$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer File: 4215bba6-51b0-41f8-9185-dda3367a8df5.cer (raw, json) Hash identifier: qoEX3DenkIMCHmdlMbQwRf4DTrZY1iywNaYXsdRQhtY= Subject key identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843E3C84682ABAB3F2736719C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Nov 2023 22:24:14 +0000 Certificate not after: Wed 24 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 11071 AS: 36143 AS: 40603 AS: 393299 IP: 64.37.0.0/20 IP: 64.255.80.0/20 IP: 70.34.0.0/20 IP: 74.120.32.0/21 IP: 74.123.12.0/22 IP: 104.152.60.0/22 IP: 104.192.200.0/22 IP: 148.59.162.0/23 IP: 162.246.100.0/22 IP: 192.136.36.0/24 IP: 192.238.0.0/24 IP: 195.85.106.0/23 IP: 198.181.62.0/23 IP: 199.66.116.0/22 IP: 204.17.177.0/24 IP: 204.52.243.0/24 IP: 204.130.209.0/24 IP: 206.81.76.0/22 IP: 207.50.144.0/20 IP: 208.65.0.0/22 IP: 208.66.32.0/21 IP: 208.88.8.0/22 IP: 209.33.192.0/18 IP: 2604:2540::/32 IP: 2604:2c00::/32 IP: 2606:5980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:e3:c8:46:82:ab:ab:3f:27:36:71:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 14 22:24:14 2023 GMT Not After : Sep 24 00:45:16 2025 GMT Subject: CN=4215bba6-51b0-41f8-9185-dda3367a8df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:1a:34:b5:86:a4:c5:3c:5d:e3:77:9a:dd: 3c:b3:b9:f9:10:60:2f:17:1c:19:42:db:c8:f0:5a: f4:36:3d:e1:5e:4d:68:5a:24:63:fb:3a:25:6c:91: 64:3d:96:a1:e8:99:fb:a0:3c:c5:ee:7a:29:03:99: 8c:30:2d:c7:44:e8:4d:99:9e:32:31:67:1f:17:43: 3b:2b:c1:45:40:76:d3:d8:2f:45:56:6c:44:da:b8: 37:ae:80:5f:7a:88:c6:ac:82:dc:44:6d:91:58:a4: 6f:c5:4f:61:05:2e:14:64:cc:8d:e3:53:f9:d4:02: ba:20:b8:29:9e:d1:a6:eb:b0:d8:a8:89:a4:b4:3d: c3:6f:0e:e0:b0:c4:32:ca:5b:5d:90:58:a4:e3:15: 69:34:74:a0:17:06:9c:cc:f4:fe:2d:3f:0f:81:64: e6:c7:50:ea:99:bf:01:ae:55:d7:89:d7:95:84:68: 69:2e:5d:b3:6c:bc:42:0b:9c:33:9b:d5:9d:0a:35: 1a:ea:20:cc:bf:19:2e:67:f5:83:55:fe:bc:7f:42: a3:31:52:f6:1a:bf:1f:3f:bb:57:86:60:09:3a:a7: 02:df:3f:52:ea:af:4e:01:8a:b1:0c:1a:19:98:94: f1:9b:47:0c:87:1b:90:a3:5c:c2:0a:55:82:4f:82: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.37.0.0/20 64.255.80.0/20 70.34.0.0/20 74.120.32.0/21 74.123.12.0/22 104.152.60.0/22 104.192.200.0/22 148.59.162.0/23 162.246.100.0/22 192.136.36.0/24 192.238.0.0/24 195.85.106.0/23 198.181.62.0/23 199.66.116.0/22 204.17.177.0/24 204.52.243.0/24 204.130.209.0/24 206.81.76.0/22 207.50.144.0/20 208.65.0.0/22 208.66.32.0/21 208.88.8.0/22 209.33.192.0/18 IPv6: 2604:2540::/32 2604:2c00::/32 2606:5980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11071 36143 40603 393299 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d3:af:53:9c:5c:f0:52:5a:64:54:7b:98:71:db:d6:bf:c8: 05:21:63:ef:24:67:82:c2:3d:a8:b8:75:fa:83:12:27:81:eb: 00:ad:04:86:b5:15:99:48:8c:39:68:65:b2:e4:70:45:1f:76: 5b:5e:2b:24:86:3a:8c:7a:01:c0:2c:59:a8:ba:fe:41:b8:0f: bb:18:fd:86:f5:c5:7d:5f:99:8f:62:ae:34:8a:d8:f8:6c:1e: 53:80:fc:7e:80:d1:4d:bd:53:5f:24:d2:ea:69:74:99:40:e0: e4:88:d2:a2:dc:2e:cd:fc:d4:97:3f:67:66:14:bc:35:ca:6f: 34:69:43:d7:33:eb:e0:3e:8e:c9:d0:26:08:ce:39:27:7d:c0: f4:2d:57:15:7a:b4:da:07:16:09:f1:04:76:3d:72:1b:30:6b: ad:a8:ee:86:b5:43:ad:92:61:e9:1e:07:6a:aa:66:0f:63:cc: 6e:9b:38:c4:4e:b1:cb:ff:6a:9b:63:60:e1:a4:25:93:6b:db: f8:6d:fd:bc:63:6e:e9:75:1c:f1:c8:07:3d:57:f0:a4:35:2a: c1:75:d9:29:01:20:9f:13:28:e7:c8:92:ab:5f:33:3b:ac:96: d9:e9:42:a3:11:04:97:d6:56:eb:f7:73:a0:39:58:db:ef:32: 78:e9:4d:2e -----BEGIN CERTIFICATE----- MIIHvTCCBqWgAwIBAgIUAQ0Mn0MoWEPjyEaCq6s/JzZxnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTExNDIyMjQxNFoXDTI1MDkyNDAwNDUxNlowLzEtMCsGA1UEAxMk NDIxNWJiYTYtNTFiMC00MWY4LTkxODUtZGRhMzM2N2E4ZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYcaNLWGpMU8XeN3mt08s7n5EGAvFxwZQtvI 8Fr0Nj3hXk1oWiRj+zolbJFkPZah6Jn7oDzF7nopA5mMMC3HROhNmZ4yMWcfF0M7 K8FFQHbT2C9FVmxE2rg3roBfeojGrILcRG2RWKRvxU9hBS4UZMyN41P51AK6ILgp ntGm67DYqImktD3Dbw7gsMQyyltdkFik4xVpNHSgFwaczPT+LT8PgWTmx1Dqmb8B rlXXideVhGhpLl2zbLxCC5wzm9WdCjUa6iDMvxkuZ/WDVf68f0KjMVL2Gr8fP7tX hmAJOqcC3z9S6q9OAYqxDBoZmJTxm0cMhxuQo1zCClWCT4Ky6wIDAQABo4IEzzCC BMswHQYDVR0OBBYEFCTIwxRN2GbOI+Y5SKvKxEVizzH+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 MjE1YmJhNi01MWIwLTQxZjgtOTE4NS1kZGEzMzY3YThkZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQyMTViYmE2LTUxYjAtNDFmOC05 MTg1LWRkYTMzNjdhOGRmNS80MjE1YmJhNi01MWIwLTQxZjgtOTE4NS1kZGEzMzY3 YThkZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgcQGCCsGAQUF BwEHAQH/BIG0MIGxMIGRBAIAATCBigMEBEAlAAMEBED/UAMEBEYiAAMEA0p4IAME Akp7DAMEAmiYPAMEAmjAyAMEAZQ7ogMEAqL2ZAMEAMCIJAMEAMDuAAMEAcNVagME Aca1PgMEAsdCdAMEAMwRsQMEAMw08wMEAMyC0QMEAs5RTAMEBM8ykAMEAtBBAAME A9BCIAMEAtBYCAMEBtEhwDAbBAIAAjAVAwUAJgQlQAMFACYELAADBQAmBlmAMCgG CCsGAQUFBwEIAQH/BBkwF6AVMBMCAis/AgMAjS8CAwCemwIDBgBTMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABzTr1OcXPBSWmRUe5hx29a/yAUhY+8kZ4LCPai4dfqDEieB6wCtBIa1FZlIjDlo ZbLkcEUfdlteKySGOox6AcAsWai6/kG4D7sY/Yb1xX1fmY9irjSK2PhsHlOA/H6A 0U29U18k0uppdJlA4OSI0qLcLs381Jc/Z2YUvDXKbzRpQ9cz6+A+jsnQJgjOOSd9 wPQtVxV6tNoHFgnxBHY9chswa62o7oa1Q62SYekeB2qqZg9jzG6bOMROscv/aptj YOGkJZNr2/ht/bxjbul1HPHIBz1X8KQ1KsF12SkBIJ8TKOfIkqtfMzusltnpQqMR BJfWVuv3c6A5WNvvMnjpTS4= -----END CERTIFICATE-----Generated at Mon May 13 02:02:43 2024 by rpki-client on console-fra.rpki-client.org