$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer File: e9f20d36-05ed-4189-8230-12eaed2b41c6.cer (raw, json) Hash identifier: sFMifcZpe+rM4MD+kASazCi8Ij5Hqj3q/VHP22ehKaE= Subject key identifier: BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285845A74DDC97E77DC00F21BFDF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Apr 2024 16:02:57 +0000 Certificate not after: Tue 28 Jul 2026 16:02:57 +0000 Subordinate resources: AS: 2567 IP: 136.249.0.0 -- 136.254.255.255 IP: 137.144.0.0/16 IP: 163.183.0.0 -- 163.188.255.255 IP: 192.12.34.0 -- 192.12.40.255 IP: 192.23.0.0/16 IP: 192.31.32.0 -- 192.31.36.255 IP: 192.52.229.0/24 IP: 192.58.37.0 -- 192.58.40.255 IP: 199.6.128.0/17 IP: 204.17.157.0 -- 204.17.162.255 IP: 2620:0:1700::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a7:4d:dc:97:e7:7d:c0:0f:21:bf:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Apr 24 16:02:57 2024 GMT Not After : Jul 28 16:02:57 2026 GMT Subject: CN=e9f20d36-05ed-4189-8230-12eaed2b41c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:08:d7:e9:6c:81:2a:6d:5c:4c:23:88:f3: 5a:56:4d:3c:a0:c1:22:49:75:d4:e0:d3:18:bb:eb: 28:12:63:32:f0:10:bd:7d:59:64:02:7a:0e:88:85: f7:54:bd:b9:16:a3:78:76:18:8c:0f:9f:ee:93:4b: 8a:42:2b:87:f0:c1:06:04:31:fb:58:2a:05:c2:8e: 00:73:98:f8:22:73:33:66:96:23:b2:91:e0:08:48: 5c:8a:c5:31:7d:50:ed:f1:eb:cf:21:d9:76:3f:d5: d3:1d:97:c7:0e:28:2b:bf:06:86:38:11:9b:2d:5b: 2e:7f:f3:09:85:22:2e:8d:21:c5:ab:03:de:5b:5f: 77:9d:e0:9d:31:7f:0d:1e:7e:5f:cd:78:4b:d6:4b: 30:5d:62:9f:9e:f3:f7:a9:6a:58:51:b9:e9:39:e9: aa:72:6f:0f:24:aa:c4:e0:91:54:08:5c:88:28:28: 39:5b:4d:52:65:86:64:c4:22:68:3a:68:4d:e5:e0: b0:d1:32:7d:fe:f3:9f:02:3f:a1:45:12:40:02:62: d9:03:b2:dd:09:9c:58:8e:11:a1:9b:22:31:25:eb: 3f:ed:cb:d3:33:19:bf:15:f7:f1:3c:a2:b8:25:ed: e8:b6:63:a1:29:0a:d0:1b:47:5b:c7:9c:da:7f:22: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 136.249.0.0-136.254.255.255 137.144.0.0/16 163.183.0.0-163.188.255.255 192.12.34.0-192.12.40.255 192.23.0.0/16 192.31.32.0-192.31.36.255 192.52.229.0/24 192.58.37.0-192.58.40.255 199.6.128.0/17 204.17.157.0-204.17.162.255 IPv6: 2620:0:1700::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2567 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:70:fe:69:19:16:b4:33:20:cb:35:86:27:4d:62:53:21:09: 5f:f0:02:b1:b9:4e:10:d5:63:9d:59:56:8e:37:39:2c:08:05: 6c:d4:04:72:8f:63:75:2b:f3:1a:b7:55:89:41:6a:64:37:2d: c4:a4:1c:79:4d:4f:27:9f:7d:54:a0:32:3a:9d:da:25:f9:b0: fb:69:67:1d:08:e6:bc:39:f1:e0:bd:ff:e5:18:f9:bc:d9:87: f1:ed:46:d7:4d:ab:37:f1:95:c5:a6:81:a8:72:b2:57:ac:1c: a7:00:04:a9:01:c0:03:79:d2:13:2d:1f:03:d4:fb:ef:95:cb: 7e:5d:9b:26:56:fb:70:9e:71:68:5b:f6:88:e8:1b:f2:1d:27: 4e:fa:3f:d1:39:c4:7f:5c:ba:07:05:4e:a9:37:08:85:a1:8b: ae:5c:12:5e:48:bc:d7:94:fd:0c:5b:ea:f5:5a:ac:cd:e1:16: fa:11:c8:70:ac:38:d3:08:d8:59:03:86:db:70:da:98:64:e8: 1c:56:65:d8:84:01:52:cd:09:f3:d3:2c:50:a7:44:f3:89:a4: 88:9a:60:65:05:60:1e:3a:39:b5:7c:69:2a:64:b7:c1:60:f2: 8b:59:76:a7:09:e0:55:a5:79:5e:c9:81:6d:49:ac:b3:95:e3: 4c:10:1d:96 -----BEGIN CERTIFICATE----- MIIHezCCBmOgAwIBAgIUAQ0Mn0MoWEWnTdyX533ADyG/34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDQyNDE2MDI1N1oXDTI2MDcyODE2MDI1N1owLzEtMCsGA1UEAxMk ZTlmMjBkMzYtMDVlZC00MTg5LTgyMzAtMTJlYWVkMmI0MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBMI1+lsgSptXEwjiPNaVk08oMEiSXXU4NMY u+soEmMy8BC9fVlkAnoOiIX3VL25FqN4dhiMD5/uk0uKQiuH8MEGBDH7WCoFwo4A c5j4InMzZpYjspHgCEhcisUxfVDt8evPIdl2P9XTHZfHDigrvwaGOBGbLVsuf/MJ hSIujSHFqwPeW193neCdMX8NHn5fzXhL1kswXWKfnvP3qWpYUbnpOemqcm8PJKrE 4JFUCFyIKCg5W01SZYZkxCJoOmhN5eCw0TJ9/vOfAj+hRRJAAmLZA7LdCZxYjhGh myIxJes/7cvTMxm/FffxPKK4Je3otmOhKQrQG0dbx5zafyJM6wIDAQABo4IEjTCC BIkwHQYDVR0OBBYEFL7ejbLOhxVD5GBS3pCdG8LuiOpXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9l OWYyMGQzNi0wNWVkLTQxODktODIzMC0xMmVhZWQyYjQxYzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2U5ZjIwZDM2LTA1ZWQtNDE4OS04 MjMwLTEyZWFlZDJiNDFjNi9lOWYyMGQzNi0wNWVkLTQxODktODIzMC0xMmVhZWQy YjQxYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwgZEGCCsGAQUF BwEHAQH/BIGBMH8wbAQCAAEwZjAKAwMAiPkDAwCI/gMDAImQMAoDAwCjtwMDAKO8 MAwDBAHADCIDBADADCgDAwDAFzAMAwQFwB8gAwQAwB8kAwQAwDTlMAwDBADAOiUD BADAOigDBAfHBoAwDAMEAMwRnQMEAMwRojAPBAIAAjAJAwcEJiAAABcAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAgoHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABhw/mkZFrQzIMs1hidNYlMh CV/wArG5ThDVY51ZVo43OSwIBWzUBHKPY3Ur8xq3VYlBamQ3LcSkHHlNTyeffVSg Mjqd2iX5sPtpZx0I5rw58eC9/+UY+bzZh/HtRtdNqzfxlcWmgahyslesHKcABKkB wAN50hMtHwPU+++Vy35dmyZW+3CecWhb9ojoG/IdJ076P9E5xH9cugcFTqk3CIWh i65cEl5IvNeU/Qxb6vVarM3hFvoRyHCsONMI2FkDhttw2phk6BxWZdiEAVLNCfPT LFCnRPOJpIiaYGUFYB46ObV8aSpkt8Fg8otZdqcJ4FWleV7JgW1JrLOV40wQHZY= -----END CERTIFICATE-----Generated at Wed Jun 26 06:23:06 2024 by rpki-client on console-fra.rpki-client.org