$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer File: 1d639366-c044-456e-b8c8-0de04a543a0c.cer (raw, json) Hash identifier: rca9GjcurKfNaymWVIsmYQew0XiVgtdcrVM6tM5iooY= Subject key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842998146BE021705784BA25D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Jul 2023 15:04:25 +0000 Certificate not after: Tue 21 Oct 2025 15:04:25 +0000 Subordinate resources: AS: 395273 IP: 45.59.32.0/20 IP: 50.5.0.0/16 IP: 66.42.128.0/17 IP: 66.117.192.0/18 IP: 66.161.128.0/17 IP: 69.61.128.0/17 IP: 72.49.0.0/16 IP: 74.83.0.0/16 IP: 74.215.0.0/16 IP: 131.241.0.0/16 IP: 163.182.0.0/17 IP: 192.24.128.0/17 IP: 208.102.0.0/16 IP: 216.68.0.0/16 IP: 216.196.128.0/17 IP: 2600:2b00::/28 IP: 2607:f500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:99:81:46:be:02:17:05:78:4b:a2:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 19 15:04:25 2023 GMT Not After : Oct 21 15:04:25 2025 GMT Subject: CN=1d639366-c044-456e-b8c8-0de04a543a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:74:48:7b:9f:3c:2e:2a:2d:e3:db:e1:6b: 99:d1:d2:f5:10:74:b7:c5:c1:a6:dc:6b:d3:71:04: 44:b7:ed:13:6f:2c:7c:ff:83:95:b8:b6:01:5a:8e: 24:99:6f:e3:cc:38:a6:ba:71:c6:62:5d:9e:7c:b5: 8f:62:6f:09:35:ce:c8:30:65:3d:8f:00:2b:7a:bf: e3:55:57:8e:d1:fc:07:64:1d:d0:79:66:2e:2d:c4: 9c:a5:6a:2c:cd:c3:ef:80:23:21:a0:3a:d2:12:bc: 0a:0d:3c:ef:b9:1a:a5:99:f4:57:6f:af:c1:c2:87: 1a:8c:36:7f:ad:36:7d:8f:05:bd:d6:c1:25:7b:52: 31:0a:c7:10:df:ac:e1:c1:bf:93:a0:72:3d:2a:ef: 94:c4:08:d2:ce:8c:50:f4:fa:8f:cb:e3:1f:95:05: 2b:cd:fe:af:90:ef:c4:74:03:aa:aa:10:11:6e:4a: 4c:e2:42:fd:17:0f:36:45:10:c4:84:bd:61:3a:9d: c1:f6:d9:9a:bd:0e:56:20:92:5a:c9:78:fa:ed:20: 8c:ad:ea:d0:94:0c:38:55:1a:59:2c:4a:43:9e:c9: 4e:97:80:fc:80:c0:39:03:0a:82:a4:33:d1:51:94: 00:43:86:4a:23:cb:55:bd:5b:95:c2:59:86:c9:b6: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 45.59.32.0/20 50.5.0.0/16 66.42.128.0/17 66.117.192.0/18 66.161.128.0/17 69.61.128.0/17 72.49.0.0/16 74.83.0.0/16 74.215.0.0/16 131.241.0.0/16 163.182.0.0/17 192.24.128.0/17 208.102.0.0/16 216.68.0.0/16 216.196.128.0/17 IPv6: 2600:2b00::/28 2607:f500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395273 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:4c:c1:c9:ef:26:1f:74:dc:3b:ee:03:78:89:fb:20:47:89: c8:f2:f6:59:e9:1d:90:83:98:5a:4e:c2:93:2c:01:2f:ca:f2: f9:80:fe:04:63:78:f5:6a:49:ab:3b:cc:58:09:1b:79:fb:d3: 72:48:94:35:c3:03:54:26:ed:c5:60:b6:68:9e:b5:b9:22:d5: 8b:71:ae:37:78:1b:57:58:d6:41:af:35:cd:98:63:4e:35:3b: 14:d3:f7:31:7f:4f:c5:f3:98:5e:4e:7e:59:e9:92:a4:ac:99: 22:9f:74:30:57:ad:c4:30:6b:9b:57:97:76:2a:a7:90:9d:2f: fd:05:ad:47:39:6b:e4:44:ad:d2:ef:08:b1:c6:e0:27:62:df: dc:ac:94:78:97:99:cb:60:0b:46:cc:26:33:49:ca:33:cd:82: b4:43:99:38:d3:1b:93:4c:30:9f:4f:4b:0e:83:ce:f7:45:ad: bf:e0:6f:73:71:ea:14:16:8c:9d:6c:27:73:7d:65:61:c9:43: 18:e8:77:05:74:b7:77:b5:d8:15:db:97:a6:1c:09:b0:f2:1a: 94:1d:8c:f7:23:c9:4b:dc:f1:92:42:24:25:10:21:a4:df:cc: 12:6f:ba:46:28:60:70:6a:98:12:ba:24:9f:d4:d8:01:dc:ac: 05:30:91:f8 -----BEGIN CERTIFICATE----- MIIHbTCCBlWgAwIBAgIUAQ0Mn0MoWEKZgUa+AhcFeEuiXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcxOTE1MDQyNVoXDTI1MTAyMTE1MDQyNVowLzEtMCsGA1UEAxMk MWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQzYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5J0SHufPC4qLePb4WuZ0dL1EHS3xcGm3GvT cQREt+0Tbyx8/4OVuLYBWo4kmW/jzDimunHGYl2efLWPYm8JNc7IMGU9jwArer/j VVeO0fwHZB3QeWYuLcScpWoszcPvgCMhoDrSErwKDTzvuRqlmfRXb6/BwocajDZ/ rTZ9jwW91sEle1IxCscQ36zhwb+ToHI9Ku+UxAjSzoxQ9PqPy+MflQUrzf6vkO/E dAOqqhARbkpM4kL9Fw82RRDEhL1hOp3B9tmavQ5WIJJayXj67SCMrerQlAw4VRpZ LEpDnslOl4D8gMA5AwqCpDPRUZQAQ4ZKI8tVvVuVwlmGybZpUQIDAQABo4IEfzCC BHswHQYDVR0OBBYEFPw1V8kOPbUZBYWkp+cQ6WVqBGeHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x ZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFkNjM5MzY2LWMwNDQtNDU2ZS1i OGM4LTBkZTA0YTU0M2EwYy8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1 NDNhMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwgYIGCCsGAQUF BwEHAQH/BHMwcTBZBAIAATBTAwQELTsgAwMAMgUDBAdCKoADBAZCdcADBAdCoYAD BAdFPYADAwBIMQMDAEpTAwMAStcDAwCD8QMEB6O2AAMEB8AYgAMDANBmAwMA2EQD BAfYxIAwFAQCAAIwDgMFBCYAKwADBQAmB/UAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwYICTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBmTMHJ7yYfdNw77gN4ifsgR4nI8vZZ6R2Qg5haTsKT LAEvyvL5gP4EY3j1akmrO8xYCRt5+9NySJQ1wwNUJu3FYLZonrW5ItWLca43eBtX WNZBrzXNmGNONTsU0/cxf0/F85heTn5Z6ZKkrJkin3QwV63EMGubV5d2KqeQnS/9 Ba1HOWvkRK3S7wixxuAnYt/crJR4l5nLYAtGzCYzScozzYK0Q5k40xuTTDCfT0sO g873Ra2/4G9zceoUFoydbCdzfWVhyUMY6HcFdLd3tdgV25emHAmw8hqUHYz3I8lL 3PGSQiQlECGk38wSb7pGKGBwapgSuiSf1NgB3KwFMJH4 -----END CERTIFICATE-----Generated at Fri May 10 16:51:43 2024 by rpki-client on console-ams.rpki-client.org