$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer File: 8da2ab18-c7fe-481a-a5e3-31579c83e101.cer (raw, json) Hash identifier: WJCrJ9ez/dg/ruehiITaA05/vuSeq8AoWlRk3WEipgE= Subject key identifier: 5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842FF223BA1A9AC178BE1AE9500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Aug 2023 00:45:21 +0000 Certificate not after: Thu 27 Nov 2025 01:45:21 +0000 Subordinate resources: IP: 69.161.208.0/23 IP: 69.161.220.0/24 IP: 69.161.222.0/23 IP: 206.188.192.0/23 IP: 206.188.195.0/24 IP: 206.188.198.0/23 IP: 206.188.204.0 -- 206.188.209.255 IP: 206.188.212.0/22 IP: 206.188.219.0 -- 206.188.223.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ff:22:3b:a1:a9:ac:17:8b:e1:ae:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 25 00:45:21 2023 GMT Not After : Nov 27 01:45:21 2025 GMT Subject: CN=8da2ab18-c7fe-481a-a5e3-31579c83e101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f8:a7:9e:32:bc:73:08:bb:e8:2a:a6:0e:f1: 5d:83:e1:93:77:78:e2:db:06:3c:ad:97:61:fb:ef: 84:d2:8b:62:08:7e:e8:5e:69:0c:a5:35:76:d5:20: 07:f0:97:cf:e3:9a:6e:ab:5f:a9:ef:90:d7:ef:75: 08:0a:f7:36:07:9c:e7:3e:a3:13:75:2b:ba:ef:5e: cb:3e:5d:a0:3b:08:5c:51:26:f3:f8:ec:3d:56:97: e4:85:3e:27:2e:4a:d9:df:f7:b8:59:27:22:3f:38: 64:99:c9:2f:67:bf:fa:7a:f4:6a:cb:10:11:ad:1e: d0:4a:76:39:c4:8d:27:69:0d:66:f7:84:67:4e:bb: ad:be:83:ac:ab:30:91:aa:6a:95:2c:e0:03:47:63: 14:b6:8a:a5:16:62:f5:9f:3e:20:4c:bb:be:06:50: 59:78:ab:fe:f3:a3:26:c1:25:c8:c8:7f:07:9a:94: c4:0c:4b:7b:bf:8e:8c:22:54:67:43:ee:38:00:d4: e1:52:4c:53:18:51:73:0f:36:c0:19:77:ba:48:8d: 93:b8:46:8b:18:68:9d:9a:54:8c:b7:9a:f6:69:f4: b9:16:df:3e:46:1c:2b:c6:95:b7:ce:2d:65:d8:01: 6f:2a:09:47:20:fe:d7:b4:a5:8b:63:2e:61:b8:23: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 69.161.208.0/23 69.161.220.0/24 69.161.222.0/23 206.188.192.0/23 206.188.195.0/24 206.188.198.0/23 206.188.204.0-206.188.209.255 206.188.212.0/22 206.188.219.0-206.188.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:7f:98:95:61:fc:b9:5e:88:ed:d2:01:bf:80:85:02:4b:27: a0:ad:93:2f:e0:e9:06:b2:67:96:36:24:f9:27:93:ea:f4:02: ec:cf:11:39:52:6f:c0:4d:b5:30:fa:e9:c0:e8:79:0e:de:6e: b4:81:26:bb:f2:79:5e:ac:4a:8a:f3:93:9f:fb:c5:7f:02:82: a3:5f:f4:ba:85:50:62:22:d0:71:6b:0f:08:29:09:40:3c:e6: 41:5c:f6:28:08:db:0c:cb:57:6f:74:43:a2:f2:9e:c4:f3:a5: 4e:11:a8:a2:e2:34:03:f9:8e:b5:c1:d7:2d:21:9e:20:dc:2c: 84:e9:c9:75:d8:0f:d2:15:22:71:c5:7c:de:20:2c:65:b8:80: 8e:84:f6:99:de:3d:62:c6:1b:05:b0:87:87:27:b8:19:51:06: 1b:db:c5:e7:d5:a1:a1:09:38:18:31:a8:72:98:3e:f2:a4:51: 53:76:9a:1e:3b:0a:87:bb:40:62:f0:bd:4b:2e:44:6e:74:14: 09:1a:91:1a:49:fe:f3:81:8d:e7:9a:1b:5f:0e:37:b6:c9:49: ee:e1:0c:d6:d4:46:54:4c:70:90:45:05:fb:d4:63:f2:4d:ad: 7b:7a:e1:ba:d2:1e:9f:93:3f:e9:7d:04:df:f7:88:bb:7f:26: d5:76:6e:c6 -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEL/IjuhqawXi+GulQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDgyNTAwNDUyMVoXDTI1MTEyNzAxNDUyMVowLzEtMCsGA1UEAxMk OGRhMmFiMTgtYzdmZS00ODFhLWE1ZTMtMzE1NzljODNlMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/innjK8cwi76CqmDvFdg+GTd3ji2wY8rZdh +++E0otiCH7oXmkMpTV21SAH8JfP45puq1+p75DX73UICvc2B5znPqMTdSu6717L Pl2gOwhcUSbz+Ow9VpfkhT4nLkrZ3/e4WSciPzhkmckvZ7/6evRqyxARrR7QSnY5 xI0naQ1m94RnTrutvoOsqzCRqmqVLOADR2MUtoqlFmL1nz4gTLu+BlBZeKv+86Mm wSXIyH8HmpTEDEt7v46MIlRnQ+44ANThUkxTGFFzDzbAGXe6SI2TuEaLGGidmlSM t5r2afS5Ft8+RhwrxpW3zi1l2AFvKglHIP7XtKWLYy5huCNMXwIDAQABo4IEPzCC BDswHQYDVR0OBBYEFF38XNes7PQkiavw3Qq2Gsb/JrbnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 ZGEyYWIxOC1jN2ZlLTQ4MWEtYTVlMy0zMTU3OWM4M2UxMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhkYTJhYjE4LWM3ZmUtNDgxYS1h NWUzLTMxNTc5YzgzZTEwMS84ZGEyYWIxOC1jN2ZlLTQ4MWEtYTVlMy0zMTU3OWM4 M2UxMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwXwYIKwYBBQUH AQcBAf8EUDBOMEwEAgABMEYDBAFFodADBABFodwDBAFFod4DBAHOvMADBADOvMMD BAHOvMYwDAMEAs68zAMEAc680AMEAs681DAMAwQAzrzbAwQFzrzAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKp/mJVh/LleiO3SAb+AhQJLJ6Ctky/g6QayZ5Y2JPknk+r0AuzPETlSb8BNtTD6 6cDoeQ7ebrSBJrvyeV6sSorzk5/7xX8CgqNf9LqFUGIi0HFrDwgpCUA85kFc9igI 2wzLV290Q6LynsTzpU4RqKLiNAP5jrXB1y0hniDcLITpyXXYD9IVInHFfN4gLGW4 gI6E9pnePWLGGwWwh4cnuBlRBhvbxefVoaEJOBgxqHKYPvKkUVN2mh47Coe7QGLw vUsuRG50FAkakRpJ/vOBjeeaG18ON7bJSe7hDNbURlRMcJBFBfvUY/JNrXt64brS Hp+TP+l9BN/3iLt/JtV2bsY= -----END CERTIFICATE-----Generated at Thu Nov 21 16:14:58 2024 by rpki-client on console-ams.rpki-client.org