$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer File: f63fbc75-bfbc-423c-991c-efb130c5d3df.cer (raw, json) Hash identifier: v/zkdruhQUC44GRnpUBIhG2GNwyRFcs+AjzMI1gF2ao= Subject key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858456765B2B3754F064738EB3300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Apr 2024 18:39:15 +0000 Certificate not after: Mon 17 Nov 2025 01:45:21 +0000 Subordinate resources: AS: 397873 IP: 45.42.140.0/22 IP: 64.20.208.0/22 IP: 66.248.240.0/22 IP: 69.5.52.0/22 IP: 104.247.120.0/22 IP: 2620:b9:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:67:65:b2:b3:75:4f:06:47:38:eb:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 1 18:39:15 2024 GMT Not After : Nov 17 01:45:21 2025 GMT Subject: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:89:57:44:ef:a3:a4:b1:05:38:17:5c:59: 75:da:f9:a6:44:76:80:1e:5d:16:13:37:93:3d:d5: 89:43:70:55:5d:78:49:7f:cb:4b:a0:c4:aa:6c:c0: f5:cd:ee:0a:87:df:21:a8:52:b1:af:ac:f0:c5:9d: 34:6c:d1:ec:05:50:99:84:61:f3:85:f8:1a:08:5d: 50:1e:a0:c8:df:91:41:1f:90:3a:fa:ee:04:7c:9f: 64:fd:ed:7f:a8:d4:71:6e:c5:40:f5:41:96:bb:27: 38:9a:b5:82:ab:b9:2d:aa:d2:2a:11:06:a0:aa:c3: f9:8e:e3:56:77:d9:96:55:7e:10:f0:0b:40:bf:69: 9c:28:54:35:a5:8e:17:25:3b:8f:93:ed:45:4e:6f: 95:66:89:06:4a:89:dd:ff:24:22:7b:56:52:1a:14: 57:ad:be:d0:10:a6:48:f8:80:d3:06:a8:63:2a:6b: 71:bb:5c:64:a3:1b:c6:a7:d4:3d:17:a5:32:b0:4a: 26:99:43:7c:05:b9:97:54:c1:3f:69:e0:1d:3d:72: 15:fb:88:e5:90:52:f1:4c:98:25:d0:f2:25:c8:c6: c7:e2:08:b9:ae:53:ca:4a:5f:68:5c:f2:e2:00:a7: d3:05:47:5a:39:9c:a0:e4:78:4c:39:89:3c:68:49: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.42.140.0/22 64.20.208.0/22 66.248.240.0/22 69.5.52.0/22 104.247.120.0/22 IPv6: 2620:b9:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397873 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3f:40:af:eb:42:7a:e8:fb:fc:9c:cc:ee:cc:a8:95:0f:87: 65:8c:38:27:1a:a6:0b:1a:64:27:2d:9f:47:bb:ec:25:7e:7e: 4f:94:4e:97:b1:e3:67:74:cf:77:e5:66:5e:5f:72:29:06:43: e9:ac:b0:8d:0c:0b:1d:1a:25:98:c8:3e:d8:42:a3:bb:80:0d: 75:b3:00:73:3f:fe:e4:95:8f:3d:cd:54:37:14:1e:b5:65:3a: 83:bf:82:a6:c1:98:1c:95:66:8e:fb:fd:dc:29:08:69:55:1a: f0:5a:80:08:99:b0:f4:cc:b7:05:c5:82:8d:19:f8:18:45:26: bf:2a:77:96:1c:d8:82:60:4e:ee:1c:36:3a:31:fb:36:d0:c3: bd:a2:c2:82:62:84:61:fc:c8:ef:27:cd:10:dc:16:b1:34:1e: df:68:23:f7:3d:59:96:9c:25:aa:24:29:fa:30:61:7c:52:67: de:9c:8c:91:f9:75:0c:2c:5a:06:49:3a:37:13:b0:67:98:3a: bd:97:45:34:8a:18:74:dd:88:50:1d:00:7c:2c:e3:2e:2a:0c: dd:6c:8e:0c:60:fe:02:de:74:46:e2:53:9e:14:76:98:0d:05: e2:f0:3d:23:da:f6:25:94:48:aa:be:46:36:96:a3:db:f2:89: ef:b6:66:a7 -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEVnZbKzdU8GRzjrMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDQwMTE4MzkxNVoXDTI1MTExNzAxNDUyMVowLzEtMCsGA1UEAxMk ZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVkM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8GJV0Tvo6SxBTgXXFl12vmmRHaAHl0WEzeT PdWJQ3BVXXhJf8tLoMSqbMD1ze4Kh98hqFKxr6zwxZ00bNHsBVCZhGHzhfgaCF1Q HqDI35FBH5A6+u4EfJ9k/e1/qNRxbsVA9UGWuyc4mrWCq7ktqtIqEQagqsP5juNW d9mWVX4Q8AtAv2mcKFQ1pY4XJTuPk+1FTm+VZokGSond/yQie1ZSGhRXrb7QEKZI +IDTBqhjKmtxu1xkoxvGp9Q9F6UysEommUN8BbmXVME/aeAdPXIV+4jlkFLxTJgl 0PIlyMbH4gi5rlPKSl9oXPLiAKfTBUdaOZyg5HhMOYk8aEncrwIDAQABo4IERDCC BEAwHQYDVR0OBBYEFB9MaRmDptkdrC1NPtq93ONM6YwyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m NjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Y2M2ZiYzc1LWJmYmMtNDIzYy05 OTFjLWVmYjEzMGM1ZDNkZi9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBj NWQzZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCQEAgABMB4DBAItKowDBAJAFNADBAJC+PADBAJFBTQDBAJo93gw DwQCAAIwCQMHACYgALngADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGEjEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXz9Ar+tCeuj7/JzM7syolQ+HZYw4JxqmCxpkJy2fR7vsJX5+T5ROl7Hj Z3TPd+VmXl9yKQZD6aywjQwLHRolmMg+2EKju4ANdbMAcz/+5JWPPc1UNxQetWU6 g7+CpsGYHJVmjvv93CkIaVUa8FqACJmw9My3BcWCjRn4GEUmvyp3lhzYgmBO7hw2 OjH7NtDDvaLCgmKEYfzI7yfNENwWsTQe32gj9z1ZlpwlqiQp+jBhfFJn3pyMkfl1 DCxaBkk6NxOwZ5g6vZdFNIoYdN2IUB0AfCzjLioM3WyODGD+At50RuJTnhR2mA0F 4vA9I9r2JZRIqr5GNpaj2/KJ77Zmpw== -----END CERTIFICATE-----Generated at Thu Apr 25 16:26:55 2024 by rpki-client on console-fra.rpki-client.org