$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer File: 3b72c968-d673-4a7a-bfec-4071a7be5317.cer (raw, json) Hash identifier: j9JBcWz9lFagyXA294QIA/0aC5zpnQmDj62gyqSb8Og= Subject key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842A896FD68B88B7EDE47666540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Jul 2023 00:45:17 +0000 Certificate not after: Mon 27 Oct 2025 00:45:17 +0000 Subordinate resources: AS: 11110 AS: 13477 AS: 27589 IP: 64.59.64.0/18 IP: 66.244.144.0/20 IP: 74.206.160.0/19 IP: 99.192.128.0/17 IP: 104.193.120.0/22 IP: 162.250.76.0/22 IP: 184.94.144.0/20 IP: 199.19.200.0/21 IP: 199.59.88.0/21 IP: 199.182.104.0/21 IP: 199.241.96.0/21 IP: 204.13.52.0/22 IP: 208.74.148.0/22 IP: 208.122.192.0/19 IP: 2604:3500::/32 IP: 2607:f5a8::/32 IP: 2607:ffb8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:a8:96:fd:68:b8:8b:7e:de:47:66:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 25 00:45:17 2023 GMT Not After : Oct 27 00:45:17 2025 GMT Subject: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:0f:d1:92:54:5e:73:9c:44:c8:62:68:8d: 9a:c2:ee:38:5c:95:e7:fc:54:b2:0e:1c:1b:d7:47: cc:bd:05:4c:1d:bc:d6:61:a4:21:25:33:48:57:bb: 06:bc:ed:22:9d:62:90:28:1a:f4:bd:50:32:8b:22: ba:18:6b:85:6b:25:2d:df:3b:1f:85:28:b6:ad:0f: 30:de:88:5f:9f:20:d2:d8:9b:2f:e3:30:b9:31:8e: ac:80:73:78:fa:23:7d:8b:e5:7a:fa:66:6f:02:75: 22:ee:d0:d4:dc:2f:92:69:2e:02:20:f2:d0:a1:eb: c6:e1:c6:c3:fd:03:29:62:f4:f7:b7:5b:9f:c1:d9: 34:be:5c:70:db:b3:0c:bf:12:ed:78:19:dd:c3:8b: 3d:21:39:53:25:e5:fd:aa:78:25:51:6c:40:a9:eb: b5:6a:85:35:e4:f5:8f:4b:e9:8c:27:01:52:7a:e1: c9:8e:11:49:86:ab:2e:66:af:5b:d6:ed:f8:e5:59: d4:ef:83:34:25:dc:a1:1f:49:f7:02:4f:4d:83:cc: 1f:46:da:d4:2a:fa:19:1e:17:8e:a2:ed:b1:a8:f3: 74:d2:42:ed:ac:64:da:fe:f1:11:29:0e:50:fb:d7: 88:38:6d:5a:f1:1b:ec:33:df:50:62:ea:38:9c:50: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.59.64.0/18 66.244.144.0/20 74.206.160.0/19 99.192.128.0/17 104.193.120.0/22 162.250.76.0/22 184.94.144.0/20 199.19.200.0/21 199.59.88.0/21 199.182.104.0/21 199.241.96.0/21 204.13.52.0/22 208.74.148.0/22 208.122.192.0/19 IPv6: 2604:3500::/32 2607:f5a8::/32 2607:ffb8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11110 13477 27589 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7a:ba:1c:d0:93:54:57:a2:16:44:6f:4c:09:b5:85:3b:47: 3a:f4:41:6d:a6:e4:75:d9:9d:8a:c1:c3:8d:14:ab:b7:af:80: 0b:f1:64:97:fc:41:5e:2b:22:a1:f7:55:6c:f2:61:87:00:1b: df:6f:5b:80:a8:e2:97:64:79:e1:56:2d:fb:76:fe:d9:8f:f8: 9f:59:6f:3b:9a:2f:06:b1:9d:4e:e1:b1:8f:b4:7f:aa:44:38: 19:95:e8:6b:a8:49:57:f5:c2:ed:4c:27:db:12:27:06:b0:a4: 12:17:60:bd:ba:02:b0:b1:1c:89:17:e1:7a:e7:f0:ea:9e:31: 1a:54:aa:72:8a:67:19:e2:97:23:89:3a:8e:03:75:50:50:e3: d3:ec:22:6b:42:e6:2d:9d:4c:52:ff:e6:f4:4a:51:ef:0d:be: 99:be:1d:73:fa:01:55:84:f1:3c:13:e7:38:1e:2a:0e:ba:f8: 68:d1:17:4d:3c:31:8f:92:da:1d:58:1c:9d:8b:4a:e7:cc:52: 2f:3f:36:98:26:cc:ba:b4:15:07:07:54:b2:31:9e:ad:bd:d6: 72:e5:0d:39:c0:1f:dc:2c:7c:cf:2a:22:d1:fc:de:32:0d:83: 38:23:e4:ba:09:3b:fc:79:9b:01:7d:20:1c:b2:31:5f:02:03: cc:39:f4:3a -----BEGIN CERTIFICATE----- MIIHfDCCBmSgAwIBAgIUAQ0Mn0MoWEKolv1ouIt+3kdmZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDcyNTAwNDUxN1oXDTI1MTAyNzAwNDUxN1owLzEtMCsGA1UEAxMk M2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1MzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL0P0ZJUXnOcRMhiaI2awu44XJXn/FSyDhwb 10fMvQVMHbzWYaQhJTNIV7sGvO0inWKQKBr0vVAyiyK6GGuFayUt3zsfhSi2rQ8w 3ohfnyDS2Jsv4zC5MY6sgHN4+iN9i+V6+mZvAnUi7tDU3C+SaS4CIPLQoevG4cbD /QMpYvT3t1ufwdk0vlxw27MMvxLteBndw4s9ITlTJeX9qnglUWxAqeu1aoU15PWP S+mMJwFSeuHJjhFJhqsuZq9b1u345VnU74M0JdyhH0n3Ak9Ng8wfRtrUKvoZHheO ou2xqPN00kLtrGTa/vERKQ5Q+9eIOG1a8RvsM99QYuo4nFAwNQIDAQABo4IEjjCC BIowHQYDVR0OBBYEFNTQbOGP+XMdUyIjbTY/OPaBA7VvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z YjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNiNzJjOTY4LWQ2NzMtNGE3YS1i ZmVjLTQwNzFhN2JlNTMxNy8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdi ZTUzMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgYoGCCsGAQUF BwEHAQH/BHsweTBaBAIAATBUAwQGQDtAAwQEQvSQAwQFSs6gAwQHY8CAAwQCaMF4 AwQCovpMAwQEuF6QAwQDxxPIAwQDxztYAwQDx7ZoAwQDx/FgAwQCzA00AwQC0EqU AwQF0HrAMBsEAgACMBUDBQAmBDUAAwUAJgf1qAMFACYH/7gwIQYIKwYBBQUHAQgB Af8EEjAQoA4wDAICK2YCAjSlAgJrxTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPeroc0JNUV6IWRG9MCbWF O0c69EFtpuR12Z2KwcONFKu3r4AL8WSX/EFeKyKh91Vs8mGHABvfb1uAqOKXZHnh Vi37dv7Zj/ifWW87mi8GsZ1O4bGPtH+qRDgZlehrqElX9cLtTCfbEicGsKQSF2C9 ugKwsRyJF+F65/DqnjEaVKpyimcZ4pcjiTqOA3VQUOPT7CJrQuYtnUxS/+b0SlHv Db6Zvh1z+gFVhPE8E+c4HioOuvho0RdNPDGPktodWBydi0rnzFIvPzaYJsy6tBUH B1SyMZ6tvdZy5Q05wB/cLHzPKiLR/N4yDYM4I+S6CTv8eZsBfSAcsjFfAgPMOfQ6 -----END CERTIFICATE-----Generated at Sat Apr 20 02:40:17 2024 by rpki-client on console-ams.rpki-client.org