$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer File: 55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer (raw, json) Hash identifier: cIDlVoCXdXVJpj9ltcEGZ+F/Ij8EQe1ogEx0fEvPHn8= Subject key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584270C14D08983799611AB80100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Jul 2023 00:45:16 +0000 Certificate not after: Tue 07 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 26636 AS: 46261 AS: 63228 IP: 23.190.80.0/21 IP: 45.43.192.0/19 IP: 64.187.224.0/20 IP: 104.153.80.0/22 IP: 104.166.64.0/19 IP: 104.247.192.0/19 IP: 107.161.112.0/20 IP: 137.83.79.0/24 IP: 144.208.91.0/24 IP: 158.51.144.0/22 IP: 160.202.64.0/18 IP: 162.210.36.0/22 IP: 162.217.172.0/22 IP: 162.219.24.0/21 IP: 162.223.28.0/22 IP: 162.244.132.0/22 IP: 162.248.208.0/21 IP: 170.75.144.0/20 IP: 172.82.128.0/18 IP: 199.101.96.0/21 IP: 199.233.232.0/21 IP: 216.115.184.0/22 IP: 2605:a880::/32 IP: 2607:3f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Jul 2023 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:70:c1:4d:08:98:37:99:61:1a:b8:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jul 5 00:45:16 2023 GMT Not After : Oct 7 00:45:16 2025 GMT Subject: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:39:f1:12:0d:ce:14:4e:67:74:1a:d0:84: ea:01:28:85:08:e5:43:87:b2:44:17:77:b8:64:74: bc:d8:ff:bb:71:7a:a3:c7:05:d9:78:bb:9b:e6:14: eb:bf:28:3e:d3:af:ea:52:d1:a1:f7:a8:d5:17:ff: 43:d8:56:78:86:50:d0:db:0d:d9:d7:09:60:63:bb: f7:c2:b7:1f:ff:63:11:46:f3:d2:3f:dc:9b:25:05: 9c:e1:2f:b1:1f:18:39:08:8c:24:25:3c:35:48:e6: 23:ac:a5:42:15:e7:97:7b:42:de:cf:02:b2:f6:23: 87:5f:0e:dc:d6:55:b9:0d:cd:88:39:44:7a:2a:47: a2:63:61:b5:65:ed:9d:39:a3:63:f7:ae:66:ba:9b: 0e:52:5c:71:59:82:d4:8a:76:47:71:70:51:87:80: e1:aa:5a:b7:d2:1a:66:fd:78:0c:84:86:3b:cf:32: 88:cc:c4:01:77:36:57:ac:1e:78:a0:78:22:db:ac: 93:ce:01:08:fe:0b:a5:53:a6:9f:4b:97:ff:bb:3a: 5a:bb:7b:b2:d2:bc:71:d7:f2:ca:92:3c:2a:0d:7e: 8a:18:6c:09:6e:9f:a4:26:ab:17:23:4b:72:ff:25: 3c:f8:d7:80:73:2d:56:5f:ed:f4:d5:ec:2d:bf:55: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.190.80.0/21 45.43.192.0/19 64.187.224.0/20 104.153.80.0/22 104.166.64.0/19 104.247.192.0/19 107.161.112.0/20 137.83.79.0/24 144.208.91.0/24 158.51.144.0/22 160.202.64.0/18 162.210.36.0/22 162.217.172.0/22 162.219.24.0/21 162.223.28.0/22 162.244.132.0/22 162.248.208.0/21 170.75.144.0/20 172.82.128.0/18 199.101.96.0/21 199.233.232.0/21 216.115.184.0/22 IPv6: 2605:a880::/32 2607:3f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26636 46261 63228 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:fb:a1:13:db:9c:46:df:e0:85:63:ac:34:25:d8:99:35:c2: d7:d0:37:d0:d7:f1:60:5f:fb:f3:d8:84:38:46:60:82:b0:b8: 2a:0f:d6:e6:db:08:a2:43:06:a9:f8:20:30:e6:b1:5d:ef:9a: 81:af:02:49:8f:0c:ac:09:16:88:55:e9:9c:15:f9:1e:c7:9c: 1a:af:05:a7:20:0c:fa:4c:16:fe:66:83:e9:3a:df:1f:b1:92: f7:0b:40:a6:fe:10:ec:71:d9:66:7d:15:7c:83:41:5a:19:2f: 39:32:dc:81:9c:8d:d4:41:98:c9:f0:93:c2:8d:05:8a:38:26: a5:47:6b:49:60:f7:a4:98:8b:8a:0d:6b:bd:06:1d:1a:e5:69: 3d:8f:46:a7:4e:c3:8d:68:3e:07:0b:88:46:ca:36:0e:69:b6: 79:81:f0:c3:11:99:56:42:b4:09:33:e5:4a:f4:1b:7d:22:58: 6d:cf:e3:b9:54:cd:86:64:80:15:2f:dc:47:cd:36:35:81:b0: c0:2b:92:1e:5e:45:58:83:f9:11:2c:0d:82:52:69:0c:35:db: 74:f0:44:ac:1f:74:7d:54:b9:49:1b:f7:68:ff:a9:01:dd:35: 56:cc:ef:8b:82:92:22:23:3c:9d:4c:dd:ef:62:39:f2:f7:57: a7:0c:05:48 -----BEGIN CERTIFICATE----- MIIHqzCCBpOgAwIBAgIUAQ0Mn0MoWEJwwU0ImDeZYRq4AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMDcwNTAwNDUxNloXDTI1MTAwNzAwNDUxNlowLzEtMCsGA1UEAxMk NTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEwZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIU58RINzhROZ3Qa0ITqASiFCOVDh7JEF3e4 ZHS82P+7cXqjxwXZeLub5hTrvyg+06/qUtGh96jVF/9D2FZ4hlDQ2w3Z1wlgY7v3 wrcf/2MRRvPSP9ybJQWc4S+xHxg5CIwkJTw1SOYjrKVCFeeXe0LezwKy9iOHXw7c 1lW5Dc2IOUR6KkeiY2G1Ze2dOaNj965mupsOUlxxWYLUinZHcXBRh4Dhqlq30hpm /XgMhIY7zzKIzMQBdzZXrB54oHgi26yTzgEI/gulU6afS5f/uzpau3uy0rxx1/LK kjwqDX6KGGwJbp+kJqsXI0ty/yU8+NeAcy1WX+301ewtv1UnyQIDAQABo4IEvTCC BLkwHQYDVR0OBBYEFM4OpNcF7ImiTtXi0Oxa0cXiHVvGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81 NWM5YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzU1YzlhZjRhLWUyZTQtNGZiOS05 ZjUzLTg2OWM4NzcxMGUzMS81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3 MTBlMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgbcGCCsGAQUF BwEHAQH/BIGnMIGkMIGLBAIAATCBhAMEAxe+UAMEBS0rwAMEBEC74AMEAmiZUAME BWimQAMEBWj3wAMEBGuhcAMEAIlTTwMEAJDQWwMEAp4zkAMEBqDKQAMEAqLSJAME AqLZrAMEA6LbGAMEAqLfHAMEAqL0hAMEA6L40AMEBKpLkAMEBqxSgAMEA8dlYAME A8fp6AMEAthzuDAUBAIAAjAOAwUAJgWogAMFACYHPwAwIwYIKwYBBQUHAQgBAf8E FDASoBAwDgICaAwCAwC0tQIDAPb8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKP7oRPbnEbf4IVjrDQl2Jk1 wtfQN9DX8WBf+/PYhDhGYIKwuCoP1ubbCKJDBqn4IDDmsV3vmoGvAkmPDKwJFohV 6ZwV+R7HnBqvBacgDPpMFv5mg+k63x+xkvcLQKb+EOxx2WZ9FXyDQVoZLzky3IGc jdRBmMnwk8KNBYo4JqVHa0lg96SYi4oNa70GHRrlaT2PRqdOw41oPgcLiEbKNg5p tnmB8MMRmVZCtAkz5Ur0G30iWG3P47lUzYZkgBUv3EfNNjWBsMArkh5eRViD+REs DYJSaQw123TwRKwfdH1UuUkb92j/qQHdNVbM74uCkiIjPJ1M3e9iOfL3V6cMBUg= -----END CERTIFICATE-----Generated at Wed Jul 19 22:40:55 2023 by rpki-client on console-ams.rpki-client.org