$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer File: 835152c2-2ed8-4151-8f82-ac9407335b2c.cer (raw, json) Hash identifier: Ozrk6Dtcq1CH+f3+BDrM0rwDJREZKDGU9sFcXI+Dmgw= Subject key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858431DD7C5124D4C10A11684D000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Sep 2023 00:45:23 +0000 Certificate not after: Mon 08 Dec 2025 01:45:23 +0000 Subordinate resources: IP: 50.116.64.0/18 IP: 96.125.160.0/20 IP: 108.167.128.0/18 IP: 108.174.144.0/20 IP: 108.179.192.0/18 IP: 162.210.48.0/22 IP: 192.185.0.0/16 IP: 192.232.192.0/18 IP: 192.254.128.0/17 IP: 198.20.224.0/19 IP: 198.154.192.0/18 IP: 216.172.160.0/19 IP: 2605:f300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:1d:d7:c5:12:4d:4c:10:a1:16:84:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 5 00:45:23 2023 GMT Not After : Dec 8 01:45:23 2025 GMT Subject: CN=835152c2-2ed8-4151-8f82-ac9407335b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:8e:08:7a:c0:9a:68:c4:b1:b5:c8:97:3c: a5:9c:48:1c:62:0f:46:da:aa:f4:2d:8c:4d:d1:45: 90:4e:ac:65:ad:de:5a:5c:9c:da:d9:ea:95:fa:df: f4:cc:1a:b6:84:75:40:eb:4a:c8:f3:4a:5e:09:6c: 8f:8f:a1:bd:35:8f:96:7b:33:75:5e:e4:aa:8e:71: 6a:36:79:9a:8c:51:a3:6c:c1:dc:73:df:1f:e2:ea: 14:13:9e:16:2c:c8:a7:fc:00:3d:36:26:0c:9a:a4: 79:72:5c:04:15:74:32:06:8b:23:7c:47:e4:8a:4f: 94:80:5f:cc:ad:bc:40:cc:b4:9d:21:bf:bf:82:7e: 54:7e:e6:4f:42:80:5a:3f:0a:7a:47:63:db:d9:1d: 03:a2:29:e1:67:5e:89:59:1d:ac:ae:ab:8d:c2:dd: 3a:4c:01:cb:86:0c:95:78:0c:3d:76:97:55:d5:24: 5e:b8:82:f9:e5:d4:58:77:ee:53:01:4f:b4:61:c5: 83:d9:8d:b8:ee:8c:c5:a4:fc:67:8b:c5:ba:65:4d: 69:0a:dc:9d:3f:cc:ff:a3:a3:73:2c:00:3f:f4:98: 84:42:ff:ca:b5:c9:ed:49:40:65:77:77:10:6a:dc: ba:d6:dc:a8:d5:02:e5:a2:75:06:28:a7:71:eb:b8: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 50.116.64.0/18 96.125.160.0/20 108.167.128.0/18 108.174.144.0/20 108.179.192.0/18 162.210.48.0/22 192.185.0.0/16 192.232.192.0/18 192.254.128.0/17 198.20.224.0/19 198.154.192.0/18 216.172.160.0/19 IPv6: 2605:f300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:22:4b:df:3e:ac:7f:a0:ca:7f:0a:97:29:c5:14:78:b4:02: 64:ba:8c:52:1d:85:1a:a7:6a:b7:e8:a0:c6:58:60:67:8f:7e: 32:19:25:56:e7:65:3c:e3:ec:35:2b:b4:74:2d:e8:f2:c5:d8: 12:e2:a3:54:a8:b7:30:7e:a6:98:73:c1:b4:8f:11:12:dd:82: 65:e1:72:2d:c8:f0:df:6a:74:10:83:65:07:68:dc:9a:c7:1f: 2e:d8:8f:d4:bc:c6:1b:f2:6e:62:68:48:b3:1b:18:08:96:e8: 4c:98:2e:67:d8:3b:a9:33:05:88:24:42:be:28:b0:39:64:0b: c0:27:9e:6c:b7:59:d5:31:9d:13:19:6c:e6:e1:03:03:2c:45: af:c5:cc:28:d9:e0:91:a0:41:ab:60:af:aa:46:78:84:df:89: 2d:ba:a2:32:19:19:52:31:8d:b7:7a:70:53:99:fd:96:ed:48: 3f:ce:53:e4:d7:50:2a:40:c6:c4:98:1b:72:2f:c8:d6:23:a2: ef:3e:9a:a3:82:c7:2f:fc:53:4f:7e:00:0e:14:f0:89:ce:f9: bf:f0:68:1d:a2:2d:36:df:0c:df:eb:31:d5:62:32:2a:8f:12: bb:db:68:a3:d6:52:ee:60:90:88:31:f6:21:7f:71:22:0d:7f: cb:f1:42:0c -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEMd18USTUwQoRaE0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDkwNTAwNDUyM1oXDTI1MTIwODAxNDUyM1owLzEtMCsGA1UEAxMk ODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1YjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU2OCHrAmmjEsbXIlzylnEgcYg9G2qr0LYxN 0UWQTqxlrd5aXJza2eqV+t/0zBq2hHVA60rI80peCWyPj6G9NY+WezN1XuSqjnFq NnmajFGjbMHcc98f4uoUE54WLMin/AA9NiYMmqR5clwEFXQyBosjfEfkik+UgF/M rbxAzLSdIb+/gn5UfuZPQoBaPwp6R2Pb2R0DoinhZ16JWR2srquNwt06TAHLhgyV eAw9dpdV1SReuIL55dRYd+5TAU+0YcWD2Y247ozFpPxni8W6ZU1pCtydP8z/o6Nz LAA/9JiEQv/KtcntSUBld3cQaty61tyo1QLlonUGKKdx67ia7QIDAQABo4IETzCC BEswHQYDVR0OBBYEFIqfdNlMt2MFMDaPD+xFmrfmaXXeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzgzNTE1MmMyLTJlZDgtNDE1MS04 ZjgyLWFjOTQwNzMzNWIyYy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDcz MzViMmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwbwYIKwYBBQUH AQcBAf8EYDBeME0EAgABMEcDBAYydEADBARgfaADBAZsp4ADBARsrpADBAZss8AD BAKi0jADAwDAuQMEBsDowAMEB8D+gAMEBcYU4AMEBsaawAMEBdisoDANBAIAAjAH AwUAJgXzADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQARIkvfPqx/oMp/CpcpxRR4tAJkuoxSHYUap2q36KDG WGBnj34yGSVW52U84+w1K7R0LejyxdgS4qNUqLcwfqaYc8G0jxES3YJl4XItyPDf anQQg2UHaNyaxx8u2I/UvMYb8m5iaEizGxgIluhMmC5n2DupMwWIJEK+KLA5ZAvA J55st1nVMZ0TGWzm4QMDLEWvxcwo2eCRoEGrYK+qRniE34ktuqIyGRlSMY23enBT mf2W7Ug/zlPk11AqQMbEmBtyL8jWI6LvPpqjgscv/FNPfgAOFPCJzvm/8Ggdoi02 3wzf6zHVYjIqjxK722ij1lLuYJCIMfYhf3EiDX/L8UIM -----END CERTIFICATE-----Generated at Thu Nov 21 15:48:30 2024 by rpki-client on console-ams.rpki-client.org