$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer File: fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer (raw, json) Hash identifier: 63VfMhnCZs4nDIM7m6h1Wt3rBMcwyKhTZpxkH27lvd0= Subject key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858454C308DB97D679D72889D1880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 23 Mar 2024 00:45:20 +0000 Certificate not after: Fri 26 Jun 2026 00:45:20 +0000 Subordinate resources: AS: 33322 IP: 72.1.240.0/20 IP: 204.10.36.0/22 IP: 204.15.132.0/22 IP: 204.16.212.0/22 IP: 208.67.180.0/22 IP: 208.71.168.0/21 IP: 208.82.112.0/21 IP: 2607:fbb0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4c:30:8d:b9:7d:67:9d:72:88:9d:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 23 00:45:20 2024 GMT Not After : Jun 26 00:45:20 2026 GMT Subject: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:e9:0a:47:97:df:a2:15:8e:48:f4:76:da: 14:50:60:3e:e0:3e:41:69:5c:f8:d4:dc:63:d5:8c: f3:9b:67:02:58:3d:8c:86:af:77:fa:6b:3f:3a:9e: 5c:cb:72:31:fa:fc:35:0b:53:f0:28:d4:aa:98:32: 39:94:96:52:de:33:e0:cf:61:80:29:eb:4a:ad:61: 23:4f:8a:72:40:c2:70:37:18:f8:a7:e8:2e:e6:ae: 98:1e:89:4a:99:c0:27:48:b6:cc:81:d8:ae:bd:a4: 06:40:8d:22:92:d9:fc:0b:aa:6d:c7:dd:a6:02:a1: e7:d7:fb:cd:b8:6e:24:9c:da:ef:df:99:b3:d2:a9: ae:02:92:af:ee:50:0a:d2:02:64:31:e2:ab:5f:38: f5:af:0a:5d:33:8e:db:89:6d:9b:e2:fe:6e:23:ab: 30:9f:4d:42:36:72:f8:ca:7b:b3:4f:58:96:38:57: 41:ae:f6:f4:92:a3:5a:10:7a:4b:59:31:5f:91:b5: 38:78:de:e9:df:66:6d:25:20:7b:03:1a:bb:a2:d0: 02:24:14:60:1e:e3:32:f2:e1:17:93:6d:ac:b4:f5: 97:93:03:14:cc:19:a3:97:3b:73:38:75:d1:ca:85: a1:d6:0b:6a:7e:d7:71:fc:25:0d:e7:4d:10:a3:4a: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 72.1.240.0/20 204.10.36.0/22 204.15.132.0/22 204.16.212.0/22 208.67.180.0/22 208.71.168.0/21 208.82.112.0/21 IPv6: 2607:fbb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33322 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f3:13:a4:d6:1d:c6:48:3d:10:79:dd:f5:7e:f3:dc:0b:d5: af:6a:4a:32:5e:57:c0:85:b7:5c:6d:89:3a:28:68:36:6e:1e: 6d:86:27:c3:b9:42:b3:de:4a:82:14:27:a5:1d:9e:5a:2c:7a: 47:9e:34:28:4e:32:95:8c:f0:62:45:a9:ff:39:2b:77:1f:1e: 76:23:dd:65:92:47:43:ed:e6:3f:9b:0b:d4:58:65:d8:8e:85: 07:1c:6c:d0:75:95:17:e2:6a:dd:79:11:12:2c:06:d6:36:c2: 24:b0:02:0f:0c:ae:1a:71:24:16:a0:71:46:91:81:8b:f0:6d: 71:d4:4c:2e:02:9b:a8:78:fd:c7:5f:32:0a:df:09:f7:b1:b5: c4:df:35:39:1e:00:c4:58:85:7e:21:52:f3:86:2b:8c:ff:16: eb:85:4f:63:9e:42:1c:64:19:2c:30:e6:f5:29:06:32:07:e7: 5e:0a:d8:00:24:e6:24:c6:bc:54:08:9b:50:9f:c0:f4:f8:6d: 2b:58:f9:5f:ad:53:1c:67:33:c2:7f:aa:12:85:4d:c5:15:58: 97:e2:b5:c0:9b:8a:86:b3:02:51:a6:72:d5:f3:5a:10:c1:d3: a0:35:0a:e2:32:51:dd:d4:d2:54:e6:a0:df:22:24:d6:12:ef: e3:19:de:1d -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWEVMMI25fWedcoidGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDMyMzAwNDUyMFoXDTI2MDYyNjAwNDUyMFowLzEtMCsGA1UEAxMk ZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4NzkxOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEXpCkeX36IVjkj0dtoUUGA+4D5BaVz41Nxj 1Yzzm2cCWD2Mhq93+ms/Op5cy3Ix+vw1C1PwKNSqmDI5lJZS3jPgz2GAKetKrWEj T4pyQMJwNxj4p+gu5q6YHolKmcAnSLbMgdiuvaQGQI0iktn8C6ptx92mAqHn1/vN uG4knNrv35mz0qmuApKv7lAK0gJkMeKrXzj1rwpdM47biW2b4v5uI6swn01CNnL4 ynuzT1iWOFdBrvb0kqNaEHpLWTFfkbU4eN7p32ZtJSB7Axq7otACJBRgHuMy8uEX k22stPWXkwMUzBmjlztzOHXRyoWh1gtqftdx/CUN500Qo0rMlQIDAQABo4IETjCC BEowHQYDVR0OBBYEFI0XWrmLCuY2DwKwYJdUSxJVPjnTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m YWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZhZGNiODc0LTZhOWYtNDNkMy05 ZjFjLWVhYzQ5ODc5MThiYi9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3 OTE4YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBARIAfADBALMCiQDBALMD4QDBALMENQDBALQQ7QD BAPQR6gDBAPQUnAwDQQCAAIwBwMFACYH+7AwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAIIqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAE/zE6TWHcZIPRB53fV+89wL1a9qSjJeV8CFt1xtiToo aDZuHm2GJ8O5QrPeSoIUJ6UdnlosekeeNChOMpWM8GJFqf85K3cfHnYj3WWSR0Pt 5j+bC9RYZdiOhQccbNB1lRfiat15ERIsBtY2wiSwAg8MrhpxJBagcUaRgYvwbXHU TC4Cm6h4/cdfMgrfCfextcTfNTkeAMRYhX4hUvOGK4z/FuuFT2OeQhxkGSww5vUp BjIH514K2AAk5iTGvFQIm1CfwPT4bStY+V+tUxxnM8J/qhKFTcUVWJfitcCbioaz AlGmctXzWhDB06A1CuIyUd3U0lTmoN8iJNYS7+MZ3h0= -----END CERTIFICATE-----Generated at Fri Apr 26 11:13:25 2024 by rpki-client on console-ams.rpki-client.org