$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer File: 20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer (raw, json) Hash identifier: 94BFWPQtLbhYNVQhlxlH8iQLBp2p9kSyDyxwfj+CKKw= Subject key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584478224FEC78EB424C93DF0B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jan 2024 01:45:16 +0000 Certificate not after: Sat 11 Apr 2026 00:45:16 +0000 Subordinate resources: AS: 14004 AS: 33387 IP: 63.141.224.0/19 IP: 74.91.16.0/20 IP: 107.150.32.0/19 IP: 142.54.160.0/19 IP: 192.151.144.0/20 IP: 192.187.96.0/19 IP: 198.204.224.0/19 IP: 199.168.96.0/21 IP: 2604:4300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:78:22:4f:ec:78:eb:42:4c:93:df:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 7 01:45:16 2024 GMT Not After : Apr 11 00:45:16 2026 GMT Subject: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:3c:42:46:4a:f8:8a:fe:39:12:c8:18:3b: 6e:b0:8c:e6:12:46:7b:37:6b:c4:a4:86:35:7c:66: b7:f5:9b:a1:4c:df:b7:f0:39:62:01:8d:e0:fe:b7: e8:39:5a:c0:fd:23:2d:bf:7d:0e:8a:bc:87:05:9d: ff:63:32:35:c7:2f:69:77:0a:ed:be:42:2d:05:68: 8f:9c:cc:e2:a4:59:a6:13:3a:00:86:ab:37:ea:46: 59:dd:88:92:db:d1:ec:37:7e:e4:de:c1:91:4f:8d: ec:33:e6:7e:5b:82:60:b2:70:a1:2c:41:54:30:89: 92:26:ce:6e:c0:18:c6:50:24:c9:ba:4f:b3:e6:17: 65:0a:c6:0a:ca:2b:06:a4:db:2a:92:60:4f:8d:af: 3c:a2:a9:d6:31:38:ac:ec:c8:71:fe:ee:9a:53:d1: 60:fa:4d:59:98:7c:a8:8d:8d:d1:96:55:33:3a:eb: 2e:89:1f:58:28:b3:a7:25:06:09:11:5a:8b:a1:1e: c4:81:8f:45:b3:dc:49:3f:61:39:d6:a1:da:5c:74: 4e:f8:93:0a:0d:dc:f9:c5:65:e5:87:75:26:a4:27: 67:0a:13:d2:c5:39:65:12:e0:a0:c7:8d:fe:31:3d: bb:4b:f6:5d:40:b0:2b:86:28:75:f7:11:6c:39:d0: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 63.141.224.0/19 74.91.16.0/20 107.150.32.0/19 142.54.160.0/19 192.151.144.0/20 192.187.96.0/19 198.204.224.0/19 199.168.96.0/21 IPv6: 2604:4300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14004 33387 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b2:c8:eb:10:3c:3b:6f:7c:6c:34:f0:84:29:5b:da:94:a8: 1d:7b:80:85:3e:be:46:12:27:ec:3c:17:b3:75:3c:55:cb:c7: 3f:e7:99:5b:59:7e:f7:af:4f:04:8d:da:e6:ae:1f:b9:b0:53: 7d:20:e3:3d:42:49:f1:8a:69:37:46:9f:07:8e:ca:cc:a9:00: 80:fa:9f:cb:bd:68:f3:0c:be:a1:71:08:18:20:0f:69:94:ba: 58:7f:a3:f3:b1:c2:d6:0d:4f:3c:cc:cc:f5:54:93:cb:f7:7a: f3:f1:43:2c:32:64:1c:14:35:d3:4f:e9:a9:ca:d5:4c:0d:60: 0a:43:4f:f6:81:ab:12:dd:a4:a5:de:f3:c8:81:da:0f:44:9a: 41:5e:18:9a:08:71:cd:b6:5a:f7:e8:30:2c:d5:9f:64:07:1e: 49:18:07:55:e9:86:49:be:db:ab:69:7e:9b:a5:aa:48:d0:41: 33:10:20:d3:24:05:33:30:e8:bb:d2:f1:54:db:bf:37:dd:31: 87:2a:8a:18:ea:f2:5d:30:9a:55:8c:99:a2:dc:79:34:68:15: e7:e8:dc:dc:23:e3:63:84:71:31:e7:6a:5b:f5:73:a8:a7:35: d6:71:a2:ff:14:c8:37:c4:c3:f8:c6:ed:9c:a9:36:82:f2:16: 60:c3:c8:d9 -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWER4Ik/seOtCTJPfC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDEwNzAxNDUxNloXDTI2MDQxMTAwNDUxNlowLzEtMCsGA1UEAxMk MjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhjYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+c8QkZK+Ir+ORLIGDtusIzmEkZ7N2vEpIY1 fGa39ZuhTN+38DliAY3g/rfoOVrA/SMtv30OiryHBZ3/YzI1xy9pdwrtvkItBWiP nMzipFmmEzoAhqs36kZZ3YiS29HsN37k3sGRT43sM+Z+W4JgsnChLEFUMImSJs5u wBjGUCTJuk+z5hdlCsYKyisGpNsqkmBPja88oqnWMTis7Mhx/u6aU9Fg+k1ZmHyo jY3RllUzOusuiR9YKLOnJQYJEVqLoR7EgY9Fs9xJP2E51qHaXHRO+JMKDdz5xWXl h3UmpCdnChPSxTllEuCgx43+MT27S/ZdQLArhih19xFsOdBZ6wIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFFSbIRdyuS3sPV1igQpsz/enYkNNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y MGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIwYzRhZjc5LWNkY2YtNDY0MC1h YjRlLWYwZjMzNjQ4Y2M1NS8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0 OGNjNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAU/jeADBARKWxADBAVrliADBAWONqADBATAl5AD BAXAu2ADBAXGzOADBAPHqGAwDQQCAAIwBwMFACYEQwAwHgYIKwYBBQUHAQgBAf8E DzANoAswCQICNrQCAwCCazBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5ssjrEDw7b3xsNPCEKVvalKgde4CF Pr5GEifsPBezdTxVy8c/55lbWX73r08Ejdrmrh+5sFN9IOM9Qknximk3Rp8HjsrM qQCA+p/LvWjzDL6hcQgYIA9plLpYf6PzscLWDU88zMz1VJPL93rz8UMsMmQcFDXT T+mpytVMDWAKQ0/2gasS3aSl3vPIgdoPRJpBXhiaCHHNtlr36DAs1Z9kBx5JGAdV 6YZJvturaX6bpapI0EEzECDTJAUzMOi70vFU27833TGHKooY6vJdMJpVjJmi3Hk0 aBXn6NzcI+NjhHEx52pb9XOopzXWcaL/FMg3xMP4xu2cqTaC8hZgw8jZ -----END CERTIFICATE-----Generated at Sat Apr 20 01:49:09 2024 by rpki-client on console-fra.rpki-client.org