$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer File: 66dea2a5-837d-46d8-8f8e-9447ece20c09.cer (raw, json) Hash identifier: iRYHPZekW2G99U/pV0XgYa83DREJAI0wWvLNPcUcuTI= Subject key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285841E48352BEF6CE07196DDC9800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Fri 25 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 11798 IP: 23.26.0.0/16 IP: 50.114.0.0/16 IP: 69.27.160.0/20 IP: 108.165.0.0/16 IP: 166.0.0.0/15 IP: 199.58.196.0/22 IP: 199.115.192.0/22 IP: 2604:3140::/32 IP: 2604:ba00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:52:be:f6:ce:07:19:6d:dc:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 25 19:06:39 2025 GMT Subject: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:3d:d4:5f:a3:93:26:6d:0d:8c:b1:24:17: dd:a5:d2:ac:a7:91:7b:be:92:98:af:25:e0:f4:de: 4a:21:36:93:41:17:b2:df:0f:99:fd:c1:74:93:94: 5a:e1:85:50:24:b2:f2:47:e7:52:d1:0b:63:67:78: 18:18:36:9e:12:e4:63:9c:03:02:99:d0:d9:6a:32: 43:f7:4c:d2:df:2b:54:79:90:04:f3:c1:7a:1a:91: 0f:3d:df:82:7c:c1:22:90:1f:91:7a:da:a7:32:0a: 16:71:62:8f:2d:82:aa:5c:18:df:02:a8:89:71:ed: e5:5a:01:c7:aa:59:50:fc:22:15:7d:63:3c:f9:52: 22:71:e9:b3:96:cf:53:6b:c7:da:8a:2f:0b:2f:43: db:c2:c9:ad:65:6c:84:92:f6:ad:78:9c:9e:3d:bc: a8:2f:ef:b1:ef:6b:25:d8:f5:43:3c:1a:2c:f0:67: d2:a7:6f:81:7f:0a:10:ca:74:41:06:cd:02:a7:e5: 9f:14:f7:2f:c2:bb:2b:c3:12:c3:73:67:7e:af:5f: bd:25:16:1a:47:85:a1:e0:ac:c7:db:7e:46:98:c0: f5:a4:3f:a2:41:99:15:55:9d:4c:83:87:bd:55:83: 7b:ce:1f:32:86:49:ad:54:6e:5d:6a:90:f9:7c:3d: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.26.0.0/16 50.114.0.0/16 69.27.160.0/20 108.165.0.0/16 166.0.0.0/15 199.58.196.0/22 199.115.192.0/22 IPv6: 2604:3140::/32 2604:ba00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11798 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a6:de:f9:69:1e:79:20:c7:e9:e2:61:a6:7b:3a:38:2f:ed: 22:89:fd:be:2a:4e:2a:59:a0:7c:66:96:91:27:9e:4a:d2:2c: 0a:91:d0:3f:e7:e0:cd:ba:33:11:08:75:8e:67:93:ec:47:3f: 9c:e8:a8:5d:20:ba:4c:f0:32:0a:59:a2:89:f2:61:56:8f:3b: 8a:1f:11:98:a4:be:f5:b3:f9:84:57:89:7a:ea:db:55:92:f1: 85:da:a8:7a:31:5c:10:c3:bb:42:1f:f0:18:3f:d6:33:a0:eb: 25:46:e8:7a:4e:59:c3:78:db:88:3a:1f:8c:fc:1c:a1:1f:2c: 65:a9:78:b8:00:d6:63:ec:bd:10:e3:0f:d5:c5:dc:9e:76:c4: 9e:1b:ea:65:32:89:3a:ec:28:56:15:ea:b1:2e:ed:97:f6:42: 77:e5:57:20:05:00:55:9b:53:55:69:cd:93:1a:c4:9c:ed:1e: c6:c5:91:ea:91:37:ea:1f:08:92:bf:e3:7b:e4:96:a6:02:0d: f5:53:a1:4a:88:8d:13:17:e4:62:bc:06:a8:5f:91:09:30:bf: 2b:85:6b:04:3f:de:ef:a5:ce:da:b7:22:cd:bc:0b:a1:64:18: 76:50:33:eb:73:59:f9:22:3f:b3:4c:68:07:bb:69:48:69:d3: 1f:cf:43:38 -----BEGIN CERTIFICATE----- MIIHPjCCBiagAwIBAgIUAQ0Mn0MoWEHkg1K+9s4HGW3cmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcyNTE5MDYzOVowLzEtMCsGA1UEAxMk NjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIwYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdQ91F+jkyZtDYyxJBfdpdKsp5F7vpKYryXg 9N5KITaTQRey3w+Z/cF0k5Ra4YVQJLLyR+dS0QtjZ3gYGDaeEuRjnAMCmdDZajJD 90zS3ytUeZAE88F6GpEPPd+CfMEikB+RetqnMgoWcWKPLYKqXBjfAqiJce3lWgHH qllQ/CIVfWM8+VIicemzls9Ta8faii8LL0PbwsmtZWyEkvateJyePbyoL++x72sl 2PVDPBos8GfSp2+BfwoQynRBBs0Cp+WfFPcvwrsrwxLDc2d+r1+9JRYaR4Wh4KzH 235GmMD1pD+iQZkVVZ1Mg4e9VYN7zh8yhkmtVG5dapD5fD39vQIDAQABo4IEUDCC BEwwHQYDVR0OBBYEFMOGrYv0GUs1lCSbkLqdgBHCCHHJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY2ZGVhMmE1LTgzN2QtNDZkOC04 ZjhlLTk0NDdlY2UyMGMwOS82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNl MjBjMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwVQYIKwYBBQUH AQcBAf8ERjBEMCwEAgABMCYDAwAXGgMDADJyAwQERRugAwMAbKUDAwGmAAMEAsc6 xAMEAsdzwDAUBAIAAjAOAwUAJgQxQAMFACYEugAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICLhYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAlabe+WkeeSDH6eJhpns6OC/tIon9vipOKlmgfGaW kSeeStIsCpHQP+fgzbozEQh1jmeT7Ec/nOioXSC6TPAyClmiifJhVo87ih8RmKS+ 9bP5hFeJeurbVZLxhdqoejFcEMO7Qh/wGD/WM6DrJUboek5Zw3jbiDofjPwcoR8s Zal4uADWY+y9EOMP1cXcnnbEnhvqZTKJOuwoVhXqsS7tl/ZCd+VXIAUAVZtTVWnN kxrEnO0exsWR6pE36h8Ikr/je+SWpgIN9VOhSoiNExfkYrwGqF+RCTC/K4VrBD/e 76XO2rcizbwLoWQYdlAz63NZ+SI/s0xoB7tpSGnTH89DOA== -----END CERTIFICATE-----Generated at Thu Apr 18 16:17:42 2024 by rpki-client on console-fra.rpki-client.org