$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer File: 67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer (raw, json) Hash identifier: knwTVraIEI2CEq4vGVolwydOny6e9viA3+ASryu0Fkc= Subject key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285843F4261E6C74D8DEC8F2ABED00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Nov 2023 19:06:15 +0000 Certificate not after: Sat 22 Nov 2025 09:05:33 +0000 Subordinate resources: AS: 14353 AS: 14838 IP: 64.7.220.0/24 IP: 64.95.157.0/24 IP: 65.38.108.0/24 IP: 70.42.116.0/24 IP: 70.42.119.0/24 IP: 199.15.160.0/22 IP: 216.52.12.0/24 IP: 216.52.15.0/24 IP: 216.52.17.0/24 IP: 216.52.21.0/24 IP: 2620:5:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:f4:26:1e:6c:74:d8:de:c8:f2:ab:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 20 19:06:15 2023 GMT Not After : Nov 22 09:05:33 2025 GMT Subject: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:34:d8:d9:2c:99:21:63:2c:23:1e:b4:c9:4c: e7:3c:8a:94:0e:aa:19:b6:14:99:87:6f:9f:15:db: 4c:c7:6c:56:10:8a:6c:4a:56:69:a4:37:e1:02:30: 36:84:34:7c:88:90:19:70:3b:17:a2:f0:ce:5d:22: a0:e5:77:c0:a6:16:6a:b8:c8:e8:12:f0:11:48:31: 79:78:25:e3:89:10:09:9b:45:bb:e2:5c:be:d0:18: ea:0d:2e:1d:95:ec:14:e6:d0:26:8a:1a:b0:d0:ab: d7:e8:93:6a:92:06:f3:95:f8:d0:fe:cb:e8:1f:c9: 94:e9:d1:98:37:a3:b0:42:15:23:c1:17:d4:55:1b: 87:9f:02:a4:73:f7:43:61:66:85:d4:05:0f:47:6d: d9:3c:5d:b2:8f:dd:30:03:01:be:0b:8f:59:5d:87: a6:03:31:8c:61:f8:6f:7b:71:c0:75:03:15:b6:17: 44:41:f6:69:4e:ad:bf:a4:dc:22:38:1f:47:13:c2: 5a:20:e5:02:f5:28:28:71:46:4b:a1:26:f6:c6:0d: 30:15:dd:57:ee:05:bf:68:9c:d8:09:d6:aa:57:09: 32:b4:f6:4d:18:0d:83:e5:42:5c:07:98:17:c3:de: a8:c1:12:7c:c3:10:07:75:6e:6f:80:e6:cd:8d:8d: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.7.220.0/24 64.95.157.0/24 65.38.108.0/24 70.42.116.0/24 70.42.119.0/24 199.15.160.0/22 216.52.12.0/24 216.52.15.0/24 216.52.17.0/24 216.52.21.0/24 IPv6: 2620:5:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14353 14838 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c4:39:a7:8c:ea:9f:ab:1d:30:2f:08:76:c4:b8:e9:a4:57: 17:17:d4:c1:73:2b:a4:5c:3f:1b:37:ba:00:c5:78:45:a3:ff: 95:6e:0c:5e:19:ff:bd:db:54:c8:a0:6b:d1:de:75:a9:8a:e6: b5:fe:f1:a8:18:fa:95:0e:de:da:53:3a:f6:8b:ce:d8:30:44: b8:cd:cc:ae:33:46:c7:fa:e7:b0:58:65:00:2d:b8:24:ee:02: 08:23:c9:24:07:1b:2a:45:41:d0:b7:4f:43:69:7f:20:5e:6c: 1a:6b:1b:e6:ff:da:55:5f:b2:41:8c:80:6c:db:05:88:25:11: 94:01:f4:8b:03:d3:52:7c:30:8d:ee:38:8f:fc:e5:78:40:c2: 65:3d:95:65:f7:46:48:16:87:a4:ab:c8:87:c7:09:2c:2b:f0: f4:34:58:b9:23:e3:60:7f:f7:3f:ba:17:6c:c7:f0:45:c0:6f: cd:37:b2:bb:9f:40:57:db:53:fe:37:f3:ba:94:17:a8:22:6d: 2d:01:0d:6e:f8:25:1b:45:9f:23:29:83:c9:8a:95:81:bb:56: fb:8e:f8:5f:c4:87:2e:92:25:c9:ec:aa:53:53:2c:4f:7f:df: 95:4d:cd:5b:ed:b2:49:ef:e7:18:10:9d:84:17:40:f0:95:b2: 20:cd:c1:db -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEP0Jh5sdNjeyPKr7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMTEyMDE5MDYxNVoXDTI1MTEyMjA5MDUzM1owLzEtMCsGA1UEAxMk NjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThlNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDTY2SyZIWMsIx60yUznPIqUDqoZthSZh2+f FdtMx2xWEIpsSlZppDfhAjA2hDR8iJAZcDsXovDOXSKg5XfAphZquMjoEvARSDF5 eCXjiRAJm0W74ly+0BjqDS4dlewU5tAmihqw0KvX6JNqkgbzlfjQ/svoH8mU6dGY N6OwQhUjwRfUVRuHnwKkc/dDYWaF1AUPR23ZPF2yj90wAwG+C49ZXYemAzGMYfhv e3HAdQMVthdEQfZpTq2/pNwiOB9HE8JaIOUC9SgocUZLoSb2xg0wFd1X7gW/aJzY CdaqVwkytPZNGA2D5UJcB5gXw96owRJ8wxAHdW5vgObNjY1RwwIDAQABo4IEZTCC BGEwHQYDVR0OBBYEFDzV9pxToOO21z0CMLThLQMobDBoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82 N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzY3YzhlMWEyLTY5NTUtNDVhYS1i ZDU4LWMyZWMyNmU4ZTVlYy82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZl OGU1ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwZgYIKwYBBQUH AQcBAf8EVzBVMEIEAgABMDwDBABAB9wDBABAX50DBABBJmwDBABGKnQDBABGKncD BALHD6ADBADYNAwDBADYNA8DBADYNBEDBADYNBUwDwQCAAIwCQMHACYgAAXAADAd BggrBgEFBQcBCAEB/wQOMAygCjAIAgI4EQICOfYwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGsQ5p4zqn6sd MC8IdsS46aRXFxfUwXMrpFw/Gze6AMV4RaP/lW4MXhn/vdtUyKBr0d51qYrmtf7x qBj6lQ7e2lM69ovO2DBEuM3MrjNGx/rnsFhlAC24JO4CCCPJJAcbKkVB0LdPQ2l/ IF5sGmsb5v/aVV+yQYyAbNsFiCURlAH0iwPTUnwwje44j/zleEDCZT2VZfdGSBaH pKvIh8cJLCvw9DRYuSPjYH/3P7oXbMfwRcBvzTeyu59AV9tT/jfzupQXqCJtLQEN bvglG0WfIymDyYqVgbtW+474X8SHLpIlyeyqU1MsT3/flU3NW+2ySe/nGBCdhBdA 8JWyIM3B2w== -----END CERTIFICATE-----Generated at Thu May 9 21:06:17 2024 by rpki-client on console-fra.rpki-client.org