$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer File: 7386a5e1-ba73-408c-a7e4-df88e2f52603.cer (raw, json) Hash identifier: NJVf8Y9zJvCVL0ey6h5V1reLtuSSBZpwdIQzEF7aGXc= Subject key identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842FC57903C44A0999D7045F480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Aug 2023 00:45:23 +0000 Certificate not after: Wed 26 Nov 2025 01:45:23 +0000 Subordinate resources: AS: 13910 IP: 96.9.0.0/18 IP: 207.204.0.0 -- 207.204.55.255 IP: 209.16.96.0/20 IP: 216.21.224.0/22 IP: 216.21.231.0 -- 216.21.232.255 IP: 216.21.234.0 -- 216.21.238.255 IP: 2607:f408::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:fc:57:90:3c:44:a0:99:9d:70:45:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 24 00:45:23 2023 GMT Not After : Nov 26 01:45:23 2025 GMT Subject: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:0d:53:d5:4c:0c:10:15:de:2b:31:a9:a7: 5d:19:fa:f0:3e:f4:60:04:10:f5:64:4b:08:29:e7: 33:e8:76:7b:cf:12:e3:93:ca:e1:e0:72:c7:22:91: 56:c2:b2:f2:42:7e:ad:1f:7c:d3:cc:fa:2d:8f:b9: c4:ba:02:f7:8a:1e:41:61:aa:8c:fd:2e:6d:6a:4a: 87:48:fa:1c:00:46:d9:1d:a9:77:12:1d:c8:44:33: a3:9b:6f:dc:42:d2:2d:9f:90:0d:df:95:42:b0:53: 19:47:1f:33:92:ea:96:46:61:ba:2a:03:e5:98:a8: 8d:b5:81:83:f7:b9:da:7a:d9:39:65:a6:1c:8f:d0: 93:92:e2:2d:02:31:80:24:9e:75:73:54:57:27:fa: 17:22:12:e3:3b:04:18:b4:3e:bb:42:ec:b1:9a:89: 13:18:3b:b0:33:21:b7:07:67:e1:0d:1a:02:81:33: d4:3e:4a:b5:65:a0:cf:64:aa:37:4d:15:50:bb:1a: a2:c8:5c:17:55:78:5c:e8:5c:5f:9e:74:7c:bc:78: 10:fa:fe:d4:38:4e:29:58:59:0f:11:79:f3:1f:4a: 88:44:57:60:36:6d:14:33:58:d3:a3:e1:36:ef:60: 07:d7:43:91:25:61:6a:13:6f:a3:51:eb:e8:0f:bc: f6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 96.9.0.0/18 207.204.0.0-207.204.55.255 209.16.96.0/20 216.21.224.0/22 216.21.231.0-216.21.232.255 216.21.234.0-216.21.238.255 IPv6: 2607:f408::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13910 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:0e:55:c3:30:c2:08:e7:89:38:a6:6b:45:04:20:6b:3d:2f: 14:04:0a:5e:bf:d5:fe:26:e0:f9:1c:0a:3d:8a:f2:82:f3:a1: 2e:dd:b9:69:7c:1d:55:be:5c:9f:dd:12:05:73:fa:9e:9c:6c: 1e:c7:6a:ef:4f:43:4e:f1:1f:14:c8:ca:1a:65:bf:80:9a:ae: 68:98:4d:ad:2f:43:0e:cd:d4:d0:5d:f9:23:a9:33:0a:13:bc: 7a:cb:9c:7b:19:01:7a:40:c9:36:9f:b1:be:2e:0e:c4:b9:26: fe:17:7b:79:21:2b:8f:0c:68:7d:3b:c0:38:53:83:2c:93:a2: 39:e3:49:cb:43:ae:fa:fa:eb:ee:6e:9e:f6:90:bf:40:02:ac: cd:9f:de:ab:3a:c8:11:de:ce:36:46:23:20:fc:25:d9:37:1c: d4:aa:2c:9a:f1:a3:55:36:e9:0d:e4:9e:1c:f4:5e:a7:a4:00: be:ae:02:cd:b3:5f:ad:0a:cd:6d:53:c3:e6:45:74:fb:7d:0d: ee:5d:be:53:f6:85:37:20:d8:40:d2:f1:4d:59:b4:01:1c:0c: ee:7c:eb:92:66:ed:17:23:18:2b:7b:c7:20:cc:5d:fb:9f:5a: 9b:96:e3:4d:59:c9:72:27:a8:e5:70:c6:41:a5:96:49:0d:a3: ac:2e:b7:f6 -----BEGIN CERTIFICATE----- MIIHTDCCBjSgAwIBAgIUAQ0Mn0MoWEL8V5A8RKCZnXBF9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDgyNDAwNDUyM1oXDTI1MTEyNjAxNDUyM1owLzEtMCsGA1UEAxMk NzM4NmE1ZTEtYmE3My00MDhjLWE3ZTQtZGY4OGUyZjUyNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA078NU9VMDBAV3isxqaddGfrwPvRgBBD1ZEsI Kecz6HZ7zxLjk8rh4HLHIpFWwrLyQn6tH3zTzPotj7nEugL3ih5BYaqM/S5takqH SPocAEbZHal3Eh3IRDOjm2/cQtItn5AN35VCsFMZRx8zkuqWRmG6KgPlmKiNtYGD 97naetk5ZaYcj9CTkuItAjGAJJ51c1RXJ/oXIhLjOwQYtD67QuyxmokTGDuwMyG3 B2fhDRoCgTPUPkq1ZaDPZKo3TRVQuxqiyFwXVXhc6FxfnnR8vHgQ+v7UOE4pWFkP EXnzH0qIRFdgNm0UM1jTo+E272AH10ORJWFqE2+jUevoD7z2eQIDAQABo4IEXjCC BFowHQYDVR0OBBYEFI76+QW43iGw3r4bM9EaiWLDkASdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 Mzg2YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4ZTJmNTI2MDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzczODZhNWUxLWJhNzMtNDA4Yy1h N2U0LWRmODhlMmY1MjYwMy83Mzg2YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4ZTJm NTI2MDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwYwYIKwYBBQUH AQcBAf8EVDBSMEEEAgABMDsDBAZgCQAwCwMDAs/MAwQDz8wwAwQE0RBgAwQC2BXg MAwDBADYFecDBADYFegwDAMEAdgV6gMEANgV7jANBAIAAjAHAwUAJgf0CDAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgI2VjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlDlXDMMII54k4pmtFBCBr PS8UBApev9X+JuD5HAo9ivKC86Eu3blpfB1Vvlyf3RIFc/qenGwex2rvT0NO8R8U yMoaZb+Amq5omE2tL0MOzdTQXfkjqTMKE7x6y5x7GQF6QMk2n7G+Lg7EuSb+F3t5 ISuPDGh9O8A4U4Msk6I540nLQ676+uvubp72kL9AAqzNn96rOsgR3s42RiMg/CXZ NxzUqiya8aNVNukN5J4c9F6npAC+rgLNs1+tCs1tU8PmRXT7fQ3uXb5T9oU3INhA 0vFNWbQBHAzufOuSZu0XIxgre8cgzF37n1qbluNNWclyJ6jlcMZBpZZJDaOsLrf2 -----END CERTIFICATE-----Generated at Thu Nov 21 16:14:51 2024 by rpki-client on console-ams.rpki-client.org