$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer File: d23910be-77e9-4381-87eb-cb12cfc9b676.cer (raw, json) Hash identifier: jHuR0EQMiVWIT8q0F83JpnjhEfM9SDFJwR8ADT+vHVU= Subject key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285842C481D28D8C889C8207785F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Aug 2023 00:45:16 +0000 Certificate not after: Thu 06 Nov 2025 01:45:16 +0000 Subordinate resources: AS: 22918 AS: 22965 AS: 40816 AS: 53512 AS: 53766 AS: 54557 AS: 55048 AS: 62542 AS: 394136 AS: 395632 AS: 395730 AS: 397404 AS: 397983 AS: 400055 AS: 400870 -- 400881 IP: 64.186.24.0/21 IP: 66.170.96.0/20 IP: 66.205.228.0/22 IP: 104.193.28.0/22 IP: 192.40.64.0/24 IP: 199.85.234.0/23 IP: 199.184.126.0/23 IP: 207.189.188.0/22 IP: 208.91.0.0/22 IP: 216.221.16.0/20 IP: 2605:a7c0::/32 IP: 2606:9680::/32 IP: 2620:31:a000::/48 IP: 2620:51:a000::/48 IP: 2620:5a:2000::/48 IP: 2620:cc::/48 IP: 2620:df:4000::/44 IP: 2620:124:6000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:c4:81:d2:8d:8c:88:9c:82:07:78:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 4 00:45:16 2023 GMT Not After : Nov 6 01:45:16 2025 GMT Subject: CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:5c:11:de:6c:61:b3:a8:0b:4a:ae:78:0b: 6d:66:cc:4f:b6:4b:8b:55:f4:bf:19:c3:84:3d:4e: dc:03:29:ee:fb:ba:fe:3c:6b:8f:87:97:d4:c2:47: 72:73:90:71:af:71:1b:4b:6f:eb:10:37:a1:61:fd: 4c:a4:42:0e:42:77:a5:11:f7:5d:f5:95:68:71:7b: 56:55:0a:7b:c1:1f:65:93:c7:04:d9:70:04:eb:6a: 41:2e:08:bc:e2:9a:45:b4:fd:f2:1b:ba:46:2d:e0: 33:24:02:83:9a:78:0e:ab:1f:98:46:e3:80:86:7a: cb:21:e1:ed:0b:55:16:79:77:2f:6f:28:14:81:8b: f0:da:c6:dd:4d:58:44:ef:06:33:8b:c1:70:d2:b4: 8b:b4:32:bd:d2:67:5d:78:00:c6:25:bb:6e:84:ac: 7f:f6:82:28:34:fd:7d:58:f6:28:b2:29:91:60:aa: 9c:90:b2:46:b9:11:93:5a:0d:e6:45:f6:f4:e5:4c: 00:18:ba:ef:8f:f2:3b:22:ae:ab:3d:83:41:24:79: bd:fa:38:4e:c7:bf:ff:51:40:89:a6:36:1b:1a:ef: da:b8:e1:67:61:fd:3a:66:c8:4b:74:5f:ff:f3:4f: f1:aa:6e:4a:a5:df:8c:4f:46:bf:34:aa:5c:f0:2d: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 64.186.24.0/21 66.170.96.0/20 66.205.228.0/22 104.193.28.0/22 192.40.64.0/24 199.85.234.0/23 199.184.126.0/23 207.189.188.0/22 208.91.0.0/22 216.221.16.0/20 IPv6: 2605:a7c0::/32 2606:9680::/32 2620:31:a000::/48 2620:51:a000::/48 2620:5a:2000::/48 2620:cc::/48 2620:df:4000::/44 2620:124:6000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22918 22965 40816 53512 53766 54557 55048 62542 394136 395632 395730 397404 397983 400055 400870-400881 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:39:40:f0:0c:5e:e1:0a:f5:a6:bf:23:df:8b:a1:c2:5f:22: 24:66:17:be:0a:92:0c:ad:fc:32:53:74:9a:e2:e2:ab:0e:1a: 2f:fb:9f:ca:1b:d7:21:92:5e:e6:30:6f:6f:8f:00:a0:dc:f4: e4:e2:40:ad:a5:26:41:91:b7:05:77:a5:f2:d1:2d:77:97:09: 85:3f:82:30:f7:96:bc:8e:5a:57:c7:98:da:41:a1:3c:71:f5: fd:56:32:13:eb:87:ac:a2:6d:22:4e:dd:66:18:e6:bd:1d:62: 74:dc:ff:63:8c:0e:74:3d:bb:02:8c:d3:91:59:7c:c0:3e:91: c5:4b:ec:dd:15:bd:c0:fc:6b:ba:de:4a:f7:71:95:3f:35:a3: 9f:a3:a6:76:db:a0:22:74:b2:9b:f3:8c:d4:6e:09:08:27:77: 38:ee:d2:cd:72:84:58:d4:cc:78:f2:e0:68:14:a5:c6:64:1c: ac:47:66:73:16:d4:21:14:0d:48:02:35:1d:b1:3e:5c:51:8e: 15:bd:1a:76:8a:0c:89:af:21:1d:ea:81:71:65:1a:a4:a1:24: ac:9c:29:98:8e:74:00:6a:2f:29:0a:0e:c8:22:e3:24:ae:7a: 81:c8:6a:d4:24:06:0d:71:35:fc:8a:8c:59:eb:e1:32:22:9f: b9:d5:6b:41 -----BEGIN CERTIFICATE----- MIIH2DCCBsCgAwIBAgIUAQ0Mn0MoWELEgdKNjIicggd4X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDgwNDAwNDUxNloXDTI1MTEwNjAxNDUxNlowLzEtMCsGA1UEAxMk ZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzliNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g1cEd5sYbOoC0queAttZsxPtkuLVfS/GcOE PU7cAynu+7r+PGuPh5fUwkdyc5Bxr3EbS2/rEDehYf1MpEIOQnelEfdd9ZVocXtW VQp7wR9lk8cE2XAE62pBLgi84ppFtP3yG7pGLeAzJAKDmngOqx+YRuOAhnrLIeHt C1UWeXcvbygUgYvw2sbdTVhE7wYzi8Fw0rSLtDK90mddeADGJbtuhKx/9oIoNP19 WPYosimRYKqckLJGuRGTWg3mRfb05UwAGLrvj/I7Iq6rPYNBJHm9+jhOx7//UUCJ pjYbGu/auOFnYf06ZshLdF//80/xqm5Kpd+MT0a/NKpc8C0BcwIDAQABo4IE6jCC BOYwHQYDVR0OBBYEFPLvFE0lp8QYe5mCW2vgCq1CSGqYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k MjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2QyMzkxMGJlLTc3ZTktNDM4MS04 N2ViLWNiMTJjZmM5YjY3Ni9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2Zj OWI2NzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwgaIGCCsGAQUF BwEHAQH/BIGSMIGPMEIEAgABMDwDBANAuhgDBARCqmADBAJCzeQDBAJowRwDBADA KEADBAHHVeoDBAHHuH4DBALPvbwDBALQWwADBATY3RAwSQQCAAIwQwMFACYFp8AD BQAmBpaAAwcAJiAAMaAAAwcAJiAAUaAAAwcAJiAAWiAAAwcAJiAAzAAAAwcEJiAA 30AAAwYAJiABJGAwZQYIKwYBBQUHAQgBAf8EVjBUoFIwUAICWYYCAlm1AgMAn3AC AwDRCAIDANIGAgMA1R0CAwDXCAIDAPROAgMGA5gCAwYJcAIDBgnSAgMGEFwCAwYS nwIDBhq3MAoCAwYd5gIDBh3xMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB05QPAMXuEK9aa/I9+LocJfIiRm F74Kkgyt/DJTdJri4qsOGi/7n8ob1yGSXuYwb2+PAKDc9OTiQK2lJkGRtwV3pfLR LXeXCYU/gjD3lryOWlfHmNpBoTxx9f1WMhPrh6yibSJO3WYY5r0dYnTc/2OMDnQ9 uwKM05FZfMA+kcVL7N0VvcD8a7reSvdxlT81o5+jpnbboCJ0spvzjNRuCQgndzju 0s1yhFjUzHjy4GgUpcZkHKxHZnMW1CEUDUgCNR2xPlxRjhW9GnaKDImvIR3qgXFl GqShJKycKZiOdABqLykKDsgi4ySueoHIatQkBg1xNfyKjFnr4TIin7nVa0E= -----END CERTIFICATE-----Generated at Thu Apr 25 01:30:46 2024 by rpki-client on console-fra.rpki-client.org