$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer File: b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer (raw, json) Hash identifier: IyF0yXIPX0TqI92BWpXuvRUtRIclMPBqoGDhmXK92xY= Subject key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847DBC8042184160974EB7C9680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Nov 2024 20:44:59 +0000 Certificate not after: Mon 15 Feb 2027 20:44:59 +0000 Subordinate resources: AS: 13730 AS: 23473 AS: 35883 AS: 46925 IP: 50.30.128.0/17 IP: 66.253.128.0/17 IP: 68.180.0.0/17 IP: 68.234.128.0/17 IP: 76.10.0.0/18 IP: 96.63.192.0/18 IP: 104.145.64.0/18 IP: 153.33.0.0/16 IP: 173.230.0.0/17 IP: 199.192.168.0/21 IP: 208.65.224.0/21 IP: 216.162.128.0/19 IP: 216.171.0.0/18 IP: 2607:f2c8::/32 IP: 2607:f750::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:db:c8:04:21:84:16:09:74:eb:7c:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 12 20:44:59 2024 GMT Not After : Feb 15 20:44:59 2027 GMT Subject: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:d8:1c:98:c6:bf:16:6c:ed:72:ae:aa:e1: de:b8:e0:42:95:73:9c:7c:75:03:56:b8:2a:2b:95: 38:7a:08:fe:a0:32:c4:c5:3d:63:d2:58:8a:b5:a0: a4:48:a2:7a:b7:ed:69:0b:a0:3a:a6:92:a8:c0:ea: 06:aa:a8:3e:90:d0:33:4f:1c:81:0e:a3:da:2f:8f: 23:8e:59:40:57:c0:e8:ce:e1:dd:91:03:81:b0:30: 3d:7c:3f:1d:ee:61:2c:a1:bc:8d:c5:47:8c:29:8b: cb:b3:54:02:2e:0f:dd:f4:59:84:2e:c8:58:b1:ff: 73:15:25:0a:0c:75:a8:c5:78:86:13:6d:a6:c0:84: 70:6b:f7:6f:1e:98:4b:c5:f0:1b:17:7f:3b:d5:f5: 33:d7:6b:1c:48:95:ca:e2:6c:0a:4d:95:f1:87:17: 08:bb:e1:ed:0d:e5:34:87:eb:81:da:98:a7:e9:fc: de:59:33:04:2f:c0:e4:78:37:8c:9a:1b:a4:f7:8e: d5:65:cf:e8:dc:8b:c6:e1:01:ac:f3:6e:c1:12:f1: eb:e7:29:f0:d1:f6:68:57:96:94:c9:73:fb:17:a1: 5d:64:ae:c9:3d:31:5d:9b:6d:42:cb:1c:f4:99:ab: 96:f3:b6:00:b6:2f:f0:7f:34:02:f8:36:cd:d7:a2: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 50.30.128.0/17 66.253.128.0/17 68.180.0.0/17 68.234.128.0/17 76.10.0.0/18 96.63.192.0/18 104.145.64.0/18 153.33.0.0/16 173.230.0.0/17 199.192.168.0/21 208.65.224.0/21 216.162.128.0/19 216.171.0.0/18 IPv6: 2607:f2c8::/32 2607:f750::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13730 23473 35883 46925 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:53:8a:73:a3:0f:ac:72:10:c8:bb:df:19:2e:82:1a:fe:e1: a6:9e:de:99:fd:1d:b9:49:0b:7d:b1:e9:10:37:b0:c9:de:7e: 69:a2:a3:c5:48:db:3b:ae:53:16:2e:5b:4e:ae:98:3d:8f:69: 11:f1:31:e4:61:b6:e8:2c:4c:82:2c:61:40:bb:3c:74:e6:1c: 22:46:f3:4f:79:20:cb:1b:d2:fe:91:34:16:2a:c4:09:89:05: b1:8e:82:b3:30:85:a3:4c:79:19:6c:ce:7e:a0:d4:cf:4b:4c: 75:a4:65:e7:bf:21:93:75:c0:81:6a:e0:86:ae:ea:83:33:c2: c6:33:e3:53:09:ba:28:a3:53:16:26:ea:07:78:54:61:0b:29: 0b:ce:c5:3f:00:d2:94:91:1f:a5:ed:a1:a9:ea:17:fe:e8:bc: 12:89:70:7b:b2:1b:bc:0d:20:76:1f:98:8d:90:0d:f4:df:c4: 3c:d8:48:f9:9a:0a:69:51:cb:c3:69:65:3b:be:a6:4f:ab:ec: 7a:c0:da:80:08:68:7f:b3:f3:55:a9:03:cb:b6:c0:58:13:f8: e6:51:2b:9c:e8:b5:18:67:2a:7f:5c:62:38:87:0e:87:b5:41: 6e:b5:40:9c:b6:4d:9a:8d:70:ef:88:97:8c:81:2f:00:9b:1f: 32:bf:18:14 -----BEGIN CERTIFICATE----- MIIHczCCBlugAwIBAgIUAQ0Mn0MoWEfbyAQhhBYJdOt8loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTExMjIwNDQ1OVoXDTI3MDIxNTIwNDQ1OVowLzEtMCsGA1UEAxMk Yjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBmZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBfYHJjGvxZs7XKuquHeuOBClXOcfHUDVrgq K5U4egj+oDLExT1j0liKtaCkSKJ6t+1pC6A6ppKowOoGqqg+kNAzTxyBDqPaL48j jllAV8DozuHdkQOBsDA9fD8d7mEsobyNxUeMKYvLs1QCLg/d9FmELshYsf9zFSUK DHWoxXiGE22mwIRwa/dvHphLxfAbF3871fUz12scSJXK4mwKTZXxhxcIu+HtDeU0 h+uB2pin6fzeWTMEL8DkeDeMmhuk947VZc/o3IvG4QGs827BEvHr5ynw0fZoV5aU yXP7F6FdZK7JPTFdm21Cyxz0mauW87YAti/wfzQC+DbN16JYrwIDAQABo4IEhTCC BIEwHQYDVR0OBBYEFEnrqJ7UcsXZFXS9yKEGqjl9+YvYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9i ODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2I4NzkwN2Q5LWVkZDQtNDM3MC05 Njg2LTdiNGFmN2QwZmUyYS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdk MGZlMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwfAYIKwYBBQUH AQcBAf8EbTBrMFMEAgABME0DBAcyHoADBAdC/YADBAdEtAADBAdE6oADBAZMCgAD BAZgP8ADBAZokUADAwCZIQMEB63mAAMEA8fAqAMEA9BB4AMEBdiigAMEBtirADAU BAIAAjAOAwUAJgfyyAMFACYH91AwJwYIKwYBBQUHAQgBAf8EGDAWoBQwEgICNaIC AluxAgMAjCsCAwC3TTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyU4pzow+schDIu98ZLoIa/uGmnt6Z/R25 SQt9sekQN7DJ3n5poqPFSNs7rlMWLltOrpg9j2kR8THkYbboLEyCLGFAuzx05hwi RvNPeSDLG9L+kTQWKsQJiQWxjoKzMIWjTHkZbM5+oNTPS0x1pGXnvyGTdcCBauCG ruqDM8LGM+NTCbooo1MWJuoHeFRhCykLzsU/ANKUkR+l7aGp6hf+6LwSiXB7shu8 DSB2H5iNkA3038Q82Ej5mgppUcvDaWU7vqZPq+x6wNqACGh/s/NVqQPLtsBYE/jm USuc6LUYZyp/XGI4hw6HtUFutUCctk2ajXDviJeMgS8Amx8yvxgU -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:30 2024 by rpki-client on console-fra.rpki-client.org