$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer File: 603ec9c3-6a7f-4455-baee-5999e253e735.cer (raw, json) Hash identifier: ki9rthJJccyhzfSqFyqS+brOkndMjBEYLuTO3O/gn2A= Subject key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285847A19EFE5528E51A89249EFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Oct 2024 00:45:26 +0000 Certificate not after: Tue 26 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 3676 -- 3677 AS: 397607 IP: 128.255.0.0/16 IP: 129.255.0.0/16 IP: 198.49.182.0/24 IP: 198.62.108.0/24 IP: 198.97.39.0 -- 198.97.40.255 IP: 199.201.205.0/24 IP: 199.201.217.0 -- 199.201.218.255 IP: 2620:0:e50::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a1:9e:fe:55:28:e5:1a:89:24:9e:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 23 00:45:26 2024 GMT Not After : Jan 26 01:45:26 2027 GMT Subject: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:8a:6e:ba:46:0a:15:75:f3:7c:cd:fb:0c: 1a:3f:c1:9a:c2:ab:17:87:45:8e:a4:12:38:b6:55: 41:33:50:9f:68:c1:08:ac:33:4c:7f:53:35:44:60: 7a:6e:7f:ae:b4:c2:d7:39:a8:15:2c:62:3c:34:cc: d2:b4:65:b9:6e:a8:32:37:2c:fd:69:e6:ad:ff:9b: 5f:ba:9f:23:c3:b7:e1:67:70:7a:f4:ab:1c:a6:c3: 4a:51:84:81:23:16:7d:36:e5:32:d3:7d:a0:a6:0d: e4:8c:79:06:da:7f:dd:99:4c:17:79:12:25:f2:af: 29:ff:25:ad:ec:26:25:fd:e2:e0:e6:d0:db:00:5b: 1a:9b:3b:f1:db:0c:16:f0:53:26:f8:33:09:fc:3a: a9:50:ad:4b:2f:90:6a:47:89:58:0a:42:46:ec:5b: e2:1b:bf:9f:48:99:22:10:fa:4a:b1:91:08:3f:ad: 86:16:9a:4d:18:7b:76:e5:34:50:01:54:69:1c:23: 18:55:c2:45:11:78:05:0f:b9:8d:52:e0:07:8f:35: 3a:76:86:e7:01:60:2e:96:d4:f9:77:e0:a6:f5:b7: a8:49:92:d0:7a:26:49:1f:a3:77:fe:ca:af:7e:2b: bf:a8:1e:69:5d:87:67:a4:9e:4b:1e:fd:13:85:85: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 128.255.0.0/16 129.255.0.0/16 198.49.182.0/24 198.62.108.0/24 198.97.39.0-198.97.40.255 199.201.205.0/24 199.201.217.0-199.201.218.255 IPv6: 2620:0:e50::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3676-3677 397607 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5c:a2:25:e4:f8:b9:77:2b:78:7c:9f:0c:1f:ab:2b:03:ad: 69:ff:52:b3:53:d5:00:24:00:2b:95:5c:17:6d:9a:c0:fb:d9: 85:71:d9:c4:cf:f8:9d:20:2b:13:af:ac:b6:62:9f:ab:1d:70: 8f:38:5c:68:5f:91:2e:ae:93:74:f3:53:3e:5a:93:f0:75:6c: b8:f6:49:c3:47:4c:54:f5:c1:6b:07:ce:01:af:9f:79:96:a2: 8a:1d:69:36:78:25:e8:c7:5f:f4:f0:ef:5f:a9:d5:fd:cb:f1: 16:3c:03:d3:5e:23:37:13:7c:4e:dc:bf:e7:b7:30:ed:ce:b8: 78:79:08:b6:c3:dd:a3:2e:ca:e6:1a:70:24:7c:36:72:39:bf: 77:6f:7a:49:12:9e:f0:39:1c:45:73:a8:8a:e3:bb:94:7f:8e: 0e:51:f0:f6:49:fd:55:aa:81:00:06:2c:68:4e:96:43:6e:f9: a2:a6:fd:00:75:d3:5b:09:a7:f9:c1:d1:e2:80:5d:08:67:0b: 96:d0:22:2d:46:7e:87:07:8b:f2:f4:2f:82:e0:18:f0:91:d1: 15:03:44:99:5d:7c:b5:39:05:9f:f6:13:39:98:87:6c:27:64: bf:dd:6e:a7:b9:c0:fb:47:63:20:0e:bf:be:7c:c2:7c:5e:f8: 62:b0:2d:d2 -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWEehnv5VKOUaiSSe+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTAyMzAwNDUyNloXDTI3MDEyNjAxNDUyNlowLzEtMCsGA1UEAxMk NjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNlNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0faKbrpGChV183zN+wwaP8GawqsXh0WOpBI4 tlVBM1CfaMEIrDNMf1M1RGB6bn+utMLXOagVLGI8NMzStGW5bqgyNyz9aeat/5tf up8jw7fhZ3B69KscpsNKUYSBIxZ9NuUy032gpg3kjHkG2n/dmUwXeRIl8q8p/yWt 7CYl/eLg5tDbAFsamzvx2wwW8FMm+DMJ/DqpUK1LL5BqR4lYCkJG7FviG7+fSJki EPpKsZEIP62GFppNGHt25TRQAVRpHCMYVcJFEXgFD7mNUuAHjzU6dobnAWAultT5 d+Cm9beoSZLQeiZJH6N3/sqvfiu/qB5pXYdnpJ5LHv0ThYVVlQIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFI4swOADOd/5MhOqYSH4qy1n+LrxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYwM2VjOWMzLTZhN2YtNDQ1NS1i YWVlLTU5OTllMjUzZTczNS82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1 M2U3MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwYgYIKwYBBQUH AQcBAf8EUzBRMD4EAgABMDgDAwCA/wMDAIH/AwQAxjG2AwQAxj5sMAwDBADGYScD BADGYSgDBADHyc0wDAMEAMfJ2QMEAMfJ2jAPBAIAAjAJAwcEJiAAAA5QMCQGCCsG AQUFBwEIAQH/BBUwE6ARMA8wCAICDlwCAg5dAgMGEScwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMVyiJeT4 uXcreHyfDB+rKwOtaf9Ss1PVACQAK5VcF22awPvZhXHZxM/4nSArE6+stmKfqx1w jzhcaF+RLq6TdPNTPlqT8HVsuPZJw0dMVPXBawfOAa+feZaiih1pNngl6Mdf9PDv X6nV/cvxFjwD014jNxN8Tty/57cw7c64eHkItsPdoy7K5hpwJHw2cjm/d296SRKe 8DkcRXOoiuO7lH+ODlHw9kn9VaqBAAYsaE6WQ275oqb9AHXTWwmn+cHR4oBdCGcL ltAiLUZ+hweL8vQvguAY8JHRFQNEmV18tTkFn/YTOZiHbCdkv91up7nA+0djIA6/ vnzCfF74YrAt0g== -----END CERTIFICATE-----Generated at Thu Nov 21 16:14:06 2024 by rpki-client on console-ams.rpki-client.org