$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer File: fd356b15-92b2-4e72-b8d9-fa490480d177.cer (raw, json) Hash identifier: c0LdWMv3X2tamMjKWnTX4iBGEltx1+RbPOnRUcQGw9s= Subject key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584231E97E887D0D9B29FE5F7D3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Jun 2023 12:30:20 +0000 Certificate not after: Wed 13 Aug 2025 19:06:39 +0000 Subordinate resources: AS: 27318 -- 27322 AS: 30122 -- 30134 AS: 30511 AS: 30701 AS: 33071 -- 33082 AS: 33558 AS: 53459 AS: 53518 AS: 393221 AS: 394070 AS: 395217 AS: 395429 AS: 395732 AS: 400091 -- 400092 AS: 400390 IP: 192.158.248.0 -- 192.158.252.255 IP: 192.228.80.0 -- 192.228.92.255 IP: 199.6.0.0 -- 199.6.14.255 IP: 199.253.63.0/24 IP: 199.253.181.0/24 IP: 199.254.27.0/24 IP: 2001:4f8::/32 IP: 2001:500:2e::/47 IP: 2001:500:60:: -- 2001:500:7c:ffff:ffff:ffff:ffff:ffff IP: 2001:500:85::/48 IP: 2001:500:99:: -- 2001:500:9b:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:31:e9:7e:88:7d:0d:9b:29:fe:5f:7d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jun 12 12:30:20 2023 GMT Not After : Aug 13 19:06:39 2025 GMT Subject: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:44:bf:57:76:14:52:a2:b9:fe:49:57:0d:6e: 4a:e8:8c:80:ae:ee:ad:87:28:5d:07:a8:0c:50:14: 5b:f2:a3:04:13:b2:1d:25:aa:39:cd:e1:e7:7b:c9: 7e:a8:28:06:dd:4a:53:74:e0:1f:4c:63:b9:69:da: c9:a7:5f:56:f1:68:0d:d2:bc:b4:13:e9:16:81:87: dc:80:16:d9:70:c0:12:04:a3:49:52:13:a6:f5:bf: 68:2e:ad:5b:cf:92:a4:49:95:7e:38:de:ec:d7:c2: 88:b7:44:6e:89:1b:af:84:7b:a9:e9:00:69:99:fc: aa:3e:b7:0a:1e:2f:5e:c3:e3:ab:67:89:ab:2d:25: b0:e0:3b:a1:3a:33:3d:91:8e:55:76:a9:4c:7b:ea: 6f:d8:a0:b0:81:f1:4c:9a:91:40:eb:b4:77:00:d8: 2c:ca:78:e3:58:20:73:a6:9c:60:d3:29:08:27:b1: 90:9d:17:e5:ac:f2:4d:39:08:f8:9b:a1:ca:da:01: 95:8b:9c:75:20:d0:58:af:7d:57:c0:ec:d6:90:1a: aa:62:66:01:ba:db:96:09:f0:31:25:da:41:e4:85: 70:f6:18:f3:9c:ba:16:83:f1:bd:0a:62:b0:15:38: 24:17:34:03:17:b7:49:74:27:36:46:ae:01:84:65: 99:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 192.158.248.0-192.158.252.255 192.228.80.0-192.228.92.255 199.6.0.0-199.6.14.255 199.253.63.0/24 199.253.181.0/24 199.254.27.0/24 IPv6: 2001:4f8::/32 2001:500:2e::/47 2001:500:60::-2001:500:7c:ffff:ffff:ffff:ffff:ffff 2001:500:85::/48 2001:500:99::-2001:500:9b:ffff:ffff:ffff:ffff:ffff sbgp-autonomousSysNum: critical Autonomous System Numbers: 27318-27322 30122-30134 30511 30701 33071-33082 33558 53459 53518 393221 394070 395217 395429 395732 400091-400092 400390 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ed:df:29:a1:ea:fe:77:5e:14:a2:21:45:8b:0e:1f:8c:b4: ef:32:9e:67:ee:7d:7f:66:e7:ba:d8:b3:52:9c:d4:9f:64:4c: 7e:09:17:76:bd:ea:16:50:42:a9:82:1c:85:0d:97:de:35:51: bf:68:04:7e:06:59:00:fa:07:76:dd:b8:25:ea:80:b3:99:05: 90:8e:2d:e7:d4:06:3e:9e:be:8c:8d:66:dd:6a:8f:4b:53:c4: 40:49:c7:c2:e8:85:58:81:e8:bc:ed:33:fe:55:f7:3d:07:b4: db:39:47:f0:32:5f:79:f8:15:f8:f5:db:58:2b:7b:76:81:94: fe:77:e3:9d:aa:9f:71:2b:1b:8e:3e:64:e2:61:36:33:45:87: cf:f3:dd:3e:3b:b9:89:3d:5c:e9:b4:45:01:65:18:7e:90:04: 55:55:29:44:ae:13:39:a7:3c:c6:b2:a5:e1:92:8b:d6:0a:c7: 4d:70:ae:a1:80:99:a5:2d:5f:9a:9f:42:ea:60:6f:0a:30:e0: c3:59:61:62:07:ce:9d:a4:23:0c:df:60:2f:f9:20:35:16:0b: 1b:e8:3a:41:8b:80:16:b9:47:32:1e:be:ff:10:c9:de:26:f2: 0d:8e:d4:1a:3a:01:4a:52:7a:17:17:b4:c8:a6:91:e0:09:e9: e1:b1:ff:76 -----BEGIN CERTIFICATE----- MIIH5jCCBs6gAwIBAgIUAQ0Mn0MoWEIx6X6IfQ2bKf5ffT0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMDYxMjEyMzAyMFoXDTI1MDgxMzE5MDYzOVowLzEtMCsGA1UEAxMk ZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBkMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0S/V3YUUqK5/klXDW5K6IyAru6thyhdB6gM UBRb8qMEE7IdJao5zeHne8l+qCgG3UpTdOAfTGO5adrJp19W8WgN0ry0E+kWgYfc gBbZcMASBKNJUhOm9b9oLq1bz5KkSZV+ON7s18KIt0RuiRuvhHup6QBpmfyqPrcK Hi9ew+OrZ4mrLSWw4DuhOjM9kY5VdqlMe+pv2KCwgfFMmpFA67R3ANgsynjjWCBz ppxg0ykIJ7GQnRflrPJNOQj4m6HK2gGVi5x1INBYr31XwOzWkBqqYmYButuWCfAx JdpB5IVw9hjznLoWg/G9CmKwFTgkFzQDF7dJdCc2Rq4BhGWZywIDAQABo4IE+DCC BPQwHQYDVR0OBBYEFB9lq7I8A+irQQERlBhAXxeXwgIlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m ZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2ZkMzU2YjE1LTkyYjItNGU3Mi1i OGQ5LWZhNDkwNDgwZDE3Ny9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4 MGQxNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgZ8GCCsGAQUF BwEHAQH/BIGPMIGMMEEEAgABMDswDAMEA8Ce+AMEAMCe/DAMAwQEwORQAwQAwORc MAsDAwHHBgMEAMcGDgMEAMf9PwMEAMf9tQMEAMf+GzBHBAIAAjBBAwUAIAEE+AMH ASABBQAALjASAwcFIAEFAABgAwcAIAEFAAB8AwcAIAEFAACFMBIDBwAgAQUAAJkD BwIgAQUAAJgwdgYIKwYBBQUHAQgBAf8EZzBloGMwYTAIAgJqtgICarowCAICdaoC AnW2AgJ3LwICd+0wCgIDAIEvAgMAgToCAwCDFgIDANDTAgMA0Q4CAwYABQIDBgNW AgMGB9ECAwYIpQIDBgnUMAoCAwYa2wIDBhrcAgMGHAYwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmu3fKaHq /ndeFKIhRYsOH4y07zKeZ+59f2bnutizUpzUn2RMfgkXdr3qFlBCqYIchQ2X3jVR v2gEfgZZAPoHdt24JeqAs5kFkI4t59QGPp6+jI1m3WqPS1PEQEnHwuiFWIHovO0z /lX3PQe02zlH8DJfefgV+PXbWCt7doGU/nfjnaqfcSsbjj5k4mE2M0WHz/PdPju5 iT1c6bRFAWUYfpAEVVUpRK4TOac8xrKl4ZKL1grHTXCuoYCZpS1fmp9C6mBvCjDg w1lhYgfOnaQjDN9gL/kgNRYLG+g6QYuAFrlHMh6+/xDJ3ibyDY7UGjoBSlJ6Fxe0 yKaR4Anp4bH/dg== -----END CERTIFICATE-----Generated at Wed Apr 24 14:36:18 2024 by rpki-client on console-fra.rpki-client.org