$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer File: fd356b15-92b2-4e72-b8d9-fa490480d177.cer (raw, json) Hash identifier: fZ3v9SLs9rGnDhJpz2uPA4PJIakEv7k+qL6tbhq6xGE= Subject key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285846DE3318E123CDBBB5F59A7180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Aug 2024 00:45:25 +0000 Certificate not after: Tue 17 Nov 2026 01:45:25 +0000 Subordinate resources: AS: 27318 -- 27322 AS: 30122 -- 30134 AS: 30511 AS: 30701 AS: 33071 -- 33082 AS: 33558 AS: 53459 AS: 53518 AS: 393221 AS: 394070 AS: 395217 AS: 395429 AS: 395732 AS: 400091 -- 400092 AS: 400390 IP: 192.158.248.0 -- 192.158.252.255 IP: 192.228.80.0 -- 192.228.92.255 IP: 199.6.0.0 -- 199.6.14.255 IP: 199.253.63.0/24 IP: 199.253.181.0/24 IP: 199.254.27.0/24 IP: 2001:4f8::/32 IP: 2001:500:2e::/47 IP: 2001:500:60:: -- 2001:500:7c:ffff:ffff:ffff:ffff:ffff IP: 2001:500:85::/48 IP: 2001:500:99:: -- 2001:500:9b:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:de:33:18:e1:23:cd:bb:b5:f5:9a:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 14 00:45:25 2024 GMT Not After : Nov 17 01:45:25 2026 GMT Subject: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:44:bf:57:76:14:52:a2:b9:fe:49:57:0d:6e: 4a:e8:8c:80:ae:ee:ad:87:28:5d:07:a8:0c:50:14: 5b:f2:a3:04:13:b2:1d:25:aa:39:cd:e1:e7:7b:c9: 7e:a8:28:06:dd:4a:53:74:e0:1f:4c:63:b9:69:da: c9:a7:5f:56:f1:68:0d:d2:bc:b4:13:e9:16:81:87: dc:80:16:d9:70:c0:12:04:a3:49:52:13:a6:f5:bf: 68:2e:ad:5b:cf:92:a4:49:95:7e:38:de:ec:d7:c2: 88:b7:44:6e:89:1b:af:84:7b:a9:e9:00:69:99:fc: aa:3e:b7:0a:1e:2f:5e:c3:e3:ab:67:89:ab:2d:25: b0:e0:3b:a1:3a:33:3d:91:8e:55:76:a9:4c:7b:ea: 6f:d8:a0:b0:81:f1:4c:9a:91:40:eb:b4:77:00:d8: 2c:ca:78:e3:58:20:73:a6:9c:60:d3:29:08:27:b1: 90:9d:17:e5:ac:f2:4d:39:08:f8:9b:a1:ca:da:01: 95:8b:9c:75:20:d0:58:af:7d:57:c0:ec:d6:90:1a: aa:62:66:01:ba:db:96:09:f0:31:25:da:41:e4:85: 70:f6:18:f3:9c:ba:16:83:f1:bd:0a:62:b0:15:38: 24:17:34:03:17:b7:49:74:27:36:46:ae:01:84:65: 99:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 192.158.248.0-192.158.252.255 192.228.80.0-192.228.92.255 199.6.0.0-199.6.14.255 199.253.63.0/24 199.253.181.0/24 199.254.27.0/24 IPv6: 2001:4f8::/32 2001:500:2e::/47 2001:500:60::-2001:500:7c:ffff:ffff:ffff:ffff:ffff 2001:500:85::/48 2001:500:99::-2001:500:9b:ffff:ffff:ffff:ffff:ffff sbgp-autonomousSysNum: critical Autonomous System Numbers: 27318-27322 30122-30134 30511 30701 33071-33082 33558 53459 53518 393221 394070 395217 395429 395732 400091-400092 400390 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cd:f4:7d:15:d9:31:ac:5a:4c:60:8b:0c:97:bd:a6:13:9b: 1e:19:4e:ae:b8:c5:fa:29:b3:ce:cb:26:ad:5b:63:9e:59:dc: dd:4d:9c:3c:ea:c3:a2:59:c6:d0:99:56:8d:59:10:1d:19:f6: b6:6c:8b:f2:e7:73:99:2a:7b:6b:7b:1d:b9:30:e3:a5:7b:0a: 57:78:d5:22:9d:f1:ff:93:63:78:bd:3b:bf:d0:53:f2:01:36: 26:30:d2:f7:e0:ff:1e:db:19:45:62:0a:0d:63:bc:8b:87:26: 74:89:fd:9b:08:2a:c8:cb:fa:6f:f4:ec:3b:3a:a2:86:ed:08: 49:f9:d4:48:d7:f4:83:8b:28:30:00:d1:d0:5b:5e:38:4b:7f: ee:77:46:f5:1f:c7:a7:13:5c:82:ea:98:72:ed:64:82:c4:32: 6a:7d:1a:e0:e1:aa:e6:31:aa:d3:7b:08:35:b0:e6:ba:f2:bb: a6:59:ed:5e:fc:94:c0:43:c1:e6:e8:3f:ab:f2:15:59:d9:f0: 55:59:09:5f:a6:e9:5c:e1:ae:d6:c4:7d:2a:69:ce:56:50:d2: 55:6a:a5:d6:29:fe:3e:ab:c1:dc:b5:a4:04:c6:86:25:71:59: ef:7d:35:8a:4e:73:81:46:f9:37:99:dd:5b:e5:b1:a3:d4:af: 88:c5:2f:7f -----BEGIN CERTIFICATE----- MIIH5jCCBs6gAwIBAgIUAQ0Mn0MoWEbeMxjhI827tfWacYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDgxNDAwNDUyNVoXDTI2MTExNzAxNDUyNVowLzEtMCsGA1UEAxMk ZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBkMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0S/V3YUUqK5/klXDW5K6IyAru6thyhdB6gM UBRb8qMEE7IdJao5zeHne8l+qCgG3UpTdOAfTGO5adrJp19W8WgN0ry0E+kWgYfc gBbZcMASBKNJUhOm9b9oLq1bz5KkSZV+ON7s18KIt0RuiRuvhHup6QBpmfyqPrcK Hi9ew+OrZ4mrLSWw4DuhOjM9kY5VdqlMe+pv2KCwgfFMmpFA67R3ANgsynjjWCBz ppxg0ykIJ7GQnRflrPJNOQj4m6HK2gGVi5x1INBYr31XwOzWkBqqYmYButuWCfAx JdpB5IVw9hjznLoWg/G9CmKwFTgkFzQDF7dJdCc2Rq4BhGWZywIDAQABo4IE+DCC BPQwHQYDVR0OBBYEFB9lq7I8A+irQQERlBhAXxeXwgIlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m ZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2ZkMzU2YjE1LTkyYjItNGU3Mi1i OGQ5LWZhNDkwNDgwZDE3Ny9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4 MGQxNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgZ8GCCsGAQUF BwEHAQH/BIGPMIGMMEEEAgABMDswDAMEA8Ce+AMEAMCe/DAMAwQEwORQAwQAwORc MAsDAwHHBgMEAMcGDgMEAMf9PwMEAMf9tQMEAMf+GzBHBAIAAjBBAwUAIAEE+AMH ASABBQAALjASAwcFIAEFAABgAwcAIAEFAAB8AwcAIAEFAACFMBIDBwAgAQUAAJkD BwIgAQUAAJgwdgYIKwYBBQUHAQgBAf8EZzBloGMwYTAIAgJqtgICarowCAICdaoC AnW2AgJ3LwICd+0wCgIDAIEvAgMAgToCAwCDFgIDANDTAgMA0Q4CAwYABQIDBgNW AgMGB9ECAwYIpQIDBgnUMAoCAwYa2wIDBhrcAgMGHAYwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOs30fRXZ MaxaTGCLDJe9phObHhlOrrjF+imzzssmrVtjnlnc3U2cPOrDolnG0JlWjVkQHRn2 tmyL8udzmSp7a3sduTDjpXsKV3jVIp3x/5NjeL07v9BT8gE2JjDS9+D/HtsZRWIK DWO8i4cmdIn9mwgqyMv6b/TsOzqihu0ISfnUSNf0g4soMADR0FteOEt/7ndG9R/H pxNcguqYcu1kgsQyan0a4OGq5jGq03sINbDmuvK7plntXvyUwEPB5ug/q/IVWdnw VVkJX6bpXOGu1sR9KmnOVlDSVWql1in+PqvB3LWkBMaGJXFZ7301ik5zgUb5N5nd W+Wxo9SviMUvfw== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:10 2024 by rpki-client on console-fra.rpki-client.org