$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer File: 1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer (raw, json) Hash identifier: 5omO5g3mpH80vGhml1RQxVRbNt/w31qOxueFAcAOoos= Subject key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858440B41A0068390962216D684C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Nov 2023 01:45:15 +0000 Certificate not after: Tue 03 Mar 2026 01:45:15 +0000 Subordinate resources: AS: 4465 -- 4468 AS: 5727 -- 5731 AS: 6269 AS: 6478 AS: 7018 IP: 12.0.0.0/8 IP: 165.238.0.0/16 IP: 199.37.0.0/16 IP: 199.69.0.0 -- 199.70.255.255 IP: 204.127.0.0/16 IP: 207.116.0.0/16 IP: 207.140.0.0/15 IP: 207.146.0.0/15 IP: 207.242.0.0/15 IP: 209.36.0.0/15 IP: 209.64.0.0/15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:0b:41:a0:06:83:90:96:22:16:d6:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 29 01:45:15 2023 GMT Not After : Mar 3 01:45:15 2026 GMT Subject: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8f:a4:f2:25:11:58:51:83:db:d9:0b:2b:84: 13:81:d8:b5:a0:12:ac:78:51:b6:c7:26:90:b6:3f: 05:60:67:8a:70:97:f6:5b:bd:19:44:35:d1:84:83: 1b:42:e5:55:63:22:a4:ef:64:a1:0c:1f:df:61:f3: d9:65:75:7c:9a:1a:6d:92:63:ee:ae:56:b9:c2:53: 64:0a:7c:bd:b1:7f:b2:42:3d:ab:16:2b:cf:a3:ca: 22:ae:7e:49:5d:c4:b9:98:d4:26:23:e9:7d:72:62: f5:cb:8b:90:43:00:8c:73:b0:66:f0:25:e3:b1:e7: f5:a4:bb:b4:55:ad:fd:c3:09:e6:99:9b:1a:23:33: d3:ea:55:e3:7f:26:b1:ad:e7:48:a3:10:da:d5:5d: 69:6b:13:4f:af:99:9b:2d:ad:5f:5b:2b:7a:49:ef: a5:fb:fe:9e:ba:6a:50:0b:c1:68:e4:11:6c:6b:03: 71:8a:8e:d0:ca:19:5b:4a:ef:55:2e:bf:c1:74:9f: 5c:37:12:94:7d:5e:53:5c:20:7e:75:28:08:98:19: 29:dc:49:aa:a9:cf:12:b1:e5:85:2f:56:40:22:77: 50:b1:b2:bd:04:9c:82:8f:72:82:be:31:08:26:9d: 43:4c:f1:d1:80:3e:df:72:04:13:47:55:94:a7:f0: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 12.0.0.0/8 165.238.0.0/16 199.37.0.0/16 199.69.0.0-199.70.255.255 204.127.0.0/16 207.116.0.0/16 207.140.0.0/15 207.146.0.0/15 207.242.0.0/15 209.36.0.0/15 209.64.0.0/15 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4465-4468 5727-5731 6269 6478 7018 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:39:21:66:64:0a:59:cf:e2:e3:fb:66:17:22:d8:0e:3d:7e: d0:6d:f3:d1:5d:f4:d4:e8:f7:af:1a:1a:79:f5:1b:93:ff:0f: af:04:e2:9f:90:a3:82:39:ea:8b:0d:ea:a2:1f:83:9c:bc:8c: 8f:ee:88:4b:32:d2:c2:b9:69:dc:ca:a7:1f:16:bd:a8:08:46: a4:d0:9c:67:16:62:11:26:92:af:67:0b:44:bd:f9:15:ba:c3: d8:b7:35:b8:16:26:dd:c7:1b:c4:05:6a:b1:28:46:1f:c9:7f: c9:45:33:47:08:15:b8:9a:c6:f1:19:c4:f6:43:94:8f:34:aa: b1:65:e8:cf:d8:b0:c4:7f:fe:78:1d:7b:93:a8:8e:45:18:3d: 11:44:d0:eb:2d:7d:0f:be:9e:c2:ce:82:54:af:25:aa:02:73: 20:a6:16:b5:d8:dc:1c:6f:dd:32:1d:da:55:a1:31:bf:42:a9: 77:27:10:a2:f5:ad:ec:15:6e:21:67:b5:ee:aa:cc:ca:aa:2e: 62:cc:21:03:7c:85:1a:55:c7:69:bf:39:9d:90:e4:d7:86:31: 07:e3:d5:87:85:60:86:a5:0f:df:09:1a:db:03:6e:a6:ff:07: ac:c9:ea:5c:be:96:b3:84:31:f0:77:36:a1:29:80:2a:3e:79: 7b:36:2f:be -----BEGIN CERTIFICATE----- MIIHWzCCBkOgAwIBAgIUAQ0Mn0MoWEQLQaAGg5CWIhbWhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMTEyOTAxNDUxNVoXDTI2MDMwMzAxNDUxNVowLzEtMCsGA1UEAxMk MWJkYWFiNWQtOGNjNC00YWQ4LWE3YzQtYTM2YzY0ODhkMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y+k8iURWFGD29kLK4QTgdi1oBKseFG2xyaQ tj8FYGeKcJf2W70ZRDXRhIMbQuVVYyKk72ShDB/fYfPZZXV8mhptkmPurla5wlNk Cny9sX+yQj2rFivPo8oirn5JXcS5mNQmI+l9cmL1y4uQQwCMc7Bm8CXjsef1pLu0 Va39wwnmmZsaIzPT6lXjfyaxredIoxDa1V1paxNPr5mbLa1fWyt6Se+l+/6eumpQ C8Fo5BFsawNxio7QyhlbSu9VLr/BdJ9cNxKUfV5TXCB+dSgImBkp3Emqqc8SseWF L1ZAIndQsbK9BJyCj3KCvjEIJp1DTPHRgD7fcgQTR1WUp/B2PQIDAQABo4IEbTCC BGkwHQYDVR0OBBYEFP5lMS0SH6O6goH1x7Cszx3L8Ae3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x YmRhYWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZjNjQ4OGQxNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiZGFhYjVkLThjYzQtNGFkOC1h N2M0LWEzNmM2NDg4ZDE2Mi8xYmRhYWI1ZC04Y2M0LTRhZDgtYTdjNC1hMzZjNjQ4 OGQxNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwVgYIKwYBBQUH AQcBAf8ERzBFMEMEAgABMD0DAgAMAwMApe4DAwDHJTAKAwMAx0UDAwDHRgMDAMx/ AwMAz3QDAwHPjAMDAc+SAwMBz/IDAwHRJAMDAdFAMDUGCCsGAQUFBwEIAQH/BCYw JKAiMCAwCAICEXECAhF0MAgCAhZfAgIWYwICGH0CAhlOAgIbajBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAL OSFmZApZz+Lj+2YXItgOPX7QbfPRXfTU6PevGhp59RuT/w+vBOKfkKOCOeqLDeqi H4OcvIyP7ohLMtLCuWncyqcfFr2oCEak0JxnFmIRJpKvZwtEvfkVusPYtzW4Fibd xxvEBWqxKEYfyX/JRTNHCBW4msbxGcT2Q5SPNKqxZejP2LDEf/54HXuTqI5FGD0R RNDrLX0Pvp7CzoJUryWqAnMgpha12Nwcb90yHdpVoTG/Qql3JxCi9a3sFW4hZ7Xu qszKqi5izCEDfIUaVcdpvzmdkOTXhjEH49WHhWCGpQ/fCRrbA26m/wesyepcvpaz hDHwdzahKYAqPnl7Ni++ -----END CERTIFICATE-----Generated at Fri Apr 19 01:17:31 2024 by rpki-client on console-fra.rpki-client.org