$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer File: 5e580e37-3db1-41d1-ae09-7e84348caffd.cer (raw, json) Hash identifier: 4RXmfGS5489NFVzh846ZlDZoHX527ln93NhxJHVVXQw= Subject key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858467BAAA9F0A193C1E4986574A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Jul 2024 17:41:18 +0000 Certificate not after: Mon 12 Oct 2026 17:41:18 +0000 Subordinate resources: IP: 192.207.133.0 -- 192.207.137.255 IP: 198.59.3.0 -- 198.59.6.255 IP: 198.59.61.0/24 IP: 204.228.65.0 -- 204.228.67.255 IP: 204.228.72.0/21 IP: 204.228.82.0 -- 204.228.88.255 IP: 204.228.171.0 -- 204.228.174.255 IP: 204.229.32.0 -- 204.229.95.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Oct 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:7b:aa:a9:f0:a1:93:c1:e4:98:65:74:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 9 17:41:18 2024 GMT Not After : Oct 12 17:41:18 2026 GMT Subject: CN=5e580e37-3db1-41d1-ae09-7e84348caffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:68:59:7c:82:0a:7f:bb:fc:de:b5:76:17: 16:14:b9:e3:bd:0b:91:20:ae:5d:4d:ae:1a:54:e7: 30:39:ce:65:c8:17:99:ee:d7:f7:47:2f:fb:6b:43: 56:05:f1:e5:0d:bb:03:a3:5e:2c:6b:16:c5:b4:ed: 7a:b6:8c:f4:e1:b3:7d:c9:14:93:68:b9:94:88:c8: 06:a0:42:d1:e3:c4:bd:51:80:b4:82:2c:a5:d4:cf: e7:6b:9a:17:64:2a:48:49:66:88:37:a3:dd:1e:91: 20:c3:7f:92:fd:b1:b6:e4:1e:22:fe:86:ec:f7:7d: 15:36:06:84:9b:48:10:1e:d7:81:e4:37:63:1d:0d: 80:15:6b:03:40:54:f7:d5:32:16:ae:da:ea:ac:42: c5:69:05:f3:57:4e:fe:72:20:53:01:01:55:52:84: 13:23:f3:4b:3f:ce:49:76:8c:29:74:7f:9d:15:90: 71:8a:10:2e:0a:38:32:8a:12:e2:fb:35:76:9d:72: bc:ad:b9:a3:90:46:b4:b5:53:c7:37:03:c7:30:97: 03:86:ed:85:f1:f8:86:76:53:35:45:07:6e:e0:d3: 0d:6f:37:c3:ca:d9:ba:a8:f4:f1:3e:1a:eb:cc:95: c8:fe:47:e5:68:4d:56:73:0b:58:61:d7:fb:4c:85: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.207.133.0-192.207.137.255 198.59.3.0-198.59.6.255 198.59.61.0/24 204.228.65.0-204.228.67.255 204.228.72.0/21 204.228.82.0-204.228.88.255 204.228.171.0-204.228.174.255 204.229.32.0-204.229.95.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:3f:c4:0c:ca:7f:1c:9b:dc:f9:16:f6:d3:9e:3b:db:68:06: 8c:b2:ff:d1:6f:42:64:46:e7:f6:04:fe:c3:be:50:b6:d5:d0: 3c:58:ae:78:ae:01:58:ac:64:03:9c:21:69:f1:ca:c5:6e:f4: 71:c1:93:e1:54:e6:1d:e8:76:c1:8e:9a:9a:8f:81:94:71:d7: ee:dd:af:80:27:4a:23:a1:eb:87:bb:b3:3c:47:6a:1e:4c:d8: 1a:e3:36:7a:7e:7e:ad:96:15:d3:d4:87:21:66:2f:98:7b:72: a5:76:af:de:6a:6f:7b:72:39:10:05:b2:dc:da:18:fc:95:dc: 0e:46:62:31:06:54:28:85:bf:b2:d7:b5:16:aa:1b:bb:ae:44: 3e:9d:f1:65:95:26:39:b1:f1:4f:fc:08:fd:e0:49:c0:ad:9a: 4a:ec:4a:6f:3d:ad:10:e1:4c:26:60:9a:0a:10:9d:f9:29:05: f5:c4:67:2f:af:e7:1e:15:f2:dc:9e:d2:b4:6c:0c:73:8d:83: 40:59:e1:93:8f:20:29:37:03:e8:59:de:2a:94:97:85:40:f0: f4:de:9c:40:a0:67:89:55:33:79:ae:21:46:9e:a4:a3:1e:3c: 8e:da:ef:2e:2e:81:ff:36:d2:95:0f:33:48:7b:bd:c5:71:e5: 7c:1a:80:62 -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEZ7qqnwoZPB5JhldKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDcwOTE3NDExOFoXDTI2MTAxMjE3NDExOFowLzEtMCsGA1UEAxMk NWU1ODBlMzctM2RiMS00MWQxLWFlMDktN2U4NDM0OGNhZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulFoWXyCCn+7/N61dhcWFLnjvQuRIK5dTa4a VOcwOc5lyBeZ7tf3Ry/7a0NWBfHlDbsDo14saxbFtO16toz04bN9yRSTaLmUiMgG oELR48S9UYC0giyl1M/na5oXZCpISWaIN6PdHpEgw3+S/bG25B4i/obs930VNgaE m0gQHteB5DdjHQ2AFWsDQFT31TIWrtrqrELFaQXzV07+ciBTAQFVUoQTI/NLP85J dowpdH+dFZBxihAuCjgyihLi+zV2nXK8rbmjkEa0tVPHNwPHMJcDhu2F8fiGdlM1 RQdu4NMNbzfDytm6qPTxPhrrzJXI/kflaE1WcwtYYdf7TIUvqwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFP2+x0fTzRst5/dkYJ8DQZRqS5hPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 ZTU4MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0MzQ4Y2FmZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzVlNTgwZTM3LTNkYjEtNDFkMS1h ZTA5LTdlODQzNDhjYWZmZC81ZTU4MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0MzQ4 Y2FmZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIweQYIKwYBBQUH AQcBAf8EajBoMGYEAgABMGAwDAMEAMDPhQMEAcDPiDAMAwQAxjsDAwQAxjsGAwQA xjs9MAwDBADM5EEDBALM5EADBAPM5EgwDAMEAczkUgMEAMzkWDAMAwQAzOSrAwQA zOSuMAwDBAXM5SADBAXM5UAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPj/EDMp/HJvc+Rb2054722gGjLL/ 0W9CZEbn9gT+w75QttXQPFiueK4BWKxkA5whafHKxW70ccGT4VTmHeh2wY6amo+B lHHX7t2vgCdKI6Hrh7uzPEdqHkzYGuM2en5+rZYV09SHIWYvmHtypXav3mpve3I5 EAWy3NoY/JXcDkZiMQZUKIW/ste1Fqobu65EPp3xZZUmObHxT/wI/eBJwK2aSuxK bz2tEOFMJmCaChCd+SkF9cRnL6/nHhXy3J7StGwMc42DQFnhk48gKTcD6FneKpSX hUDw9N6cQKBniVUzea4hRp6kox48jtrvLi6B/zbSlQ8zSHu9xXHlfBqAYg== -----END CERTIFICATE-----Generated at Fri Oct 18 02:02:38 2024 by rpki-client on console-fra.rpki-client.org