$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer File: 05ec8359-4ede-4036-8702-23e5dd37a9ba.cer (raw, json) Hash identifier: ZAA6lQSReFGAtEsiLP54Z3YLQnxrFlMY6yH7srcw0CI= Subject key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858470B15552231D9196BB4683600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Aug 2024 02:36:49 +0000 Certificate not after: Thu 03 Dec 2026 03:36:49 +0000 Subordinate resources: AS: 912 -- 913 IP: 64.46.32.0/19 IP: 64.72.224.0/24 IP: 64.72.226.0/23 IP: 67.21.192.0/24 IP: 67.226.190.0/24 IP: 69.10.128.0/19 IP: 72.15.144.0/20 IP: 74.122.128.0/21 IP: 162.213.8.0/22 IP: 173.212.191.0/24 IP: 192.69.132.0/22 IP: 192.197.212.0/23 IP: 199.7.232.0/21 IP: 199.68.176.0/22 IP: 199.68.181.0 -- 199.68.182.255 IP: 199.188.70.0/24 IP: 207.54.126.0/24 IP: 208.66.0.0/22 IP: 208.83.208.0/24 IP: 208.83.212.0/24 IP: 208.93.232.0/21 IP: 209.97.192.0/19 IP: 2601:1400::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:0b:15:55:22:31:d9:19:6b:b4:68:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Aug 30 02:36:49 2024 GMT Not After : Dec 3 03:36:49 2026 GMT Subject: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:69:8a:82:83:57:c8:3a:34:ff:34:20:ba: ff:db:08:43:78:13:46:38:cf:d7:7b:d2:6d:4a:7c: 0f:de:a3:3b:3a:33:14:59:e2:9f:a0:62:c7:8e:75: be:98:17:be:b0:41:32:5a:7f:54:09:ca:5b:4d:2b: ed:8a:58:5e:4a:0b:c8:7c:e6:1f:2f:85:8e:92:bd: 2e:b3:45:94:f5:18:34:b7:84:94:f0:7e:5f:59:67: ec:98:05:27:9e:3a:42:aa:db:1e:6d:66:d3:21:14: b8:c5:3b:2a:6d:16:b5:af:e9:2d:cd:fa:04:a3:74: cf:74:6d:8e:7a:1c:95:07:11:9c:13:7e:38:3b:77: d6:6f:8c:57:98:7d:1c:03:48:09:1e:40:6d:19:4e: 1d:cf:7b:af:7d:17:f8:bb:8c:56:f5:b6:75:e9:47: e2:b8:2e:59:1c:13:6b:62:c4:0d:7a:f2:ac:b1:c3: 9e:0a:94:99:d4:99:11:28:db:bb:2b:aa:c6:06:d2: 32:c8:c0:f6:2d:21:8b:08:9f:c6:35:37:c1:af:f2: a3:1e:c4:59:ef:9c:8e:32:7d:bb:99:62:f5:83:e9: a4:78:87:97:41:bd:27:da:d7:15:80:87:fc:12:7a: 12:f4:44:db:f5:58:97:b9:3d:9c:73:dd:0e:fc:d2: 06:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 64.46.32.0/19 64.72.224.0/24 64.72.226.0/23 67.21.192.0/24 67.226.190.0/24 69.10.128.0/19 72.15.144.0/20 74.122.128.0/21 162.213.8.0/22 173.212.191.0/24 192.69.132.0/22 192.197.212.0/23 199.7.232.0/21 199.68.176.0/22 199.68.181.0-199.68.182.255 199.188.70.0/24 207.54.126.0/24 208.66.0.0/22 208.83.208.0/24 208.83.212.0/24 208.93.232.0/21 209.97.192.0/19 IPv6: 2601:1400::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 912-913 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:95:34:68:3d:ae:f3:a0:18:7e:44:f5:a0:17:94:95:07:ac: fb:6c:91:3c:47:7a:23:55:0f:1e:03:45:48:73:f5:58:18:cc: a6:e6:73:31:5d:59:70:76:a6:de:c8:be:3d:52:44:3f:17:78: 53:c1:fb:64:59:07:41:c1:26:ee:22:55:30:93:80:72:d8:aa: 59:30:e0:d2:7d:6b:f9:3d:51:41:f2:45:6b:0a:b9:55:07:a8: bc:2e:b8:25:5d:8c:91:51:10:d1:a6:d6:a5:32:ec:82:6b:cd: 1e:86:a8:1d:88:48:6c:02:40:b6:f4:23:ae:42:87:8b:0f:2b: 25:b5:55:2b:74:d6:7f:72:f9:d2:78:b6:fe:7f:9f:48:36:08: 6f:c6:44:8f:b8:f5:c5:37:46:6e:cc:da:61:54:88:02:d0:2f: 1e:a8:2e:ec:de:73:1e:1f:bd:fc:46:8b:2b:17:73:e1:c8:47: a7:be:b0:44:4d:df:a0:60:07:08:4a:84:04:86:96:9a:15:d0: 43:29:d6:9c:a8:5e:3b:c5:7f:4b:73:f4:c2:c1:68:37:67:c2: 42:ec:5b:d2:b3:82:ed:f0:ef:ac:1c:fc:a0:fe:f6:1d:0c:65: fe:e1:03:1e:00:a0:4f:15:24:de:52:fa:8e:8a:b7:68:b1:ea: dd:0d:2a:ad -----BEGIN CERTIFICATE----- MIIHqDCCBpCgAwIBAgIUAQ0Mn0MoWEcLFVUiMdkZa7RoNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDgzMDAyMzY0OVoXDTI2MTIwMzAzMzY0OVowLzEtMCsGA1UEAxMk MDVlYzgzNTktNGVkZS00MDM2LTg3MDItMjNlNWRkMzdhOWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+ZpioKDV8g6NP80ILr/2whDeBNGOM/Xe9Jt SnwP3qM7OjMUWeKfoGLHjnW+mBe+sEEyWn9UCcpbTSvtilheSgvIfOYfL4WOkr0u s0WU9Rg0t4SU8H5fWWfsmAUnnjpCqtsebWbTIRS4xTsqbRa1r+ktzfoEo3TPdG2O ehyVBxGcE344O3fWb4xXmH0cA0gJHkBtGU4dz3uvfRf4u4xW9bZ16UfiuC5ZHBNr YsQNevKsscOeCpSZ1JkRKNu7K6rGBtIyyMD2LSGLCJ/GNTfBr/KjHsRZ75yOMn27 mWL1g+mkeIeXQb0n2tcVgIf8EnoS9ETb9ViXuT2cc90O/NIGWQIDAQABo4IEujCC BLYwHQYDVR0OBBYEFDYK6AMkK7rGdXgyLBSluV0RWgCQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8w NWVjODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1ZGQzN2E5YmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzA1ZWM4MzU5LTRlZGUtNDAzNi04 NzAyLTIzZTVkZDM3YTliYS8wNWVjODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1ZGQz N2E5YmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwgbgGCCsGAQUF BwEHAQH/BIGoMIGlMIGTBAIAATCBjAMEBUAuIAMEAEBI4AMEAUBI4gMEAEMVwAME AEPivgMEBUUKgAMEBEgPkAMEA0p6gAMEAqLVCAMEAK3UvwMEAsBFhAMEAcDF1AME A8cH6AMEAsdEsDAMAwQAx0S1AwQAx0S2AwQAx7xGAwQAzzZ+AwQC0EIAAwQA0FPQ AwQA0FPUAwQD0F3oAwQF0WHAMA0EAgACMAcDBQQmARQAMB8GCCsGAQUFBwEIAQH/ BBAwDqAMMAowCAICA5ACAgORMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHeVNGg9rvOgGH5E9aAXlJUHrPts kTxHeiNVDx4DRUhz9VgYzKbmczFdWXB2pt7Ivj1SRD8XeFPB+2RZB0HBJu4iVTCT gHLYqlkw4NJ9a/k9UUHyRWsKuVUHqLwuuCVdjJFRENGm1qUy7IJrzR6GqB2ISGwC QLb0I65Ch4sPKyW1VSt01n9y+dJ4tv5/n0g2CG/GRI+49cU3Rm7M2mFUiALQLx6o Luzecx4fvfxGiysXc+HIR6e+sERN36BgBwhKhASGlpoV0EMp1pyoXjvFf0tz9MLB aDdnwkLsW9Kzgu3w76wc/KD+9h0MZf7hAx4AoE8VJN5S+o6Kt2ix6t0NKq0= -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:02 2024 by rpki-client on console-fra.rpki-client.org