$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer File: 4279ddf8-3e66-45cf-8955-452fbe652c0c.cer (raw, json) Hash identifier: kBMfCe+uYeAlPXVOS1299dR8XMoRw7GxkMyXXjyF/DA= Subject key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285843305508544879721857B0C000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Sep 2023 15:42:20 +0000 Certificate not after: Thu 10 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 14399 AS: 20376 AS: 27425 IP: 64.32.38.0/23 IP: 162.213.164.0/22 IP: 198.241.49.0/24 IP: 198.241.62.0/24 IP: 204.9.24.0/22 IP: 204.107.216.0/24 IP: 207.178.96.0/19 IP: 209.137.196.0 -- 209.137.201.255 IP: 209.137.203.0 -- 209.137.207.255 IP: 209.137.209.0 -- 209.137.219.255 IP: 209.137.222.0/23 IP: 213.170.146.0/24 IP: 2606:2600::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:30:55:08:54:48:79:72:18:57:b0:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 11 15:42:20 2023 GMT Not After : Jul 10 19:06:39 2025 GMT Subject: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:2e:19:ae:31:0f:6f:cc:1c:52:0b:e1:95: 81:37:d8:9a:eb:47:43:12:55:e9:24:32:40:d7:7b: 39:dc:28:bf:f9:b9:75:8a:6e:a7:af:23:37:be:fc: 91:3c:5c:e8:42:9e:5a:06:70:53:6b:09:91:1f:30: 58:36:c7:24:11:0a:4b:31:e5:d4:58:01:60:c2:3b: dd:dc:54:c1:db:75:21:4f:52:0d:f1:d7:cb:a5:99: 54:b5:40:c6:e9:6b:65:92:2f:5d:6d:48:61:96:d7: 70:b2:06:f9:6a:2a:26:73:23:82:f0:ff:eb:43:88: 4c:49:cd:8c:41:d2:f1:92:0a:0a:97:aa:6f:74:8f: c0:00:09:b0:71:ea:0f:46:49:2d:1b:11:ba:30:47: 03:14:09:d3:17:74:02:b3:1e:34:03:4a:f8:56:41: 3a:58:c9:3a:c6:36:ea:61:14:e0:11:e4:65:9f:d4: 34:ce:4d:ca:ac:00:29:7c:3f:a6:7e:5a:b1:b7:77: 6c:37:fa:35:7a:78:1b:62:5d:ea:c1:4b:d7:f1:5b: 70:57:98:14:ff:74:6b:ad:4e:79:d4:dc:e0:70:f1: a1:5d:c1:ed:22:11:d9:99:15:57:43:df:4c:ef:52: 8a:35:0e:35:88:c2:5e:c1:fa:00:28:92:1a:ed:10: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.32.38.0/23 162.213.164.0/22 198.241.49.0/24 198.241.62.0/24 204.9.24.0/22 204.107.216.0/24 207.178.96.0/19 209.137.196.0-209.137.201.255 209.137.203.0-209.137.207.255 209.137.209.0-209.137.219.255 209.137.222.0/23 213.170.146.0/24 IPv6: 2606:2600::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14399 20376 27425 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bd:c2:41:28:85:58:70:36:ff:8c:1a:aa:bb:0c:20:42:24: 33:23:67:6f:57:ca:0b:cc:f2:c1:34:71:c3:98:a1:80:03:bc: 6c:69:61:c3:a9:7b:8f:21:ad:f2:54:fd:b3:b5:f3:e7:c4:6a: 22:b3:2e:38:bb:50:2d:86:7b:0e:88:c6:fa:fa:3f:95:4d:9d: 17:54:12:36:01:21:46:bc:88:fb:d6:92:8c:5d:c5:35:01:cd: e4:f9:f7:08:31:06:f5:7c:8a:a5:6b:8a:98:e7:ac:52:b0:5a: bd:6e:38:a7:ee:af:a1:68:60:51:00:4f:5c:e1:65:1a:4f:a1: 2c:90:6f:62:e7:a6:a5:d4:f4:ff:f2:ff:5c:51:75:53:00:18: c8:49:a5:34:05:51:b5:8a:86:51:fc:b6:5c:9e:c3:bd:69:94: 8d:34:f9:e2:75:d4:c9:9c:49:0e:87:6a:3c:f1:27:15:94:a9: 13:27:e1:15:99:d6:15:df:18:ee:01:5c:9e:a4:3a:44:88:77: e9:40:90:34:c1:f9:05:5c:43:ad:6e:1c:b6:b9:8d:e0:66:af: 7a:00:f3:79:4c:22:79:2e:95:80:37:eb:30:65:df:77:60:9d: ab:d9:ef:5d:e4:81:a4:1b:bb:01:e4:f5:bd:be:6f:37:dd:84: ce:6e:e4:f0 -----BEGIN CERTIFICATE----- MIIHejCCBmKgAwIBAgIUAQ0Mn0MoWEMwVQhUSHlyGFewwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMDkxMTE1NDIyMFoXDTI1MDcxMDE5MDYzOVowLzEtMCsGA1UEAxMk NDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUyYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+UuGa4xD2/MHFIL4ZWBN9ia60dDElXpJDJA 13s53Ci/+bl1im6nryM3vvyRPFzoQp5aBnBTawmRHzBYNsckEQpLMeXUWAFgwjvd 3FTB23UhT1IN8dfLpZlUtUDG6Wtlki9dbUhhltdwsgb5aiomcyOC8P/rQ4hMSc2M QdLxkgoKl6pvdI/AAAmwceoPRkktGxG6MEcDFAnTF3QCsx40A0r4VkE6WMk6xjbq YRTgEeRln9Q0zk3KrAApfD+mflqxt3dsN/o1engbYl3qwUvX8VtwV5gU/3RrrU55 1NzgcPGhXcHtIhHZmRVXQ99M71KKNQ41iMJewfoAKJIa7RAn+wIDAQABo4IEjDCC BIgwHQYDVR0OBBYEFMqiZBunt0x+imCDTw5Cu3ikUPCEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80 Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzQyNzlkZGY4LTNlNjYtNDVjZi04 OTU1LTQ1MmZiZTY1MmMwYy80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2 NTJjMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgYgGCCsGAQUF BwEHAQH/BHkwdzBmBAIAATBgAwQBQCAmAwQCotWkAwQAxvExAwQAxvE+AwQCzAkY AwQAzGvYAwQFz7JgMAwDBALRicQDBAHRicgwDAMEANGJywMEBNGJwDAMAwQA0YnR AwQC0YnYAwQB0YneAwQA1aqSMA0EAgACMAcDBQQmBiYAMCEGCCsGAQUFBwEIAQH/ BBIwEKAOMAwCAjg/AgJPmAICayEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbb3CQSiFWHA2/4waqrsMIEIk MyNnb1fKC8zywTRxw5ihgAO8bGlhw6l7jyGt8lT9s7Xz58RqIrMuOLtQLYZ7DojG +vo/lU2dF1QSNgEhRryI+9aSjF3FNQHN5Pn3CDEG9XyKpWuKmOesUrBavW44p+6v oWhgUQBPXOFlGk+hLJBvYuempdT0//L/XFF1UwAYyEmlNAVRtYqGUfy2XJ7DvWmU jTT54nXUyZxJDodqPPEnFZSpEyfhFZnWFd8Y7gFcnqQ6RIh36UCQNMH5BVxDrW4c trmN4GavegDzeUwieS6VgDfrMGXfd2Cdq9nvXeSBpBu7AeT1vb5vN92Ezm7k8A== -----END CERTIFICATE-----Generated at Fri Apr 19 06:29:25 2024 by rpki-client on console-fra.rpki-client.org