$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer File: d23910be-77e9-4381-87eb-cb12cfc9b676.cer (raw, json) Hash identifier: cAqFFNkmErc2t3VWqbgIoRk2625KEwl9p2hUhjJ7pvY= Subject key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285847C8D2673659CC2764F49C7F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Nov 2024 01:45:33 +0000 Certificate not after: Tue 09 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 22918 AS: 22965 AS: 40816 AS: 53512 AS: 53766 AS: 54557 AS: 55048 AS: 62542 AS: 394136 AS: 395632 AS: 395730 AS: 397404 AS: 397983 AS: 400055 AS: 400870 -- 400881 IP: 64.186.24.0/21 IP: 66.170.96.0/20 IP: 66.205.228.0/22 IP: 104.193.28.0/22 IP: 192.40.64.0/24 IP: 199.85.234.0/23 IP: 199.184.126.0/23 IP: 207.189.188.0/22 IP: 208.91.0.0/22 IP: 216.221.16.0/20 IP: 2605:a7c0::/32 IP: 2606:9680::/32 IP: 2620:31:a000::/48 IP: 2620:51:a000::/48 IP: 2620:5a:2000::/48 IP: 2620:cc::/48 IP: 2620:df:4000::/44 IP: 2620:124:6000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d2:67:36:59:cc:27:64:f4:9c:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Nov 6 01:45:33 2024 GMT Not After : Feb 9 01:45:33 2027 GMT Subject: CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:5c:11:de:6c:61:b3:a8:0b:4a:ae:78:0b: 6d:66:cc:4f:b6:4b:8b:55:f4:bf:19:c3:84:3d:4e: dc:03:29:ee:fb:ba:fe:3c:6b:8f:87:97:d4:c2:47: 72:73:90:71:af:71:1b:4b:6f:eb:10:37:a1:61:fd: 4c:a4:42:0e:42:77:a5:11:f7:5d:f5:95:68:71:7b: 56:55:0a:7b:c1:1f:65:93:c7:04:d9:70:04:eb:6a: 41:2e:08:bc:e2:9a:45:b4:fd:f2:1b:ba:46:2d:e0: 33:24:02:83:9a:78:0e:ab:1f:98:46:e3:80:86:7a: cb:21:e1:ed:0b:55:16:79:77:2f:6f:28:14:81:8b: f0:da:c6:dd:4d:58:44:ef:06:33:8b:c1:70:d2:b4: 8b:b4:32:bd:d2:67:5d:78:00:c6:25:bb:6e:84:ac: 7f:f6:82:28:34:fd:7d:58:f6:28:b2:29:91:60:aa: 9c:90:b2:46:b9:11:93:5a:0d:e6:45:f6:f4:e5:4c: 00:18:ba:ef:8f:f2:3b:22:ae:ab:3d:83:41:24:79: bd:fa:38:4e:c7:bf:ff:51:40:89:a6:36:1b:1a:ef: da:b8:e1:67:61:fd:3a:66:c8:4b:74:5f:ff:f3:4f: f1:aa:6e:4a:a5:df:8c:4f:46:bf:34:aa:5c:f0:2d: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.186.24.0/21 66.170.96.0/20 66.205.228.0/22 104.193.28.0/22 192.40.64.0/24 199.85.234.0/23 199.184.126.0/23 207.189.188.0/22 208.91.0.0/22 216.221.16.0/20 IPv6: 2605:a7c0::/32 2606:9680::/32 2620:31:a000::/48 2620:51:a000::/48 2620:5a:2000::/48 2620:cc::/48 2620:df:4000::/44 2620:124:6000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22918 22965 40816 53512 53766 54557 55048 62542 394136 395632 395730 397404 397983 400055 400870-400881 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ed:74:5b:c3:f9:76:08:47:18:36:49:5a:f2:11:ae:28:ba: db:97:4c:33:3e:c7:47:60:85:53:34:3f:b9:81:f5:8d:b5:7f: d8:59:a0:a1:17:79:11:8b:22:98:f0:d2:04:33:ef:68:b8:a2: 23:e7:96:6c:c5:b9:0a:4a:4e:60:6f:74:cd:4e:85:f4:c4:b0: 6f:44:09:70:50:89:32:aa:80:8f:f6:e1:d2:89:0e:d8:9f:22: 27:53:02:c0:13:39:83:94:7e:08:12:2f:0c:ba:d3:5d:b8:b1: d1:f6:f8:84:40:e5:7a:bd:ce:fc:a1:71:71:d2:da:96:17:25: 74:16:63:2a:e5:f4:fc:e5:b3:58:42:32:17:ec:fa:ae:f6:a1: 19:1f:23:e8:9f:eb:65:53:08:bd:9e:35:de:dd:9c:5c:b0:b6: e1:f1:20:10:d8:b4:0f:03:1f:d7:1d:87:4f:20:7c:e4:0f:ba: aa:6a:46:c0:10:bd:43:b1:5f:32:11:88:99:ee:4f:7f:6d:ad: ec:6c:a6:70:46:ac:a7:4e:ba:91:36:7b:ec:53:67:c5:d1:9c: f7:3b:6b:e1:a9:eb:a7:b3:7a:5b:3b:d3:e3:3c:8e:91:a0:18: 3b:ba:29:4b:e8:09:63:5f:2d:af:1b:e2:62:c2:9c:60:01:73: 6a:ff:1c:1f -----BEGIN CERTIFICATE----- MIIH2DCCBsCgAwIBAgIUAQ0Mn0MoWEfI0mc2WcwnZPScfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MTEwNjAxNDUzM1oXDTI3MDIwOTAxNDUzM1owLzEtMCsGA1UEAxMk ZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzliNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g1cEd5sYbOoC0queAttZsxPtkuLVfS/GcOE PU7cAynu+7r+PGuPh5fUwkdyc5Bxr3EbS2/rEDehYf1MpEIOQnelEfdd9ZVocXtW VQp7wR9lk8cE2XAE62pBLgi84ppFtP3yG7pGLeAzJAKDmngOqx+YRuOAhnrLIeHt C1UWeXcvbygUgYvw2sbdTVhE7wYzi8Fw0rSLtDK90mddeADGJbtuhKx/9oIoNP19 WPYosimRYKqckLJGuRGTWg3mRfb05UwAGLrvj/I7Iq6rPYNBJHm9+jhOx7//UUCJ pjYbGu/auOFnYf06ZshLdF//80/xqm5Kpd+MT0a/NKpc8C0BcwIDAQABo4IE6jCC BOYwHQYDVR0OBBYEFPLvFE0lp8QYe5mCW2vgCq1CSGqYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QyMzkxMGJlLTc3ZTktNDM4MS04 N2ViLWNiMTJjZmM5YjY3Ni9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2Zj OWI2NzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgaIGCCsGAQUF BwEHAQH/BIGSMIGPMEIEAgABMDwDBANAuhgDBARCqmADBAJCzeQDBAJowRwDBADA KEADBAHHVeoDBAHHuH4DBALPvbwDBALQWwADBATY3RAwSQQCAAIwQwMFACYFp8AD BQAmBpaAAwcAJiAAMaAAAwcAJiAAUaAAAwcAJiAAWiAAAwcAJiAAzAAAAwcEJiAA 30AAAwYAJiABJGAwZQYIKwYBBQUHAQgBAf8EVjBUoFIwUAICWYYCAlm1AgMAn3AC AwDRCAIDANIGAgMA1R0CAwDXCAIDAPROAgMGA5gCAwYJcAIDBgnSAgMGEFwCAwYS nwIDBhq3MAoCAwYd5gIDBh3xMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ7tdFvD+XYIRxg2SVryEa4outuX TDM+x0dghVM0P7mB9Y21f9hZoKEXeRGLIpjw0gQz72i4oiPnlmzFuQpKTmBvdM1O hfTEsG9ECXBQiTKqgI/24dKJDtifIidTAsATOYOUfggSLwy60124sdH2+IRA5Xq9 zvyhcXHS2pYXJXQWYyrl9Pzls1hCMhfs+q72oRkfI+if62VTCL2eNd7dnFywtuHx IBDYtA8DH9cdh08gfOQPuqpqRsAQvUOxXzIRiJnuT39trexspnBGrKdOupE2e+xT Z8XRnPc7a+Gp66ezels70+M8jpGgGDu6KUvoCWNfLa8b4mLCnGABc2r/HB8= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:02 2024 by rpki-client on console-ams.rpki-client.org