$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer File: 286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer (raw, json) Hash identifier: 92wG3UIxZzb6Pvd8QBX+Wc0tM7nTTYPUPrlhamJAIFA= Subject key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858474298E3E3CC112F711E794580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Sep 2024 23:51:21 +0000 Certificate not after: Thu 03 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 6421 AS: 6453 AS: 395458 IP: 63.243.128.0/17 IP: 64.7.112.0/20 IP: 64.86.0.0/16 IP: 66.110.0.0/17 IP: 66.198.0.0 -- 66.198.191.255 IP: 199.202.32.0/19 IP: 206.82.128.0/20 IP: 207.45.192.0/19 IP: 209.58.0.0/17 IP: 216.6.0.0/17 IP: 2001:5a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:98:e3:e3:cc:11:2f:71:1e:79:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 18 23:51:21 2024 GMT Not After : Dec 3 01:45:26 2026 GMT Subject: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:c5:1e:db:20:d7:77:e3:16:a0:69:cf:9a: f6:e0:36:6e:5f:9a:1c:d2:99:ec:25:ad:1f:5e:f5: aa:a3:47:43:08:2e:81:d0:a0:55:91:72:9a:16:86: cf:33:19:3a:4b:6a:a7:4c:77:2d:8f:d1:d1:80:23: a8:f8:24:0b:7e:b2:81:ed:77:68:bf:6d:f6:cb:59: 2b:92:bc:59:4e:8d:5d:8a:91:81:bb:0c:e1:f1:fd: 4e:7f:0b:b2:e2:f6:11:67:09:b3:df:b7:bb:0f:64: 99:d1:3c:27:8d:46:d8:51:d5:1a:e4:a1:c8:ab:b9: 01:c2:18:e8:a7:c4:d8:ea:f3:7b:4c:c2:6a:6a:44: d9:f3:47:0e:49:76:89:d0:64:e9:f3:32:9d:c2:60: 5a:02:12:8a:f9:94:3d:35:ed:0b:9b:e7:dd:fa:c8: 45:c2:6a:d7:db:ac:3b:c1:ae:87:ce:2e:e7:dd:95: e2:70:69:55:f0:83:98:c4:29:0d:d0:2e:72:73:7b: f9:f0:ab:98:c5:30:96:4f:f8:7f:53:9b:b8:67:c4: a8:d6:25:32:19:3b:62:37:f6:71:d3:55:c2:93:0c: 5d:21:54:13:37:f4:de:5e:13:e1:93:e4:5b:a8:cd: 2f:22:25:f1:9a:5c:81:74:1c:6d:b2:37:37:7b:c5: dc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 63.243.128.0/17 64.7.112.0/20 64.86.0.0/16 66.110.0.0/17 66.198.0.0-66.198.191.255 199.202.32.0/19 206.82.128.0/20 207.45.192.0/19 209.58.0.0/17 216.6.0.0/17 IPv6: 2001:5a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6421 6453 395458 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:27:88:71:0d:f5:80:7b:28:23:74:0e:13:16:b4:18:c9:d9: e2:7e:cf:e9:c2:8e:b4:62:3f:e1:83:1f:d0:a0:2e:f5:57:89: 60:da:36:b7:16:68:a7:6c:75:09:7f:13:b3:d4:ba:94:70:fd: b3:ae:05:0a:32:55:ce:62:f3:e3:99:4e:e9:4c:f5:42:57:f5: ee:f7:86:02:93:74:4f:62:56:7a:0c:a3:49:f2:c5:bc:45:2d: 17:f1:8a:67:d5:91:6a:fb:2a:7c:ab:f8:7f:05:b1:e1:17:72: 41:90:d8:5a:b7:a4:cc:f0:23:a5:9a:86:2b:4c:08:15:9b:30: 37:04:d9:63:95:e6:3b:61:a8:62:ee:d1:a7:13:f0:71:e5:b0: 19:52:09:63:e3:90:32:fb:8c:bf:21:5e:96:c2:de:8f:a1:5b: 30:b3:ca:4f:64:8c:04:57:82:ef:ca:ca:1b:6f:2b:33:71:60: 57:e6:40:81:40:ac:ae:6b:9f:75:70:0e:97:2e:0a:fd:fb:43: b0:bb:eb:d6:bd:60:4d:6d:d1:fd:13:2c:61:ab:84:dc:71:6b: ce:f0:b9:97:bd:e4:92:1d:96:74:33:a8:06:f7:ce:70:5f:9b: 00:a2:bd:27:89:df:71:7b:45:96:de:2f:5e:bb:b8:c4:11:e1: cf:7c:28:5d -----BEGIN CERTIFICATE----- MIIHXDCCBkSgAwIBAgIUAQ0Mn0MoWEdCmOPjzBEvcR55RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDkxODIzNTEyMVoXDTI2MTIwMzAxNDUyNlowLzEtMCsGA1UEAxMk Mjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVmNzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh83FHtsg13fjFqBpz5r24DZuX5oc0pnsJa0f XvWqo0dDCC6B0KBVkXKaFobPMxk6S2qnTHctj9HRgCOo+CQLfrKB7Xdov232y1kr krxZTo1dipGBuwzh8f1Ofwuy4vYRZwmz37e7D2SZ0TwnjUbYUdUa5KHIq7kBwhjo p8TY6vN7TMJqakTZ80cOSXaJ0GTp8zKdwmBaAhKK+ZQ9Ne0Lm+fd+shFwmrX26w7 wa6Hzi7n3ZXicGlV8IOYxCkN0C5yc3v58KuYxTCWT/h/U5u4Z8So1iUyGTtiN/Zx 01XCkwxdIVQTN/TeXhPhk+RbqM0vIiXxmlyBdBxtsjc3e8XcPwIDAQABo4IEbjCC BGowHQYDVR0OBBYEFGPHESKI6Qs4BOVYIOxFbYpvlsABMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y ODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzI4NjYzOWZjLTk0YzQtNGQ2YS05 ZGUxLWYxYjNlYmI1Zjc1OC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJi NWY3NTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwagYIKwYBBQUH AQcBAf8EWzBZMEgEAgABMEIDBAc/84ADBARAB3ADAwBAVgMEB0JuADALAwMBQsYD BAZCxoADBAXHyiADBATOUoADBAXPLcADBAfROgADBAfYBgAwDQQCAAIwBwMFACAB BaAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICGRUCAhk1AgMGCMIwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA HCeIcQ31gHsoI3QOExa0GMnZ4n7P6cKOtGI/4YMf0KAu9VeJYNo2txZop2x1CX8T s9S6lHD9s64FCjJVzmLz45lO6Uz1Qlf17veGApN0T2JWegyjSfLFvEUtF/GKZ9WR avsqfKv4fwWx4RdyQZDYWrekzPAjpZqGK0wIFZswNwTZY5XmO2GoYu7RpxPwceWw GVIJY+OQMvuMvyFelsLej6FbMLPKT2SMBFeC78rKG28rM3FgV+ZAgUCsrmufdXAO ly4K/ftDsLvr1r1gTW3R/RMsYauE3HFrzvC5l73kkh2WdDOoBvfOcF+bAKK9J4nf cXtFlt4vXru4xBHhz3woXQ== -----END CERTIFICATE-----Generated at Thu Nov 21 15:36:26 2024 by rpki-client on console-fra.rpki-client.org