$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da.cer File: 35108378-f5ea-460b-b05b-51d13b62a6da.cer (raw, json) Hash identifier: MMuztDuF/Hd3LvjeGvkY1aawhQ3vEwPZk4mhnrdTrUo= Subject key identifier: 61:98:3A:9D:81:B1:27:18:BD:9B:9A:B6:D6:11:EA:E5:D5:BC:79:CE Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858458F30F944B43692F21133F598 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/35108378-f5ea-460b-b05b-51d13b62a6da.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Apr 2024 00:45:20 +0000 Certificate not after: Mon 20 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 16876 AS: 20144 AS: 23518 AS: 26299 AS: 26710 -- 26711 AS: 27500 AS: 40528 IP: 192.0.32.0/20 IP: 199.4.28.0/22 IP: 199.4.138.0/24 IP: 199.7.81.0 -- 199.7.83.255 IP: 199.7.94.0/23 IP: 199.43.132.0/22 IP: 199.91.192.0/21 IP: 199.253.182.0/23 IP: 208.77.188.0/22 IP: 2001:500:3::/48 IP: 2001:500:11::/48 IP: 2001:500:86:: -- 2001:500:89:ffff:ffff:ffff:ffff:ffff IP: 2001:500:8c::/46 IP: 2001:500:9c::/46 IP: 2602:800:9000::/44 IP: 2620:0:2d0::/48 IP: 2620:0:22b0::/48 IP: 2620:0:2830::/48 IP: 2620:0:2ed0::/48 IP: 2620:0:2ee0::/48 IP: 2620:f:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8f:30:f9:44:b4:36:92:f2:11:33:f5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 16 00:45:20 2024 GMT Not After : Jul 20 00:45:20 2026 GMT Subject: CN=35108378-f5ea-460b-b05b-51d13b62a6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:fd:c7:41:f6:ae:cc:4a:03:ab:60:fb:f9: 2f:11:a7:ab:67:02:94:0a:90:3f:49:81:55:25:53: f0:e6:fc:12:17:89:9e:f3:b0:61:cf:22:be:2b:04: 82:9b:74:54:d3:6d:86:be:66:0c:30:bb:8c:80:57: 4e:dc:29:22:46:31:3c:20:26:f2:d1:42:38:8d:2b: 90:e0:eb:70:13:db:f2:14:bb:5a:45:23:17:cb:9e: 23:f0:77:59:5b:78:a0:26:d3:08:51:a8:fe:b4:f4: b6:c0:31:12:c6:3e:2e:28:53:49:a0:c3:0a:10:17: 93:b2:4a:50:f9:8d:1c:38:e5:9e:29:11:a8:5f:12: 7a:ee:3e:19:db:7f:32:fe:eb:f2:71:dc:a9:bc:b0: 00:cf:59:c5:db:f3:1b:76:91:6a:f1:2e:a9:1e:59: 13:d7:ce:88:c3:76:d3:b9:be:d6:c8:1c:62:e8:47: 7d:f5:b5:ba:df:50:73:ea:84:32:3b:9a:eb:76:8e: 09:7b:56:f1:3f:e4:e2:3b:b7:51:26:56:1a:70:68: 5c:ff:40:4a:3b:95:8a:32:16:2c:96:d9:0f:fa:2f: bc:8d:65:98:ce:e2:9a:63:b5:51:e7:59:8e:26:dd: 86:89:6d:4d:eb:d4:fd:e2:d7:7c:d8:48:f0:ce:f7: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:98:3A:9D:81:B1:27:18:BD:9B:9A:B6:D6:11:EA:E5:D5:BC:79:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/35108378-f5ea-460b-b05b-51d13b62a6da.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 192.0.32.0/20 199.4.28.0/22 199.4.138.0/24 199.7.81.0-199.7.83.255 199.7.94.0/23 199.43.132.0/22 199.91.192.0/21 199.253.182.0/23 208.77.188.0/22 IPv6: 2001:500:3::/48 2001:500:11::/48 2001:500:86::-2001:500:89:ffff:ffff:ffff:ffff:ffff 2001:500:8c::/46 2001:500:9c::/46 2602:800:9000::/44 2620:0:2d0::/48 2620:0:22b0::/48 2620:0:2830::/48 2620:0:2ed0::/48 2620:0:2ee0::/48 2620:f:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16876 20144 23518 26299 26710-26711 27500 40528 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b9:2c:b7:30:31:e6:7c:4b:70:42:20:63:3b:95:cd:29:89: 03:05:eb:6f:2a:9d:69:ba:66:3d:9a:bf:6c:55:f9:dc:90:1e: 55:7f:9d:48:88:a1:7b:78:67:97:3b:8d:09:d8:a4:9f:27:5f: eb:3e:8e:27:66:70:33:1d:df:b6:28:65:27:d4:ae:a8:64:8b: 44:bc:41:43:7b:38:a2:07:8b:58:73:c4:b8:11:b9:ed:f5:7d: 8f:98:7d:35:5a:a1:78:25:46:02:d0:1b:08:1c:09:6c:11:c4: ee:ea:88:9a:2e:e8:79:ff:54:84:2d:3f:e0:e1:a2:fd:3d:41: 4e:bc:9c:98:24:89:84:6a:73:6e:91:de:6c:29:af:4e:72:ca: c7:3d:b0:a8:97:4c:37:a4:a7:7c:e6:a0:0c:2c:3a:14:26:cd: e4:ef:64:ef:1f:ac:c3:bc:04:20:ce:fe:50:b8:03:14:d1:ce: bd:9a:20:47:75:ba:be:d0:e9:d0:c2:8d:d5:92:fd:8c:0d:c2: 8e:d6:d5:eb:b5:8b:88:42:de:a5:6a:58:1c:ec:6e:44:60:d8: 09:f8:22:fd:c1:d2:b3:ac:a8:a2:62:41:38:15:5a:4b:3d:3d: 22:bf:31:3e:a5:ae:4c:43:be:66:5f:f0:88:30:bc:e6:79:4b: 6e:24:08:c9 -----BEGIN CERTIFICATE----- MIIH4TCCBsmgAwIBAgIUAQ0Mn0MoWEWPMPlEtDaS8hEz9ZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDQxNjAwNDUyMFoXDTI2MDcyMDAwNDUyMFowLzEtMCsGA1UEAxMk MzUxMDgzNzgtZjVlYS00NjBiLWIwNWItNTFkMTNiNjJhNmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBD9x0H2rsxKA6tg+/kvEaerZwKUCpA/SYFV JVPw5vwSF4me87BhzyK+KwSCm3RU022GvmYMMLuMgFdO3CkiRjE8ICby0UI4jSuQ 4OtwE9vyFLtaRSMXy54j8HdZW3igJtMIUaj+tPS2wDESxj4uKFNJoMMKEBeTskpQ +Y0cOOWeKRGoXxJ67j4Z238y/uvycdypvLAAz1nF2/MbdpFq8S6pHlkT186Iw3bT ub7WyBxi6Ed99bW631Bz6oQyO5rrdo4Je1bxP+TiO7dRJlYacGhc/0BKO5WKMhYs ltkP+i+8jWWYzuKaY7VR51mOJt2GiW1N69T94td82EjwzvcLXQIDAQABo4IE8zCC BO8wHQYDVR0OBBYEFGGYOp2BsScYvZuattYR6uXVvHnOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8z NTEwODM3OC1mNWVhLTQ2MGItYjA1Yi01MWQxM2I2MmE2ZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzM1MTA4Mzc4LWY1ZWEtNDYwYi1i MDViLTUxZDEzYjYyYTZkYS8zNTEwODM3OC1mNWVhLTQ2MGItYjA1Yi01MWQxM2I2 MmE2ZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwgdgGCCsGAQUF BwEHAQH/BIHIMIHFMEQEAgABMD4DBATAACADBALHBBwDBADHBIowDAMEAMcHUQME AscHUAMEAccHXgMEAscrhAMEA8dbwAMEAcf9tgMEAtBNvDB9BAIAAjB3AwcAIAEF AAADAwcAIAEFAAARMBIDBwEgAQUAAIYDBwEgAQUAAIgDBwIgAQUAAIwDBwIgAQUA AJwDBwQmAggAkAADBwAmIAAAAtADBwAmIAAAIrADBwAmIAAAKDADBwAmIAAALtAD BwAmIAAALuADBwAmIAAPgAAwOAYIKwYBBQUHAQgBAf8EKTAnoCUwIwICQewCAk6w AgJb3gICZrswCAICaFYCAmhXAgJrbAIDAJ5QMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGa5LLcwMeZ8S3BC IGM7lc0piQMF628qnWm6Zj2av2xV+dyQHlV/nUiIoXt4Z5c7jQnYpJ8nX+s+jidm cDMd37YoZSfUrqhki0S8QUN7OKIHi1hzxLgRue31fY+YfTVaoXglRgLQGwgcCWwR xO7qiJou6Hn/VIQtP+Dhov09QU68nJgkiYRqc26R3mwpr05yysc9sKiXTDekp3zm oAwsOhQmzeTvZO8frMO8BCDO/lC4AxTRzr2aIEd1ur7Q6dDCjdWS/YwNwo7W1eu1 i4hC3qVqWBzsbkRg2An4Iv3B0rOsqKJiQTgVWks9PSK/MT6lrkxDvmZf8IgwvOZ5 S24kCMk= -----END CERTIFICATE-----Generated at Thu Apr 25 22:34:43 2024 by rpki-client on console-fra.rpki-client.org