$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer File: 214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer (raw, json) Hash identifier: keIavGmDNUlq8MisFRTWhzKtqZ330SRhqYJhWw9lpXE= Subject key identifier: F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584710736D82875F4516B63FA480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Sep 2024 00:45:27 +0000 Certificate not after: Sat 05 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 22023 AS: 394506 AS: 394600 AS: 394959 AS: 399072 IP: 104.254.132.0/22 IP: 155.94.112.0/20 IP: 207.154.128.0/18 IP: 208.78.84.0/23 IP: 2620:2e:40c0::/44 IP: 2620:34:6000::/44 IP: 2620:dc:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:10:73:6d:82:87:5f:45:16:b6:3f:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 1 00:45:27 2024 GMT Not After : Dec 5 01:45:27 2026 GMT Subject: CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:aa:9d:9e:13:25:a4:c8:a3:7f:2b:14:e5: 5f:3e:28:21:53:98:9d:e4:5b:a7:fb:cf:7b:59:ed: eb:03:d6:68:35:67:a6:8f:d7:4f:26:cf:d8:7c:3b: 27:73:ce:90:67:6c:1a:92:de:f2:29:1a:84:e0:9f: 81:e9:6d:7f:03:79:98:3d:39:ff:9f:d8:cb:ea:5d: 2e:29:d9:33:62:ed:14:57:df:d3:81:bd:ed:95:6a: fc:76:c0:f3:66:e2:53:7c:cb:43:21:98:89:91:34: d2:cf:ae:4e:9a:48:96:2d:59:ef:ce:f3:2c:a8:b7: 8b:14:24:8a:f3:d6:b5:e1:f5:a3:ad:de:7f:d9:2d: 27:69:84:38:15:fa:49:72:0d:d7:3c:d0:c9:4c:71: 83:82:87:ea:3c:1e:63:0f:11:e4:64:bb:6b:cd:05: e6:dd:74:04:3a:9f:4c:b3:e5:de:16:27:54:fc:2b: 8c:cb:43:7e:93:19:08:67:a6:72:91:2d:29:17:13: ec:32:5c:5e:3f:16:a3:8a:e8:4c:1f:4c:20:2b:a4: 7e:02:aa:a2:ab:a7:dc:44:bb:3f:8a:c1:31:a4:08: ed:2d:37:3f:58:68:1a:99:cb:c7:6f:56:75:05:95: a6:22:1a:90:0f:90:c2:8e:43:ba:9b:af:2d:f0:2f: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 104.254.132.0/22 155.94.112.0/20 207.154.128.0/18 208.78.84.0/23 IPv6: 2620:2e:40c0::/44 2620:34:6000::/44 2620:dc:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22023 394506 394600 394959 399072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:fc:5a:83:08:0f:a7:2b:6d:1b:ca:e0:f5:1f:26:3b:ac:87: d7:13:0e:e8:e4:85:78:fb:26:c1:6c:39:ff:c9:ef:01:78:ca: 5c:9f:fc:29:eb:af:a5:b5:68:ad:4c:11:92:9e:4d:15:36:64: c4:27:be:29:21:bd:6d:13:62:21:8c:06:65:88:ed:bd:a0:3f: b6:11:e8:9f:1d:d1:38:69:1c:83:1b:24:10:d9:2d:5c:73:98: a5:73:45:bb:40:7b:0f:12:a2:f6:51:ed:87:46:84:a4:79:a0: ce:c9:5e:9a:9b:91:80:54:3f:95:38:8a:3b:9a:48:dd:90:02: f0:10:9c:a0:db:3e:56:61:1b:20:d3:1f:4f:be:d3:74:76:df: b2:42:be:32:3b:61:a8:4a:99:88:b2:b2:c6:9c:7e:cd:0d:57: e4:45:dd:e9:9a:18:fc:ee:e7:6c:6a:68:d7:1d:97:16:bf:df: 0e:9b:19:9a:0e:8f:7f:90:0d:01:84:9a:5d:8a:df:43:b0:e1: c9:e9:32:b3:bf:02:8f:1d:43:02:31:8d:b0:35:c6:f5:49:cf: b3:2b:c9:77:3f:3b:e0:0b:a1:a1:09:c4:15:5d:53:f5:ef:ac: 66:28:cc:64:c4:fa:73:40:ec:e9:a8:ec:08:d7:52:dc:e4:2e: 87:5d:6a:4b -----BEGIN CERTIFICATE----- MIIHUDCCBjigAwIBAgIUAQ0Mn0MoWEcQc22Ch19FFrY/pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDkwMTAwNDUyN1oXDTI2MTIwNTAxNDUyN1owLzEtMCsGA1UEAxMk MjE0ZGU5MWQtYjVkYi00YWEzLWFhYjktMmE3ZjJjMDA3NWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lmqnZ4TJaTIo38rFOVfPighU5id5Fun+897 We3rA9ZoNWemj9dPJs/YfDsnc86QZ2wakt7yKRqE4J+B6W1/A3mYPTn/n9jL6l0u KdkzYu0UV9/Tgb3tlWr8dsDzZuJTfMtDIZiJkTTSz65OmkiWLVnvzvMsqLeLFCSK 89a14fWjrd5/2S0naYQ4FfpJcg3XPNDJTHGDgofqPB5jDxHkZLtrzQXm3XQEOp9M s+XeFidU/CuMy0N+kxkIZ6ZykS0pFxPsMlxePxajiuhMH0wgK6R+Aqqiq6fcRLs/ isExpAjtLTc/WGgamcvHb1Z1BZWmIhqQD5DCjkO6m68t8C9S5wIDAQABo4IEYjCC BF4wHQYDVR0OBBYEFPe3mVx7GjAYzJkKBC1T3IC+ArAdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y MTRkZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdmMmMwMDc1YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzIxNGRlOTFkLWI1ZGItNGFhMy1h YWI5LTJhN2YyYzAwNzViNi8yMTRkZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdmMmMw MDc1YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwUwYIKwYBBQUH AQcBAf8ERDBCMB4EAgABMBgDBAJo/oQDBASbXnADBAbPmoADBAHQTlQwIAQCAAIw GgMHBCYgAC5AwAMHBCYgADRgAAMGACYgANxAMC0GCCsGAQUFBwEIAQH/BB4wHKAa MBgCAlYHAgMGBQoCAwYFaAIDBgbPAgMGFuAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAo/xagwgPpyttG8rg 9R8mO6yH1xMO6OSFePsmwWw5/8nvAXjKXJ/8KeuvpbVorUwRkp5NFTZkxCe+KSG9 bRNiIYwGZYjtvaA/thHonx3ROGkcgxskENktXHOYpXNFu0B7DxKi9lHth0aEpHmg zslempuRgFQ/lTiKO5pI3ZAC8BCcoNs+VmEbINMfT77TdHbfskK+MjthqEqZiLKy xpx+zQ1X5EXd6ZoY/O7nbGpo1x2XFr/fDpsZmg6Pf5ANAYSaXYrfQ7Dhyekys78C jx1DAjGNsDXG9UnPsyvJdz874AuhoQnEFV1T9e+sZijMZMT6c0Ds6ajsCNdS3OQu h11qSw== -----END CERTIFICATE-----Generated at Thu Nov 21 16:23:58 2024 by rpki-client on console-ams.rpki-client.org