$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer File: dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer (raw, json) Hash identifier: B/L2fkI31hrIrFBsRWgnGBvzMbANLnzXGYmcsweltys= Subject key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 Authority key identifier: F1:0A:54:E8:54:28:DE:FD:C3:06:EF:17:87:AA:BC:31:B5:B8:B0:2B Certificate issuer: /CN=06af24e7-1c13-4430-bd79-db05f6dc0643 Certificate serial: 010D0C9F43285841FF2FC59BCD6CE9EC4E74A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Thu 25 May 2023 08:25:42 +0000 Certificate not after: Wed 27 Aug 2025 08:25:42 +0000 Subordinate resources: AS: 3593 AS: 5650 AS: 7011 AS: 26127 AS: 30064 AS: 32587 IP: 45.52.0.0/15 IP: 50.32.0.0/15 IP: 50.36.0.0 -- 50.37.63.255 IP: 50.38.128.0 -- 50.39.63.255 IP: 50.40.0.0 -- 50.42.255.255 IP: 50.43.128.0 -- 50.45.127.255 IP: 50.48.0.0/14 IP: 50.52.128.0/17 IP: 50.54.0.0/17 IP: 50.55.0.0/16 IP: 50.102.0.0 -- 50.105.255.255 IP: 50.106.64.0 -- 50.107.23.255 IP: 50.107.32.0 -- 50.109.223.255 IP: 50.110.0.0/15 IP: 50.120.0.0/18 IP: 50.120.96.0 -- 50.123.63.255 IP: 50.123.128.0 -- 50.124.255.255 IP: 50.126.0.0/18 IP: 50.126.128.0 -- 50.127.255.255 IP: 64.111.128.0/19 IP: 65.37.0.0/17 IP: 65.73.0.0/16 IP: 66.33.224.0/19 IP: 66.133.128.0/18 IP: 70.100.0.0/15 IP: 74.32.0.0/12 IP: 74.212.0.0/18 IP: 104.169.0.0/16 IP: 104.235.0.0/16 IP: 104.240.0.0/16 IP: 170.215.0.0/16 IP: 172.76.0.0/14 IP: 173.84.0.0/14 IP: 184.8.0.0 -- 184.19.255.255 IP: 192.182.0.0/17 IP: 192.182.160.0 -- 192.183.159.255 IP: 192.183.224.0/19 IP: 199.224.64.0/18 IP: 205.238.192.0/18 IP: 207.7.160.0/19 IP: 208.111.192.0/18 IP: 209.74.0.0/18 IP: 209.177.112.0/20 IP: 216.37.128.0/17 IP: 216.67.192.0/19 IP: 216.108.192.0/20 IP: 216.222.224.0/19 IP: 2001:1960::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:ff:2f:c5:9b:cd:6c:e9:ec:4e:74:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06af24e7-1c13-4430-bd79-db05f6dc0643 Validity Not Before: May 25 08:25:42 2023 GMT Not After : Aug 27 08:25:42 2025 GMT Subject: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:55:db:16:f9:41:95:45:2f:4b:e5:a6:48: 69:de:3f:ee:9f:3a:1d:ba:45:6d:1a:f0:f7:58:4d: 7c:fd:19:af:84:fd:8f:f3:bd:d4:5f:1f:48:1e:c8: 6d:99:81:9d:03:73:a3:d2:93:8e:89:09:6c:86:84: 75:de:9d:0a:1e:8b:43:df:fa:34:34:0a:27:e8:bb: 4f:c5:3f:1e:36:7d:3d:b3:b7:02:e8:3e:c3:d8:ea: 02:6c:3b:d4:7c:31:d0:33:d9:ff:f0:62:f6:00:82: 30:e4:c8:41:e5:16:d5:c4:a6:0d:8e:f1:7c:f2:df: 24:64:5d:76:4a:79:0c:b4:d4:07:f0:91:97:b6:60: d0:46:76:3d:80:bc:45:50:bb:57:c1:66:a0:43:73: 30:60:74:29:52:d7:23:c4:5a:74:a5:b8:f5:67:12: 3b:68:9f:89:7a:54:f1:ad:93:83:d8:cb:92:ac:7d: af:ee:f9:ed:79:50:84:00:d8:68:96:a5:fe:50:87: e2:ed:7a:9d:f7:71:7f:21:37:4e:25:40:f7:68:72: 93:32:97:31:c9:52:0d:de:c0:1f:01:64:4d:0f:43: 1c:74:3c:90:cd:98:8f:0d:7b:21:0f:d3:83:e3:a2: bd:b7:73:c6:10:1c:88:dc:bb:cd:23:f7:90:7e:10: 5f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl X509v3 Authority Key Identifier: keyid:F1:0A:54:E8:54:28:DE:FD:C3:06:EF:17:87:AA:BC:31:B5:B8:B0:2B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer sbgp-ipAddrBlock: critical IPv4: 45.52.0.0/15 50.32.0.0/15 50.36.0.0-50.37.63.255 50.38.128.0-50.39.63.255 50.40.0.0-50.42.255.255 50.43.128.0-50.45.127.255 50.48.0.0/14 50.52.128.0/17 50.54.0.0/17 50.55.0.0/16 50.102.0.0-50.105.255.255 50.106.64.0-50.107.23.255 50.107.32.0-50.109.223.255 50.110.0.0/15 50.120.0.0/18 50.120.96.0-50.123.63.255 50.123.128.0-50.124.255.255 50.126.0.0/18 50.126.128.0-50.127.255.255 64.111.128.0/19 65.37.0.0/17 65.73.0.0/16 66.33.224.0/19 66.133.128.0/18 70.100.0.0/15 74.32.0.0/12 74.212.0.0/18 104.169.0.0/16 104.235.0.0/16 104.240.0.0/16 170.215.0.0/16 172.76.0.0/14 173.84.0.0/14 184.8.0.0-184.19.255.255 192.182.0.0/17 192.182.160.0-192.183.159.255 192.183.224.0/19 199.224.64.0/18 205.238.192.0/18 207.7.160.0/19 208.111.192.0/18 209.74.0.0/18 209.177.112.0/20 216.37.128.0/17 216.67.192.0/19 216.108.192.0/20 216.222.224.0/19 IPv6: 2001:1960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3593 5650 7011 26127 30064 32587 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:aa:c8:22:50:b6:56:f3:be:29:b1:2d:47:9d:67:44:25:8d: 90:57:3e:dd:a3:c5:c0:4b:ea:ae:f8:95:c5:f9:66:22:be:c1: 1a:35:63:88:d4:58:7b:17:6e:7c:98:bb:43:16:6d:b3:db:46: 17:ec:96:98:7e:b3:2e:5f:67:eb:52:b7:99:27:62:c8:3d:c7: c4:d3:62:3d:54:53:3b:3a:d7:74:1e:cf:2f:09:d1:98:c3:21: 34:b4:81:af:1e:06:e4:13:66:84:31:2a:4d:e2:4f:a2:2b:28: 11:46:cb:54:0c:56:3b:cc:17:96:e7:9b:8c:d8:5c:d3:7f:45: 28:cd:b0:3e:79:be:96:f7:87:3a:d4:b8:58:30:1c:5a:79:95: f8:f3:e0:78:a2:28:01:58:e9:46:2b:c8:78:9a:b0:cb:a7:2f: 74:f2:75:19:30:25:e5:8a:07:ec:5a:cd:cf:dc:1e:7c:72:04: f9:3f:6c:b0:1b:a1:27:37:b7:f3:43:fe:08:46:cb:ae:d9:26: da:e6:15:db:4c:13:9a:35:0c:34:07:fb:88:6c:24:5a:a8:37: 69:02:80:dc:3b:1a:92:b4:0c:ca:bf:77:a3:ae:13:a1:d6:12: 5e:d0:20:39:6f:da:18:91:82:40:7f:c9:91:da:bd:5c:93:77: 68:f1:b6:b0 -----BEGIN CERTIFICATE----- MIIIRjCCBy6gAwIBAgIUAQ0Mn0MoWEH/L8WbzWzp7E50pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZhZjI0ZTctMWMxMy00NDMwLWJkNzktZGIwNWY2ZGMw NjQzMB4XDTIzMDUyNTA4MjU0MloXDTI1MDgyNzA4MjU0MlowPTE7MDkGA1UEAxMy ZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2MTZhYmU3NTVjOTMzODU3 NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbVXbFvlBlUUvS+Wm SGneP+6fOh26RW0a8PdYTXz9Ga+E/Y/zvdRfH0geyG2ZgZ0Dc6PSk46JCWyGhHXe nQoei0Pf+jQ0Cifou0/FPx42fT2ztwLoPsPY6gJsO9R8MdAz2f/wYvYAgjDkyEHl FtXEpg2O8Xzy3yRkXXZKeQy01AfwkZe2YNBGdj2AvEVQu1fBZqBDczBgdClS1yPE WnSluPVnEjton4l6VPGtk4PYy5Ksfa/u+e15UIQA2GiWpf5Qh+Ltep33cX8hN04l QPdocpMylzHJUg3ewB8BZE0PQxx0PJDNmI8NeyEP04Pjor23c8YQHIjcu80j95B+ EF8hAgMBAAGjggVKMIIFRjAdBgNVHQ4EFgQUysEdjnn0TOPy6AsUad2xk1WL0vkw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5 MGEyZjA5N2YvNC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEyZjA5N2Yv NC9DQUMxMUQ4RTc5RjQ0Q0UzRjJFODBCMTQ2OUREQjE5MzU1OEJEMkY5Lm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNj Yy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5 LWRiMDVmNmRjMDY0My8wNmFmMjRlNy0xYzEzLTQ0MzAtYmQ3OS1kYjA1ZjZkYzA2 NDMuY3JsMB8GA1UdIwQYMBaAFPEKVOhUKN79wwbvF4eqvDG1uLArMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMt YmRhNy0xYmUyMDQ5MzNhZTUvMDZhZjI0ZTctMWMxMy00NDMwLWJkNzktZGIwNWY2 ZGMwNjQzLmNlcjCCAZMGCCsGAQUFBwEHAQH/BIIBgjCCAX4wggFrBAIAATCCAWMD AwEtNAMDATIgMAsDAwIyJAMEBjIlADAMAwQHMiaAAwQGMicAMAoDAwMyKAMDADIq MAwDBAcyK4ADBAcyLQADAwIyMAMEBzI0gAMEBzI2AAMDADI3MAoDAwEyZgMDATJo MAwDBAYyakADBAMyaxAwDAMEBTJrIAMEBTJtwAMDATJuAwQGMngAMAwDBAUyeGAD BAYyewAwCwMEBzJ7gAMDADJ8AwQGMn4AMAsDBAcyfoADAwcyAAMEBUBvgAMEB0El AAMDAEFJAwQFQiHgAwQGQoWAAwMBRmQDAwRKIAMEBkrUAAMDAGipAwMAaOsDAwBo 8AMDAKrXAwMCrEwDAwKtVDAKAwMDuAgDAwK4EAMEB8C2ADAMAwQFwLagAwQFwLeA AwQFwLfgAwQGx+BAAwQGze7AAwQFzwegAwQG0G/AAwQG0UoAAwQE0bFwAwQH2CWA AwQF2EPAAwQE2GzAAwQF2N7gMA0EAgACMAcDBQAgARlgMC0GCCsGAQUFBwEIAQH/ BB4wHKAaMBgCAg4JAgIWEgICG2MCAmYPAgJ1cAICf0swVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlKrIIlC2 VvO+KbEtR51nRCWNkFc+3aPFwEvqrviVxflmIr7BGjVjiNRYexdufJi7QxZts9tG F+yWmH6zLl9n61K3mSdiyD3HxNNiPVRTOzrXdB7PLwnRmMMhNLSBrx4G5BNmhDEq TeJPoisoEUbLVAxWO8wXluebjNhc039FKM2wPnm+lveHOtS4WDAcWnmV+PPgeKIo AVjpRivIeJqwy6cvdPJ1GTAl5YoH7FrNz9wefHIE+T9ssBuhJze380P+CEbLrtkm 2uYV20wTmjUMNAf7iGwkWqg3aQKA3DsakrQMyr93o64TodYSXtAgOW/aGJGCQH/J kdq9XJN3aPG2sA== -----END CERTIFICATE-----Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org