$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer File: 8314711c-e263-425a-adda-3995b7095d9d.cer (raw, json) Hash identifier: WD4X+c7AT5Wwrm4TltYnNVhs3S7qGMx9Ao6oKNh4Y6w= Subject key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858457610D09D8C5FA99575A216E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Apr 2024 00:45:20 +0000 Certificate not after: Sat 11 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 16550 AS: 19527 AS: 26910 AS: 36561 AS: 55023 AS: 394089 AS: 395973 AS: 396982 IP: 23.236.48.0/20 IP: 23.251.128.0/19 IP: 34.0.0.0 -- 34.3.2.255 IP: 34.3.4.0 -- 34.4.3.255 IP: 34.4.5.0 -- 34.191.255.255 IP: 35.184.0.0 -- 35.247.255.255 IP: 104.154.0.0/15 IP: 104.196.0.0/14 IP: 107.167.160.0/19 IP: 107.178.192.0/18 IP: 108.59.80.0/20 IP: 130.211.0.0/16 IP: 136.112.0.0/12 IP: 146.148.0.0/17 IP: 162.216.148.0/22 IP: 162.222.176.0/21 IP: 173.255.112.0/20 IP: 192.158.28.0/22 IP: 199.192.112.0/22 IP: 199.223.232.0/21 IP: 2600:1900::/28 IP: 2600:2d00::/28 IP: 2602:ff11::/36 IP: 2620:84::/47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:76:10:d0:9d:8c:5f:a9:95:75:a2:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Apr 7 00:45:20 2024 GMT Not After : Jul 11 00:45:20 2026 GMT Subject: CN=8314711c-e263-425a-adda-3995b7095d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:39:e3:2b:a9:be:a5:0b:31:3a:ad:9c:1a: 5b:d7:ad:79:48:5e:1e:58:77:bc:04:5c:34:cc:f1: 75:28:22:16:df:4a:23:b4:47:00:ae:9d:e6:36:fb: ce:00:44:87:41:d3:75:2d:29:d8:dd:48:ce:11:3a: 5a:2a:5d:b2:97:bd:18:6a:77:51:71:1e:b9:81:c8: 22:c0:2d:d6:ac:50:d8:fc:a5:94:c1:b6:05:e7:e7: c3:41:c9:55:66:92:11:a2:a2:7d:b9:d2:81:61:4d: e4:00:bd:55:5b:1f:61:6e:04:18:b6:30:9e:d5:1f: a6:de:79:47:e8:d2:9e:f6:a1:d4:53:1e:54:20:5d: bd:c9:cf:71:55:ba:7b:22:db:3d:00:7e:bc:36:92: bd:0e:f2:a1:cd:81:08:c2:fd:47:3a:58:81:3c:a7: 32:30:01:4a:ce:a4:7a:d2:76:64:ba:5a:14:fc:b8: 18:dc:e6:d9:0b:c1:19:9d:38:e2:3a:f9:9e:e6:3e: c6:12:f8:24:00:6d:60:a7:66:c1:dd:cc:8a:24:fc: cd:44:c3:a2:d6:5e:cb:9c:cd:2e:56:1a:ae:d2:47: 8d:08:c0:a5:48:f2:22:ba:0c:4e:90:fb:c6:2f:4e: 15:8c:81:e9:56:6f:65:7c:cc:9e:c0:7b:da:b1:f7: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.236.48.0/20 23.251.128.0/19 34.0.0.0-34.3.2.255 34.3.4.0-34.4.3.255 34.4.5.0-34.191.255.255 35.184.0.0-35.247.255.255 104.154.0.0/15 104.196.0.0/14 107.167.160.0/19 107.178.192.0/18 108.59.80.0/20 130.211.0.0/16 136.112.0.0/12 146.148.0.0/17 162.216.148.0/22 162.222.176.0/21 173.255.112.0/20 192.158.28.0/22 199.192.112.0/22 199.223.232.0/21 IPv6: 2600:1900::/28 2600:2d00::/28 2602:ff11::/36 2620:84::/47 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16550 19527 26910 36561 55023 394089 395973 396982 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:15:ca:02:82:e9:4f:eb:19:ca:9a:c1:50:3f:b4:b1:63:bf: 8f:0d:95:46:a3:fc:29:eb:f4:a3:8b:9b:6f:9c:d5:bb:22:e1: 75:3d:bd:03:a9:45:c8:1a:2d:5c:c5:ee:29:72:17:cc:09:af: 3f:77:fe:a8:fb:45:bd:9c:cb:ec:92:cd:a8:5a:a4:8a:e0:fc: 2c:a7:0f:97:4c:44:ab:ba:7a:86:bd:d7:95:b9:7b:54:c3:80: 60:0d:d4:24:32:2f:c7:f1:c4:5c:fe:da:8b:bb:7a:6d:42:50: f7:1e:7e:17:ee:04:f4:5b:c3:b8:86:7b:c6:fb:04:a9:10:ed: 5d:d6:2c:4c:b0:c5:1c:2c:d4:5d:b9:91:cc:0a:d9:9f:d0:15: cc:08:08:97:39:ab:a1:c4:74:51:f7:38:db:7c:f4:ac:68:0e: 9f:58:3f:e3:b2:f3:0c:75:57:c9:48:25:17:ae:e4:f5:83:0b: 32:07:27:a9:16:93:f6:a9:57:d2:ea:af:91:4c:15:96:e4:a8: 19:65:ba:d3:33:e0:31:cd:36:cd:2e:75:60:56:8e:57:f4:52: 33:2a:46:3f:65:f4:a6:3a:00:4a:53:23:26:9c:90:6d:9d:22: ed:8d:4f:14:2e:02:26:4e:f4:f1:e2:60:aa:be:a9:45:e2:57: 85:8a:3a:fd -----BEGIN CERTIFICATE----- MIIH3jCCBsagAwIBAgIUAQ0Mn0MoWEV2ENCdjF+plXWiFuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDQwNzAwNDUyMFoXDTI2MDcxMTAwNDUyMFowLzEtMCsGA1UEAxMk ODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1ZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrY54yupvqULMTqtnBpb1615SF4eWHe8BFw0 zPF1KCIW30ojtEcArp3mNvvOAESHQdN1LSnY3UjOETpaKl2yl70YandRcR65gcgi wC3WrFDY/KWUwbYF5+fDQclVZpIRoqJ9udKBYU3kAL1VWx9hbgQYtjCe1R+m3nlH 6NKe9qHUUx5UIF29yc9xVbp7Its9AH68NpK9DvKhzYEIwv1HOliBPKcyMAFKzqR6 0nZkuloU/LgY3ObZC8EZnTjiOvme5j7GEvgkAG1gp2bB3cyKJPzNRMOi1l7LnM0u Vhqu0keNCMClSPIiugxOkPvGL04VjIHpVm9lfMyewHvasfc/WQIDAQABo4IE8DCC BOwwHQYDVR0OBBYEFNeJQZwwOHzpmY76w8craABeJp7tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84 MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzgzMTQ3MTFjLWUyNjMtNDI1YS1h ZGRhLTM5OTViNzA5NWQ5ZC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1Yjcw OTVkOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgdMGCCsGAQUF BwEHAQH/BIHDMIHAMIGWBAIAATCBjwMEBBfsMAMEBRf7gDAKAwIBIgMEACIDAjAM AwQCIgMEAwQCIgQAMAsDBAAiBAUDAwYigDAKAwMDI7gDAwMj8AMDAWiaAwMCaMQD BAVrp6ADBAZrssADBARsO1ADAwCC0wMDBIhwAwQHkpQAAwQCotiUAwQDot6wAwQE rf9wAwQCwJ4cAwQCx8BwAwQDx9/oMCUEAgACMB8DBQQmABkAAwUEJgAtAAMGBCYC /xEAAwcBJiAAhAAAMDoGCCsGAQUFBwEIAQH/BCswKaAnMCUCAkCmAgJMRwICaR4C AwCO0QIDANbvAgMGA2kCAwYKxQIDBg62MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIUVygKC6U/rGcqawVA/ tLFjv48NlUaj/Cnr9KOLm2+c1bsi4XU9vQOpRcgaLVzF7ilyF8wJrz93/qj7Rb2c y+ySzahapIrg/CynD5dMRKu6eoa915W5e1TDgGAN1CQyL8fxxFz+2ou7em1CUPce fhfuBPRbw7iGe8b7BKkQ7V3WLEywxRws1F25kcwK2Z/QFcwICJc5q6HEdFH3ONt8 9KxoDp9YP+Oy8wx1V8lIJReu5PWDCzIHJ6kWk/apV9Lqr5FMFZbkqBllutMz4DHN Ns0udWBWjlf0UjMqRj9l9KY6AEpTIyackG2dIu2NTxQuAiZO9PHiYKq+qUXiV4WK Ov0= -----END CERTIFICATE-----Generated at Mon May 6 09:11:45 2024 by rpki-client on console-fra.rpki-client.org