$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer File: 3b72c968-d673-4a7a-bfec-4071a7be5317.cer (raw, json) Hash identifier: q5IuTYoH+EezEnEInDiyH8GGX6MnRwsHFUWqxYDcJdE= Subject key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285847ACC9BB15326A43FF58A8C480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 27 Oct 2024 00:45:26 +0000 Certificate not after: Sat 30 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 13477 AS: 27589 IP: 64.59.64.0/18 IP: 66.244.144.0/20 IP: 74.206.160.0/19 IP: 99.192.128.0/17 IP: 104.193.120.0/22 IP: 162.250.76.0/22 IP: 184.94.144.0/20 IP: 199.19.200.0/21 IP: 199.59.88.0/21 IP: 199.182.104.0/21 IP: 199.241.96.0/21 IP: 208.74.148.0/22 IP: 208.122.192.0/19 IP: 2607:f5a8::/32 IP: 2607:ffb8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ac:c9:bb:15:32:6a:43:ff:58:a8:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 27 00:45:26 2024 GMT Not After : Jan 30 01:45:26 2027 GMT Subject: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:0f:d1:92:54:5e:73:9c:44:c8:62:68:8d: 9a:c2:ee:38:5c:95:e7:fc:54:b2:0e:1c:1b:d7:47: cc:bd:05:4c:1d:bc:d6:61:a4:21:25:33:48:57:bb: 06:bc:ed:22:9d:62:90:28:1a:f4:bd:50:32:8b:22: ba:18:6b:85:6b:25:2d:df:3b:1f:85:28:b6:ad:0f: 30:de:88:5f:9f:20:d2:d8:9b:2f:e3:30:b9:31:8e: ac:80:73:78:fa:23:7d:8b:e5:7a:fa:66:6f:02:75: 22:ee:d0:d4:dc:2f:92:69:2e:02:20:f2:d0:a1:eb: c6:e1:c6:c3:fd:03:29:62:f4:f7:b7:5b:9f:c1:d9: 34:be:5c:70:db:b3:0c:bf:12:ed:78:19:dd:c3:8b: 3d:21:39:53:25:e5:fd:aa:78:25:51:6c:40:a9:eb: b5:6a:85:35:e4:f5:8f:4b:e9:8c:27:01:52:7a:e1: c9:8e:11:49:86:ab:2e:66:af:5b:d6:ed:f8:e5:59: d4:ef:83:34:25:dc:a1:1f:49:f7:02:4f:4d:83:cc: 1f:46:da:d4:2a:fa:19:1e:17:8e:a2:ed:b1:a8:f3: 74:d2:42:ed:ac:64:da:fe:f1:11:29:0e:50:fb:d7: 88:38:6d:5a:f1:1b:ec:33:df:50:62:ea:38:9c:50: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.59.64.0/18 66.244.144.0/20 74.206.160.0/19 99.192.128.0/17 104.193.120.0/22 162.250.76.0/22 184.94.144.0/20 199.19.200.0/21 199.59.88.0/21 199.182.104.0/21 199.241.96.0/21 208.74.148.0/22 208.122.192.0/19 IPv6: 2607:f5a8::/32 2607:ffb8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13477 27589 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:78:7d:a1:20:1d:e7:1d:85:25:88:aa:90:59:19:f8:90:59: 3e:5f:c5:24:bf:f0:ee:13:a7:4f:61:ed:be:04:4b:58:dd:54: 41:81:7b:c1:3d:e4:98:41:ca:51:70:d0:0a:c5:45:a9:a2:4e: ea:e6:7c:fd:4e:7f:59:06:a3:ff:85:9a:9f:f8:94:6e:95:4c: 21:38:a4:23:fe:e9:a4:38:20:72:b7:6a:ec:fc:8f:d2:31:85: 75:a0:8a:c1:b3:2d:34:c8:b4:01:6a:33:6e:7e:a6:6b:40:a7: 2d:e5:f5:cd:01:62:7b:88:c9:7b:d1:bf:45:e2:60:13:08:01: 7a:92:6f:af:7b:21:7a:d9:86:06:bf:19:5f:e3:79:09:e2:e2: 29:f0:f2:cf:00:e0:ab:79:ce:cf:37:fb:da:9c:39:68:6c:a2: 7b:97:66:88:03:ec:b0:02:85:7e:ab:1b:04:1f:3b:52:0b:73: 91:f3:78:9b:86:da:d7:a4:9c:02:9a:64:79:9f:1f:06:0b:5e: 2e:82:7e:22:86:b5:41:e6:fe:75:35:71:58:cb:8c:a0:38:f1: 4e:40:c7:0c:33:b9:3b:44:47:88:29:e5:c9:1a:15:b4:cb:52: f5:0c:fc:ec:f6:c4:68:93:a3:cd:83:4f:46:7c:0e:66:7f:2d: 79:b0:a1:2f -----BEGIN CERTIFICATE----- MIIHajCCBlKgAwIBAgIUAQ0Mn0MoWEesybsVMmpD/1ioxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTAyNzAwNDUyNloXDTI3MDEzMDAxNDUyNlowLzEtMCsGA1UEAxMk M2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1MzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL0P0ZJUXnOcRMhiaI2awu44XJXn/FSyDhwb 10fMvQVMHbzWYaQhJTNIV7sGvO0inWKQKBr0vVAyiyK6GGuFayUt3zsfhSi2rQ8w 3ohfnyDS2Jsv4zC5MY6sgHN4+iN9i+V6+mZvAnUi7tDU3C+SaS4CIPLQoevG4cbD /QMpYvT3t1ufwdk0vlxw27MMvxLteBndw4s9ITlTJeX9qnglUWxAqeu1aoU15PWP S+mMJwFSeuHJjhFJhqsuZq9b1u345VnU74M0JdyhH0n3Ak9Ng8wfRtrUKvoZHheO ou2xqPN00kLtrGTa/vERKQ5Q+9eIOG1a8RvsM99QYuo4nFAwNQIDAQABo4IEfDCC BHgwHQYDVR0OBBYEFNTQbOGP+XMdUyIjbTY/OPaBA7VvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z YjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNiNzJjOTY4LWQ2NzMtNGE3YS1i ZmVjLTQwNzFhN2JlNTMxNy8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdi ZTUzMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwfQYIKwYBBQUH AQcBAf8EbjBsMFQEAgABME4DBAZAO0ADBARC9JADBAVKzqADBAdjwIADBAJowXgD BAKi+kwDBAS4XpADBAPHE8gDBAPHO1gDBAPHtmgDBAPH8WADBALQSpQDBAXQesAw FAQCAAIwDgMFACYH9agDBQAmB/+4MB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAjSl AgJrxTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAieH2hIB3nHYUliKqQWRn4kFk+X8Ukv/DuE6dPYe2+BEtY 3VRBgXvBPeSYQcpRcNAKxUWpok7q5nz9Tn9ZBqP/hZqf+JRulUwhOKQj/umkOCBy t2rs/I/SMYV1oIrBsy00yLQBajNufqZrQKct5fXNAWJ7iMl70b9F4mATCAF6km+v eyF62YYGvxlf43kJ4uIp8PLPAOCrec7PN/vanDlobKJ7l2aIA+ywAoV+qxsEHztS C3OR83ibhtrXpJwCmmR5nx8GC14ugn4ihrVB5v51NXFYy4ygOPFOQMcMM7k7REeI KeXJGhW0y1L1DPzs9sRok6PNg09GfA5mfy15sKEv -----END CERTIFICATE-----Generated at Thu Nov 21 15:06:14 2024 by rpki-client on console-fra.rpki-client.org