$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer File: 0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer (raw, json) Hash identifier: xa3Ri2O/9Q2aXyRWMM5T8yXTqYgZNIZkVyvXdK9Uj9s= Subject key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285843F670C0B8B0CA04C78B9CEDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Nov 2023 14:48:14 +0000 Certificate not after: Sat 14 Jun 2025 19:06:39 +0000 Subordinate resources: AS: 64280 IP: 66.159.192.0/19 IP: 66.232.32.0/20 IP: 74.221.128.0/20 IP: 128.77.0.0/17 IP: 130.41.0.0/16 IP: 134.238.0.0/16 IP: 136.227.140.0/22 IP: 137.83.192.0/18 IP: 139.180.240.0/20 IP: 147.185.132.0 -- 147.185.139.255 IP: 165.1.128.0/17 IP: 165.85.0.0/16 IP: 167.94.198.0/24 IP: 168.149.240.0/21 IP: 198.135.184.0/24 IP: 198.235.24.0/24 IP: 204.87.186.0/24 IP: 205.210.31.0/24 IP: 208.127.0.0/16 IP: 2604:a940::/32 IP: 2606:f4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:f6:70:c0:b8:b0:ca:04:c7:8b:9c:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 21 14:48:14 2023 GMT Not After : Jun 14 19:06:39 2025 GMT Subject: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4d:01:f7:90:79:bd:c4:1d:d1:7c:c8:00:e5: 94:2f:6b:d9:aa:c9:3c:ad:91:2e:26:46:51:6a:ae: bc:d1:5b:4b:53:63:dc:93:07:19:8d:14:55:f7:1b: b9:f4:2e:14:e5:e0:be:16:cc:35:2c:08:5c:3a:81: 82:53:6d:ca:df:0d:3a:d5:bc:1a:24:fb:56:1c:92: b5:0e:c6:fb:fe:32:e7:a0:6f:e8:53:31:ea:4d:1a: 23:06:3f:38:56:8f:16:60:a0:94:94:7a:5f:12:fe: b4:fd:bd:4d:86:28:47:58:73:b4:40:21:0a:c8:da: b3:fd:f6:f5:b5:2a:5a:64:e7:4e:80:04:0e:64:23: 6e:ed:b4:77:f4:90:7d:87:7a:a6:93:12:22:26:54: 3c:f4:a5:d0:44:7b:ef:a9:74:95:fd:89:9b:9a:8b: 10:57:7a:99:cc:80:2a:52:66:cd:33:a8:a4:1d:1d: a9:8d:f1:15:b7:87:43:24:e1:4b:d6:76:b1:8d:fb: e3:2a:b7:fe:a7:e3:c2:96:6d:78:f6:8b:5f:09:2c: fd:cd:e6:e0:9c:96:33:60:be:8a:38:11:d3:52:0e: 56:e4:1f:51:a8:80:ca:97:58:08:49:01:3b:23:01: 18:12:a9:78:12:f5:55:07:e0:ed:bb:3e:3a:a5:89: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.159.192.0/19 66.232.32.0/20 74.221.128.0/20 128.77.0.0/17 130.41.0.0/16 134.238.0.0/16 136.227.140.0/22 137.83.192.0/18 139.180.240.0/20 147.185.132.0-147.185.139.255 165.1.128.0/17 165.85.0.0/16 167.94.198.0/24 168.149.240.0/21 198.135.184.0/24 198.235.24.0/24 204.87.186.0/24 205.210.31.0/24 208.127.0.0/16 IPv6: 2604:a940::/32 2606:f4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64280 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b0:f1:51:d0:96:82:78:24:54:f7:93:db:45:4e:a2:1e:d4: 4b:6d:05:ff:83:55:85:5e:eb:79:42:bf:a5:90:fc:16:e3:e5: 23:aa:1a:7c:81:74:ee:92:b2:55:35:b4:a7:e3:18:5d:02:97: 17:62:e7:84:e0:77:cc:d2:8d:0e:01:f3:cf:36:71:90:ba:62: 26:92:06:0f:33:28:83:fd:4d:85:42:a9:6b:db:bf:dc:e9:4c: 8f:e2:2e:4f:b2:50:e7:e6:f2:ed:a7:8e:66:8d:b7:06:9b:1b: c9:02:dd:c6:66:f1:8e:a4:84:f3:f6:33:dc:b2:41:c5:c9:e4: 0d:72:ea:2e:61:15:0e:dd:59:9b:5c:3f:6f:f5:d9:08:0c:59: 8a:38:3f:65:90:a0:1d:ff:e9:09:61:f6:73:ff:cc:82:61:cd: 07:b1:b7:2d:a9:34:66:99:d9:90:70:db:76:1a:44:cd:a2:e7: 5d:10:c7:cc:33:10:b3:35:13:f9:cd:31:c1:ea:40:20:44:73: 4a:79:68:d6:43:b6:fa:25:13:ec:92:dd:65:d2:ca:60:d3:53: 4a:ea:87:f1:6c:4e:eb:7f:bf:de:95:96:6c:e3:bc:08:bd:5c: 74:7a:da:6a:8a:86:31:2f:e2:24:89:c8:1a:e4:80:a4:5b:ab: 69:1d:00:16 -----BEGIN CERTIFICATE----- MIIHkjCCBnqgAwIBAgIUAQ0Mn0MoWEP2cMC4sMoEx4uc7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMTEyMTE0NDgxNFoXDTI1MDYxNDE5MDYzOVowLzEtMCsGA1UEAxMk MDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThkOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA700B95B5vcQd0XzIAOWUL2vZqsk8rZEuJkZR aq680VtLU2PckwcZjRRV9xu59C4U5eC+Fsw1LAhcOoGCU23K3w061bwaJPtWHJK1 Dsb7/jLnoG/oUzHqTRojBj84Vo8WYKCUlHpfEv60/b1NhihHWHO0QCEKyNqz/fb1 tSpaZOdOgAQOZCNu7bR39JB9h3qmkxIiJlQ89KXQRHvvqXSV/YmbmosQV3qZzIAq UmbNM6ikHR2pjfEVt4dDJOFL1naxjfvjKrf+p+PClm149otfCSz9zebgnJYzYL6K OBHTUg5W5B9RqIDKl1gISQE7IwEYEql4EvVVB+Dtuz46pYl6nwIDAQABo4IEpDCC BKAwHQYDVR0OBBYEFPjBunvgXS6GUHW6h9WQMFy3NgrRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w MDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzAwOTBiMGVlLTNkN2UtNDdkNi1i NzNkLTM2NDk0Nzk4ZDllNy8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5 OGQ5ZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgacGCCsGAQUF BwEHAQH/BIGXMIGUMHwEAgABMHYDBAVCn8ADBARC6CADBARK3YADBAeATQADAwCC KQMDAIbuAwQCiOOMAwQGiVPAAwQEi7TwMAwDBAKTuYQDBAKTuYgDBAelAYADAwCl VQMEAKdexgMEA6iV8AMEAMaHuAMEAMbrGAMEAMxXugMEAM3SHwMDANB/MBQEAgAC MA4DBQAmBKlAAwUAJgb0wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+xgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYLDxUdCWgngkVPeT20VOoh7US20F/4NVhV7reUK/pZD8FuPlI6oafIF0 7pKyVTW0p+MYXQKXF2LnhOB3zNKNDgHzzzZxkLpiJpIGDzMog/1NhUKpa9u/3OlM j+IuT7JQ5+by7aeOZo23BpsbyQLdxmbxjqSE8/Yz3LJBxcnkDXLqLmEVDt1Zm1w/ b/XZCAxZijg/ZZCgHf/pCWH2c//MgmHNB7G3Lak0ZpnZkHDbdhpEzaLnXRDHzDMQ szUT+c0xwepAIERzSnlo1kO2+iUT7JLdZdLKYNNTSuqH8WxO63+/3pWWbOO8CL1c dHraaoqGMS/iJInIGuSApFuraR0AFg== -----END CERTIFICATE-----Generated at Fri Apr 26 13:37:03 2024 by rpki-client on console-ams.rpki-client.org