$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer File: 0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer (raw, json) Hash identifier: NEG0PiLmYE3M4z+YtBWEid/zSCKxoGtYuEvrzZDXbTo= Subject key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285847441A847A014C7CCE33988F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Sep 2024 12:48:21 +0000 Certificate not after: Fri 18 Sep 2026 00:45:22 +0000 Subordinate resources: AS: 64280 IP: 66.159.192.0/19 IP: 66.179.104.0/24 IP: 66.179.148.0/23 IP: 66.232.32.0/20 IP: 74.221.128.0/20 IP: 128.77.0.0/17 IP: 130.41.0.0/16 IP: 134.231.128.0/17 IP: 134.238.0.0/16 IP: 136.227.140.0/22 IP: 137.83.192.0/18 IP: 139.180.240.0/20 IP: 140.209.192.0/18 IP: 147.185.132.0 -- 147.185.139.255 IP: 162.247.12.0/22 IP: 165.1.128.0/17 IP: 165.85.0.0/16 IP: 167.94.198.0/24 IP: 168.149.240.0/21 IP: 169.224.128.0/18 IP: 198.135.184.0/24 IP: 198.235.24.0/24 IP: 202.181.128.0/21 IP: 204.87.186.0/24 IP: 205.210.31.0/24 IP: 208.127.0.0/16 IP: 216.25.88.0/21 IP: 2604:a940::/32 IP: 2606:f4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:44:1a:84:7a:01:4c:7c:ce:33:98:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 19 12:48:21 2024 GMT Not After : Sep 18 00:45:22 2026 GMT Subject: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4d:01:f7:90:79:bd:c4:1d:d1:7c:c8:00:e5: 94:2f:6b:d9:aa:c9:3c:ad:91:2e:26:46:51:6a:ae: bc:d1:5b:4b:53:63:dc:93:07:19:8d:14:55:f7:1b: b9:f4:2e:14:e5:e0:be:16:cc:35:2c:08:5c:3a:81: 82:53:6d:ca:df:0d:3a:d5:bc:1a:24:fb:56:1c:92: b5:0e:c6:fb:fe:32:e7:a0:6f:e8:53:31:ea:4d:1a: 23:06:3f:38:56:8f:16:60:a0:94:94:7a:5f:12:fe: b4:fd:bd:4d:86:28:47:58:73:b4:40:21:0a:c8:da: b3:fd:f6:f5:b5:2a:5a:64:e7:4e:80:04:0e:64:23: 6e:ed:b4:77:f4:90:7d:87:7a:a6:93:12:22:26:54: 3c:f4:a5:d0:44:7b:ef:a9:74:95:fd:89:9b:9a:8b: 10:57:7a:99:cc:80:2a:52:66:cd:33:a8:a4:1d:1d: a9:8d:f1:15:b7:87:43:24:e1:4b:d6:76:b1:8d:fb: e3:2a:b7:fe:a7:e3:c2:96:6d:78:f6:8b:5f:09:2c: fd:cd:e6:e0:9c:96:33:60:be:8a:38:11:d3:52:0e: 56:e4:1f:51:a8:80:ca:97:58:08:49:01:3b:23:01: 18:12:a9:78:12:f5:55:07:e0:ed:bb:3e:3a:a5:89: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.159.192.0/19 66.179.104.0/24 66.179.148.0/23 66.232.32.0/20 74.221.128.0/20 128.77.0.0/17 130.41.0.0/16 134.231.128.0/17 134.238.0.0/16 136.227.140.0/22 137.83.192.0/18 139.180.240.0/20 140.209.192.0/18 147.185.132.0-147.185.139.255 162.247.12.0/22 165.1.128.0/17 165.85.0.0/16 167.94.198.0/24 168.149.240.0/21 169.224.128.0/18 198.135.184.0/24 198.235.24.0/24 202.181.128.0/21 204.87.186.0/24 205.210.31.0/24 208.127.0.0/16 216.25.88.0/21 IPv6: 2604:a940::/32 2606:f4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64280 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:4a:6d:b4:90:d5:7b:4f:f2:1b:87:7c:f0:6f:a0:80:e1:71: e7:60:0b:28:a4:7c:44:ea:cc:a4:05:77:42:ca:62:b1:33:a2: 58:b5:f4:07:50:6b:15:0a:c8:9d:b4:d5:94:78:00:64:ce:f7: ce:e3:b8:dc:73:db:0f:b0:70:34:41:7b:9b:55:fd:e5:37:d3: d4:53:da:06:b7:68:9c:9f:a6:41:56:71:1f:a1:a3:44:59:12: 7e:3e:40:83:71:60:0a:84:60:a9:1a:29:cb:a3:aa:b8:75:ac: 63:91:ff:20:5b:9f:22:f0:13:b2:31:9a:6f:3c:ca:ae:d1:17: 62:9e:37:2a:b0:f0:66:30:af:8a:1e:e2:b8:42:36:02:bf:e3: 8e:e1:50:31:75:8a:f5:fa:95:20:58:04:0a:07:21:ff:11:cc: c8:59:d1:2b:4a:d1:bf:e2:75:4d:92:ec:2f:66:69:b8:4f:56: 1a:c2:f4:5b:6f:fc:d4:e2:f9:c6:94:3a:ba:7e:23:c0:0d:74: cc:e1:09:e0:88:4a:e2:45:a8:3c:0e:dc:2d:cb:bb:68:ae:af: 0c:68:60:a7:bc:10:02:d3:15:00:1a:1a:3e:b4:e4:65:05:3c: 77:cd:2e:91:5b:02:8f:31:c1:26:d2:d7:7c:04:32:95:b9:71: 7f:23:54:d3 -----BEGIN CERTIFICATE----- MIIHxDCCBqygAwIBAgIUAQ0Mn0MoWEdEGoR6AUx8zjOYj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDkxOTEyNDgyMVoXDTI2MDkxODAwNDUyMlowLzEtMCsGA1UEAxMk MDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThkOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA700B95B5vcQd0XzIAOWUL2vZqsk8rZEuJkZR aq680VtLU2PckwcZjRRV9xu59C4U5eC+Fsw1LAhcOoGCU23K3w061bwaJPtWHJK1 Dsb7/jLnoG/oUzHqTRojBj84Vo8WYKCUlHpfEv60/b1NhihHWHO0QCEKyNqz/fb1 tSpaZOdOgAQOZCNu7bR39JB9h3qmkxIiJlQ89KXQRHvvqXSV/YmbmosQV3qZzIAq UmbNM6ikHR2pjfEVt4dDJOFL1naxjfvjKrf+p+PClm149otfCSz9zebgnJYzYL6K OBHTUg5W5B9RqIDKl1gISQE7IwEYEql4EvVVB+Dtuz46pYl6nwIDAQABo4IE1jCC BNIwHQYDVR0OBBYEFPjBunvgXS6GUHW6h9WQMFy3NgrRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w MDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzAwOTBiMGVlLTNkN2UtNDdkNi1i NzNkLTM2NDk0Nzk4ZDllNy8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5 OGQ5ZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgdkGCCsGAQUF BwEHAQH/BIHJMIHGMIGtBAIAATCBpgMEBUKfwAMEAEKzaAMEAUKzlAMEBELoIAME BErdgAMEB4BNAAMDAIIpAwQHhueAAwMAhu4DBAKI44wDBAaJU8ADBASLtPADBAaM 0cAwDAMEApO5hAMEApO5iAMEAqL3DAMEB6UBgAMDAKVVAwQAp17GAwQDqJXwAwQG qeCAAwQAxoe4AwQAxusYAwQDyrWAAwQAzFe6AwQAzdIfAwMA0H8DBAPYGVgwFAQC AAIwDgMFACYEqUADBQAmBvTAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD7GDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCmSm20kNV7T/Ibh3zwb6CA4XHnYAsopHxE6sykBXdCymKxM6JYtfQH UGsVCsidtNWUeABkzvfO47jcc9sPsHA0QXubVf3lN9PUU9oGt2icn6ZBVnEfoaNE WRJ+PkCDcWAKhGCpGinLo6q4daxjkf8gW58i8BOyMZpvPMqu0RdinjcqsPBmMK+K HuK4QjYCv+OO4VAxdYr1+pUgWAQKByH/EczIWdErStG/4nVNkuwvZmm4T1YawvRb b/zU4vnGlDq6fiPADXTM4QngiEriRag8Dtwty7torq8MaGCnvBAC0xUAGho+tORl BTx3zS6RWwKPMcEm0td8BDKVuXF/I1TT -----END CERTIFICATE-----Generated at Thu Nov 21 15:04:10 2024 by rpki-client on console-fra.rpki-client.org