$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer File: 05a654f5-4306-42f8-a547-0a21265d5db2.cer (raw, json) Hash identifier: UxXuXwaol5ne9CsC32VHDHKx0lOBwH6caL7LOb5OC/c= Subject key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858449C0C689D9C1ED8AA4FFB2980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Jan 2024 22:30:14 +0000 Certificate not after: Mon 29 Dec 2025 19:11:55 +0000 Subordinate resources: AS: 1766 IP: 131.126.0.0/16 IP: 144.201.0.0/16 IP: 146.156.0.0/16 IP: 147.195.0.0/16 IP: 150.127.0.0/16 IP: 158.21.0.0 -- 158.22.255.255 IP: 158.25.0.0 -- 158.35.255.255 IP: 158.55.0.0/16 IP: 159.70.0.0/16 IP: 159.129.0.0/16 IP: 159.131.0.0/16 IP: 192.65.173.0/24 IP: 192.67.48.0/24 IP: 192.83.106.0/24 IP: 192.104.83.0/24 IP: 198.43.0.0/16 IP: 2620:140::/38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:9c:0c:68:9d:9c:1e:d8:aa:4f:fb:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 19 22:30:14 2024 GMT Not After : Dec 29 19:11:55 2025 GMT Subject: CN=05a654f5-4306-42f8-a547-0a21265d5db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:7b:e6:5f:59:f4:49:eb:64:69:b1:a3:d4: b5:4f:57:17:f1:e0:7c:ae:55:11:b9:a9:44:10:56: 09:3a:d2:9c:aa:02:49:ad:4c:aa:d0:36:d2:d0:6e: 2e:56:7a:18:c0:21:89:b3:f0:c7:dc:22:b0:ac:c4: 04:4f:d1:3b:0d:e0:a9:b8:ee:39:5d:b2:b3:e4:b6: 5f:fe:6c:ae:90:fa:d0:f8:4a:bc:92:5d:d0:aa:ed: 2d:43:d2:46:a8:e9:fd:5d:f4:a0:88:e4:de:ee:ce: 15:f8:4a:11:15:7d:47:a0:74:1f:41:1b:c9:5b:ec: ec:0b:15:5c:15:e0:07:b7:37:ff:a2:40:50:9c:3e: 79:bf:24:1c:af:ed:ae:06:cd:fc:4f:2c:03:a1:24: 6c:10:d6:d8:ab:28:91:73:f9:ea:37:33:02:4d:44: c9:4d:d9:a6:fa:1b:d3:33:e4:8a:f5:3e:51:82:5d: d4:47:5c:39:e3:62:94:a8:28:05:77:fc:e1:3c:67: 7e:01:50:74:22:e0:37:e5:15:a1:73:07:76:10:9f: 60:e8:bd:99:9f:c6:b5:ac:b5:c2:54:9b:c1:9d:41: 6e:5a:4f:08:a8:0b:bc:39:5e:76:15:0c:11:cc:7c: 1b:6c:5a:23:9e:6a:c9:19:07:2d:e7:d7:62:fe:87: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 131.126.0.0/16 144.201.0.0/16 146.156.0.0/16 147.195.0.0/16 150.127.0.0/16 158.21.0.0-158.22.255.255 158.25.0.0-158.35.255.255 158.55.0.0/16 159.70.0.0/16 159.129.0.0/16 159.131.0.0/16 192.65.173.0/24 192.67.48.0/24 192.83.106.0/24 192.104.83.0/24 198.43.0.0/16 IPv6: 2620:140::/38 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8b:04:62:56:c4:29:a2:95:54:27:7d:61:f1:b5:fe:17:83: e1:a0:22:14:cf:ba:c9:39:9f:d4:88:b2:30:ce:cf:4b:8b:a2: c9:15:b2:55:68:ed:1a:b0:44:35:41:d6:4d:e5:ae:53:59:91: b9:1f:fe:fb:94:9f:01:d4:bf:60:1d:4a:20:05:b7:2e:63:e6: 8f:be:70:ca:e2:42:88:95:73:0c:ad:4e:0f:a6:2d:59:65:04: 81:70:20:77:a0:bf:d9:d1:b0:8b:75:34:d8:3f:dc:60:9a:ba: f8:c4:65:55:a0:af:df:84:b4:0e:c6:2c:5a:cc:fc:41:f4:70: be:e8:30:c8:bc:5a:09:98:09:a9:a7:d7:89:5e:bd:31:c5:56: d3:60:24:ab:11:e4:bf:b3:50:9c:33:be:59:5a:c2:20:d2:11: 5c:92:cc:c5:b2:5f:73:19:16:84:46:5e:bb:72:33:82:81:0a: 3c:24:4c:ab:f0:1a:ea:ec:bf:0f:06:c8:21:1a:49:f8:5a:cb: 4e:cd:5f:6a:82:44:25:6c:03:8e:c4:43:46:c6:68:e1:5e:5d: a5:c1:eb:23:5f:f6:69:c7:e8:5f:2e:d4:43:e0:a2:5b:3e:69: 9e:bd:06:e2:6a:d6:31:d9:75:b6:d2:51:0e:ff:23:a6:ce:16: 1a:dd:3f:4c -----BEGIN CERTIFICATE----- MIIHdTCCBl2gAwIBAgIUAQ0Mn0MoWEScDGidnB7Yqk/7KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDExOTIyMzAxNFoXDTI1MTIyOTE5MTE1NVowLzEtMCsGA1UEAxMk MDVhNjU0ZjUtNDMwNi00MmY4LWE1NDctMGEyMTI2NWQ1ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVt75l9Z9EnrZGmxo9S1T1cX8eB8rlURualE EFYJOtKcqgJJrUyq0DbS0G4uVnoYwCGJs/DH3CKwrMQET9E7DeCpuO45XbKz5LZf /myukPrQ+Eq8kl3Qqu0tQ9JGqOn9XfSgiOTe7s4V+EoRFX1HoHQfQRvJW+zsCxVc FeAHtzf/okBQnD55vyQcr+2uBs38TywDoSRsENbYqyiRc/nqNzMCTUTJTdmm+hvT M+SK9T5Rgl3UR1w542KUqCgFd/zhPGd+AVB0IuA35RWhcwd2EJ9g6L2Zn8a1rLXC VJvBnUFuWk8IqAu8OV52FQwRzHwbbFojnmrJGQct59di/ofHfQIDAQABo4IEhzCC BIMwHQYDVR0OBBYEFHKmdXN3dv5L5+A55YXdj8L6f91jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1ZDVkYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA1YTY1NGY1LTQzMDYtNDJmOC1h NTQ3LTBhMjEyNjVkNWRiMi8wNWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1 ZDVkYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwgYsGCCsGAQUF BwEHAQH/BHwwejBoBAIAATBiAwMAg34DAwCQyQMDAJKcAwMAk8MDAwCWfzAKAwMA nhUDAwCeFjAKAwMAnhkDAwKeIAMDAJ43AwMAn0YDAwCfgQMDAJ+DAwQAwEGtAwQA wEMwAwQAwFNqAwQAwGhTAwMAxiswDgQCAAIwCAMGAiYgAUAAMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAgbmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGGLBGJWxCmilVQnfWHxtf4Xg+GgIhTP usk5n9SIsjDOz0uLoskVslVo7RqwRDVB1k3lrlNZkbkf/vuUnwHUv2AdSiAFty5j 5o++cMriQoiVcwytTg+mLVllBIFwIHegv9nRsIt1NNg/3GCauvjEZVWgr9+EtA7G LFrM/EH0cL7oMMi8WgmYCamn14levTHFVtNgJKsR5L+zUJwzvllawiDSEVySzMWy X3MZFoRGXrtyM4KBCjwkTKvwGursvw8GyCEaSfhay07NX2qCRCVsA47EQ0bGaOFe XaXB6yNf9mnH6F8u1EPgols+aZ69BuJq1jHZdbbSUQ7/I6bOFhrdP0w= -----END CERTIFICATE-----Generated at Sat May 11 15:35:54 2024 by rpki-client on console-fra.rpki-client.org