$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer File: 9df142df-6de2-47dc-be4f-bf09bdec0551.cer (raw, json) Hash identifier: riTleUHebop0wNQSztooeUOVZNTNcj60ACD4V92zkU4= Subject key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584327FECD6840BB6355C5F442C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Sep 2023 16:02:07 +0000 Certificate not after: Thu 11 Dec 2025 17:02:07 +0000 Subordinate resources: AS: 19187 AS: 19229 AS: 19379 AS: 27184 AS: 394453 IP: 69.4.0.0/19 IP: 170.118.0.0/17 IP: 171.74.0.0/16 IP: 198.134.142.0/24 IP: 198.160.64.0/19 IP: 198.212.157.0 -- 198.212.158.255 IP: 199.253.136.0/21 IP: 216.157.224.0/19 IP: 2604:97c0::/32 IP: 2607:2e00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:27:fe:cd:68:40:bb:63:55:c5:f4:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 8 16:02:07 2023 GMT Not After : Dec 11 17:02:07 2025 GMT Subject: CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:3d:ef:e6:ce:79:d9:35:54:42:52:69:9d: 63:78:b2:31:68:41:2c:17:4f:0d:98:d7:c8:2e:f2: 9c:ac:b0:8e:41:2d:5d:3e:e3:da:34:43:35:45:e1: 78:41:31:69:31:4a:c6:fe:49:2d:aa:31:3f:bc:0a: bc:7e:87:f0:97:35:03:e0:1a:f5:31:ba:83:ef:2e: f6:c3:1e:23:b8:27:94:97:99:32:bf:b0:c1:75:66: cc:3d:34:cb:19:e3:22:11:0f:8a:9a:c0:6a:10:0a: 00:30:14:e3:0e:77:e5:54:6d:1f:e2:55:7d:f2:b2: 6b:57:d1:f2:f8:cf:07:6b:7a:d5:7e:c9:99:10:63: ad:68:82:17:a5:dd:b9:c0:88:f6:3f:74:93:3f:e4: 33:97:26:67:5a:f6:6a:26:6c:50:51:3a:38:e4:f1: 97:72:95:c6:3f:6c:c3:53:58:a4:88:ed:37:56:b7: c6:83:ee:54:66:c0:3d:22:01:a7:da:f4:8d:cc:42: 33:aa:47:68:09:a8:5c:b6:90:e7:83:44:98:58:96: ca:60:f4:f0:85:2b:2c:ed:6d:7a:5b:c2:8f:a8:73: f2:f4:ef:9f:ee:e8:2a:35:0a:fa:1c:56:f1:9d:60: 21:cf:31:ce:9b:fa:5c:24:5f:16:e6:e6:21:61:5d: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 69.4.0.0/19 170.118.0.0/17 171.74.0.0/16 198.134.142.0/24 198.160.64.0/19 198.212.157.0-198.212.158.255 199.253.136.0/21 216.157.224.0/19 IPv6: 2604:97c0::/32 2607:2e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19187 19229 19379 27184 394453 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8d:f1:d3:86:05:3a:17:5a:65:f1:a1:87:ef:5c:9d:9b:b8: 7c:2e:f3:75:dc:fa:5d:fc:b9:bc:47:93:de:3f:37:64:55:f3: cc:38:cb:c0:e0:42:b1:c2:89:9f:d2:6b:1b:74:3f:c4:c5:2e: 68:d6:6c:89:af:a8:14:a4:95:6d:75:86:cc:ab:ea:37:82:73: 8e:23:70:f5:07:35:e6:5e:bc:1e:ac:31:d3:12:00:cd:25:9d: 67:16:21:84:8f:28:b7:a4:81:d3:03:0b:03:37:7a:82:06:9a: f2:5a:a8:08:db:29:a2:8f:10:4a:cf:68:13:ea:b8:7e:af:9b: e2:bf:33:70:41:66:25:63:f9:dd:f6:8a:00:f1:c3:6c:e3:30: b5:5c:7e:98:c5:cd:92:a3:d3:51:ea:d2:f2:eb:01:3e:4c:45: bb:c1:64:ef:dc:20:f6:ed:6c:7d:1a:f2:20:92:66:da:0c:8b: 45:5b:b4:60:4b:46:7b:8f:79:e1:a1:da:0d:b9:00:ec:d0:46: 57:0c:a5:d4:e4:0e:6e:95:9c:a1:24:5a:e2:84:c2:22:9a:7f: 62:30:c8:0d:9d:3c:ed:cf:bb:a9:1f:da:fd:04:a2:a9:3a:ac: 9f:ea:e8:a0:d5:35:ff:35:52:dc:25:2a:ac:40:20:7d:1b:0a: a2:b5:04:bc -----BEGIN CERTIFICATE----- MIIHYDCCBkigAwIBAgIUAQ0Mn0MoWEMn/s1oQLtjVcX0QsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkwODE2MDIwN1oXDTI1MTIxMTE3MDIwN1owLzEtMCsGA1UEAxMk OWRmMTQyZGYtNmRlMi00N2RjLWJlNGYtYmYwOWJkZWMwNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/I97+bOedk1VEJSaZ1jeLIxaEEsF08NmNfI LvKcrLCOQS1dPuPaNEM1ReF4QTFpMUrG/kktqjE/vAq8fofwlzUD4Br1MbqD7y72 wx4juCeUl5kyv7DBdWbMPTTLGeMiEQ+KmsBqEAoAMBTjDnflVG0f4lV98rJrV9Hy +M8Ha3rVfsmZEGOtaIIXpd25wIj2P3STP+QzlyZnWvZqJmxQUTo45PGXcpXGP2zD U1ikiO03VrfGg+5UZsA9IgGn2vSNzEIzqkdoCahctpDng0SYWJbKYPTwhSss7W16 W8KPqHPy9O+f7ugqNQr6HFbxnWAhzzHOm/pcJF8W5uYhYV0mGwIDAQABo4IEcjCC BG4wHQYDVR0OBBYEFPadWT3aVmqZvYapFWfGvmDX2byHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 ZGYxNDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5YmRlYzA1NTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzlkZjE0MmRmLTZkZTItNDdkYy1i ZTRmLWJmMDliZGVjMDU1MS85ZGYxNDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5YmRl YzA1NTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwZgYIKwYBBQUH AQcBAf8EVzBVMD0EAgABMDcDBAVFBAADBAeqdgADAwCrSgMEAMaGjgMEBcagQDAM AwQAxtSdAwQAxtSeAwQDx/2IAwQF2J3gMBQEAgACMA4DBQAmBJfAAwUAJgcuADAq BggrBgEFBQcBCAEB/wQbMBmgFzAVAgJK8wICSx0CAkuzAgJqMAIDBgTVMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAGiN8dOGBToXWmXxoYfvXJ2buHwu83Xc+l38ubxHk94/N2RV88w4y8DgQrHC iZ/Saxt0P8TFLmjWbImvqBSklW11hsyr6jeCc44jcPUHNeZevB6sMdMSAM0lnWcW IYSPKLekgdMDCwM3eoIGmvJaqAjbKaKPEErPaBPquH6vm+K/M3BBZiVj+d32igDx w2zjMLVcfpjFzZKj01Hq0vLrAT5MRbvBZO/cIPbtbH0a8iCSZtoMi0VbtGBLRnuP eeGh2g25AOzQRlcMpdTkDm6VnKEkWuKEwiKaf2IwyA2dPO3Pu6kf2v0Eoqk6rJ/q 6KDVNf81UtwlKqxAIH0bCqK1BLw= -----END CERTIFICATE-----Generated at Thu May 9 20:34:25 2024 by rpki-client on console-ams.rpki-client.org