$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer File: 8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer (raw, json) Hash identifier: IBpKj2zQU8SmcA8HgBHB3776zaxPeOu8Lc6it12iS84= Subject key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285846B5EFE4B2446B92A37D98AFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jul 2024 14:37:41 +0000 Certificate not after: Mon 02 Nov 2026 15:37:41 +0000 Subordinate resources: AS: 4540 AS: 25827 IP: 66.187.112.0/20 IP: 69.51.192.0/18 IP: 74.50.160.0/19 IP: 74.116.112.0/21 IP: 74.126.96.0/19 IP: 74.221.16.0/20 IP: 104.151.128.0/21 IP: 170.89.192.0/18 IP: 204.8.0.0/22 IP: 205.233.212.0/24 IP: 205.236.148.0/24 IP: 205.236.172.0/24 IP: 2604:6c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:b5:ef:e4:b2:44:6b:92:a3:7d:98:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 30 14:37:41 2024 GMT Not After : Nov 2 15:37:41 2026 GMT Subject: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:17:ea:1e:29:05:16:fd:67:1d:cd:07:d8: 2a:e3:d1:5d:13:f4:48:97:b3:09:9a:43:ca:cd:12: cf:08:b5:e6:d5:f2:61:a6:48:51:38:40:16:e5:fd: 84:0a:7f:7b:eb:2c:fa:06:41:f1:ad:fe:a1:6f:0c: f1:67:8d:99:b7:75:6e:3a:b6:1c:0a:10:44:0e:1d: 42:68:72:ae:f1:04:67:71:e9:dd:2e:24:fe:53:1e: 82:c8:f5:32:51:30:ce:95:99:68:c0:52:91:86:51: 3e:97:5f:a3:06:40:0c:cf:cd:43:56:a5:45:59:94: 82:18:3d:38:dc:15:cf:5b:ea:a8:01:df:c2:2e:b0: 66:23:73:7f:cb:82:36:20:56:a7:75:16:5c:a6:87: 29:21:76:f1:bc:34:d9:49:33:68:75:f9:0d:01:80: 55:59:60:e1:31:b3:bc:6c:e6:0f:21:dd:72:94:ac: fc:8b:65:ed:8b:71:83:f8:1a:09:27:d4:86:2f:13: e6:b0:25:d0:60:9a:fd:77:ed:54:3d:fa:6c:4a:9d: f8:77:09:50:ee:a4:4a:8c:de:78:4c:f3:90:f9:b8: c8:7b:9d:db:de:76:c1:63:f8:8e:7d:20:ba:f7:37: 62:ca:8b:30:d4:d9:c4:61:17:2c:2d:28:1a:3e:8b: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.187.112.0/20 69.51.192.0/18 74.50.160.0/19 74.116.112.0/21 74.126.96.0/19 74.221.16.0/20 104.151.128.0/21 170.89.192.0/18 204.8.0.0/22 205.233.212.0/24 205.236.148.0/24 205.236.172.0/24 IPv6: 2604:6c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4540 25827 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f1:12:db:a4:06:18:77:5b:45:f0:7e:e3:ef:07:9c:ac:2b: a1:2c:31:a5:83:36:03:85:b3:58:71:79:b6:6a:8d:d6:92:05: 50:5e:1a:0e:cb:5a:b3:57:2d:01:af:41:11:ee:65:b2:2d:0c: af:7f:e3:ef:14:a8:84:84:1e:73:4c:b5:21:55:95:52:9e:bb: 50:f5:7a:d2:83:8b:ae:f9:cf:5e:5e:25:74:07:05:8d:46:b5: e5:6e:29:dd:ff:6e:3f:44:5b:c6:a1:ec:de:19:96:fa:97:f3: 19:3b:8f:e1:f9:f4:c5:12:de:a3:cb:2b:97:8a:71:49:e2:b8: ef:f3:01:45:5d:6c:07:52:a2:ae:e0:13:14:b8:52:4b:4d:95: 49:ae:83:9a:4b:39:e4:f4:3d:4d:08:43:0c:f5:19:cf:73:34: 60:ae:9d:40:12:27:df:e9:3e:61:bd:3b:c6:16:d0:5d:01:63: 33:da:a7:40:76:a8:0f:6e:3b:0e:4a:e0:b1:b8:df:d3:ce:fb: 48:70:9c:7a:9b:0c:de:ef:e7:75:71:5f:74:02:68:88:40:7b: a5:af:f0:15:98:b8:de:a7:ad:de:84:3e:07:ef:f0:d0:0b:1d: ae:d4:12:27:9f:ec:d7:43:e6:65:25:d7:d2:7e:4b:f6:30:7a: 3f:d2:6d:3c -----BEGIN CERTIFICATE----- MIIHXTCCBkWgAwIBAgIUAQ0Mn0MoWEa17+SyRGuSo32Yr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDczMDE0Mzc0MVoXDTI2MTEwMjE1Mzc0MVowLzEtMCsGA1UEAxMk ODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3ZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4oX6h4pBRb9Zx3NB9gq49FdE/RIl7MJmkPK zRLPCLXm1fJhpkhROEAW5f2ECn976yz6BkHxrf6hbwzxZ42Zt3VuOrYcChBEDh1C aHKu8QRncendLiT+Ux6CyPUyUTDOlZlowFKRhlE+l1+jBkAMz81DVqVFWZSCGD04 3BXPW+qoAd/CLrBmI3N/y4I2IFandRZcpocpIXbxvDTZSTNodfkNAYBVWWDhMbO8 bOYPId1ylKz8i2Xti3GD+BoJJ9SGLxPmsCXQYJr9d+1UPfpsSp34dwlQ7qRKjN54 TPOQ+bjIe53b3nbBY/iOfSC69zdiyosw1NnEYRcsLSgaPouPTwIDAQABo4IEbzCC BGswHQYDVR0OBBYEFNfz36n3QPArUdhCJ/LcwuHfYHUOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg1MTFiOGRjLTc0YmEtNDdlNS1h ZjRhLTdjNGU2Yjc3N2Q5Mi84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3 NzdkOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBARCu3ADBAZFM8ADBAVKMqADBANKdHADBAVKfmAD BARK3RADBANol4ADBAaqWcADBALMCAADBADN6dQDBADN7JQDBADN7KwwDQQCAAIw BwMFACYEbIAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICEbwCAmTjMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADnxEtukBhh3W0XwfuPvB5ysK6EsMaWDNgOFs1hxebZqjdaSBVBeGg7LWrNXLQGv QRHuZbItDK9/4+8UqISEHnNMtSFVlVKeu1D1etKDi675z15eJXQHBY1GteVuKd3/ bj9EW8ah7N4ZlvqX8xk7j+H59MUS3qPLK5eKcUniuO/zAUVdbAdSoq7gExS4UktN lUmug5pLOeT0PU0IQwz1Gc9zNGCunUASJ9/pPmG9O8YW0F0BYzPap0B2qA9uOw5K 4LG439PO+0hwnHqbDN7v53VxX3QCaIhAe6Wv8BWYuN6nrd6EPgfv8NALHa7UEief 7NdD5mUl19J+S/Ywej/SbTw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:34 2024 by rpki-client on console-ams.rpki-client.org