$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer File: f63fbc75-bfbc-423c-991c-efb130c5d3df.cer (raw, json) Hash identifier: hnONs4o3d4HwmZT3OKX46yb6TNShi0n+Z3zU3T3n9qs= Subject key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285847E787EE510DB7457FFC240E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Nov 2024 01:45:34 +0000 Certificate not after: Sat 20 Feb 2027 01:45:34 +0000 Subordinate resources: AS: 397873 IP: 45.42.140.0/22 IP: 64.20.208.0/22 IP: 66.248.240.0/22 IP: 69.5.52.0/22 IP: 104.247.120.0/22 IP: 2620:b9:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:87:ee:51:0d:b7:45:7f:fc:24:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 17 01:45:34 2024 GMT Not After : Feb 20 01:45:34 2027 GMT Subject: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:89:57:44:ef:a3:a4:b1:05:38:17:5c:59: 75:da:f9:a6:44:76:80:1e:5d:16:13:37:93:3d:d5: 89:43:70:55:5d:78:49:7f:cb:4b:a0:c4:aa:6c:c0: f5:cd:ee:0a:87:df:21:a8:52:b1:af:ac:f0:c5:9d: 34:6c:d1:ec:05:50:99:84:61:f3:85:f8:1a:08:5d: 50:1e:a0:c8:df:91:41:1f:90:3a:fa:ee:04:7c:9f: 64:fd:ed:7f:a8:d4:71:6e:c5:40:f5:41:96:bb:27: 38:9a:b5:82:ab:b9:2d:aa:d2:2a:11:06:a0:aa:c3: f9:8e:e3:56:77:d9:96:55:7e:10:f0:0b:40:bf:69: 9c:28:54:35:a5:8e:17:25:3b:8f:93:ed:45:4e:6f: 95:66:89:06:4a:89:dd:ff:24:22:7b:56:52:1a:14: 57:ad:be:d0:10:a6:48:f8:80:d3:06:a8:63:2a:6b: 71:bb:5c:64:a3:1b:c6:a7:d4:3d:17:a5:32:b0:4a: 26:99:43:7c:05:b9:97:54:c1:3f:69:e0:1d:3d:72: 15:fb:88:e5:90:52:f1:4c:98:25:d0:f2:25:c8:c6: c7:e2:08:b9:ae:53:ca:4a:5f:68:5c:f2:e2:00:a7: d3:05:47:5a:39:9c:a0:e4:78:4c:39:89:3c:68:49: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.42.140.0/22 64.20.208.0/22 66.248.240.0/22 69.5.52.0/22 104.247.120.0/22 IPv6: 2620:b9:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397873 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4d:7c:9a:88:f1:92:03:13:90:58:2d:34:d2:60:6e:2a:df: 5a:f5:39:63:66:42:8f:8d:11:e7:63:e2:34:f8:74:30:6e:f7: 6b:59:fe:77:cb:e8:f2:e2:90:ff:df:16:b1:27:8b:84:e0:c9: fb:72:63:4d:60:7a:f2:eb:88:4c:c8:37:5a:df:b6:6e:df:cc: 5e:91:4b:4e:47:f0:c7:9b:d5:21:61:16:b5:7d:bb:77:98:ee: 11:88:fc:8a:0d:1e:b3:89:6e:ff:6f:b6:22:36:ea:7c:bc:44: e7:46:72:d0:02:e4:e1:ba:36:43:e1:11:be:43:80:7e:d0:5b: 63:90:70:59:6a:56:07:00:c6:70:7f:b3:5e:13:99:48:16:50: 34:75:df:fe:08:c8:10:79:0b:84:ee:12:93:01:3a:51:51:b7: e8:2e:c2:03:c5:a5:9d:16:7a:b8:6c:7e:70:39:89:84:c5:03: 5d:1d:c8:59:59:1f:e8:0b:86:fe:43:a5:76:b9:11:41:66:ab: 9c:2d:75:26:06:81:c6:b4:0f:2b:67:8a:bc:68:5a:b8:29:bd: 20:9c:ee:1e:98:3a:f3:a4:75:86:1d:fd:40:1a:64:98:62:44: 0d:fe:ea:43:93:4c:a3:15:94:2d:96:3e:b5:39:19:ed:cc:84: 5f:6f:32:dd -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEfnh+5RDbdFf/wkDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTExNzAxNDUzNFoXDTI3MDIyMDAxNDUzNFowLzEtMCsGA1UEAxMk ZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVkM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8GJV0Tvo6SxBTgXXFl12vmmRHaAHl0WEzeT PdWJQ3BVXXhJf8tLoMSqbMD1ze4Kh98hqFKxr6zwxZ00bNHsBVCZhGHzhfgaCF1Q HqDI35FBH5A6+u4EfJ9k/e1/qNRxbsVA9UGWuyc4mrWCq7ktqtIqEQagqsP5juNW d9mWVX4Q8AtAv2mcKFQ1pY4XJTuPk+1FTm+VZokGSond/yQie1ZSGhRXrb7QEKZI +IDTBqhjKmtxu1xkoxvGp9Q9F6UysEommUN8BbmXVME/aeAdPXIV+4jlkFLxTJgl 0PIlyMbH4gi5rlPKSl9oXPLiAKfTBUdaOZyg5HhMOYk8aEncrwIDAQABo4IERDCC BEAwHQYDVR0OBBYEFB9MaRmDptkdrC1NPtq93ONM6YwyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m NjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Y2M2ZiYzc1LWJmYmMtNDIzYy05 OTFjLWVmYjEzMGM1ZDNkZi9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBj NWQzZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCQEAgABMB4DBAItKowDBAJAFNADBAJC+PADBAJFBTQDBAJo93gw DwQCAAIwCQMHACYgALngADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGEjEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXk18mojxkgMTkFgtNNJgbirfWvU5Y2ZCj40R52PiNPh0MG73a1n+d8vo 8uKQ/98WsSeLhODJ+3JjTWB68uuITMg3Wt+2bt/MXpFLTkfwx5vVIWEWtX27d5ju EYj8ig0es4lu/2+2IjbqfLxE50Zy0ALk4bo2Q+ERvkOAftBbY5BwWWpWBwDGcH+z XhOZSBZQNHXf/gjIEHkLhO4SkwE6UVG36C7CA8WlnRZ6uGx+cDmJhMUDXR3IWVkf 6AuG/kOldrkRQWarnC11JgaBxrQPK2eKvGhauCm9IJzuHpg686R1hh39QBpkmGJE Df7qQ5NMoxWULZY+tTkZ7cyEX28y3Q== -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:32 2024 by rpki-client on console-fra.rpki-client.org