$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer File: 1add3b23-5fb0-4412-be17-98450d352516.cer (raw, json) Hash identifier: +FMgo8ze2iM/sPMVzsGwNG9yFYueHOjPibSvYwJDV5Q= Subject key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584429F725AA1206A3BEEC255E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Dec 2023 01:45:15 +0000 Certificate not after: Sat 14 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 11100 AS: 17054 AS: 53976 IP: 64.72.128.0/19 IP: 64.255.240.0/20 IP: 66.11.0.0/19 IP: 66.159.64.0/19 IP: 66.181.64.0/19 IP: 66.230.64.0/20 IP: 69.7.96.0/20 IP: 206.41.192.0/19 IP: 206.183.0.0/19 IP: 206.210.64.0/19 IP: 206.223.22.0/24 IP: 207.54.128.0/18 IP: 207.114.0.0/17 IP: 208.40.128.0 -- 208.40.207.255 IP: 208.40.224.0/19 IP: 209.114.128.0/18 IP: 209.143.64.0/18 IP: 209.166.128.0/18 IP: 209.190.128.0/18 IP: 209.221.0.0/19 IP: 216.37.0.0/18 IP: 216.82.64.0/18 IP: 216.130.0.0/19 IP: 216.151.64.0/18 IP: 216.183.160.0/19 IP: 216.230.96.0/19 IP: 216.239.240.0/20 IP: 2607:f4d0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:29:f7:25:aa:12:06:a3:be:ec:25:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 10 01:45:15 2023 GMT Not After : Mar 14 00:45:15 2026 GMT Subject: CN=1add3b23-5fb0-4412-be17-98450d352516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:68:79:ae:4c:81:3e:5d:53:3f:ea:1d:2b: 2a:d0:4f:a3:06:e3:f1:b9:fe:ee:c7:6a:bd:f4:f1: c5:35:3f:c6:bf:c8:63:7d:45:12:fe:11:0b:8b:f3: ae:e0:bb:e4:9c:9f:d6:e8:92:e2:68:e9:6a:30:62: d2:21:6b:d5:23:58:58:91:61:8f:79:17:d9:66:f7: e7:8a:dc:5c:c2:5d:a9:85:98:6d:cb:4f:f0:2f:8c: a0:4b:bd:94:f5:0c:34:72:0f:90:57:66:41:37:62: 21:2d:3b:a0:30:30:3f:9a:ee:77:2a:e5:22:ea:ff: 09:5d:ec:12:e5:58:41:5b:3b:4e:1b:5f:c9:51:65: a9:65:7d:0f:0d:a2:88:3e:19:ef:6d:b1:64:cb:84: 02:b5:1b:32:97:38:47:63:e4:86:18:79:c6:14:90: b7:a8:c1:b9:59:c9:37:7c:b4:39:4d:29:8f:8f:f9: 69:ab:2d:b4:4a:63:38:36:97:4f:b7:96:26:36:46: 84:55:d4:4b:9a:16:b3:df:d3:94:72:6a:bd:ca:52: 74:88:fe:e7:5d:d0:09:17:5f:fd:61:3c:18:58:41: 57:63:38:a3:fd:6d:47:a4:23:b9:65:2a:53:ab:43: 99:48:97:27:b7:6b:24:27:27:a8:4b:e7:51:c6:94: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.72.128.0/19 64.255.240.0/20 66.11.0.0/19 66.159.64.0/19 66.181.64.0/19 66.230.64.0/20 69.7.96.0/20 206.41.192.0/19 206.183.0.0/19 206.210.64.0/19 206.223.22.0/24 207.54.128.0/18 207.114.0.0/17 208.40.128.0-208.40.207.255 208.40.224.0/19 209.114.128.0/18 209.143.64.0/18 209.166.128.0/18 209.190.128.0/18 209.221.0.0/19 216.37.0.0/18 216.82.64.0/18 216.130.0.0/19 216.151.64.0/18 216.183.160.0/19 216.230.96.0/19 216.239.240.0/20 IPv6: 2607:f4d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11100 17054 53976 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:01:3b:78:0c:4d:02:b3:79:42:03:d3:3c:f7:eb:21:be:32: fd:27:a3:e7:04:bd:76:28:24:0c:da:b5:49:f3:cb:bd:a3:d8: b5:bc:86:cd:6e:ae:b5:9d:c9:d1:47:02:6d:a9:86:3d:db:18: c1:39:fd:1e:1b:f4:e8:2d:20:87:a8:63:3c:23:f1:4c:a0:65: 90:48:1f:9f:84:59:f6:97:4e:1a:fd:1b:42:e3:45:6c:7e:df: f6:7a:f1:55:37:aa:00:a4:15:8d:ab:be:3d:9b:44:fa:c2:74: 1c:9a:92:06:e1:12:af:d8:b1:26:8a:bb:2b:d1:f7:c8:7d:e7: 6a:a8:61:0c:2a:74:c2:95:b8:14:5a:25:92:84:cb:7c:da:c4: f4:ba:ef:0c:df:da:73:c2:b5:99:2b:5e:b1:06:93:f8:f6:81: 2b:b9:03:10:a5:fb:8f:cd:7a:7d:6d:3b:86:15:0c:3a:41:4a: d2:84:cd:23:67:3c:5a:4b:6c:a0:85:80:01:cd:73:e4:c9:3f: d8:d7:21:8e:43:8b:29:6f:06:94:b5:ce:12:c6:88:c1:4b:ba: bf:df:cb:29:59:96:bc:3b:4e:58:ab:2a:18:0e:1e:b5:18:3a: 8d:02:b8:19:b8:67:bc:67:b7:ca:35:4f:d8:e2:65:b6:35:43: 24:c7:71:90 -----BEGIN CERTIFICATE----- MIIHyTCCBrGgAwIBAgIUAQ0Mn0MoWEQp9yWqEgajvuwlXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTIxMDAxNDUxNVoXDTI2MDMxNDAwNDUxNVowLzEtMCsGA1UEAxMk MWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUyNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Voea5MgT5dUz/qHSsq0E+jBuPxuf7ux2q9 9PHFNT/Gv8hjfUUS/hELi/Ou4LvknJ/W6JLiaOlqMGLSIWvVI1hYkWGPeRfZZvfn itxcwl2phZhty0/wL4ygS72U9Qw0cg+QV2ZBN2IhLTugMDA/mu53KuUi6v8JXewS 5VhBWztOG1/JUWWpZX0PDaKIPhnvbbFky4QCtRsylzhHY+SGGHnGFJC3qMG5Wck3 fLQ5TSmPj/lpqy20SmM4NpdPt5YmNkaEVdRLmhaz39OUcmq9ylJ0iP7nXdAJF1/9 YTwYWEFXYzij/W1HpCO5ZSpTq0OZSJcnt2skJyeoS+dRxpRicQIDAQABo4IE2zCC BNcwHQYDVR0OBBYEFN/WqzUIxGejaY5LXeqHeMB6HY4mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x YWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFhZGQzYjIzLTVmYjAtNDQxMi1i ZTE3LTk4NDUwZDM1MjUxNi8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQz NTI1MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwgdYGCCsGAQUF BwEHAQH/BIHGMIHDMIGxBAIAATCBqgMEBUBIgAMEBED/8AMEBUILAAMEBUKfQAME BUK1QAMEBELmQAMEBEUHYAMEBc4pwAMEBc63AAMEBc7SQAMEAM7fFgMEBs82gAME B89yADAMAwQH0CiAAwQE0CjAAwQF0CjgAwQG0XKAAwQG0Y9AAwQG0aaAAwQG0b6A AwQF0d0AAwQG2CUAAwQG2FJAAwQF2IIAAwQG2JdAAwQF2LegAwQF2OZgAwQE2O/w MA0EAgACMAcDBQAmB/TQMCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAitcAgJCngID ANLYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEIBO3gMTQKzeUID0zz36yG+Mv0no+cEvXYoJAzatUnzy72j 2LW8hs1urrWdydFHAm2phj3bGME5/R4b9OgtIIeoYzwj8UygZZBIH5+EWfaXThr9 G0LjRWx+3/Z68VU3qgCkFY2rvj2bRPrCdByakgbhEq/YsSaKuyvR98h952qoYQwq dMKVuBRaJZKEy3zaxPS67wzf2nPCtZkrXrEGk/j2gSu5AxCl+4/Nen1tO4YVDDpB StKEzSNnPFpLbKCFgAHNc+TJP9jXIY5DiylvBpS1zhLGiMFLur/fyylZlrw7Tlir KhgOHrUYOo0CuBm4Z7xnt8o1T9jiZbY1QyTHcZA= -----END CERTIFICATE-----Generated at Wed May 1 15:59:54 2024 by rpki-client on console-ams.rpki-client.org