$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer File: 9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer (raw, json) Hash identifier: su2AAJQVpSpsIZRC/xP9p3ATSUs+VA8RuUvXRPifIaU= Subject key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858453E3B213DD02F960620384700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Mar 2024 00:45:19 +0000 Certificate not after: Sun 21 Jun 2026 00:45:19 +0000 Subordinate resources: AS: 13937 AS: 14918 AS: 19662 AS: 25749 AS: 40611 IP: 65.38.32.0/20 IP: 192.48.234.0/24 IP: 198.162.16.0/22 IP: 199.60.19.0/24 IP: 199.60.230.0/23 IP: 204.174.80.0 -- 204.174.99.255 IP: 204.239.40.0 -- 204.239.42.255 IP: 207.200.128.0/19 IP: 208.87.52.0/22 IP: 208.99.128.0/19 IP: 216.86.96.0/19 IP: 216.99.32.0/20 IP: 216.113.192.0/19 IP: 216.210.96.0/20 IP: 2605:1000::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3e:3b:21:3d:d0:2f:96:06:20:38:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 18 00:45:19 2024 GMT Not After : Jun 21 00:45:19 2026 GMT Subject: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:12:90:ea:e2:23:5a:69:95:c7:71:62:4f: 86:97:05:02:34:4c:88:08:f5:98:95:0a:d3:cf:1a: 05:1f:00:50:e9:a2:0b:d0:71:85:a8:38:35:14:4e: 93:7d:e0:af:bc:78:32:eb:f7:3b:65:a6:83:6f:a5: df:a9:fa:11:af:c1:e9:51:6e:25:cf:15:91:63:6e: 98:5f:6d:f7:a1:99:4d:2e:8d:d0:a1:af:94:37:a4: 4b:46:4a:bc:31:24:88:d7:dd:e4:55:02:af:68:6e: ba:1f:bc:7d:69:7c:19:22:3a:7f:51:a2:d2:dc:39: 7a:46:5e:1f:53:cc:03:00:f3:39:84:40:6c:6a:19: 18:95:8b:d3:6a:92:ed:bb:a2:c0:40:63:b2:bd:db: 47:b5:93:43:ec:2b:84:03:a1:f2:4b:e0:f0:10:b4: 57:7e:74:1d:57:97:47:54:91:6a:d4:15:2f:1f:a0: c7:35:20:aa:66:a1:1d:1f:8c:db:bd:20:34:76:da: 25:b4:a0:c9:9d:31:ec:56:e5:6d:a1:7b:5b:4e:53: 2f:b7:df:f4:5f:f9:f2:89:e7:d8:b2:d3:aa:b4:2a: a1:d2:45:9f:09:84:07:f1:e5:65:fb:2e:6d:11:2b: 5c:7f:b9:1e:df:90:64:f9:69:51:76:dd:78:6d:02: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 65.38.32.0/20 192.48.234.0/24 198.162.16.0/22 199.60.19.0/24 199.60.230.0/23 204.174.80.0-204.174.99.255 204.239.40.0-204.239.42.255 207.200.128.0/19 208.87.52.0/22 208.99.128.0/19 216.86.96.0/19 216.99.32.0/20 216.113.192.0/19 216.210.96.0/20 IPv6: 2605:1000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13937 14918 19662 25749 40611 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f6:05:35:72:d5:01:14:0a:84:a2:dd:9a:e9:6c:6a:9d:14: c7:74:f9:f0:d4:1c:35:e9:b3:03:9e:a9:d5:29:a7:f4:d8:24: 17:45:f0:ff:17:77:33:7c:94:da:32:2e:4a:9e:50:32:ae:6e: 27:96:b8:dd:e8:1a:ea:cc:87:7f:d9:00:c5:26:82:55:58:b0: ff:a6:69:b8:72:81:db:f6:1a:f5:ae:ff:06:b4:d9:92:68:98: bd:57:85:75:83:65:5e:0c:83:fa:1c:8c:4d:07:9f:00:e2:e5: 96:80:45:24:4d:75:d3:74:2c:1c:8f:5e:81:55:9a:57:88:c8: 5b:dd:7e:09:1f:0e:57:7e:01:ec:e1:17:3d:9f:50:5a:49:19: 0e:79:d1:e5:22:06:e1:4c:e2:77:a8:59:5b:bf:0a:68:78:9a: 88:d3:d8:fa:12:5b:f4:0d:b5:08:ea:e8:0a:5a:24:9b:a5:3c: 02:7e:4f:ed:91:ed:2e:d4:dd:51:d4:09:ae:a1:fd:3d:d0:55: e1:16:4c:67:24:52:b7:58:aa:b1:8f:d1:3c:04:78:d8:5a:f8: 0c:83:53:74:8d:46:e2:74:06:59:36:41:67:b8:40:e9:d9:fb: 28:0e:ea:ff:78:a2:d5:65:1c:e1:81:ab:1d:14:e8:0d:5a:ac: 13:b4:5f:b5 -----BEGIN CERTIFICATE----- MIIHhzCCBm+gAwIBAgIUAQ0Mn0MoWEU+OyE90C+WBiA4RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDMxODAwNDUxOVoXDTI2MDYyMTAwNDUxOVowLzEtMCsGA1UEAxMk OTMwOTQ5OGUtOGJlZS00ZGIzLWI0ZWYtNWZkNmYzNTc2ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoYSkOriI1pplcdxYk+GlwUCNEyICPWYlQrT zxoFHwBQ6aIL0HGFqDg1FE6TfeCvvHgy6/c7ZaaDb6XfqfoRr8HpUW4lzxWRY26Y X233oZlNLo3Qoa+UN6RLRkq8MSSI193kVQKvaG66H7x9aXwZIjp/UaLS3Dl6Rl4f U8wDAPM5hEBsahkYlYvTapLtu6LAQGOyvdtHtZND7CuEA6HyS+DwELRXfnQdV5dH VJFq1BUvH6DHNSCqZqEdH4zbvSA0dtoltKDJnTHsVuVtoXtbTlMvt9/0X/nyiefY stOqtCqh0kWfCYQH8eVl+y5tEStcf7ke35Bk+WlRdt14bQLdhwIDAQABo4IEmTCC BJUwHQYDVR0OBBYEFBehLC/T4+o755/9OGXv+TWl2GGpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85 MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1NzZlYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzkzMDk0OThlLThiZWUtNGRiMy1i NGVmLTVmZDZmMzU3NmViMy85MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1 NzZlYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwgYwGCCsGAQUF BwEHAQH/BH0wezBqBAIAATBkAwQEQSYgAwQAwDDqAwQCxqIQAwQAxzwTAwQBxzzm MAwDBATMrlADBALMrmAwDAMEA8zvKAMEAMzvKgMEBc/IgAMEAtBXNAMEBdBjgAME BdhWYAMEBNhjIAMEBdhxwAMEBNjSYDANBAIAAjAHAwUAJgUQADAqBggrBgEFBQcB CAEB/wQbMBmgFzAVAgI2cQICOkYCAkzOAgJklQIDAJ6jMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIX2BTVy 1QEUCoSi3ZrpbGqdFMd0+fDUHDXpswOeqdUpp/TYJBdF8P8XdzN8lNoyLkqeUDKu bieWuN3oGurMh3/ZAMUmglVYsP+mabhygdv2GvWu/wa02ZJomL1XhXWDZV4Mg/oc jE0HnwDi5ZaARSRNddN0LByPXoFVmleIyFvdfgkfDld+AezhFz2fUFpJGQ550eUi BuFM4neoWVu/Cmh4mojT2PoSW/QNtQjq6ApaJJulPAJ+T+2R7S7U3VHUCa6h/T3Q VeEWTGckUrdYqrGP0TwEeNha+AyDU3SNRuJ0Blk2QWe4QOnZ+ygO6v94otVlHOGB qx0U6A1arBO0X7U= -----END CERTIFICATE-----Generated at Fri Apr 26 11:03:28 2024 by rpki-client on console-ams.rpki-client.org