$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer File: fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer (raw, json) Hash identifier: ys8Q//AilyNBrunHJKhdDqDxeaaYupHFFfOGKTAMqgI= Subject key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285844C9182F8CF50CA5BC950CEA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Feb 2024 01:45:20 +0000 Certificate not after: Sun 10 May 2026 00:45:20 +0000 Subordinate resources: AS: 398555 IP: 192.111.36.0/24 IP: 192.160.64.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:c9:18:2f:8c:f5:0c:a5:bc:95:0c:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 5 01:45:20 2024 GMT Not After : May 10 00:45:20 2026 GMT Subject: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:3d:55:8e:0e:32:9e:ed:b0:4f:40:f1:bd: c0:a8:74:df:23:52:f5:bd:59:79:8a:a0:5a:cb:ca: be:e8:55:7d:29:43:e9:8b:9c:cc:52:83:83:df:84: 1b:74:cd:8c:50:87:6f:29:17:a4:b6:a4:7c:99:47: fc:16:43:68:5b:5d:ef:04:bc:e3:dc:20:0e:45:3b: ba:ae:c6:a3:3b:ea:f8:7e:7e:19:13:0b:50:ac:6d: ba:62:a1:9f:1d:6a:05:20:8e:97:99:5b:97:a8:93: 00:34:b6:c2:8d:75:6e:4d:29:7d:0f:cd:3b:67:62: 34:f4:8c:52:f3:6b:02:2c:6b:8b:da:a7:d0:53:fc: 4b:a0:a5:df:ff:c6:67:0f:87:c4:43:b3:da:e1:d9: af:a5:6b:d3:f2:df:64:b9:50:4a:71:ee:c7:fa:77: 0a:10:87:9a:ca:01:ef:8b:e9:83:13:c3:80:41:89: 92:f4:7c:0f:f3:25:82:19:a1:0e:66:c8:33:e2:39: a2:c1:8e:8c:59:05:23:59:9f:53:f4:8a:85:bd:18: 88:17:d0:cc:e2:7a:73:98:6b:7a:e5:4c:67:e2:39: 5c:26:f9:df:5a:1c:bb:19:e3:a7:a2:4f:45:c8:8e: c5:c5:85:49:9f:34:1f:0d:50:30:44:ca:2a:d2:52: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.111.36.0/24 192.160.64.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398555 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b3:2c:41:f6:17:29:f1:7f:1a:49:fc:13:63:cf:48:df:a7: fd:80:73:82:06:51:ba:ac:7f:27:2d:35:9d:2d:55:51:6c:a1: f5:55:a8:e1:a9:1b:05:28:5c:24:d1:27:45:12:d3:41:2f:c1: c7:3d:97:02:87:42:a4:ba:97:49:09:5a:96:4d:3a:8d:db:87: 32:8b:f2:bc:0c:db:aa:f8:06:0a:c3:32:ee:d5:71:64:38:1b: c0:69:b3:be:a1:4d:80:00:9c:73:8f:6f:3b:52:37:d1:03:82: 05:99:7e:9e:bc:5b:27:09:d5:3a:87:13:75:71:dd:45:4e:cd: b8:c8:d6:fa:c3:2d:66:63:ee:7d:42:55:b9:66:4f:ae:24:0c: 60:ae:29:07:2d:4d:8c:17:e9:a2:fe:c2:d5:10:4e:d5:50:2f: 9f:a9:88:4e:77:cd:7f:7d:97:b8:28:d5:19:c7:da:62:67:46: 6a:6f:c7:83:17:5c:a3:4d:04:85:93:e5:34:82:4a:19:c0:26: b8:31:6f:29:92:d8:db:22:0f:23:9c:ed:19:1a:ee:0a:a4:15: 7a:cd:69:9f:85:67:f2:56:9f:02:e1:b3:a8:47:4d:78:a9:99: 8e:01:1d:f7:e5:c6:22:8d:f5:bf:60:d3:ab:ef:a2:c9:2c:90: 9a:02:5c:ee -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWETJGC+M9QylvJUM6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDIwNTAxNDUyMFoXDTI2MDUxMDAwNDUyMFowLzEtMCsGA1UEAxMk ZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUs9VY4OMp7tsE9A8b3AqHTfI1L1vVl5iqBa y8q+6FV9KUPpi5zMUoOD34QbdM2MUIdvKRektqR8mUf8FkNoW13vBLzj3CAORTu6 rsajO+r4fn4ZEwtQrG26YqGfHWoFII6XmVuXqJMANLbCjXVuTSl9D807Z2I09IxS 82sCLGuL2qfQU/xLoKXf/8ZnD4fEQ7Pa4dmvpWvT8t9kuVBKce7H+ncKEIeaygHv i+mDE8OAQYmS9HwP8yWCGaEOZsgz4jmiwY6MWQUjWZ9T9IqFvRiIF9DM4npzmGt6 5Uxn4jlcJvnfWhy7GeOnok9FyI7FxYVJnzQfDVAwRMoq0lLo/wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFMlAnl3M6aySHQHytJdajSf3LwGyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m ZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZlZTdiNjdlLTVlNGYtNGEwNS1h NTllLTllODIwYzg5OGZjZC9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4 OThmY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAbyQDBADAoEAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhTbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHGzLEH2FynxfxpJ/BNjz0jfp/2Ac4IGUbqsfyct NZ0tVVFsofVVqOGpGwUoXCTRJ0US00Evwcc9lwKHQqS6l0kJWpZNOo3bhzKL8rwM 26r4BgrDMu7VcWQ4G8Bps76hTYAAnHOPbztSN9EDggWZfp68WycJ1TqHE3Vx3UVO zbjI1vrDLWZj7n1CVblmT64kDGCuKQctTYwX6aL+wtUQTtVQL5+piE53zX99l7go 1RnH2mJnRmpvx4MXXKNNBIWT5TSCShnAJrgxbymS2NsiDyOc7Rka7gqkFXrNaZ+F Z/JWnwLhs6hHTXipmY4BHfflxiKN9b9g06vvoskskJoCXO4= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:57 2024 by rpki-client on console-fra.rpki-client.org