$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer File: 83220b5e-8104-4c4e-bbce-305b174b684a.cer (raw, json) Hash identifier: CuNVW92N6q9qpt8Ier54ILiorMepcMb/EgcQom6wRjg= Subject key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858479C099F423F16147D2A2E4F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Oct 2024 00:45:26 +0000 Certificate not after: Sun 24 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 847 -- 850 AS: 853 -- 854 AS: 26309 AS: 26393 AS: 26628 AS: 27300 AS: 30025 AS: 46500 AS: 400074 AS: 400995 IP: 23.137.120.0 -- 23.137.125.255 IP: 23.152.192.0 -- 23.152.194.255 IP: 23.174.176.0/24 IP: 64.234.224.0/22 IP: 149.112.14.0 -- 149.112.16.255 IP: 149.112.23.0/24 IP: 149.112.33.0 -- 149.112.38.255 IP: 172.82.0.0/22 IP: 206.80.232.0/24 IP: 2001:504:79::/48 IP: 2001:504:106:: -- 2001:504:108:ffff:ffff:ffff:ffff:ffff IP: 2001:504:113::/48 IP: 2001:504:119::/48 IP: 2001:504:120:: -- 2001:504:124:ffff:ffff:ffff:ffff:ffff IP: 2620:134:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:09:9f:42:3f:16:14:7d:2a:2e:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 21 00:45:26 2024 GMT Not After : Jan 24 01:45:26 2027 GMT Subject: CN=83220b5e-8104-4c4e-bbce-305b174b684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:2c:7b:63:fe:15:b0:70:51:6d:9a:bf:9f: 62:40:f1:bb:4c:f3:5b:55:b8:f3:4f:c6:31:07:66: d4:92:04:e1:25:30:18:e1:c1:68:34:10:86:63:16: 09:57:47:11:8c:aa:ab:d6:e0:eb:45:cf:95:a6:36: 27:a5:87:41:19:23:2c:ed:e6:22:db:ad:79:d2:a2: 23:c9:cf:14:d7:10:b3:55:f1:49:f7:11:0a:79:33: 3d:ad:cc:eb:14:a2:26:18:2d:de:30:ad:85:0d:8e: 84:a8:bc:93:10:40:a4:e3:83:96:eb:14:75:85:5f: e7:4d:1e:c9:aa:24:c4:54:7b:dc:f2:cf:b1:a5:a4: bd:cf:0f:45:38:66:5c:8f:7a:40:c8:7a:1e:a8:ec: 80:aa:ae:5e:80:6c:90:f3:9a:d4:f2:01:35:89:40: e5:d8:35:13:ab:b3:24:7e:4f:6e:e7:66:ec:06:1e: 2b:30:46:09:4a:26:f3:cd:b7:cf:d8:dd:e1:cd:c7: 37:75:61:4e:a0:8c:35:1b:7b:8e:8b:dd:d8:ce:21: 0c:22:b4:60:b7:a7:00:4c:08:c2:8f:b1:3d:8a:7c: d9:b5:7a:ed:17:f9:92:a8:06:06:5b:a2:80:8e:36: b3:49:51:cd:ed:fa:2f:46:c3:4c:9f:28:12:57:19: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.137.120.0-23.137.125.255 23.152.192.0-23.152.194.255 23.174.176.0/24 64.234.224.0/22 149.112.14.0-149.112.16.255 149.112.23.0/24 149.112.33.0-149.112.38.255 172.82.0.0/22 206.80.232.0/24 IPv6: 2001:504:79::/48 2001:504:106::-2001:504:108:ffff:ffff:ffff:ffff:ffff 2001:504:113::/48 2001:504:119::/48 2001:504:120::-2001:504:124:ffff:ffff:ffff:ffff:ffff 2620:134:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 847-850 853-854 26309 26393 26628 27300 30025 46500 400074 400995 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ad:4a:dc:8b:b5:94:00:ad:33:80:88:5f:76:85:18:ec:39: c5:6a:e4:d5:ed:3a:dc:41:fd:da:ad:3c:0b:e5:97:9d:bc:14: 25:96:b3:a4:ce:37:f0:94:7f:be:d4:7a:90:b5:97:f5:31:43: f3:dc:99:b0:8a:dc:8b:96:37:e0:fa:e5:53:c5:89:d2:d0:38: 3f:17:07:c4:66:9f:1b:a2:9d:38:4f:c3:73:ec:58:e5:9b:f1: e2:35:1c:e8:64:2c:37:81:15:58:23:97:1c:fc:cd:01:48:7d: 14:b5:8c:49:e3:e6:81:e9:df:7f:3b:e0:02:47:7b:60:7c:99: 5e:63:77:5f:fb:03:bc:25:9a:07:22:e9:b8:64:f3:8b:c5:bd: 19:3b:8f:5a:e0:80:b9:bd:c9:a6:95:be:94:28:1b:6a:2b:c9: 37:75:c7:d3:fa:53:45:7a:d9:e5:76:2c:b2:16:5e:33:2a:de: 7c:ec:0d:1a:15:51:3a:4b:0b:aa:99:c0:7d:2b:0b:22:bc:31: 78:40:36:31:be:61:fd:d4:27:f8:85:34:54:43:e5:2c:6d:fa: 33:b5:70:33:69:e5:92:d0:7b:62:66:2f:3b:15:97:86:58:4d: 49:df:b6:cf:57:a9:0b:f1:ab:e1:d5:03:79:b1:3d:ff:3e:b4: 51:18:f4:55 -----BEGIN CERTIFICATE----- MIIH4jCCBsqgAwIBAgIUAQ0Mn0MoWEecCZ9CPxYUfSouTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAyMTAwNDUyNloXDTI3MDEyNDAxNDUyNlowLzEtMCsGA1UEAxMk ODMyMjBiNWUtODEwNC00YzRlLWJiY2UtMzA1YjE3NGI2ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIcse2P+FbBwUW2av59iQPG7TPNbVbjzT8Yx B2bUkgThJTAY4cFoNBCGYxYJV0cRjKqr1uDrRc+VpjYnpYdBGSMs7eYi26150qIj yc8U1xCzVfFJ9xEKeTM9rczrFKImGC3eMK2FDY6EqLyTEECk44OW6xR1hV/nTR7J qiTEVHvc8s+xpaS9zw9FOGZcj3pAyHoeqOyAqq5egGyQ85rU8gE1iUDl2DUTq7Mk fk9u52bsBh4rMEYJSibzzbfP2N3hzcc3dWFOoIw1G3uOi93YziEMIrRgt6cATAjC j7E9inzZtXrtF/mSqAYGW6KAjjazSVHN7fovRsNMnygSVxksFQIDAQABo4IE9DCC BPAwHQYDVR0OBBYEFKFoU4TEb3hqY79peJXAYzII+VOpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0YjY4NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgzMjIwYjVlLTgxMDQtNGM0ZS1i YmNlLTMwNWIxNzRiNjg0YS84MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0 YjY4NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwgcUGCCsGAQUF BwEHAQH/BIG1MIGyMFwEAgABMFYwDAMEAxeJeAMEAReJfDAMAwQGF5jAAwQAF5jC AwQAF66wAwQCQOrgMAwDBAGVcA4DBACVcBADBACVcBcwDAMEAJVwIQMEAJVwJgME AqxSAAMEAM5Q6DBSBAIAAjBMAwcAIAEFBAB5MBIDBwEgAQUEAQYDBwAgAQUEAQgD BwAgAQUEARMDBwAgAQUEARkwEgMHBSABBQQBIAMHACABBQQBJAMHBCYgATQQADBM BggrBgEFBQcBCAEB/wQ9MDugOTA3MAgCAgNPAgIDUjAIAgIDVQICA1YCAmbFAgJn GQICaAQCAmqkAgJ1SQIDALWkAgMGGsoCAwYeYzBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHrUrci7WUAK0z gIhfdoUY7DnFauTV7TrcQf3arTwL5ZedvBQllrOkzjfwlH++1HqQtZf1MUPz3Jmw ityLljfg+uVTxYnS0Dg/FwfEZp8bop04T8Nz7Fjlm/HiNRzoZCw3gRVYI5cc/M0B SH0UtYxJ4+aB6d9/O+ACR3tgfJleY3df+wO8JZoHIum4ZPOLxb0ZO49a4IC5vcmm lb6UKBtqK8k3dcfT+lNFetnldiyyFl4zKt587A0aFVE6SwuqmcB9KwsivDF4QDYx vmH91Cf4hTRUQ+UsbfoztXAzaeWS0HtiZi87FZeGWE1J37bPV6kL8avh1QN5sT3/ PrRRGPRV -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:56 2024 by rpki-client on console-ams.rpki-client.org