$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer File: 4746a92d-5f69-4264-863f-81298a3d93ed.cer (raw, json) Hash identifier: pfJUhuqDdUN7q+u6RhNuxI1GFAqhH0DrQC5ZB2tJ+ig= Subject key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285845833A35B2F1F7C0384C4E89A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Apr 2024 17:54:15 +0000 Certificate not after: Wed 10 Jun 2026 00:45:20 +0000 Subordinate resources: AS: 36114 AS: 53340 AS: 62956 IP: 72.46.128.0/21 IP: 76.164.192.0/20 IP: 76.164.234.0/23 IP: 104.128.70.0/23 IP: 104.143.0.0/23 IP: 104.143.10.0/23 IP: 104.194.0.0/22 IP: 104.225.134.0/23 IP: 104.225.250.0/23 IP: 104.225.254.0/23 IP: 104.238.210.0/23 IP: 162.249.226.0/23 IP: 162.251.232.0/21 IP: 172.93.0.0/23 IP: 192.228.96.0/23 IP: 192.228.100.0/23 IP: 192.228.104.0 -- 192.228.109.255 IP: 199.19.76.0/23 IP: 199.47.208.0/22 IP: 199.127.56.0/22 IP: 199.241.140.0/22 IP: 204.77.0.0 -- 204.77.9.255 IP: 204.77.14.0/23 IP: 2604:2280::/32 IP: 2605:6f80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:83:3a:35:b2:f1:f7:c0:38:4c:4e:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 11 17:54:15 2024 GMT Not After : Jun 10 00:45:20 2026 GMT Subject: CN=4746a92d-5f69-4264-863f-81298a3d93ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4c:a3:5f:f3:14:1b:7b:df:07:e7:d3:dc:35: b0:c0:f6:f4:d4:e1:bf:87:54:1d:fd:8a:1c:60:9a: 86:0e:b7:84:39:8c:fd:59:c8:1f:49:fa:91:d4:10: 13:e1:ae:b1:e5:e7:7f:b1:93:cf:82:86:34:15:42: aa:74:4b:ae:81:20:2c:ae:b7:00:55:61:cc:8e:21: c5:e9:5c:b2:af:ca:4c:cd:8f:9c:ce:f0:a5:26:c1: f3:59:ef:e2:cf:d0:4e:43:7a:3b:c1:23:7d:73:57: f1:75:ba:de:53:8c:14:6c:03:38:56:48:1a:b0:f2: 92:18:73:96:4c:ed:ea:82:a8:b1:2e:16:02:f1:ed: 84:e9:42:cb:56:5a:ce:44:5c:e2:93:19:e1:a5:1f: f6:4c:f2:80:7f:c1:41:00:96:41:12:bb:2e:24:e7: da:dd:3c:2c:d6:e6:c9:c7:9d:15:b7:57:89:ae:eb: a8:fe:95:3c:37:36:f6:92:91:ee:13:90:07:4e:74: d4:c9:7a:88:bb:a8:a1:42:0c:64:56:c3:fa:f7:1b: f9:88:d1:b4:62:f4:80:55:1f:29:7b:03:93:c4:d6: 0c:63:e8:51:5c:13:da:34:69:15:f2:f6:c6:99:8a: 71:28:6d:bf:0c:d5:f6:93:78:10:22:8d:6e:92:c2: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 72.46.128.0/21 76.164.192.0/20 76.164.234.0/23 104.128.70.0/23 104.143.0.0/23 104.143.10.0/23 104.194.0.0/22 104.225.134.0/23 104.225.250.0/23 104.225.254.0/23 104.238.210.0/23 162.249.226.0/23 162.251.232.0/21 172.93.0.0/23 192.228.96.0/23 192.228.100.0/23 192.228.104.0-192.228.109.255 199.19.76.0/23 199.47.208.0/22 199.127.56.0/22 199.241.140.0/22 204.77.0.0-204.77.9.255 204.77.14.0/23 IPv6: 2604:2280::/32 2605:6f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36114 53340 62956 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6f:21:58:1d:c5:06:aa:ad:70:06:eb:2b:56:8b:c3:a1:4a: 9d:e3:05:1b:72:b3:b5:2f:d3:f9:8f:ef:a6:f6:04:29:ce:67: 7e:fe:b2:52:81:4f:bf:e9:67:89:50:f0:dc:c6:8d:60:70:20: 34:f7:87:af:68:4b:c6:49:e5:6d:c6:39:3d:09:df:9f:a8:2d: c6:d7:01:02:6d:4e:4f:56:b5:44:4a:7b:e7:22:96:dd:e2:d0: d4:24:4e:9b:5f:fd:10:37:47:e3:21:5a:2f:a2:56:a9:26:65: 6e:8c:d1:b2:7e:bd:bb:f0:f5:7a:15:86:eb:5e:73:2b:d1:82: fd:a6:a4:1e:d3:3e:a7:72:74:88:cb:35:f2:aa:62:18:46:26: 77:af:7b:8c:3a:94:e4:6c:af:56:ed:a2:4b:f7:52:70:fc:af: a2:4d:40:f2:9f:d8:56:23:a8:37:35:27:8a:84:ca:e2:5a:c4: eb:f8:90:72:5e:66:14:27:43:9c:d9:e6:9e:43:94:ed:b2:be: 9e:cd:e5:56:03:c0:65:48:bb:d4:db:70:0c:22:e5:08:2e:43: fb:4d:70:5b:b6:bc:e1:20:e6:05:74:54:68:ea:b9:c0:ef:76: ff:93:dc:4e:95:44:79:39:1e:68:58:ac:43:4b:00:7c:89:e9: a4:33:22:f8 -----BEGIN CERTIFICATE----- MIIHwTCCBqmgAwIBAgIUAQ0Mn0MoWEWDOjWy8ffAOExOiaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MDQxMTE3NTQxNVoXDTI2MDYxMDAwNDUyMFowLzEtMCsGA1UEAxMk NDc0NmE5MmQtNWY2OS00MjY0LTg2M2YtODEyOThhM2Q5M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0yjX/MUG3vfB+fT3DWwwPb01OG/h1Qd/Yoc YJqGDreEOYz9WcgfSfqR1BAT4a6x5ed/sZPPgoY0FUKqdEuugSAsrrcAVWHMjiHF 6Vyyr8pMzY+czvClJsHzWe/iz9BOQ3o7wSN9c1fxdbreU4wUbAM4VkgasPKSGHOW TO3qgqixLhYC8e2E6ULLVlrORFzikxnhpR/2TPKAf8FBAJZBErsuJOfa3Tws1ubJ x50Vt1eJruuo/pU8Nzb2kpHuE5AHTnTUyXqIu6ihQgxkVsP69xv5iNG0YvSAVR8p ewOTxNYMY+hRXBPaNGkV8vbGmYpxKG2/DNX2k3gQIo1uksJljQIDAQABo4IE0zCC BM8wHQYDVR0OBBYEFIFvXZxSRNcQKcaL3itmcrqmmh52MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 NzQ2YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5OGEzZDkzZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ3NDZhOTJkLTVmNjktNDI2NC04 NjNmLTgxMjk4YTNkOTNlZC80NzQ2YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5OGEz ZDkzZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgcwGCCsGAQUF BwEHAQH/BIG8MIG5MIGgBAIAATCBmQMEA0gugAMEBEykwAMEAUyk6gMEAWiARgME AWiPAAMEAWiPCgMEAmjCAAMEAWjhhgMEAWjh+gMEAWjh/gMEAWju0gMEAaL54gME A6L76AMEAaxdAAMEAcDkYAMEAcDkZDAMAwQDwORoAwQBwORsAwQBxxNMAwQCxy/Q AwQCx384AwQCx/GMMAsDAwDMTQMEAcxNCAMEAcxNDjAUBAIAAjAOAwUAJgQigAMF ACYFb4AwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAI0SAgMA0FwCAwD17DBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAtbyFYHcUGqq1wBusrVovDoUqd4wUbcrO1L9P5j++m9gQpzmd+/rJSgU+/ 6WeJUPDcxo1gcCA094evaEvGSeVtxjk9Cd+fqC3G1wECbU5PVrVESnvnIpbd4tDU JE6bX/0QN0fjIVovolapJmVujNGyfr278PV6FYbrXnMr0YL9pqQe0z6ncnSIyzXy qmIYRiZ3r3uMOpTkbK9W7aJL91Jw/K+iTUDyn9hWI6g3NSeKhMriWsTr+JByXmYU J0Oc2eaeQ5Ttsr6ezeVWA8BlSLvU23AMIuUILkP7TXBbtrzhIOYFdFRo6rnA73b/ k9xOlUR5OR5oWKxDSwB8iemkMyL4 -----END CERTIFICATE-----Generated at Sun May 5 01:39:49 2024 by rpki-client on console-fra.rpki-client.org