0/24 IP: 216.21.14.0/24 IP: 216.21.16.0/24 IP: 216.151.34.0/24 IP: 216.151.36.0/24 IP: 216.151.38.0/24 IP: 216.151.41.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:fc:e8:a1:ab:59:20:b5:ac:27:c3:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 25 00:45:26 2024 GMT Not After : Nov 28 01:45:26 2026 GMT Subject: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:67:1c:8d:ce:cc:41:ce:f4:15:b5:d2:f2: 17:54:a7:57:98:3d:6d:d9:a8:59:95:34:22:c1:f8: d5:c0:f1:c2:35:b0:c9:a5:41:00:78:68:c2:01:6e: 89:e6:7a:20:5f:ee:f5:2a:34:1f:54:f9:6d:37:fb: 1b:29:56:15:8b:34:dd:a5:0c:0c:a4:10:f8:12:ee: 3f:e7:43:5f:d3:95:02:5e:f5:24:9d:d8:07:dd:ca: 87:59:dd:c6:19:0e:94:d5:bd:cd:15:bc:1c:b2:db: 45:27:95:24:5b:3e:d4:2b:ab:a7:3f:e6:ed:be:fa: c4:86:62:3a:05:ad:0a:d6:93:01:f5:fa:a8:f6:61: a8:00:3c:01:35:0f:d7:2a:18:cd:33:9b:2d:a9:0c: 2c:9c:c5:4e:a4:f1:9d:f5:3a:c1:07:f0:3a:91:29: eb:b3:3b:c0:fc:5b:fe:7f:e4:02:ce:63:20:ff:fb: 66:f5:10:ee:3b:7f:e9:36:b4:9c:ce:87:16:b9:48: 3e:28:da:e1:80:40:03:5c:1c:18:6b:93:eb:d2:1e: 4b:29:de:0a:26:ba:75:cd:88:9d:5d:4d:7b:95:6b: 90:1b:01:0c:31:5e:e0:ac:44:7a:06:39:23:ba:58: 9b:56:0b:7c:31:de:2a:ee:ed:ec:e9:ee:34:85:45: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 67.21.36.0/24 69.166.11.0/24 192.169.0.0/23 207.34.0.0/24 216.21.0.0/24 216.21.14.0/24 216.21.16.0/24 216.151.34.0/24 216.151.36.0/24 216.151.38.0/24 216.151.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b0:c3:3f:c1:08:83:83:70:ed:2f:50:44:cf:43:c4:25:67: f8:99:c5:af:06:75:5d:d2:9b:a3:b6:a4:e6:67:39:10:a1:32: f6:77:94:38:20:ba:86:ad:44:26:a3:12:bf:26:5a:6e:1c:18: bb:1c:22:07:86:9c:ec:04:3d:7d:38:b9:c9:38:c3:44:74:17: 0a:dc:d4:ef:2d:27:7c:9f:74:ed:cd:64:4b:ab:d9:1c:99:17: bd:67:cf:66:c9:b9:7f:9c:a9:f1:42:00:be:74:56:70:a5:39: 24:2d:73:08:03:45:5d:74:98:e8:ee:33:6d:f6:b2:87:f9:a7: ff:e7:ba:73:a2:34:14:bc:67:0d:fa:fb:23:a1:9c:01:f7:2e: 83:7a:52:11:74:2b:94:a2:89:be:f5:79:3a:27:f3:eb:3f:da: 54:57:20:c8:2d:8e:a7:e4:ad:f7:9a:a3:86:b9:c7:e2:ce:31: d5:dc:79:b0:ea:60:90:2f:5b:c5:df:e7:e5:e9:9d:bb:a3:b8: 45:6c:f7:13:32:eb:4d:c7:9e:08:6b:63:6a:bd:b9:1e:b0:69: 34:94:2d:94:79:da:df:0c:cb:75:76:e0:a0:43:45:75:5b:ad: 3e:aa:c7:bc:0e:f5:fe:ab:46:ae:a5:d7:60:87:5c:e5:24:c5: b2:e9:bb:02 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEb86KGrWSC1rCfD/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDgyNTAwNDUyNloXDTI2MTEyODAxNDUyNlowLzEtMCsGA1UEAxMk ZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyJnHI3OzEHO9BW10vIXVKdXmD1t2ahZlTQi wfjVwPHCNbDJpUEAeGjCAW6J5nogX+71KjQfVPltN/sbKVYVizTdpQwMpBD4Eu4/ 50Nf05UCXvUkndgH3cqHWd3GGQ6U1b3NFbwcsttFJ5UkWz7UK6unP+btvvrEhmI6 Ba0K1pMB9fqo9mGoADwBNQ/XKhjNM5stqQwsnMVOpPGd9TrBB/A6kSnrszvA/Fv+ f+QCzmMg//tm9RDuO3/pNrSczocWuUg+KNrhgEADXBwYa5Pr0h5LKd4KJrp1zYid XU17lWuQGwEMMV7grER6BjkjulibVgt8Md4q7u3s6e40hUU+hwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFEWGZeKvHmSJEEo7g+PYf0iTtXuTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m NWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Y1YThlMzI3LWViZjQtNGY0Yi05 MDczLTkwYWNkNjE3OTdjYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYx Nzk3Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwWwYIKwYBBQUH AQcBAf8ETDBKMEgEAgABMEIDBABDFSQDBABFpgsDBAHAqQADBADPIgADBADYFQAD BADYFQ4DBADYFRADBADYlyIDBADYlyQDBADYlyYDBADYlykwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZbDD P8EIg4Nw7S9QRM9DxCVn+JnFrwZ1XdKbo7ak5mc5EKEy9neUOCC6hq1EJqMSvyZa bhwYuxwiB4ac7AQ9fTi5yTjDRHQXCtzU7y0nfJ907c1kS6vZHJkXvWfPZsm5f5yp 8UIAvnRWcKU5JC1zCANFXXSY6O4zbfayh/mn/+e6c6I0FLxnDfr7I6GcAfcug3pS EXQrlKKJvvV5Oifz6z/aVFcgyC2Op+St95qjhrnH4s4x1dx5sOpgkC9bxd/n5emd u6O4RWz3EzLrTceeCGtjar25HrBpNJQtlHna3wzLdXbgoENFdVutPqrHvA71/qtG rqXXYIdc5STFsum7Ag== -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:27 2024 by rpki-client on console-ams.rpki-client.org