$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer File: 55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer (raw, json) Hash identifier: KRwRRmhMAQo1O8rbxLfo8gGpDh+6btG0e+6iZqGpDNU= Subject key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584774F408C9E0732DE0C85EC0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Oct 2024 00:45:24 +0000 Certificate not after: Sun 10 Jan 2027 01:45:24 +0000 Subordinate resources: AS: 26636 AS: 46261 AS: 63228 IP: 23.190.80.0/21 IP: 45.43.192.0/19 IP: 64.187.224.0/20 IP: 104.153.80.0/22 IP: 104.166.64.0/19 IP: 104.247.192.0/19 IP: 107.161.112.0/20 IP: 137.83.79.0/24 IP: 144.208.91.0/24 IP: 158.51.144.0/22 IP: 160.202.64.0/18 IP: 162.210.36.0/22 IP: 162.217.172.0/22 IP: 162.219.24.0/21 IP: 162.223.28.0/22 IP: 162.244.132.0/22 IP: 162.248.208.0/21 IP: 170.75.144.0/20 IP: 172.82.128.0/18 IP: 199.101.96.0/21 IP: 199.233.232.0/21 IP: 216.115.184.0/22 IP: 2605:a880::/32 IP: 2607:3f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:f4:08:c9:e0:73:2d:e0:c8:5e:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 7 00:45:24 2024 GMT Not After : Jan 10 01:45:24 2027 GMT Subject: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:39:f1:12:0d:ce:14:4e:67:74:1a:d0:84: ea:01:28:85:08:e5:43:87:b2:44:17:77:b8:64:74: bc:d8:ff:bb:71:7a:a3:c7:05:d9:78:bb:9b:e6:14: eb:bf:28:3e:d3:af:ea:52:d1:a1:f7:a8:d5:17:ff: 43:d8:56:78:86:50:d0:db:0d:d9:d7:09:60:63:bb: f7:c2:b7:1f:ff:63:11:46:f3:d2:3f:dc:9b:25:05: 9c:e1:2f:b1:1f:18:39:08:8c:24:25:3c:35:48:e6: 23:ac:a5:42:15:e7:97:7b:42:de:cf:02:b2:f6:23: 87:5f:0e:dc:d6:55:b9:0d:cd:88:39:44:7a:2a:47: a2:63:61:b5:65:ed:9d:39:a3:63:f7:ae:66:ba:9b: 0e:52:5c:71:59:82:d4:8a:76:47:71:70:51:87:80: e1:aa:5a:b7:d2:1a:66:fd:78:0c:84:86:3b:cf:32: 88:cc:c4:01:77:36:57:ac:1e:78:a0:78:22:db:ac: 93:ce:01:08:fe:0b:a5:53:a6:9f:4b:97:ff:bb:3a: 5a:bb:7b:b2:d2:bc:71:d7:f2:ca:92:3c:2a:0d:7e: 8a:18:6c:09:6e:9f:a4:26:ab:17:23:4b:72:ff:25: 3c:f8:d7:80:73:2d:56:5f:ed:f4:d5:ec:2d:bf:55: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.190.80.0/21 45.43.192.0/19 64.187.224.0/20 104.153.80.0/22 104.166.64.0/19 104.247.192.0/19 107.161.112.0/20 137.83.79.0/24 144.208.91.0/24 158.51.144.0/22 160.202.64.0/18 162.210.36.0/22 162.217.172.0/22 162.219.24.0/21 162.223.28.0/22 162.244.132.0/22 162.248.208.0/21 170.75.144.0/20 172.82.128.0/18 199.101.96.0/21 199.233.232.0/21 216.115.184.0/22 IPv6: 2605:a880::/32 2607:3f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26636 46261 63228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ce:94:31:ef:10:a9:9a:e9:6d:6b:1a:00:34:29:47:6f:95: bd:92:1c:f4:c1:f9:42:63:53:f3:a9:7c:a5:33:9e:6c:1b:59: 33:bf:27:f6:af:4c:82:3e:66:59:9a:c2:92:cc:d2:00:59:56: 8d:45:db:35:3f:b6:51:82:c1:57:23:36:da:69:be:c4:2f:3b: c5:30:73:b1:4a:8e:c0:29:47:f7:a4:9f:3e:d1:ed:46:20:79: 4e:83:18:6f:96:2e:34:13:35:63:07:02:23:04:8a:6e:14:66: 67:8c:37:09:4a:8a:c5:51:70:e7:ce:5a:e7:4f:be:46:27:63: 89:8d:fe:34:ac:17:c0:6d:5d:a7:1a:9f:c3:da:e5:61:83:62: 30:37:33:73:ed:ae:e7:ca:57:62:c5:e0:69:65:32:ba:7c:c1: 6b:bc:c5:c9:04:ca:db:b8:ff:91:d0:16:4c:6c:af:04:36:08: 74:b3:72:ff:7c:4e:5c:82:f1:38:cf:9d:d2:7f:56:0f:db:6e: 45:ad:0f:49:04:0a:3f:7b:d6:db:f1:a8:f6:a7:e8:c9:8d:e0: e9:d4:83:29:53:4b:f7:dc:46:ed:e8:a8:00:9a:be:46:b8:a5: 2e:7b:67:b5:04:65:14:cb:59:e6:76:53:75:f7:d6:7c:c5:f0: cc:8c:fe:f0 -----BEGIN CERTIFICATE----- MIIHqzCCBpOgAwIBAgIUAQ0Mn0MoWEd09AjJ4HMt4MhewMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MTAwNzAwNDUyNFoXDTI3MDExMDAxNDUyNFowLzEtMCsGA1UEAxMk NTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEwZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIU58RINzhROZ3Qa0ITqASiFCOVDh7JEF3e4 ZHS82P+7cXqjxwXZeLub5hTrvyg+06/qUtGh96jVF/9D2FZ4hlDQ2w3Z1wlgY7v3 wrcf/2MRRvPSP9ybJQWc4S+xHxg5CIwkJTw1SOYjrKVCFeeXe0LezwKy9iOHXw7c 1lW5Dc2IOUR6KkeiY2G1Ze2dOaNj965mupsOUlxxWYLUinZHcXBRh4Dhqlq30hpm /XgMhIY7zzKIzMQBdzZXrB54oHgi26yTzgEI/gulU6afS5f/uzpau3uy0rxx1/LK kjwqDX6KGGwJbp+kJqsXI0ty/yU8+NeAcy1WX+301ewtv1UnyQIDAQABo4IEvTCC BLkwHQYDVR0OBBYEFM4OpNcF7ImiTtXi0Oxa0cXiHVvGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81 NWM5YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzU1YzlhZjRhLWUyZTQtNGZiOS05 ZjUzLTg2OWM4NzcxMGUzMS81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3 MTBlMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgbcGCCsGAQUF BwEHAQH/BIGnMIGkMIGLBAIAATCBhAMEAxe+UAMEBS0rwAMEBEC74AMEAmiZUAME BWimQAMEBWj3wAMEBGuhcAMEAIlTTwMEAJDQWwMEAp4zkAMEBqDKQAMEAqLSJAME AqLZrAMEA6LbGAMEAqLfHAMEAqL0hAMEA6L40AMEBKpLkAMEBqxSgAMEA8dlYAME A8fp6AMEAthzuDAUBAIAAjAOAwUAJgWogAMFACYHPwAwIwYIKwYBBQUHAQgBAf8E FDASoBAwDgICaAwCAwC0tQIDAPb8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHDOlDHvEKma6W1rGgA0KUdv lb2SHPTB+UJjU/OpfKUznmwbWTO/J/avTII+ZlmawpLM0gBZVo1F2zU/tlGCwVcj NtppvsQvO8Uwc7FKjsApR/eknz7R7UYgeU6DGG+WLjQTNWMHAiMEim4UZmeMNwlK isVRcOfOWudPvkYnY4mN/jSsF8BtXacan8Pa5WGDYjA3M3PtrufKV2LF4GllMrp8 wWu8xckEytu4/5HQFkxsrwQ2CHSzcv98TlyC8TjPndJ/Vg/bbkWtD0kECj971tvx qPan6MmN4OnUgylTS/fcRu3oqACavka4pS57Z7UEZRTLWeZ2U3X31nzF8MyM/vA= -----END CERTIFICATE-----Generated at Thu Nov 21 15:36:35 2024 by rpki-client on console-fra.rpki-client.org