$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer File: 83220b5e-8104-4c4e-bbce-305b174b684a.cer (raw, json) Hash identifier: 8m9WlkmciguGpx+hONvGGX9YnW5SUJOdfgOqUL4Li3s= Subject key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285845915C4B1B552D94EEBBD49380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Apr 2024 19:24:15 +0000 Certificate not after: Mon 20 Oct 2025 16:18:19 +0000 Subordinate resources: AS: 847 -- 850 AS: 853 -- 854 AS: 26309 AS: 26393 AS: 26628 AS: 27300 AS: 30025 AS: 46500 AS: 400074 AS: 400995 IP: 23.137.120.0 -- 23.137.125.255 IP: 23.152.192.0 -- 23.152.194.255 IP: 23.174.176.0/24 IP: 64.234.224.0/22 IP: 149.112.14.0 -- 149.112.16.255 IP: 149.112.23.0/24 IP: 149.112.33.0 -- 149.112.38.255 IP: 172.82.0.0/22 IP: 206.80.232.0/24 IP: 2001:504:79::/48 IP: 2001:504:106:: -- 2001:504:108:ffff:ffff:ffff:ffff:ffff IP: 2001:504:113::/48 IP: 2001:504:119::/48 IP: 2001:504:120:: -- 2001:504:124:ffff:ffff:ffff:ffff:ffff IP: 2620:134:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:91:5c:4b:1b:55:2d:94:ee:bb:d4:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Apr 16 19:24:15 2024 GMT Not After : Oct 20 16:18:19 2025 GMT Subject: CN=83220b5e-8104-4c4e-bbce-305b174b684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:2c:7b:63:fe:15:b0:70:51:6d:9a:bf:9f: 62:40:f1:bb:4c:f3:5b:55:b8:f3:4f:c6:31:07:66: d4:92:04:e1:25:30:18:e1:c1:68:34:10:86:63:16: 09:57:47:11:8c:aa:ab:d6:e0:eb:45:cf:95:a6:36: 27:a5:87:41:19:23:2c:ed:e6:22:db:ad:79:d2:a2: 23:c9:cf:14:d7:10:b3:55:f1:49:f7:11:0a:79:33: 3d:ad:cc:eb:14:a2:26:18:2d:de:30:ad:85:0d:8e: 84:a8:bc:93:10:40:a4:e3:83:96:eb:14:75:85:5f: e7:4d:1e:c9:aa:24:c4:54:7b:dc:f2:cf:b1:a5:a4: bd:cf:0f:45:38:66:5c:8f:7a:40:c8:7a:1e:a8:ec: 80:aa:ae:5e:80:6c:90:f3:9a:d4:f2:01:35:89:40: e5:d8:35:13:ab:b3:24:7e:4f:6e:e7:66:ec:06:1e: 2b:30:46:09:4a:26:f3:cd:b7:cf:d8:dd:e1:cd:c7: 37:75:61:4e:a0:8c:35:1b:7b:8e:8b:dd:d8:ce:21: 0c:22:b4:60:b7:a7:00:4c:08:c2:8f:b1:3d:8a:7c: d9:b5:7a:ed:17:f9:92:a8:06:06:5b:a2:80:8e:36: b3:49:51:cd:ed:fa:2f:46:c3:4c:9f:28:12:57:19: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.137.120.0-23.137.125.255 23.152.192.0-23.152.194.255 23.174.176.0/24 64.234.224.0/22 149.112.14.0-149.112.16.255 149.112.23.0/24 149.112.33.0-149.112.38.255 172.82.0.0/22 206.80.232.0/24 IPv6: 2001:504:79::/48 2001:504:106::-2001:504:108:ffff:ffff:ffff:ffff:ffff 2001:504:113::/48 2001:504:119::/48 2001:504:120::-2001:504:124:ffff:ffff:ffff:ffff:ffff 2620:134:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 847-850 853-854 26309 26393 26628 27300 30025 46500 400074 400995 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:94:52:59:1f:17:48:d6:d2:f3:f1:26:dd:e0:80:fb:73:a4: 33:99:47:ae:a2:b7:cf:9a:fe:11:5f:05:27:a8:59:34:97:bc: 4d:69:a3:ae:96:98:b4:a5:91:5d:03:43:91:b9:af:b7:eb:fb: 17:b9:e1:2a:97:f0:11:ca:a7:6a:96:47:a2:a4:a4:36:b9:54: 9c:ac:ec:3e:fd:42:0d:43:0f:5c:8d:ec:17:a0:3b:95:2c:29: 62:4a:5d:f7:b9:8a:ee:cb:7d:ba:2b:da:0d:ed:76:43:20:1e: 4c:06:d8:07:2f:ce:54:bf:cc:f5:1e:fb:d7:c8:fd:40:9b:d4: dc:91:9a:50:6d:ee:27:b4:f9:3a:6f:93:85:48:ab:7c:54:ce: 02:47:a9:51:f9:01:52:df:c7:d4:38:32:57:ce:3c:1b:d5:98: 35:ce:b7:d3:48:20:90:1f:a4:8f:e2:36:7b:3f:74:41:2f:41: 63:20:72:c5:e8:de:5d:ef:fa:61:2d:77:e9:e2:52:2d:53:5a: 84:93:91:ec:f6:58:ae:71:2c:f0:5e:c9:e1:77:0c:e7:b6:fc: f1:15:df:28:7a:e5:71:44:5c:e8:0a:83:24:06:b7:10:13:15: 14:ec:35:78:73:30:38:24:d5:08:e0:78:24:1e:9b:cb:96:1c: 4f:fe:06:ad -----BEGIN CERTIFICATE----- MIIH4jCCBsqgAwIBAgIUAQ0Mn0MoWEWRXEsbVS2U7rvUk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDQxNjE5MjQxNVoXDTI1MTAyMDE2MTgxOVowLzEtMCsGA1UEAxMk ODMyMjBiNWUtODEwNC00YzRlLWJiY2UtMzA1YjE3NGI2ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIcse2P+FbBwUW2av59iQPG7TPNbVbjzT8Yx B2bUkgThJTAY4cFoNBCGYxYJV0cRjKqr1uDrRc+VpjYnpYdBGSMs7eYi26150qIj yc8U1xCzVfFJ9xEKeTM9rczrFKImGC3eMK2FDY6EqLyTEECk44OW6xR1hV/nTR7J qiTEVHvc8s+xpaS9zw9FOGZcj3pAyHoeqOyAqq5egGyQ85rU8gE1iUDl2DUTq7Mk fk9u52bsBh4rMEYJSibzzbfP2N3hzcc3dWFOoIw1G3uOi93YziEMIrRgt6cATAjC j7E9inzZtXrtF/mSqAYGW6KAjjazSVHN7fovRsNMnygSVxksFQIDAQABo4IE9DCC BPAwHQYDVR0OBBYEFKFoU4TEb3hqY79peJXAYzII+VOpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0YjY4NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgzMjIwYjVlLTgxMDQtNGM0ZS1i YmNlLTMwNWIxNzRiNjg0YS84MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0 YjY4NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwgcUGCCsGAQUF BwEHAQH/BIG1MIGyMFwEAgABMFYwDAMEAxeJeAMEAReJfDAMAwQGF5jAAwQAF5jC AwQAF66wAwQCQOrgMAwDBAGVcA4DBACVcBADBACVcBcwDAMEAJVwIQMEAJVwJgME AqxSAAMEAM5Q6DBSBAIAAjBMAwcAIAEFBAB5MBIDBwEgAQUEAQYDBwAgAQUEAQgD BwAgAQUEARMDBwAgAQUEARkwEgMHBSABBQQBIAMHACABBQQBJAMHBCYgATQQADBM BggrBgEFBQcBCAEB/wQ9MDugOTA3MAgCAgNPAgIDUjAIAgIDVQICA1YCAmbFAgJn GQICaAQCAmqkAgJ1SQIDALWkAgMGGsoCAwYeYzBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdlFJZHxdI1tLz 8Sbd4ID7c6QzmUeuorfPmv4RXwUnqFk0l7xNaaOulpi0pZFdA0ORua+36/sXueEq l/ARyqdqlkeipKQ2uVScrOw+/UINQw9cjewXoDuVLCliSl33uYruy326K9oN7XZD IB5MBtgHL85Uv8z1HvvXyP1Am9TckZpQbe4ntPk6b5OFSKt8VM4CR6lR+QFS38fU ODJXzjwb1Zg1zrfTSCCQH6SP4jZ7P3RBL0FjIHLF6N5d7/phLXfp4lItU1qEk5Hs 9liucSzwXsnhdwzntvzxFd8oeuVxRFzoCoMkBrcQExUU7DV4czA4JNUI4HgkHpvL lhxP/gat -----END CERTIFICATE-----Generated at Thu May 9 20:34:18 2024 by rpki-client on console-ams.rpki-client.org