$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer File: 1d639366-c044-456e-b8c8-0de04a543a0c.cer (raw, json) Hash identifier: 524+Z2hh1M7UP7uujofdFbkm3R8NXIMtwEc7wwlBuDg= Subject key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858479ED44EF38970107965AC2880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Oct 2024 00:45:26 +0000 Certificate not after: Mon 25 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 395273 IP: 45.59.32.0/20 IP: 50.5.0.0/16 IP: 66.42.128.0/17 IP: 66.117.192.0/18 IP: 66.161.128.0/17 IP: 69.61.128.0/17 IP: 72.49.0.0/16 IP: 74.83.0.0/16 IP: 74.215.0.0/16 IP: 131.241.0.0/16 IP: 163.182.0.0/17 IP: 192.24.128.0/17 IP: 208.102.0.0/16 IP: 216.68.0.0/16 IP: 216.196.128.0/17 IP: 2600:2b00::/28 IP: 2607:f500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9e:d4:4e:f3:89:70:10:79:65:ac:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 22 00:45:26 2024 GMT Not After : Jan 25 01:45:26 2027 GMT Subject: CN=1d639366-c044-456e-b8c8-0de04a543a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:74:48:7b:9f:3c:2e:2a:2d:e3:db:e1:6b: 99:d1:d2:f5:10:74:b7:c5:c1:a6:dc:6b:d3:71:04: 44:b7:ed:13:6f:2c:7c:ff:83:95:b8:b6:01:5a:8e: 24:99:6f:e3:cc:38:a6:ba:71:c6:62:5d:9e:7c:b5: 8f:62:6f:09:35:ce:c8:30:65:3d:8f:00:2b:7a:bf: e3:55:57:8e:d1:fc:07:64:1d:d0:79:66:2e:2d:c4: 9c:a5:6a:2c:cd:c3:ef:80:23:21:a0:3a:d2:12:bc: 0a:0d:3c:ef:b9:1a:a5:99:f4:57:6f:af:c1:c2:87: 1a:8c:36:7f:ad:36:7d:8f:05:bd:d6:c1:25:7b:52: 31:0a:c7:10:df:ac:e1:c1:bf:93:a0:72:3d:2a:ef: 94:c4:08:d2:ce:8c:50:f4:fa:8f:cb:e3:1f:95:05: 2b:cd:fe:af:90:ef:c4:74:03:aa:aa:10:11:6e:4a: 4c:e2:42:fd:17:0f:36:45:10:c4:84:bd:61:3a:9d: c1:f6:d9:9a:bd:0e:56:20:92:5a:c9:78:fa:ed:20: 8c:ad:ea:d0:94:0c:38:55:1a:59:2c:4a:43:9e:c9: 4e:97:80:fc:80:c0:39:03:0a:82:a4:33:d1:51:94: 00:43:86:4a:23:cb:55:bd:5b:95:c2:59:86:c9:b6: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 45.59.32.0/20 50.5.0.0/16 66.42.128.0/17 66.117.192.0/18 66.161.128.0/17 69.61.128.0/17 72.49.0.0/16 74.83.0.0/16 74.215.0.0/16 131.241.0.0/16 163.182.0.0/17 192.24.128.0/17 208.102.0.0/16 216.68.0.0/16 216.196.128.0/17 IPv6: 2600:2b00::/28 2607:f500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395273 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e8:b0:19:ff:6e:63:66:be:fe:e4:f6:19:e6:25:3f:df:d0: 68:ea:72:fe:73:b2:74:8e:20:1b:84:bc:c3:e7:1a:91:b6:89: 0e:f8:fb:48:4e:2b:c0:f6:ab:0a:44:e0:8c:7f:72:5a:2d:58: ce:c1:b4:6c:6d:60:26:c1:a1:0e:f4:96:30:01:ba:56:b2:6d: 12:0f:08:f7:49:5f:14:7a:c5:2d:fd:da:0d:3f:ec:97:01:66: 12:10:51:ca:b6:aa:46:99:70:8b:ef:1d:31:c3:2e:bf:a6:46: 9c:9d:33:e5:c1:23:e5:e3:b7:a1:41:ee:49:a5:9a:6e:03:6a: 3f:e6:05:0e:02:3e:09:41:69:15:ee:b6:40:63:ba:95:d1:67: 58:43:ff:c9:8b:0c:c7:34:1a:85:9d:0f:35:b5:03:20:12:a4: 19:74:6c:bf:3a:4b:51:03:89:2a:fd:6b:f8:6d:7e:f1:b7:53: 50:63:df:da:e7:04:fa:eb:22:7b:6a:06:ce:7f:44:79:c1:62: ff:14:f6:5d:49:0a:15:97:0d:b6:d0:71:12:1b:13:ed:bc:5b: ca:92:91:40:f5:be:77:76:29:0e:fd:06:98:9d:85:71:09:09: 04:f0:5d:69:1a:92:cc:9d:aa:43:af:dc:a1:40:85:a3:0e:49: 0b:d4:b7:e9 -----BEGIN CERTIFICATE----- MIIHbTCCBlWgAwIBAgIUAQ0Mn0MoWEee1E7ziXAQeWWsKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAyMjAwNDUyNloXDTI3MDEyNTAxNDUyNlowLzEtMCsGA1UEAxMk MWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQzYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5J0SHufPC4qLePb4WuZ0dL1EHS3xcGm3GvT cQREt+0Tbyx8/4OVuLYBWo4kmW/jzDimunHGYl2efLWPYm8JNc7IMGU9jwArer/j VVeO0fwHZB3QeWYuLcScpWoszcPvgCMhoDrSErwKDTzvuRqlmfRXb6/BwocajDZ/ rTZ9jwW91sEle1IxCscQ36zhwb+ToHI9Ku+UxAjSzoxQ9PqPy+MflQUrzf6vkO/E dAOqqhARbkpM4kL9Fw82RRDEhL1hOp3B9tmavQ5WIJJayXj67SCMrerQlAw4VRpZ LEpDnslOl4D8gMA5AwqCpDPRUZQAQ4ZKI8tVvVuVwlmGybZpUQIDAQABo4IEfzCC BHswHQYDVR0OBBYEFPw1V8kOPbUZBYWkp+cQ6WVqBGeHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x ZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFkNjM5MzY2LWMwNDQtNDU2ZS1i OGM4LTBkZTA0YTU0M2EwYy8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1 NDNhMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwgYIGCCsGAQUF BwEHAQH/BHMwcTBZBAIAATBTAwQELTsgAwMAMgUDBAdCKoADBAZCdcADBAdCoYAD BAdFPYADAwBIMQMDAEpTAwMAStcDAwCD8QMEB6O2AAMEB8AYgAMDANBmAwMA2EQD BAfYxIAwFAQCAAIwDgMFBCYAKwADBQAmB/UAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwYICTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBe6LAZ/25jZr7+5PYZ5iU/39Bo6nL+c7J0jiAbhLzD 5xqRtokO+PtITivA9qsKROCMf3JaLVjOwbRsbWAmwaEO9JYwAbpWsm0SDwj3SV8U esUt/doNP+yXAWYSEFHKtqpGmXCL7x0xwy6/pkacnTPlwSPl47ehQe5JpZpuA2o/ 5gUOAj4JQWkV7rZAY7qV0WdYQ//JiwzHNBqFnQ81tQMgEqQZdGy/OktRA4kq/Wv4 bX7xt1NQY9/a5wT66yJ7agbOf0R5wWL/FPZdSQoVlw220HESGxPtvFvKkpFA9b53 dikO/QaYnYVxCQkE8F1pGpLMnapDr9yhQIWjDkkL1Lfp -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:13 2024 by rpki-client on console-fra.rpki-client.org