$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer File: 967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer (raw, json) Hash identifier: whPIizX6GFbcCVPWngVhWwtP1hadx4VuAIx8Vpv9c5U= Subject key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285841E48352EFB5AED21AB4E3D650 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sun 27 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 29854 IP: 67.212.224.0/20 IP: 68.169.32.0/20 IP: 69.36.160.0/19 IP: 206.130.96.0/19 IP: 208.131.128.0/19 IP: 209.236.64.0/20 IP: 2607:fc98::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:52:ef:b5:ae:d2:1a:b4:e3:d6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 27 19:06:39 2025 GMT Subject: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:97:76:43:87:e5:1c:1d:01:ed:e8:5f:22: 68:f3:44:1f:dd:d0:a5:af:10:ae:02:cf:54:61:55: 89:57:70:c2:42:1c:1b:f3:4b:55:38:fc:9d:ae:9c: 9b:4f:15:0d:4b:29:54:23:6a:70:20:02:f1:ff:68: 73:fe:1d:ae:20:09:47:4d:62:c6:21:b2:40:af:8f: 89:ac:b9:c3:0c:f1:e8:67:c8:8f:ca:95:72:dd:77: ac:ad:93:ca:db:35:47:b3:26:e0:0d:fa:fe:21:2b: 13:a9:4e:a2:a6:83:0d:a1:20:d2:df:3e:e0:e3:b3: 50:b7:26:39:ed:d2:48:b1:a8:f5:4e:00:47:a6:a8: 90:b4:02:43:7c:50:7e:02:72:07:ac:3c:81:83:1a: 73:ae:13:a4:67:c2:e3:dd:e3:6d:51:2b:b4:28:fb: 02:a5:dd:bb:ec:bb:6b:60:f1:42:6c:ac:0f:5e:51: 99:20:96:a7:02:05:31:09:6b:18:da:c4:fb:29:4f: f0:13:78:49:ac:0e:64:7c:52:8b:ba:81:01:24:1e: b7:73:ef:15:97:a2:b0:19:4b:c3:19:a9:77:c9:b1: f5:e5:1b:18:44:27:c8:84:42:3e:03:e6:ab:c2:58: ff:77:86:43:d7:aa:a9:39:4b:ce:51:0b:fc:4b:9f: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 67.212.224.0/20 68.169.32.0/20 69.36.160.0/19 206.130.96.0/19 208.131.128.0/19 209.236.64.0/20 IPv6: 2607:fc98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29854 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9c:b3:96:4a:57:b2:a2:c4:ff:6d:04:80:e0:74:4f:68:4e: 50:9e:d7:1b:12:74:b9:65:42:97:5f:bc:d7:45:ac:3d:1c:4e: 30:3f:77:a0:1b:c9:c8:d9:03:07:5f:0b:5b:eb:14:bd:f7:c4: f9:18:24:f9:00:b7:55:6c:7e:d4:d1:0b:7b:f0:2e:a5:6b:0f: 43:ca:4a:38:a5:d2:73:ec:aa:0c:87:03:f9:14:4b:cd:cc:31: 29:14:3e:18:55:1b:a3:4a:52:c3:9f:17:14:cf:1d:5c:39:71: 13:b0:be:76:aa:a8:84:ae:92:e9:ce:b6:0a:89:1b:be:17:99: 41:29:f3:7c:cd:95:1f:f0:aa:2e:27:5f:a8:e6:3b:23:fb:f4: 84:c0:5d:64:4b:21:b3:89:b1:40:48:68:55:85:83:71:d6:a5: 32:b3:2d:49:68:15:ff:d8:07:cf:dd:63:ce:a4:50:2e:f4:a1: 7c:bf:2d:1f:7f:89:a9:7a:13:9c:37:88:94:34:65:e5:d9:c9: 89:96:12:9c:6d:65:c8:16:e3:69:47:53:e4:fa:a5:6f:14:a9: 85:f1:70:19:95:6d:4d:16:df:87:bb:68:2c:e9:95:ea:8a:67: 1d:bd:66:f5:4d:c1:63:cf:b7:6e:02:b7:4f:77:65:55:ea:a7: d7:a7:64:60 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEHkg1Lvta7SGrTj1lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcyNzE5MDYzOVowLzEtMCsGA1UEAxMk OTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5YWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspWXdkOH5RwdAe3oXyJo80Qf3dClrxCuAs9U YVWJV3DCQhwb80tVOPydrpybTxUNSylUI2pwIALx/2hz/h2uIAlHTWLGIbJAr4+J rLnDDPHoZ8iPypVy3XesrZPK2zVHsybgDfr+ISsTqU6ipoMNoSDS3z7g47NQtyY5 7dJIsaj1TgBHpqiQtAJDfFB+AnIHrDyBgxpzrhOkZ8Lj3eNtUSu0KPsCpd277Ltr YPFCbKwPXlGZIJanAgUxCWsY2sT7KU/wE3hJrA5kfFKLuoEBJB63c+8Vl6KwGUvD Gal3ybH15RsYRCfIhEI+A+arwlj/d4ZD16qpOUvOUQv8S58c9QIDAQABo4IERzCC BEMwHQYDVR0OBBYEFNdYOL7ICQfx4aAVt4e/IawASTk7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85 NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzk2N2E5OGIwLTEwMGYtNGU2OS04 YTlmLWJjZWFkYjdlOWFhZS85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3 ZTlhYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARD1OADBAREqSADBAVFJKADBAXOgmADBAXQg4AD BATR7EAwDQQCAAIwBwMFACYH/JgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdJ4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAM5yzlkpXsqLE/20EgOB0T2hOUJ7XGxJ0uWVCl1+810WsPRxOMD93 oBvJyNkDB18LW+sUvffE+Rgk+QC3VWx+1NELe/AupWsPQ8pKOKXSc+yqDIcD+RRL zcwxKRQ+GFUbo0pSw58XFM8dXDlxE7C+dqqohK6S6c62CokbvheZQSnzfM2VH/Cq LidfqOY7I/v0hMBdZEshs4mxQEhoVYWDcdalMrMtSWgV/9gHz91jzqRQLvShfL8t H3+JqXoTnDeIlDRl5dnJiZYSnG1lyBbjaUdT5PqlbxSphfFwGZVtTRbfh7toLOmV 6opnHb1m9U3BY8+3bgK3T3dlVeqn16dkYA== -----END CERTIFICATE-----Generated at Sat Apr 20 02:51:54 2024 by rpki-client on console-ams.rpki-client.org