$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer File: 65506c68-611f-46ed-9e78-36da39f8ee7d.cer (raw, json) Hash identifier: uPQyPFnTTN0f8pRsGqKu9BZ3xCu8fnlP2L+gHawSiVw= Subject key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285841E4834D06B79CC43094D44900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Mon 16 Jun 2025 19:06:39 +0000 Subordinate resources: AS: 13571 AS: 395761 IP: 23.233.128.0/17 IP: 24.37.0.0/16 IP: 24.48.0.0/17 IP: 24.48.176.0/20 IP: 24.53.0.0/18 IP: 24.157.128.0/17 IP: 24.200.0.0/14 IP: 24.225.128.0/17 IP: 45.45.0.0/17 IP: 45.73.0.0/17 IP: 66.130.0.0/15 IP: 66.185.48.0/20 IP: 69.12.104.0/24 IP: 69.24.48.0/20 IP: 69.70.0.0/16 IP: 70.80.0.0/14 IP: 74.56.0.0/14 IP: 96.20.0.0/14 IP: 104.221.0.0/17 IP: 107.171.128.0/17 IP: 135.19.0.0/16 IP: 137.175.128.0/17 IP: 144.172.128.0/17 IP: 147.253.0.0 -- 147.253.191.255 IP: 166.62.128.0/17 IP: 173.176.0.0/14 IP: 184.160.0.0/14 IP: 192.226.128.0/17 IP: 198.252.165.0/24 IP: 2607:fa48::/29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4d:06:b7:9c:c4:30:94:d4:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jun 16 19:06:39 2025 GMT Subject: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0d:f2:f2:55:25:9d:a2:5e:e5:67:34:a1:b9: 95:88:00:0f:2b:99:f4:91:ad:f9:f9:f7:e4:94:bb: b2:f8:9f:90:84:6d:d7:21:cf:7a:81:c0:17:6e:09: f7:ae:44:ec:e0:6e:8a:fd:fc:cb:c4:03:76:ab:d7: e5:d6:56:c4:3b:73:20:00:e0:1d:dc:8b:50:d2:fe: d5:15:c4:4b:04:88:fc:97:d5:df:e4:00:98:c0:d8: c2:31:28:66:7d:1f:15:5b:51:f9:8a:13:43:79:5e: 3b:ea:90:91:df:82:ed:a6:e3:1f:51:c3:cf:35:a7: 2c:7b:25:ff:b4:c1:d9:51:ce:1c:4e:a7:b4:93:e9: 3f:f3:cf:e8:c8:f6:68:83:d8:66:16:31:f3:90:a7: 37:01:64:cd:27:97:45:b4:2c:79:11:19:76:d6:d7: 82:e9:b5:a8:77:6f:fb:e7:d8:1d:22:fd:2b:31:33: 59:ce:bb:59:7f:07:6e:f5:d7:c8:34:c7:34:9e:ca: 60:81:74:1d:9f:96:e8:14:d8:4f:99:cc:05:5b:8d: 61:fb:85:57:ac:9f:69:c1:ad:63:17:98:82:67:41: 5a:6c:82:28:60:17:6a:d9:c1:fd:0f:e0:53:1a:75: a7:32:52:65:6a:f0:4a:04:c3:10:f2:b1:41:b0:e4: 18:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.233.128.0/17 24.37.0.0/16 24.48.0.0/17 24.48.176.0/20 24.53.0.0/18 24.157.128.0/17 24.200.0.0/14 24.225.128.0/17 45.45.0.0/17 45.73.0.0/17 66.130.0.0/15 66.185.48.0/20 69.12.104.0/24 69.24.48.0/20 69.70.0.0/16 70.80.0.0/14 74.56.0.0/14 96.20.0.0/14 104.221.0.0/17 107.171.128.0/17 135.19.0.0/16 137.175.128.0/17 144.172.128.0/17 147.253.0.0-147.253.191.255 166.62.128.0/17 173.176.0.0/14 184.160.0.0/14 192.226.128.0/17 198.252.165.0/24 IPv6: 2607:fa48::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13571 395761 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ce:a8:ab:1f:87:f8:9b:c7:f1:71:61:ca:be:ce:6b:bf:23: d7:4d:c5:2d:55:9a:7e:ec:cc:4a:7c:ba:36:17:de:b3:99:c1: fb:ce:fa:bb:b2:23:1f:a0:65:6f:61:05:b3:2f:c7:fb:37:8a: 55:f6:20:23:aa:29:8f:0c:c9:26:82:ba:8e:8a:6a:a3:29:d7: 22:58:8c:e6:98:c9:75:bc:47:0a:6f:e0:ea:9a:1c:64:55:f7: e0:cb:47:cd:e6:0b:c4:a0:f8:65:e9:33:b7:ba:5c:de:ac:8e: 9f:f0:b7:ee:ec:9f:b4:ba:3c:a5:01:23:ef:94:2e:a9:5f:01: 73:3d:7c:34:37:36:d0:3a:4a:21:c0:8a:7d:3f:74:ce:5f:d1: 94:4f:12:45:90:eb:fa:1f:c4:f1:93:f2:11:a1:ec:45:99:2b: 35:b1:87:30:16:d2:69:66:12:b6:9f:71:a1:a3:50:e5:57:f0: e7:58:94:23:2f:2f:c0:08:50:78:7e:d9:b5:a8:6d:6d:7a:86: 11:b2:3c:75:37:78:dc:98:f0:7e:a2:0e:ef:c5:23:fa:b8:5e: ce:35:a1:31:a7:8d:c8:d0:02:85:cd:f1:81:74:83:27:b9:ec: 61:42:b3:df:a9:e2:23:5c:6c:10:69:0e:f0:a1:35:8e:8b:f9: bd:da:76:b9 -----BEGIN CERTIFICATE----- MIIHxjCCBq6gAwIBAgIUAQ0Mn0MoWEHkg00Gt5zEMJTUSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYxNjE5MDYzOVowLzEtMCsGA1UEAxMk NjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5ZjhlZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg3y8lUlnaJe5Wc0obmViAAPK5n0ka35+ffk lLuy+J+QhG3XIc96gcAXbgn3rkTs4G6K/fzLxAN2q9fl1lbEO3MgAOAd3ItQ0v7V FcRLBIj8l9Xf5ACYwNjCMShmfR8VW1H5ihNDeV476pCR34LtpuMfUcPPNacseyX/ tMHZUc4cTqe0k+k/88/oyPZog9hmFjHzkKc3AWTNJ5dFtCx5ERl21teC6bWod2/7 59gdIv0rMTNZzrtZfwdu9dfINMc0nspggXQdn5boFNhPmcwFW41h+4VXrJ9pwa1j F5iCZ0FabIIoYBdq2cH9D+BTGnWnMlJlavBKBMMQ8rFBsOQYKwIDAQABo4IE2DCC BNQwHQYDVR0OBBYEFGRGW26MinrZuPpjp2G6LfD1nDYxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82 NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzY1NTA2YzY4LTYxMWYtNDZlZC05 ZTc4LTM2ZGEzOWY4ZWU3ZC82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlm OGVlN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwgdcGCCsGAQUF BwEHAQH/BIHHMIHEMIGyBAIAATCBqwMEBxfpgAMDABglAwQHGDAAAwQEGDCwAwQG GDUAAwQHGJ2AAwMCGMgDBAcY4YADBActLQADBActSQADAwFCggMEBEK5MAMEAEUM aAMEBEUYMAMDAEVGAwMCRlADAwJKOAMDAmAUAwQHaN0AAwQHa6uAAwMAhxMDBAeJ r4ADBAeQrIAwCwMDAJP9AwQGk/2AAwQHpj6AAwMCrbADAwK4oAMEB8DigAMEAMb8 pTANBAIAAjAHAwUDJgf6SDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgI1AwIDBgnx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGLOqKsfh/ibx/FxYcq+zmu/I9dNxS1Vmn7szEp8ujYX3rOZwfvO +ruyIx+gZW9hBbMvx/s3ilX2ICOqKY8MySaCuo6KaqMp1yJYjOaYyXW8Rwpv4Oqa HGRV9+DLR83mC8Sg+GXpM7e6XN6sjp/wt+7sn7S6PKUBI++ULqlfAXM9fDQ3NtA6 SiHAin0/dM5f0ZRPEkWQ6/ofxPGT8hGh7EWZKzWxhzAW0mlmErafcaGjUOVX8OdY lCMvL8AIUHh+2bWobW16hhGyPHU3eNyY8H6iDu/FI/q4Xs41oTGnjcjQAoXN8YF0 gye57GFCs9+p4iNcbBBpDvChNY6L+b3adrk= -----END CERTIFICATE-----Generated at Sat Apr 20 02:39:45 2024 by rpki-client on console-ams.rpki-client.org