$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer File: ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer (raw, json) Hash identifier: KKnlJRkTCDQhQ4HhfTX8JfYpLts9tBDHjHRs34xbIqk= Subject key identifier: 00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285844A4B866DA0C81AB4AAAF1EA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Jan 2024 01:03:15 +0000 Certificate not after: Tue 21 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 26271 AS: 397186 IP: 64.25.192.0/20 IP: 107.161.128.0/20 IP: 107.181.192.0/19 IP: 138.229.32.0/19 IP: 162.249.112.0/22 IP: 162.250.24.0/21 IP: 207.241.128.0/20 IP: 2606:e400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:a4:b8:66:da:0c:81:ab:4a:aa:f1:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jan 23 01:03:15 2024 GMT Not After : Oct 21 00:45:16 2025 GMT Subject: CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e7:32:81:32:bd:93:a4:e3:ca:38:d9:c7:7f: 98:58:86:93:ca:d6:f9:d0:cc:4b:e8:2c:ef:08:79: 97:bd:b3:e3:72:ac:72:5c:90:e0:c5:a0:a0:dd:5f: aa:74:2f:7e:55:cc:c9:99:15:fd:45:85:00:95:63: b4:cf:97:7f:a7:03:74:5f:6c:22:8e:db:88:b6:77: 43:ae:8b:ff:fe:ea:d4:45:2f:ec:e2:dc:ba:e7:9e: 9c:e8:72:87:09:4f:3e:8e:1e:dc:b1:49:2a:7b:0b: 3f:f5:18:ba:b9:f4:c2:31:41:b2:bf:ab:80:f9:6f: ce:21:0c:3b:79:41:e2:54:76:1d:2a:10:e1:3a:53: c4:e6:d7:35:f9:8d:d7:88:50:76:8f:f4:aa:09:30: 63:b4:05:93:7a:2f:26:3e:19:54:f9:15:22:df:dc: f9:88:e4:5c:61:45:04:5b:23:93:4c:c6:74:56:7a: 89:6e:b5:af:88:71:65:80:93:95:22:04:2d:5e:e3: bb:3e:63:9b:06:c0:e7:90:dd:f1:10:43:9d:70:8f: 88:c2:ac:43:14:40:1d:1d:61:3c:25:10:fb:f3:23: 9a:b5:2f:a9:b3:4b:35:1a:ec:17:80:88:b1:7b:d7: cb:0a:88:1d:03:40:2c:e0:c3:95:d4:88:da:80:11: 82:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.25.192.0/20 107.161.128.0/20 107.181.192.0/19 138.229.32.0/19 162.249.112.0/22 162.250.24.0/21 207.241.128.0/20 IPv6: 2606:e400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26271 397186 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8c:16:75:4b:02:77:ff:c2:2c:57:b7:78:58:81:95:ce:b6: cb:92:47:6d:45:cc:8b:d8:01:e3:72:27:9a:65:7b:50:9b:91: 38:7b:71:a7:5e:af:9d:0c:4f:6d:cf:47:3f:bc:4a:79:32:94: 2f:73:fc:d7:f8:04:e3:59:a1:6e:50:a2:33:bc:36:b5:76:5e: 07:ce:1a:58:ec:66:ea:30:ad:89:6d:05:85:4d:69:89:cd:2f: ec:af:ea:0e:78:b7:e6:35:4c:c6:7a:0f:70:9c:de:2f:0d:40: 4a:23:ec:0b:7c:0d:d6:36:05:da:f9:22:fc:f0:04:37:0b:ab: 97:96:88:7c:90:67:8e:be:21:44:02:e8:af:3e:74:76:84:81: 6b:32:6f:7a:de:d4:20:c2:c6:bc:80:88:cc:85:0c:df:4f:5a: 53:0a:49:b4:56:45:49:43:22:ae:b6:1f:f2:1f:0c:df:ea:de: c8:9d:55:b9:83:e7:a1:49:58:63:94:fe:b2:77:23:bf:84:45: f6:47:24:ad:06:80:9f:e6:dd:58:9a:f5:49:44:ef:6e:88:62: 55:e0:f1:47:63:c2:b2:6e:75:3a:2c:17:5d:82:66:c0:3d:4e: 78:ed:63:80:ce:a8:e2:a5:ae:b5:ff:c6:b7:e7:63:8a:61:2b: e4:be:fc:16 -----BEGIN CERTIFICATE----- MIIHQDCCBiigAwIBAgIUAQ0Mn0MoWESkuGbaDIGrSqrx6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDEyMzAxMDMxNVoXDTI1MTAyMTAwNDUxNlowLzEtMCsGA1UEAxMk ZGRmNzMyMmUtOGU0MS00Y2JiLTgwNWQtYWI2ZjY3MjI2ZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OcygTK9k6TjyjjZx3+YWIaTytb50MxL6Czv CHmXvbPjcqxyXJDgxaCg3V+qdC9+VczJmRX9RYUAlWO0z5d/pwN0X2wijtuItndD rov//urURS/s4ty6556c6HKHCU8+jh7csUkqews/9Ri6ufTCMUGyv6uA+W/OIQw7 eUHiVHYdKhDhOlPE5tc1+Y3XiFB2j/SqCTBjtAWTei8mPhlU+RUi39z5iORcYUUE WyOTTMZ0VnqJbrWviHFlgJOVIgQtXuO7PmObBsDnkN3xEEOdcI+IwqxDFEAdHWE8 JRD78yOatS+ps0s1GuwXgIixe9fLCogdA0As4MOV1IjagBGCywIDAQABo4IEUjCC BE4wHQYDVR0OBBYEFAAnKwYcNcM2O2mUjcQrzPBOhJcOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9k ZGY3MzIyZS04ZTQxLTRjYmItODA1ZC1hYjZmNjcyMjZkZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RkZjczMjJlLThlNDEtNGNiYi04 MDVkLWFiNmY2NzIyNmRlZC9kZGY3MzIyZS04ZTQxLTRjYmItODA1ZC1hYjZmNjcy MjZkZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBARAGcADBARroYADBAVrtcADBAWK5SADBAKi+XAD BAOi+hgDBATP8YAwDQQCAAIwBwMFACYG5AAwHgYIKwYBBQUHAQgBAf8EDzANoAsw CQICZp8CAwYPgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAyjBZ1SwJ3/8IsV7d4WIGVzrbLkkdtRcyL2AHj cieaZXtQm5E4e3GnXq+dDE9tz0c/vEp5MpQvc/zX+ATjWaFuUKIzvDa1dl4HzhpY 7GbqMK2JbQWFTWmJzS/sr+oOeLfmNUzGeg9wnN4vDUBKI+wLfA3WNgXa+SL88AQ3 C6uXloh8kGeOviFEAuivPnR2hIFrMm963tQgwsa8gIjMhQzfT1pTCkm0VkVJQyKu th/yHwzf6t7InVW5g+ehSVhjlP6ydyO/hEX2RyStBoCf5t1YmvVJRO9uiGJV4PFH Y8KybnU6LBddgmbAPU547WOAzqjipa61/8a352OKYSvkvvwW -----END CERTIFICATE-----Generated at Thu Mar 28 08:43:59 2024 by rpki-client on console-fra.rpki-client.org