$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47e2bda9-427c-40c6-8b4d-1c85bd42d18a.cer File: 47e2bda9-427c-40c6-8b4d-1c85bd42d18a.cer (raw, json) Hash identifier: Ivbqoo8SF2+JwxwSvrDgiNF3+AfoWXglzOXd28yAmBA= Subject key identifier: 35:29:D5:B9:E4:8A:DB:14:90:BA:15:B9:67:50:F0:F8:50:C7:19:AA Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858435E0D7E061D77D0288B0D5B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47e2bda9-427c-40c6-8b4d-1c85bd42d18a/47e2bda9-427c-40c6-8b4d-1c85bd42d18a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47e2bda9-427c-40c6-8b4d-1c85bd42d18a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Sep 2023 00:45:22 +0000 Certificate not after: Wed 31 Dec 2025 01:45:22 +0000 Subordinate resources: AS: 10962 AS: 13859 AS: 17264 AS: 27301 AS: 36502 IP: 64.46.192.0/18 IP: 89.41.224.0/20 IP: 104.170.0.0/16 IP: 137.252.0.0/16 IP: 149.45.0.0/16 IP: 166.113.128.0/17 IP: 170.71.0.0/16 IP: 170.253.64.0/19 IP: 198.181.175.0/24 IP: 198.184.178.0/23 IP: 198.185.205.0/24 IP: 198.199.192.0/24 IP: 198.203.228.0 -- 198.203.230.255 IP: 199.21.16.0/20 IP: 199.248.247.0/24 IP: 204.126.8.0/23 IP: 2604:c800::/32 IP: 2620:1e2::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:5e:0d:7e:06:1d:77:d0:28:8b:0d:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 28 00:45:22 2023 GMT Not After : Dec 31 01:45:22 2025 GMT Subject: CN=47e2bda9-427c-40c6-8b4d-1c85bd42d18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:9f:e6:30:7c:1b:c9:9b:4a:b8:83:8e:08: c5:4e:30:4b:e7:f6:3c:4e:d3:47:14:de:e4:dc:84: cf:a6:ce:a4:ef:eb:9e:3e:26:34:48:b2:cb:44:90: 9e:da:7f:93:96:40:64:a7:09:2c:ad:30:c8:7e:5d: e9:2f:97:df:43:17:64:c0:f2:83:aa:e5:f3:e2:3e: 30:61:a2:a7:2c:1c:3f:4b:53:4b:4f:3a:35:dc:d8: 49:5b:b1:93:bf:f3:71:e1:a4:e5:50:d6:7b:26:54: 3f:c2:d2:19:82:ed:f2:6c:8f:89:3d:e7:3d:22:2d: ba:61:99:62:f9:d0:df:20:f0:be:c6:35:ad:19:ec: 48:a1:8d:f5:00:9e:ea:bb:ae:fa:67:16:ea:e4:72: ec:ce:79:52:17:ef:b4:e9:d3:da:c1:03:4f:27:00: 61:9c:d5:9f:3f:86:f5:6f:b5:70:98:92:15:e8:ad: bf:0c:aa:00:55:4c:04:28:90:e1:f7:0f:a7:9b:ea: 96:89:f9:bc:d3:88:5d:92:b3:ed:2f:2c:45:9a:1c: 59:22:87:74:7f:59:bd:1b:26:15:18:01:f2:e5:ed: 14:c6:c1:35:5d:5f:99:14:6b:15:4c:57:09:fb:ca: 02:75:96:ad:7d:37:4c:76:08:67:2b:b9:51:c4:c2: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:29:D5:B9:E4:8A:DB:14:90:BA:15:B9:67:50:F0:F8:50:C7:19:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47e2bda9-427c-40c6-8b4d-1c85bd42d18a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47e2bda9-427c-40c6-8b4d-1c85bd42d18a/47e2bda9-427c-40c6-8b4d-1c85bd42d18a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.46.192.0/18 89.41.224.0/20 104.170.0.0/16 137.252.0.0/16 149.45.0.0/16 166.113.128.0/17 170.71.0.0/16 170.253.64.0/19 198.181.175.0/24 198.184.178.0/23 198.185.205.0/24 198.199.192.0/24 198.203.228.0-198.203.230.255 199.21.16.0/20 199.248.247.0/24 204.126.8.0/23 IPv6: 2604:c800::/32 2620:1e2::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10962 13859 17264 27301 36502 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:55:ef:9a:b3:93:05:4d:7f:f2:b6:e0:54:04:b9:e4:cc:41: 9d:36:b7:28:83:70:e2:44:7f:08:af:a2:30:a1:6d:6f:d9:09: 27:df:9a:ae:34:8d:54:a4:4e:34:7c:e5:b4:f3:91:a1:88:b6: 9b:04:b8:86:d0:b5:0f:ee:c6:7e:d0:09:ac:21:9f:3b:bc:c3: 6a:b0:22:4c:2f:58:71:19:cf:10:60:4a:88:17:8a:23:ef:99: c1:c5:b7:20:55:3f:3e:48:65:74:b0:ca:37:20:0e:3f:cf:ea: 36:f2:9b:8d:c3:f1:12:ff:8b:a2:7e:59:04:68:9f:9e:c7:7e: 69:14:f3:39:7e:7e:ae:87:39:ac:93:34:d6:b4:8e:5c:c5:5e: 11:23:df:78:a4:98:34:0e:a1:06:37:51:b5:d5:d5:32:ed:0a: 0f:25:c3:e0:9e:b5:0d:f8:f8:38:0b:8e:c7:84:7b:fb:86:88: 5a:ad:7e:96:a7:64:b5:3e:f3:93:a7:db:0e:0e:41:d6:aa:ef: 6e:25:1e:41:0a:24:8b:3d:c3:5e:48:7c:10:4f:a2:f1:f7:78: 67:c8:eb:50:9d:23:72:f8:04:97:d7:8a:b6:47:50:be:ed:bb: b6:ad:84:59:2a:4c:a3:fc:a7:8b:98:67:33:1e:46:f2:38:1d: 7b:7e:01:cf -----BEGIN CERTIFICATE----- MIIHkTCCBnmgAwIBAgIUAQ0Mn0MoWENeDX4GHXfQKIsNW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMDkyODAwNDUyMloXDTI1MTIzMTAxNDUyMlowLzEtMCsGA1UEAxMk NDdlMmJkYTktNDI3Yy00MGM2LThiNGQtMWM4NWJkNDJkMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndmf5jB8G8mbSriDjgjFTjBL5/Y8TtNHFN7k 3ITPps6k7+uePiY0SLLLRJCe2n+TlkBkpwksrTDIfl3pL5ffQxdkwPKDquXz4j4w YaKnLBw/S1NLTzo13NhJW7GTv/Nx4aTlUNZ7JlQ/wtIZgu3ybI+JPec9Ii26YZli +dDfIPC+xjWtGexIoY31AJ7qu676Zxbq5HLsznlSF++06dPawQNPJwBhnNWfP4b1 b7VwmJIV6K2/DKoAVUwEKJDh9w+nm+qWifm804hdkrPtLyxFmhxZIod0f1m9GyYV GAHy5e0UxsE1XV+ZFGsVTFcJ+8oCdZatfTdMdghnK7lRxMLt2wIDAQABo4IEozCC BJ8wHQYDVR0OBBYEFDUp1bnkitsUkLoVuWdQ8PhQxxmqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80 N2UyYmRhOS00MjdjLTQwYzYtOGI0ZC0xYzg1YmQ0MmQxOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzQ3ZTJiZGE5LTQyN2MtNDBjNi04 YjRkLTFjODViZDQyZDE4YS80N2UyYmRhOS00MjdjLTQwYzYtOGI0ZC0xYzg1YmQ0 MmQxOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgZYGCCsGAQUF BwEHAQH/BIGGMIGDMGoEAgABMGQDBAZALsADBARZKeADAwBoqgMDAIn8AwMAlS0D BAemcYADAwCqRwMEBar9QAMEAMa1rwMEAca4sgMEAMa5zQMEAMbHwDAMAwQCxsvk AwQAxsvmAwQExxUQAwQAx/j3AwQBzH4IMBUEAgACMA8DBQAmBMgAAwYEJiAB4gAw KgYIKwYBBQUHAQgBAf8EGzAZoBcwFQICKtICAjYjAgJDcAICaqUCAwCOljBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQByVe+as5MFTX/ytuBUBLnkzEGdNrcog3DiRH8Ir6IwoW1v2Qkn35quNI1U pE40fOW085GhiLabBLiG0LUP7sZ+0AmsIZ87vMNqsCJML1hxGc8QYEqIF4oj75nB xbcgVT8+SGV0sMo3IA4/z+o28puNw/ES/4uiflkEaJ+ex35pFPM5fn6uhzmskzTW tI5cxV4RI994pJg0DqEGN1G11dUy7QoPJcPgnrUN+Pg4C47HhHv7hoharX6Wp2S1 PvOTp9sODkHWqu9uJR5BCiSLPcNeSHwQT6Lx93hnyOtQnSNy+ASX14q2R1C+7bu2 rYRZKkyj/KeLmGczHkbyOB17fgHP -----END CERTIFICATE-----Generated at Thu Nov 21 16:24:14 2024 by rpki-client on console-ams.rpki-client.org