$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer File: 719038d9-6923-4e29-8b36-f45b06ce12f8.cer (raw, json) Hash identifier: BwDjT5UmXDw1J5xIJy7kePCAdTv+vjZi5cGGKeCIph4= Subject key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858473FE90D7B6C4ED02DD02A1680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Sep 2024 00:45:26 +0000 Certificate not after: Tue 22 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 393238 IP: 68.169.252.0/22 IP: 162.253.44.0/22 IP: 192.154.14.0/23 IP: 192.199.180.0/22 IP: 192.236.0.0/24 IP: 199.10.4.0/22 IP: 199.188.64.0/22 IP: 199.189.228.0/22 IP: 204.144.192.0/18 IP: 205.143.47.0/24 IP: 207.191.192.0/19 IP: 2605:3f80::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:e9:0d:7b:6c:4e:d0:2d:d0:2a:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 18 00:45:26 2024 GMT Not After : Dec 22 01:45:26 2026 GMT Subject: CN=719038d9-6923-4e29-8b36-f45b06ce12f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:cd:1b:97:0b:0a:0e:ab:da:bd:b5:f9:32: 34:bb:2e:01:a2:62:99:e3:4b:5a:e7:9d:7f:48:9b: ad:4d:aa:2f:05:cc:70:e9:d3:6c:ab:f7:a2:7a:7b: 9b:5e:3c:1b:bf:be:40:8a:2a:c1:14:90:64:33:69: 06:9b:25:ce:48:1d:f2:dc:97:a6:23:5a:3d:0d:8e: 93:16:98:05:40:25:b7:7f:bb:71:09:78:8b:2a:e9: 60:78:7a:0e:bb:1e:c3:9a:46:c1:7b:0f:83:5c:f6: 05:14:6e:d0:3e:43:e1:37:23:28:21:b7:b5:b8:ed: 94:20:73:64:2a:84:af:25:b8:6d:a7:bd:ec:59:95: 21:8c:aa:73:77:64:88:f5:b9:e0:fa:a2:a3:f7:5e: c4:f2:71:c4:01:4e:ff:e5:62:08:5a:ed:5f:28:4a: 65:aa:9d:2e:0c:83:e9:1f:15:60:3e:21:78:8a:22: 86:72:1c:06:30:06:e2:92:a2:cb:ba:c7:94:68:8e: 85:9d:6d:c3:9f:ae:a4:19:1b:38:e2:cc:a9:9f:7f: 00:d3:50:78:25:93:68:e4:cd:ae:e1:a1:ab:61:65: 31:d8:8e:2a:d5:9e:40:7a:71:e1:17:6e:76:18:05: c4:50:78:ca:be:7c:ee:70:fb:27:97:92:0e:e1:43: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 68.169.252.0/22 162.253.44.0/22 192.154.14.0/23 192.199.180.0/22 192.236.0.0/24 199.10.4.0/22 199.188.64.0/22 199.189.228.0/22 204.144.192.0/18 205.143.47.0/24 207.191.192.0/19 IPv6: 2605:3f80::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:bc:1d:88:c8:d0:e7:8d:ce:18:da:8d:85:3b:3b:dc:2d:09: f7:5d:94:a4:16:c3:27:2a:0f:03:61:c1:cf:72:11:27:a9:75: a0:7f:9e:6a:70:3b:c9:28:2a:74:05:6d:bc:c6:9c:97:82:29: 41:c5:6c:13:8a:9c:71:ad:9b:7a:85:43:e4:2b:25:39:7d:05: b6:67:fc:df:50:88:fa:c4:75:c2:36:c8:38:e7:2d:32:f4:68: 9a:ce:fc:98:05:4f:40:18:c9:f7:e1:dc:e0:1c:74:e7:b1:11: 42:3a:d7:62:17:4d:fb:2b:a3:9c:51:68:40:67:72:87:ed:6d: 05:00:9f:2a:36:95:f2:97:00:be:0b:c3:60:20:c4:79:12:ba: cb:07:40:85:45:e1:ad:87:ca:f5:65:26:a5:27:81:0e:bd:11: b9:b1:6a:0d:ec:56:6b:a7:dc:fa:58:4d:e9:a0:df:cc:09:24: 77:4d:59:66:61:99:18:04:2c:36:32:1e:7e:32:17:42:5c:fa: d5:da:ec:6e:d8:08:2a:50:c8:40:25:2c:33:03:89:2e:1e:89: 1b:8a:5b:82:28:6c:8a:15:d4:45:63:ed:73:04:f0:99:5e:69: ff:57:8c:7a:84:04:4f:63:a6:f2:55:3b:c6:66:5b:6d:6d:4e: b2:9f:f6:ed -----BEGIN CERTIFICATE----- MIIHVDCCBjygAwIBAgIUAQ0Mn0MoWEc/6Q17bE7QLdAqFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDkxODAwNDUyNloXDTI2MTIyMjAxNDUyNlowLzEtMCsGA1UEAxMk NzE5MDM4ZDktNjkyMy00ZTI5LThiMzYtZjQ1YjA2Y2UxMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1orNG5cLCg6r2r21+TI0uy4BomKZ40ta551/ SJutTaovBcxw6dNsq/eienubXjwbv75AiirBFJBkM2kGmyXOSB3y3JemI1o9DY6T FpgFQCW3f7txCXiLKulgeHoOux7DmkbBew+DXPYFFG7QPkPhNyMoIbe1uO2UIHNk KoSvJbhtp73sWZUhjKpzd2SI9bng+qKj917E8nHEAU7/5WIIWu1fKEplqp0uDIPp HxVgPiF4iiKGchwGMAbikqLLuseUaI6FnW3Dn66kGRs44sypn38A01B4JZNo5M2u 4aGrYWUx2I4q1Z5AenHhF252GAXEUHjKvnzucPsnl5IO4UOrGQIDAQABo4IEZjCC BGIwHQYDVR0OBBYEFHew7XenS8/dZ0q66Wdm+B0ub20DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZjZTEyZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzcxOTAzOGQ5LTY5MjMtNGUyOS04 YjM2LWY0NWIwNmNlMTJmOC83MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZj ZTEyZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwagYIKwYBBQUH AQcBAf8EWzBZMEgEAgABMEIDBAJEqfwDBAKi/SwDBAHAmg4DBALAx7QDBADA7AAD BALHCgQDBALHvEADBALHveQDBAbMkMADBADNjy8DBAXPv8AwDQQCAAIwBwMFBCYF P4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgAWMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAK68HYjI0OeN zhjajYU7O9wtCfddlKQWwycqDwNhwc9yESepdaB/nmpwO8koKnQFbbzGnJeCKUHF bBOKnHGtm3qFQ+QrJTl9BbZn/N9QiPrEdcI2yDjnLTL0aJrO/JgFT0AYyffh3OAc dOexEUI612IXTfsro5xRaEBncoftbQUAnyo2lfKXAL4Lw2AgxHkSussHQIVF4a2H yvVlJqUngQ69Ebmxag3sVmun3PpYTemg38wJJHdNWWZhmRgELDYyHn4yF0Jc+tXa 7G7YCCpQyEAlLDMDiS4eiRuKW4IobIoV1EVj7XME8Jleaf9XjHqEBE9jpvJVO8Zm W21tTrKf9u0= -----END CERTIFICATE-----Generated at Thu Nov 21 16:24:22 2024 by rpki-client on console-ams.rpki-client.org