$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer File: e0927227-fbc8-4924-89af-1885637cb07c.cer (raw, json) Hash identifier: hkV8b1sOSB+xlliN9Tuedhtfhu4JRHAgidIWNjnIVhQ= Subject key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858472F28F19608BE955A97A7D640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Sep 2024 00:45:26 +0000 Certificate not after: Wed 16 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 843 AS: 36516 AS: 55002 AS: 397144 AS: 398349 IP: 23.158.32.0/24 IP: 72.19.3.0/24 IP: 107.162.0.0/16 IP: 2602:fa75::/36 IP: 2602:fe2b::/36 IP: 2604:e180::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:28:f1:96:08:be:95:5a:97:a7:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 12 00:45:26 2024 GMT Not After : Dec 16 01:45:26 2026 GMT Subject: CN=e0927227-fbc8-4924-89af-1885637cb07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:5a:10:05:88:82:cb:2e:95:5a:8a:50:9a: f5:de:ec:e2:6f:73:87:5e:c7:e7:6d:71:19:73:91: b1:69:5b:88:4a:de:36:0f:c4:9c:01:37:22:d4:64: 4a:91:ee:31:59:fb:b2:20:e0:e8:3d:26:58:68:9b: 50:f9:b0:44:01:1d:ec:92:8f:2f:ca:94:6e:73:3e: 3a:52:52:cc:45:21:f1:0a:e7:0f:a0:7a:4a:29:65: de:d8:11:d0:64:c8:c5:05:33:aa:4d:84:ef:4c:f4: 29:42:58:ff:c3:cd:14:66:f7:8d:43:91:62:c9:90: 1c:98:ee:8a:de:05:48:d4:c9:37:c6:32:64:28:3c: 8a:64:23:6d:de:9d:11:b3:88:bb:ec:9f:97:c0:40: 92:7b:ba:f0:0e:85:f7:8f:d7:ef:21:6d:93:71:6a: 36:a7:f7:fe:fe:1d:a3:b0:11:9d:ae:74:12:5a:0c: 64:f1:ef:44:be:5c:ce:0e:c3:51:ec:80:c4:2d:26: 77:a5:a6:41:3b:e8:f7:68:5a:ff:f0:f0:a8:b0:10: bf:08:d3:3e:35:15:56:84:2e:5d:8c:22:ee:48:5f: 84:b0:c7:bf:a9:34:d6:26:f1:53:f6:38:2f:3d:1f: 0d:ae:2f:69:c1:60:e5:0a:0f:a8:91:66:5c:66:09: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.158.32.0/24 72.19.3.0/24 107.162.0.0/16 IPv6: 2602:fa75::/36 2602:fe2b::/36 2604:e180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 843 36516 55002 397144 398349 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:91:50:e2:a1:c2:01:90:0a:8e:c3:1a:ad:6b:3b:00:e7:24: 0c:a6:3f:7f:7e:e7:1b:8f:99:d4:3e:3e:9f:18:dd:06:99:92: 10:e8:c1:a5:27:2a:fb:20:8b:91:0b:07:f9:ce:de:80:b3:ae: 67:2e:a7:cc:10:43:16:70:9d:6e:af:ce:7f:63:40:3b:88:71: 29:18:29:0c:d5:26:94:bc:60:22:d0:e1:c4:23:9c:b7:63:df: f0:ec:5b:9f:1b:18:78:41:46:1e:44:59:ad:9c:17:b0:79:e6: 2b:23:de:37:04:d5:45:63:07:bd:8b:b1:d5:2f:a2:e1:60:35: d6:ba:d3:1c:74:67:83:0d:bd:76:49:f6:67:c2:ad:ce:34:49: e7:dd:3c:c8:fe:89:d7:4f:a8:19:73:04:a3:3b:87:3d:55:44: e8:40:f6:36:ea:4f:eb:51:8b:98:8a:0a:5b:8a:f4:6a:21:4b: d5:54:e2:fb:54:2f:12:e5:41:ae:3f:44:ea:09:8a:5e:4e:e4: 4e:3a:bf:7a:a1:5c:78:3a:d5:d9:c5:54:4e:ad:61:03:5e:36: 00:5b:2e:2d:3e:ae:00:a5:f6:e3:da:09:ca:71:d3:4f:9f:34: e3:61:35:c0:ba:f2:b7:78:fb:c0:47:25:20:45:c3:66:e1:0c: 84:d7:53:5c -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEcvKPGWCL6VWpen1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkxMjAwNDUyNloXDTI2MTIxNjAxNDUyNlowLzEtMCsGA1UEAxMk ZTA5MjcyMjctZmJjOC00OTI0LTg5YWYtMTg4NTYzN2NiMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVBaEAWIgssulVqKUJr13uzib3OHXsfnbXEZ c5GxaVuISt42D8ScATci1GRKke4xWfuyIODoPSZYaJtQ+bBEAR3sko8vypRucz46 UlLMRSHxCucPoHpKKWXe2BHQZMjFBTOqTYTvTPQpQlj/w80UZveNQ5FiyZAcmO6K 3gVI1Mk3xjJkKDyKZCNt3p0Rs4i77J+XwECSe7rwDoX3j9fvIW2TcWo2p/f+/h2j sBGdrnQSWgxk8e9EvlzODsNR7IDELSZ3paZBO+j3aFr/8PCosBC/CNM+NRVWhC5d jCLuSF+EsMe/qTTWJvFT9jgvPR8Nri9pwWDlCg+okWZcZgn8GQIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFELUwNarGe6BIle9wraIHKFxwH/MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3Y2IwN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UwOTI3MjI3LWZiYzgtNDkyNC04 OWFmLTE4ODU2MzdjYjA3Yy9lMDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3 Y2IwN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MBcEAgABMBEDBAAXniADBABIEwMDAwBrojAdBAIAAjAXAwYEJgL6 dQADBgQmAv4rAAMFACYE4YAwLQYIKwYBBQUHAQgBAf8EHjAcoBowGAICA0sCAwCO pAIDANbaAgMGD1gCAwYUDTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdkVDiocIBkAqOwxqtazsA5yQMpj9/ fucbj5nUPj6fGN0GmZIQ6MGlJyr7IIuRCwf5zt6As65nLqfMEEMWcJ1ur85/Y0A7 iHEpGCkM1SaUvGAi0OHEI5y3Y9/w7FufGxh4QUYeRFmtnBeweeYrI943BNVFYwe9 i7HVL6LhYDXWutMcdGeDDb12SfZnwq3ONEnn3TzI/onXT6gZcwSjO4c9VUToQPY2 6k/rUYuYigpbivRqIUvVVOL7VC8S5UGuP0TqCYpeTuROOr96oVx4OtXZxVROrWED XjYAWy4tPq4Apfbj2gnKcdNPnzTjYTXAuvK3ePvARyUgRcNm4QyE11Nc -----END CERTIFICATE-----Generated at Sat Nov 23 16:10:44 2024 by rpki-client on console-fra.rpki-client.org