$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer File: baebde37-2461-4409-96e1-a720edbe80a7.cer (raw, json) Hash identifier: S158wvARLDYK/H9nBewxr437Wr+FLjvHA7wLHGz/2Nw= Subject key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285845681B6825C285A7E7513C8600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Apr 2024 00:45:22 +0000 Certificate not after: Mon 06 Jul 2026 00:45:22 +0000 Subordinate resources: AS: 11539 AS: 16751 AS: 18442 AS: 19554 AS: 21563 AS: 22591 AS: 26547 AS: 26704 AS: 27495 AS: 27570 AS: 31917 AS: 32216 AS: 32263 AS: 35888 AS: 395509 AS: 395791 AS: 397717 AS: 398848 AS: 399973 IP: 67.202.160.0/20 IP: 74.112.144.0/21 IP: 137.236.0.0/16 IP: 142.75.0.0/16 IP: 150.105.0.0/16 IP: 162.252.12.0/22 IP: 173.243.48.0/20 IP: 192.67.53.0/24 IP: 192.80.54.0/24 IP: 192.138.191.0/24 IP: 199.71.120.0/24 IP: 199.85.101.0/24 IP: 199.182.176.0/21 IP: 204.107.28.0/22 IP: 204.138.115.0/24 IP: 205.211.178.0/24 IP: 206.197.31.0/24 IP: 206.253.128.0/21 IP: 2604:8b00::/32 IP: 2620:134:d000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:68:1b:68:25:c2:85:a7:e7:51:3c:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Apr 2 00:45:22 2024 GMT Not After : Jul 6 00:45:22 2026 GMT Subject: CN=baebde37-2461-4409-96e1-a720edbe80a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:f4:b2:b2:02:12:f1:4c:6f:53:88:09:01: 3c:e4:af:ac:6f:3a:bf:7a:5b:aa:42:a4:41:8e:37: b1:50:85:90:1b:e5:5a:e5:ee:f7:a4:f9:1a:1b:5f: bd:da:6f:11:9d:b6:13:b2:26:d0:5d:ac:ce:af:17: 9a:65:0a:40:58:2e:b9:f4:fb:00:2d:90:6d:d8:b0: 23:66:8c:df:06:10:86:8c:c2:42:94:4f:b5:f0:3c: 48:3c:5b:02:5d:e9:5c:e2:76:c5:b6:07:70:2e:61: 5c:e8:f5:ac:48:b1:32:bf:4e:6a:18:05:b1:b4:a5: df:cb:39:1e:0a:b8:f2:40:bc:40:d4:7e:64:a2:70: 8f:40:1c:40:3b:b5:21:2c:88:8e:1c:1b:aa:e2:3d: f8:75:6f:8a:fc:8d:da:52:f8:20:3f:b6:3a:dc:ec: 77:f6:8d:02:83:ad:7a:c7:e2:eb:67:02:24:2f:bb: ef:06:e6:ea:10:10:c3:d7:83:3f:31:64:f4:db:1d: 9d:e9:be:7c:6d:88:20:28:07:4b:e8:07:da:6c:10: 79:fd:d6:2b:10:f3:c6:96:31:ed:2b:58:bf:3a:6e: bb:b2:3a:46:c0:bc:bd:4e:69:09:73:ea:40:6b:22: e4:78:39:2d:7e:77:69:6f:d9:47:03:39:0d:cc:c1: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 67.202.160.0/20 74.112.144.0/21 137.236.0.0/16 142.75.0.0/16 150.105.0.0/16 162.252.12.0/22 173.243.48.0/20 192.67.53.0/24 192.80.54.0/24 192.138.191.0/24 199.71.120.0/24 199.85.101.0/24 199.182.176.0/21 204.107.28.0/22 204.138.115.0/24 205.211.178.0/24 206.197.31.0/24 206.253.128.0/21 IPv6: 2604:8b00::/32 2620:134:d000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11539 16751 18442 19554 21563 22591 26547 26704 27495 27570 31917 32216 32263 35888 395509 395791 397717 398848 399973 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b2:77:ef:04:85:af:ed:85:4e:c2:43:e1:8c:e6:04:f3:79: fe:a3:1a:97:d9:12:07:67:0f:de:f3:67:85:f9:71:b6:b1:47: 8d:f7:ae:69:d9:0f:c8:79:eb:5e:a2:c8:2a:86:54:65:fc:40: 8e:05:da:85:dc:58:34:33:38:5c:02:5b:e5:85:07:0f:98:ce: 33:3c:7a:52:9c:58:92:fc:31:ae:ec:64:5f:c1:35:70:23:cc: e3:ff:3c:13:30:ae:ce:2c:cc:b0:b5:58:0b:08:8a:67:ad:4f: fa:c9:11:35:2f:87:d7:dd:77:97:f2:68:a5:57:41:7c:d2:b4: d1:f1:94:2e:3a:b6:ae:5c:53:c1:ad:94:f7:90:92:37:be:d1: 0f:c3:a3:fc:79:91:be:84:7d:26:53:46:64:4b:81:d0:77:eb: 87:8c:56:d3:3c:07:89:d7:ab:3d:38:19:14:ab:8d:3f:8a:54: 63:8e:56:9b:91:e7:da:a8:8e:81:e7:eb:9e:b5:27:55:63:38: 7b:b2:27:32:47:d7:81:6c:8d:d9:ed:ce:95:18:a1:ef:7c:4d: 50:a9:57:fa:f6:52:c6:49:0e:48:11:26:80:f6:fd:2f:cc:3c: c5:3d:88:54:96:6f:b8:10:a0:7e:30:cd:47:46:cf:33:8f:54: b9:1b:6c:8b -----BEGIN CERTIFICATE----- MIIH1DCCBrygAwIBAgIUAQ0Mn0MoWEVoG2glwoWn51E8hgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDQwMjAwNDUyMloXDTI2MDcwNjAwNDUyMlowLzEtMCsGA1UEAxMk YmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02f0srICEvFMb1OICQE85K+sbzq/eluqQqRB jjexUIWQG+Va5e73pPkaG1+92m8RnbYTsibQXazOrxeaZQpAWC659PsALZBt2LAj ZozfBhCGjMJClE+18DxIPFsCXelc4nbFtgdwLmFc6PWsSLEyv05qGAWxtKXfyzke CrjyQLxA1H5konCPQBxAO7UhLIiOHBuq4j34dW+K/I3aUvggP7Y63Ox39o0Cg616 x+LrZwIkL7vvBubqEBDD14M/MWT02x2d6b58bYggKAdL6AfabBB5/dYrEPPGljHt K1i/Om67sjpGwLy9TmkJc+pAayLkeDktfndpb9lHAzkNzMHjxwIDAQABo4IE5jCC BOIwHQYDVR0OBBYEFFA2TRbEtah2aHYo+t3+shTwQwDhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i YWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2JhZWJkZTM3LTI0NjEtNDQwOS05 NmUxLWE3MjBlZGJlODBhNy9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRi ZTgwYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgZwGCCsGAQUF BwEHAQH/BIGMMIGJMG8EAgABMGkDBARDyqADBANKcJADAwCJ7AMDAI5LAwMAlmkD BAKi/AwDBASt8zADBADAQzUDBADAUDYDBADAir8DBADHR3gDBADHVWUDBAPHtrAD BALMaxwDBADMinMDBADN07IDBADOxR8DBAPO/YAwFgQCAAIwEAMFACYEiwADBwQm IAE00AAwZwYIKwYBBQUHAQgBAf8EWDBWoFQwUgICLRMCAkFvAgJICgICTGICAlQ7 AgJYPwICZ7MCAmhQAgJrZwICa7ICAnytAgJ92AICfgcCAwCMMAIDBgj1AgMGCg8C AwYRlQIDBhYAAgMGGmUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE7J37wSFr+2FTsJD4YzmBPN5/qMal9kS B2cP3vNnhflxtrFHjfeuadkPyHnrXqLIKoZUZfxAjgXahdxYNDM4XAJb5YUHD5jO Mzx6UpxYkvwxruxkX8E1cCPM4/88EzCuzizMsLVYCwiKZ61P+skRNS+H1913l/Jo pVdBfNK00fGULjq2rlxTwa2U95CSN77RD8Oj/HmRvoR9JlNGZEuB0Hfrh4xW0zwH iderPTgZFKuNP4pUY45Wm5Hn2qiOgefrnrUnVWM4e7InMkfXgWyN2e3OlRih73xN UKlX+vZSxkkOSBEmgPb9L8w8xT2IVJZvuBCgfjDNR0bPM49UuRtsiw== -----END CERTIFICATE-----Generated at Thu Apr 25 22:44:57 2024 by rpki-client on console-fra.rpki-client.org