$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer File: 9799440b-1f9c-4e88-926e-9ee073c7ee48.cer (raw, json) Hash identifier: L/1wSy9MFONX0G6PgoSbB4bIvYSlaNzACc/3oEWVZEM= Subject key identifier: AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858439D772A108C8E6E47A7D223A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Oct 2023 17:54:13 +0000 Certificate not after: Tue 14 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 32163 IP: 24.105.0.0/18 IP: 64.224.0.0/21 IP: 64.224.24.0/21 IP: 64.227.216.0/21 IP: 64.227.228.0 -- 64.227.239.255 IP: 66.40.176.0/20 IP: 158.115.192.0/19 IP: 198.74.32.0 -- 198.74.41.255 IP: 2620:10b:9000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:9d:77:2a:10:8c:8e:6e:47:a7:d2:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 20 17:54:13 2023 GMT Not After : Oct 14 00:45:16 2025 GMT Subject: CN=9799440b-1f9c-4e88-926e-9ee073c7ee48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:9c:3e:e1:84:f6:5e:88:20:e6:36:3e:b3: a3:c5:cf:a4:2c:64:c3:14:8b:64:b0:45:83:71:78: 6e:f7:9d:9e:cb:9e:2b:74:25:58:f4:5a:d3:75:21: 75:a1:b7:a9:26:4f:06:46:f2:49:18:6a:aa:7c:96: fa:06:a3:6f:67:00:2c:52:1b:e8:4e:d4:94:d0:22: 07:43:ed:cc:d4:fe:d6:6d:0c:13:6a:3c:b7:ee:5c: 11:6a:b5:79:7d:72:ce:23:e4:0f:7f:ac:cf:12:63: c8:71:3e:e6:93:d2:23:b6:4a:0f:6a:dc:a7:31:39: 4c:ed:3a:b9:52:ab:e4:90:e0:dd:c4:54:22:d2:bf: b8:a7:02:07:ec:de:39:4e:4a:ce:c9:19:50:fd:65: 2f:10:1d:78:16:25:0c:00:30:82:00:65:22:26:ef: 2f:79:29:e2:69:30:88:d1:a6:10:9c:3d:0f:54:13: 64:f8:7f:ec:40:32:87:9e:ff:ce:62:49:89:91:53: 3b:73:05:eb:d4:82:45:78:ff:b2:fb:6f:ba:77:7c: 1e:4b:d3:b9:50:d8:ff:15:9d:60:17:71:01:5f:95: 15:59:29:70:52:06:89:62:bd:db:5b:f3:c1:c0:97: b8:61:bb:90:2f:0f:55:54:aa:fd:e9:67:21:fe:a1: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 24.105.0.0/18 64.224.0.0/21 64.224.24.0/21 64.227.216.0/21 64.227.228.0-64.227.239.255 66.40.176.0/20 158.115.192.0/19 198.74.32.0-198.74.41.255 IPv6: 2620:10b:9000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32163 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b4:19:e7:a9:77:f2:da:a2:f0:3d:e9:ce:f0:b3:18:1a:7e: 7e:ef:f9:99:0d:24:dd:ff:08:4c:9d:ba:38:18:4b:bc:3b:9b: fe:54:a2:82:4f:59:f3:a9:52:66:21:99:15:2c:b9:b0:2a:22: 12:c5:93:26:37:a0:f1:6f:a7:a2:e9:2a:7c:87:18:a2:47:23: 51:48:10:7f:0e:1f:0d:fa:0b:a3:84:9c:eb:11:21:96:c2:65: 69:d7:d0:b3:24:3b:c1:63:fc:4d:6d:97:01:5b:00:c4:38:83: 80:3b:50:35:7b:2b:8d:d8:5d:8f:70:9d:bc:a4:1c:b1:15:44: d7:cb:dc:ec:0a:cf:bb:ad:f6:f7:3c:de:41:a9:dc:6b:a6:26: 14:bd:81:70:d4:0a:79:2b:96:72:cb:a7:74:8a:f2:b8:d7:43: 58:c6:ec:39:6f:16:32:5f:0c:49:bd:7a:4c:70:b1:c8:ae:2b: 18:bb:39:28:9e:eb:ab:e7:5c:a9:1c:fb:51:de:b0:62:7e:ae: 76:0a:49:b2:a7:a7:3e:ab:08:31:7e:f6:b5:26:1a:d8:f9:22: cf:94:ab:19:0f:3b:05:7e:a5:50:07:64:8a:11:23:50:12:cd: 86:a0:1f:b3:dc:e6:e2:b3:78:3a:ef:41:39:cb:5f:ea:01:c4: c2:fd:bc:22 -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEOddyoQjI5uR6fSI6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMTAyMDE3NTQxM1oXDTI1MTAxNDAwNDUxNlowLzEtMCsGA1UEAxMk OTc5OTQ0MGItMWY5Yy00ZTg4LTkyNmUtOWVlMDczYzdlZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMecPuGE9l6IIOY2PrOjxc+kLGTDFItksEWD cXhu952ey54rdCVY9FrTdSF1obepJk8GRvJJGGqqfJb6BqNvZwAsUhvoTtSU0CIH Q+3M1P7WbQwTajy37lwRarV5fXLOI+QPf6zPEmPIcT7mk9IjtkoPatynMTlM7Tq5 UqvkkODdxFQi0r+4pwIH7N45TkrOyRlQ/WUvEB14FiUMADCCAGUiJu8veSniaTCI 0aYQnD0PVBNk+H/sQDKHnv/OYkmJkVM7cwXr1IJFeP+y+2+6d3weS9O5UNj/FZ1g F3EBX5UVWSlwUgaJYr3bW/PBwJe4YbuQLw9VVKr96Wch/qHtywIDAQABo4IEZTCC BGEwHQYDVR0OBBYEFK6RFa6doQkvRO47JYH2wYnhgm2HMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 Nzk5NDQwYi0xZjljLTRlODgtOTI2ZS05ZWUwNzNjN2VlNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzk3OTk0NDBiLTFmOWMtNGU4OC05 MjZlLTllZTA3M2M3ZWU0OC85Nzk5NDQwYi0xZjljLTRlODgtOTI2ZS05ZWUwNzNj N2VlNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwagYIKwYBBQUH AQcBAf8EWzBZMEYEAgABMEADBAYYaQADBANA4AADBANA4BgDBANA49gwDAMEAkDj 5AMEBEDj4AMEBEIosAMEBZ5zwDAMAwQFxkogAwQBxkooMA8EAgACMAkDBwQmIAEL kAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfaMwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASLQZ56l38tqi 8D3pzvCzGBp+fu/5mQ0k3f8ITJ26OBhLvDub/lSigk9Z86lSZiGZFSy5sCoiEsWT Jjeg8W+noukqfIcYokcjUUgQfw4fDfoLo4Sc6xEhlsJladfQsyQ7wWP8TW2XAVsA xDiDgDtQNXsrjdhdj3CdvKQcsRVE18vc7ArPu6329zzeQanca6YmFL2BcNQKeSuW csundIryuNdDWMbsOW8WMl8MSb16THCxyK4rGLs5KJ7rq+dcqRz7Ud6wYn6udgpJ sqenPqsIMX72tSYa2Pkiz5SrGQ87BX6lUAdkihEjUBLNhqAfs9zm4rN4Ou9BOctf 6gHEwv28Ig== -----END CERTIFICATE-----Generated at Fri Apr 26 11:12:04 2024 by rpki-client on console-ams.rpki-client.org