$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer File: 3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer (raw, json) Hash identifier: waejUA0ZrqcPidaXKvcEcIGGBW559KTZuhCHuNw7/P0= Subject key identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584677E40EF002842AC149E3C528 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Jul 2024 09:13:43 +0000 Certificate not after: Sun 11 Oct 2026 09:13:43 +0000 Subordinate resources: AS: 3900 AS: 22194 AS: 23005 AS: 30063 IP: 64.9.128.0/18 IP: 64.79.128.0/19 IP: 66.116.96.0/19 IP: 66.209.64.0/19 IP: 69.194.128.0/20 IP: 74.120.240.0/21 IP: 74.122.224.0/21 IP: 136.179.0.0/16 IP: 155.130.0.0/16 IP: 199.59.108.0/22 IP: 199.180.196.0/22 IP: 199.193.120.0/22 IP: 206.127.0.0/19 IP: 206.222.160.0/19 IP: 207.207.0.0/18 IP: 209.99.0.0/17 IP: 216.115.64.0/19 IP: 216.166.0.0/17 IP: 216.196.96.0/19 IP: 2606:a600::/32 IP: 2607:ff60::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:77:e4:0e:f0:02:84:2a:c1:49:e3:c5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 8 09:13:43 2024 GMT Not After : Oct 11 09:13:43 2026 GMT Subject: CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:45:54:8c:3c:35:03:87:e7:df:2f:d5:a6: 81:43:89:6b:f1:5d:cf:d5:f1:5c:94:d9:73:41:f4: ce:4a:85:c7:b7:bc:73:f2:04:b9:1a:e8:df:ed:8f: 10:03:26:53:51:41:f9:05:c9:49:7c:c8:ad:50:fa: 01:83:e5:28:94:27:63:92:4e:1b:84:18:e9:55:83: 41:c0:50:df:56:73:1d:d0:15:e1:86:8b:67:eb:b3: 5a:e1:b2:04:b0:2b:6f:a6:8f:7d:fe:de:b1:1b:a8: 52:9b:13:ea:85:32:6f:86:13:da:bb:22:ee:bd:69: b5:20:bd:f8:a9:d2:dc:79:17:ff:b0:06:f1:1f:4f: de:ff:e6:27:05:0a:f7:97:39:b2:6c:00:de:ae:ea: 1a:06:62:26:bb:03:7d:a9:7d:33:25:53:b0:0a:75: 2c:9b:f4:32:df:5c:4d:d8:15:ef:bd:90:64:f4:c3: d1:97:a9:93:f3:64:1e:e2:60:89:0e:18:cf:6e:38: be:fb:6d:19:aa:8a:60:75:d0:b9:24:bc:2c:55:9b: 64:21:18:64:d7:00:1e:6c:5a:4f:b1:cc:6c:2d:54: bf:01:08:19:3d:28:c1:5b:9d:c5:86:0b:0b:e9:e2: 9d:c8:93:e0:33:a0:e3:f3:07:75:4b:c2:bb:fc:a1: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.9.128.0/18 64.79.128.0/19 66.116.96.0/19 66.209.64.0/19 69.194.128.0/20 74.120.240.0/21 74.122.224.0/21 136.179.0.0/16 155.130.0.0/16 199.59.108.0/22 199.180.196.0/22 199.193.120.0/22 206.127.0.0/19 206.222.160.0/19 207.207.0.0/18 209.99.0.0/17 216.115.64.0/19 216.166.0.0/17 216.196.96.0/19 IPv6: 2606:a600::/32 2607:ff60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3900 22194 23005 30063 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b0:37:24:e2:77:34:77:2d:a0:e5:6c:f7:f1:e0:73:2a:d5: 09:34:01:c3:05:d8:c8:4f:90:dd:f3:8c:c4:77:2b:48:bb:c0: bc:fa:e9:96:2f:aa:bf:40:05:62:98:d5:28:85:da:a8:65:cd: a8:c7:b1:7c:d9:b4:6d:39:63:79:56:bd:19:8d:0d:74:75:d6: 24:59:0a:15:d9:e6:5e:53:73:4e:3a:e5:96:20:fc:6b:88:d3: ac:94:7a:31:9f:44:81:1e:ba:16:37:f4:03:8e:69:42:34:ed: d1:0b:e0:12:ed:42:87:48:ec:63:5f:04:2b:5d:21:6b:a9:a4: 37:2c:a3:66:8a:d9:ee:2d:e1:4d:49:85:bb:e2:3e:10:b3:46: 5b:85:c9:0c:e5:95:35:a0:f0:08:a6:27:cb:ce:95:9e:5a:10: 61:a8:75:df:24:f7:d2:e7:2d:db:d5:55:ac:e2:68:19:c9:d5: 27:15:65:04:07:ff:af:1f:de:81:ea:db:10:e8:f8:44:64:fd: 1d:cb:8e:26:7d:50:6c:ed:22:c0:64:4f:2a:d9:81:fb:36:a8: ee:f4:71:15:bc:4c:5c:ed:a9:ed:4d:b0:fd:6a:af:66:f8:96: cf:74:88:48:4c:40:20:20:13:39:e3:61:f9:87:8b:ab:9c:ff: 26:f0:d5:90 -----BEGIN CERTIFICATE----- MIIHlzCCBn+gAwIBAgIUAQ0Mn0MoWEZ35A7wAoQqwUnjxSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDcwODA5MTM0M1oXDTI2MTAxMTA5MTM0M1owLzEtMCsGA1UEAxMk M2FlN2VjZmYtZTNhYi00NzJkLWE0ZWMtMGZjZDNmZTk0YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU1FVIw8NQOH598v1aaBQ4lr8V3P1fFclNlz QfTOSoXHt7xz8gS5Gujf7Y8QAyZTUUH5BclJfMitUPoBg+UolCdjkk4bhBjpVYNB wFDfVnMd0BXhhotn67Na4bIEsCtvpo99/t6xG6hSmxPqhTJvhhPauyLuvWm1IL34 qdLceRf/sAbxH0/e/+YnBQr3lzmybADeruoaBmImuwN9qX0zJVOwCnUsm/Qy31xN 2BXvvZBk9MPRl6mT82Qe4mCJDhjPbji++20ZqopgddC5JLwsVZtkIRhk1wAebFpP scxsLVS/AQgZPSjBW53FhgsL6eKdyJPgM6Dj8wd1S8K7/KFc3wIDAQABo4IEqTCC BKUwHQYDVR0OBBYEFD6Yew3OZraGE4oq+yEwgodbdLBJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z YWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2ZlOTRhYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNhZTdlY2ZmLWUzYWItNDcyZC1h NGVjLTBmY2QzZmU5NGFhNy8zYWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2Zl OTRhYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwgaEGCCsGAQUF BwEHAQH/BIGRMIGOMHYEAgABMHADBAZACYADBAVAT4ADBAVCdGADBAVC0UADBARF woADBANKePADBANKeuADAwCIswMDAJuCAwQCxztsAwQCx7TEAwQCx8F4AwQFzn8A AwQFzt6gAwQGz88AAwQH0WMAAwQF2HNAAwQH2KYAAwQF2MRgMBQEAgACMA4DBQAm BqYAAwUAJgf/YDAlBggrBgEFBQcBCAEB/wQWMBSgEjAQAgIPPAICVrICAlndAgJ1 bzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAQsDck4nc0dy2g5Wz38eBzKtUJNAHDBdjIT5Dd84zEdytIu8C8 +umWL6q/QAVimNUohdqoZc2ox7F82bRtOWN5Vr0ZjQ10ddYkWQoV2eZeU3NOOuWW IPxriNOslHoxn0SBHroWN/QDjmlCNO3RC+AS7UKHSOxjXwQrXSFrqaQ3LKNmitnu LeFNSYW74j4Qs0ZbhckM5ZU1oPAIpifLzpWeWhBhqHXfJPfS5y3b1VWs4mgZydUn FWUEB/+vH96B6tsQ6PhEZP0dy44mfVBs7SLAZE8q2YH7Nqju9HEVvExc7antTbD9 aq9m+JbPdIhITEAgIBM542H5h4urnP8m8NWQ -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:59 2024 by rpki-client on console-ams.rpki-client.org