$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer File: 603ec9c3-6a7f-4455-baee-5999e253e735.cer (raw, json) Hash identifier: /PcAF2aofJPyH11+IT+9WB4b686h1bR925tfxM3mnGo= Subject key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858452BF3669EFC2E89B19FD32500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Mar 2024 11:36:15 +0000 Certificate not after: Thu 23 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 3676 -- 3677 AS: 397607 IP: 128.255.0.0/16 IP: 129.255.0.0/16 IP: 198.49.182.0/24 IP: 198.62.108.0/24 IP: 198.97.39.0 -- 198.97.40.255 IP: 199.201.205.0/24 IP: 199.201.217.0 -- 199.201.218.255 IP: 2620:0:e50::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2b:f3:66:9e:fc:2e:89:b1:9f:d3:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 11 11:36:15 2024 GMT Not After : Oct 23 00:45:16 2025 GMT Subject: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:8a:6e:ba:46:0a:15:75:f3:7c:cd:fb:0c: 1a:3f:c1:9a:c2:ab:17:87:45:8e:a4:12:38:b6:55: 41:33:50:9f:68:c1:08:ac:33:4c:7f:53:35:44:60: 7a:6e:7f:ae:b4:c2:d7:39:a8:15:2c:62:3c:34:cc: d2:b4:65:b9:6e:a8:32:37:2c:fd:69:e6:ad:ff:9b: 5f:ba:9f:23:c3:b7:e1:67:70:7a:f4:ab:1c:a6:c3: 4a:51:84:81:23:16:7d:36:e5:32:d3:7d:a0:a6:0d: e4:8c:79:06:da:7f:dd:99:4c:17:79:12:25:f2:af: 29:ff:25:ad:ec:26:25:fd:e2:e0:e6:d0:db:00:5b: 1a:9b:3b:f1:db:0c:16:f0:53:26:f8:33:09:fc:3a: a9:50:ad:4b:2f:90:6a:47:89:58:0a:42:46:ec:5b: e2:1b:bf:9f:48:99:22:10:fa:4a:b1:91:08:3f:ad: 86:16:9a:4d:18:7b:76:e5:34:50:01:54:69:1c:23: 18:55:c2:45:11:78:05:0f:b9:8d:52:e0:07:8f:35: 3a:76:86:e7:01:60:2e:96:d4:f9:77:e0:a6:f5:b7: a8:49:92:d0:7a:26:49:1f:a3:77:fe:ca:af:7e:2b: bf:a8:1e:69:5d:87:67:a4:9e:4b:1e:fd:13:85:85: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 128.255.0.0/16 129.255.0.0/16 198.49.182.0/24 198.62.108.0/24 198.97.39.0-198.97.40.255 199.201.205.0/24 199.201.217.0-199.201.218.255 IPv6: 2620:0:e50::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3676-3677 397607 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:77:dd:8a:c5:74:fb:b0:71:01:1a:46:67:1e:f3:69:20:aa: 99:ae:eb:6b:1c:f8:f3:05:ea:d7:ce:5e:be:3a:26:5f:90:10: bb:38:bd:c0:43:ca:30:bd:6f:85:dd:15:f5:6c:17:94:3a:d8: 7c:20:6a:2f:47:e8:4e:07:32:96:4e:9f:20:83:52:e3:07:1a: 93:1f:82:fb:c5:ac:02:4b:9f:f1:4f:96:8b:b6:35:8f:71:b5: 77:0e:08:e5:e9:97:8c:30:c5:e7:73:2b:e5:91:0f:92:8b:76: fc:ad:14:76:51:b3:35:ac:18:c1:96:27:6e:c2:6e:af:69:98: ed:ad:ec:fe:61:34:c1:e2:31:6e:ce:be:34:ae:f3:ca:03:9c: 1e:55:94:13:6d:e0:a8:a2:5c:cc:18:fb:77:77:71:b6:0f:3f: 2f:53:e1:02:14:96:e8:1c:e3:b2:6d:68:6e:d4:eb:13:b6:80: c2:8d:60:d9:5a:60:cb:96:2a:30:8b:f0:0e:f7:76:11:6d:7b: d4:b9:0d:ad:7c:07:1f:68:1a:25:6e:5d:c9:ad:54:ca:86:1f: 37:c3:3b:b5:d6:e2:1a:5c:81:a2:76:a5:22:ad:99:07:ec:02: 49:67:7f:54:7d:2e:be:db:f7:b4:39:01:f2:dd:32:6e:bc:3e: c0:ce:59:fa -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWEUr82ae/C6JsZ/TJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDMxMTExMzYxNVoXDTI1MTAyMzAwNDUxNlowLzEtMCsGA1UEAxMk NjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNlNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0faKbrpGChV183zN+wwaP8GawqsXh0WOpBI4 tlVBM1CfaMEIrDNMf1M1RGB6bn+utMLXOagVLGI8NMzStGW5bqgyNyz9aeat/5tf up8jw7fhZ3B69KscpsNKUYSBIxZ9NuUy032gpg3kjHkG2n/dmUwXeRIl8q8p/yWt 7CYl/eLg5tDbAFsamzvx2wwW8FMm+DMJ/DqpUK1LL5BqR4lYCkJG7FviG7+fSJki EPpKsZEIP62GFppNGHt25TRQAVRpHCMYVcJFEXgFD7mNUuAHjzU6dobnAWAultT5 d+Cm9beoSZLQeiZJH6N3/sqvfiu/qB5pXYdnpJ5LHv0ThYVVlQIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFI4swOADOd/5MhOqYSH4qy1n+LrxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYwM2VjOWMzLTZhN2YtNDQ1NS1i YWVlLTU5OTllMjUzZTczNS82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1 M2U3MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwYgYIKwYBBQUH AQcBAf8EUzBRMD4EAgABMDgDAwCA/wMDAIH/AwQAxjG2AwQAxj5sMAwDBADGYScD BADGYSgDBADHyc0wDAMEAMfJ2QMEAMfJ2jAPBAIAAjAJAwcEJiAAAA5QMCQGCCsG AQUFBwEIAQH/BBUwE6ARMA8wCAICDlwCAg5dAgMGEScwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK3fdisV0 +7BxARpGZx7zaSCqma7raxz48wXq185evjomX5AQuzi9wEPKML1vhd0V9WwXlDrY fCBqL0foTgcylk6fIINS4wcakx+C+8WsAkuf8U+Wi7Y1j3G1dw4I5emXjDDF53Mr 5ZEPkot2/K0UdlGzNawYwZYnbsJur2mY7a3s/mE0weIxbs6+NK7zygOcHlWUE23g qKJczBj7d3dxtg8/L1PhAhSW6Bzjsm1obtTrE7aAwo1g2Vpgy5YqMIvwDvd2EW17 1LkNrXwHH2gaJW5dya1UyoYfN8M7tdbiGlyBonalIq2ZB+wCSWd/VH0uvtv3tDkB 8t0ybrw+wM5Z+g== -----END CERTIFICATE-----Generated at Tue Apr 23 20:45:35 2024 by rpki-client on console-fra.rpki-client.org