$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3.cer File: d10dc068-f40b-4a85-97fb-2769f176bce3.cer (raw, json) Hash identifier: JPlsH92I01rIoSQCTdcmNXeIYVdiLXEO/DoQZVRrFr8= Subject key identifier: 80:C9:98:E5:C4:C9:11:22:09:55:B4:C2:FA:36:76:80:D4:D2:C2:E7 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285843852300E31DD33D16B6E9C100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/d10dc068-f40b-4a85-97fb-2769f176bce3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Oct 2023 00:45:14 +0000 Certificate not after: Wed 14 Jan 2026 01:45:14 +0000 Subordinate resources: AS: 396526 IP: 23.128.64.0/23 IP: 134.195.82.0/23 IP: 2602:fed3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:85:23:00:e3:1d:d3:3d:16:b6:e9:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 12 00:45:14 2023 GMT Not After : Jan 14 01:45:14 2026 GMT Subject: CN=d10dc068-f40b-4a85-97fb-2769f176bce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:61:cc:66:47:d1:da:67:2c:b9:a0:d6:82:f1: b9:66:35:e7:ee:c9:6c:43:7b:1e:b1:b2:fa:8f:36: 38:90:5b:a0:06:ee:72:b0:a9:75:19:a6:03:01:97: 76:aa:2d:bb:5f:89:cf:97:30:97:ba:90:d9:f1:2f: 81:40:a5:24:bd:57:94:46:c8:95:80:5c:0e:39:88: f7:4e:e2:3d:59:b2:90:98:eb:c5:d1:42:44:f7:d9: 51:18:ec:29:d2:4e:88:59:4d:3d:dc:2f:9a:58:72: 8a:d5:1f:d7:69:2d:ec:a0:0d:ed:a5:7d:86:a6:b2: ec:f2:65:32:d4:0b:31:7a:5c:96:3f:97:92:36:d5: 1c:de:53:f3:67:92:48:b4:53:46:a9:ba:8a:df:b9: f5:59:eb:ed:27:84:17:ea:df:74:b4:72:03:50:99: ef:e5:41:8c:4d:24:31:35:c9:2a:19:e4:53:f2:75: 7c:a6:66:de:8d:b0:96:3c:96:3a:15:fa:b9:57:89: 90:9f:8c:ab:ca:73:1b:33:4a:6b:f5:41:dc:80:3c: 2e:a3:89:35:da:0b:75:9d:f6:d5:7e:36:b8:07:10: ff:4b:df:40:6d:b6:a1:b5:c6:43:ab:0e:2c:58:5c: c2:65:bf:c3:51:87:2b:5e:b5:60:74:c7:51:16:55: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C9:98:E5:C4:C9:11:22:09:55:B4:C2:FA:36:76:80:D4:D2:C2:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/d10dc068-f40b-4a85-97fb-2769f176bce3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.128.64.0/23 134.195.82.0/23 IPv6: 2602:fed3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396526 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:21:ba:63:3e:9b:4b:b5:d2:11:df:a3:03:94:67:eb:60:8f: 80:41:e6:cf:d9:10:89:62:52:d4:35:7f:45:b2:db:9d:04:7c: ee:da:8a:d4:cc:38:79:98:e9:a1:ba:dd:d6:86:51:f2:80:02: 9f:01:33:af:3c:fe:3d:06:4b:eb:41:20:02:de:30:3e:ec:de: a4:b8:d2:88:1d:2b:2b:77:1f:ff:d0:12:df:ef:ee:70:f5:ae: 92:c6:61:16:57:35:fd:a8:dc:80:98:65:f8:53:b2:3e:a3:7a: 20:51:56:11:e9:5d:72:ff:e4:b8:39:8e:39:4f:04:e1:ee:91: 4e:67:c0:90:3a:2f:04:eb:6c:6c:93:d9:db:3e:81:69:bc:9d: 59:50:23:51:99:44:e4:31:06:1e:40:16:2c:c1:10:75:8c:fa: fb:d8:80:27:54:86:27:de:e1:8e:89:08:2c:6a:86:f7:ae:f6: 80:e3:67:8e:19:56:0b:57:a6:26:a4:0b:aa:e7:e9:2c:f2:d5: 64:10:61:40:ab:6f:d7:09:e4:80:c2:01:e4:43:e5:ae:8d:a8: 3a:68:e7:b9:fb:2f:20:66:3b:32:58:f9:1e:93:46:87:4c:95: ea:62:79:96:53:b1:7b:bf:4b:c2:6f:d2:31:8e:1b:b1:eb:c7: 4b:ea:d3:80 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEOFIwDjHdM9FrbpwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMTAxMjAwNDUxNFoXDTI2MDExNDAxNDUxNFowLzEtMCsGA1UEAxMk ZDEwZGMwNjgtZjQwYi00YTg1LTk3ZmItMjc2OWYxNzZiY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGHMZkfR2mcsuaDWgvG5ZjXn7slsQ3sesbL6 jzY4kFugBu5ysKl1GaYDAZd2qi27X4nPlzCXupDZ8S+BQKUkvVeURsiVgFwOOYj3 TuI9WbKQmOvF0UJE99lRGOwp0k6IWU093C+aWHKK1R/XaS3soA3tpX2GprLs8mUy 1AsxelyWP5eSNtUc3lPzZ5JItFNGqbqK37n1WevtJ4QX6t90tHIDUJnv5UGMTSQx NckqGeRT8nV8pmbejbCWPJY6Ffq5V4mQn4yrynMbM0pr9UHcgDwuo4k12gt1nfbV fja4BxD/S99AbbahtcZDqw4sWFzCZb/DUYcrXrVgdMdRFlWJWwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFIDJmOXEyREiCVW0wvo2doDU0sLnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9k MTBkYzA2OC1mNDBiLTRhODUtOTdmYi0yNzY5ZjE3NmJjZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2QxMGRjMDY4LWY0MGItNGE4NS05 N2ZiLTI3NjlmMTc2YmNlMy9kMTBkYzA2OC1mNDBiLTRhODUtOTdmYi0yNzY5ZjE3 NmJjZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXgEADBAGGw1IwDgQCAAIwCAMGBCYC/tMAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYM7jBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcIbpjPptLtdIR36MD lGfrYI+AQebP2RCJYlLUNX9FstudBHzu2orUzDh5mOmhut3WhlHygAKfATOvPP49 BkvrQSAC3jA+7N6kuNKIHSsrdx//0BLf7+5w9a6SxmEWVzX9qNyAmGX4U7I+o3og UVYR6V1y/+S4OY45TwTh7pFOZ8CQOi8E62xsk9nbPoFpvJ1ZUCNRmUTkMQYeQBYs wRB1jPr72IAnVIYn3uGOiQgsaob3rvaA42eOGVYLV6YmpAuq5+ks8tVkEGFAq2/X CeSAwgHkQ+Wujag6aOe5+y8gZjsyWPkek0aHTJXqYnmWU7F7v0vCb9Ixjhux68dL 6tOA -----END CERTIFICATE-----Generated at Mon May 6 02:00:40 2024 by rpki-client on console-fra.rpki-client.org