$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e.cer File: 0a255869-5473-4988-89f2-dd632982b56e.cer (raw, json) Hash identifier: xXHO1moeWwT09G0Jvpi1lZSKxDqJMjmYlpqi/1nBMX8= Subject key identifier: 6B:BC:76:23:85:18:4F:AD:E3:1D:9A:55:83:A6:31:79:6E:C8:55:F7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285847B99848F8DEFD9603B3DD5980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Oct 2024 14:51:20 +0000 Certificate not after: Wed 18 Feb 2026 20:13:10 +0000 Subordinate resources: AS: 13970 AS: 14392 AS: 16419 AS: 16660 AS: 19020 AS: 19769 AS: 23551 AS: 393361 AS: 395609 AS: 395615 IP: 199.15.188.0/22 IP: 204.63.32.0/19 IP: 208.66.216.0/22 IP: 208.80.48.0/22 IP: 2620:92:e000::/48 IP: 2620:1b6::/32 IP: 2630::/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:98:48:f8:de:fd:96:03:b3:dd:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 31 14:51:20 2024 GMT Not After : Feb 18 20:13:10 2026 GMT Subject: CN=0a255869-5473-4988-89f2-dd632982b56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:98:5e:09:a3:c5:a1:9c:b2:b1:b3:ea:09:59: a5:61:3f:86:f6:e7:01:6f:3f:e6:6d:b0:23:0c:c0: c3:75:92:db:4e:48:2d:71:76:b4:87:18:12:4a:aa: dd:0a:1d:b4:a4:7b:0a:72:a7:6d:12:2e:f2:37:f5: fa:3e:2b:c2:9c:5f:e4:c5:23:a7:6b:3e:2d:03:47: 0d:43:6a:0c:99:78:4e:dc:a7:a2:5c:87:b8:4b:bb: f6:95:31:c1:8a:4a:d3:de:11:ef:23:b6:e9:59:cd: 6e:31:b6:6f:c7:ee:07:d2:fe:c9:fc:5a:98:e8:5d: 9c:28:98:6a:5e:78:ae:80:2e:5b:1f:a9:aa:02:3e: d2:08:e6:bb:72:37:21:17:58:24:2b:d6:5a:08:e7: c1:68:9d:e6:de:d0:3e:b9:aa:1c:db:a2:3b:b3:66: 42:15:19:35:e3:f0:c2:dc:d4:b8:f8:5f:94:fa:ec: af:6b:61:9d:79:04:9a:e2:8b:cb:77:ef:ae:19:6c: ab:ea:e3:b8:58:67:a0:10:e5:ac:b5:7a:81:0f:74: a9:21:44:b2:d9:0a:aa:01:d8:98:e1:3b:4a:ae:1b: fb:9a:2e:53:53:e0:1e:2f:14:ac:48:93:4b:cd:b9: 48:f9:fd:83:25:1b:62:e8:86:f8:60:79:4b:6d:9b: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BC:76:23:85:18:4F:AD:E3:1D:9A:55:83:A6:31:79:6E:C8:55:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.15.188.0/22 204.63.32.0/19 208.66.216.0/22 208.80.48.0/22 IPv6: 2620:92:e000::/48 2620:1b6::/32 2630::/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13970 14392 16419 16660 19020 19769 23551 393361 395609 395615 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e3:57:89:05:bf:a1:77:38:33:21:73:0f:91:1f:b0:fa:bc: 22:bc:46:aa:b0:38:49:85:62:24:cd:6e:20:05:e2:5f:1f:64: 6a:d3:30:ab:9a:3e:43:26:1f:67:f6:12:b5:a3:91:12:e4:0a: dd:28:63:ab:3b:9a:4e:2d:4c:e3:df:5b:d6:21:23:c6:56:a3: c9:ba:81:5a:8c:e7:68:bc:98:7e:00:ed:18:e4:26:d5:f3:bc: 80:15:49:6c:7c:69:35:41:42:f3:44:31:49:d7:d4:fa:88:e2: 89:52:d5:c3:f9:09:1b:2c:1a:d9:f6:73:3d:0e:a2:38:8f:1a: 23:07:a7:60:24:cc:3b:82:9a:75:f2:dd:97:d6:cc:d0:c1:c9: 95:fb:16:c0:61:20:ef:df:79:30:36:7c:61:9f:37:4c:49:b6: 00:71:69:97:fe:7f:69:2c:99:af:7b:03:e9:cd:6e:ad:d0:a9: c1:00:ec:c1:16:64:15:20:7f:ec:42:ba:8f:eb:ee:7a:63:96: ed:09:2c:c5:99:1c:5d:93:53:55:9b:cf:fb:f4:62:51:05:4f: f7:f6:ef:d8:73:96:b0:66:a0:0d:a3:a0:76:e2:0a:9d:b4:6a: 08:a4:b1:b4:f3:e8:68:d7:9a:e5:0c:2c:6b:ac:d3:60:c8:61: ca:9e:82:fc -----BEGIN CERTIFICATE----- MIIHXjCCBkagAwIBAgIUAQ0Mn0MoWEe5mEj43v2WA7PdWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MTAzMTE0NTEyMFoXDTI2MDIxODIwMTMxMFowLzEtMCsGA1UEAxMk MGEyNTU4NjktNTQ3My00OTg4LTg5ZjItZGQ2MzI5ODJiNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJheCaPFoZyysbPqCVmlYT+G9ucBbz/mbbAj DMDDdZLbTkgtcXa0hxgSSqrdCh20pHsKcqdtEi7yN/X6PivCnF/kxSOnaz4tA0cN Q2oMmXhO3KeiXIe4S7v2lTHBikrT3hHvI7bpWc1uMbZvx+4H0v7J/FqY6F2cKJhq XniugC5bH6mqAj7SCOa7cjchF1gkK9ZaCOfBaJ3m3tA+uaoc26I7s2ZCFRk14/DC 3NS4+F+U+uyva2GdeQSa4ovLd++uGWyr6uO4WGegEOWstXqBD3SpIUSy2QqqAdiY 4TtKrhv7mi5TU+AeLxSsSJNLzblI+f2DJRti6Ib4YHlLbZvjGQIDAQABo4IEcDCC BGwwHQYDVR0OBBYEFGu8diOFGE+t4x2aVYOmMXluyFX3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w YTI1NTg2OS01NDczLTQ5ODgtODlmMi1kZDYzMjk4MmI1NmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzBhMjU1ODY5LTU0NzMtNDk4OC04 OWYyLWRkNjMyOTgyYjU2ZS8wYTI1NTg2OS01NDczLTQ5ODgtODlmMi1kZDYzMjk4 MmI1NmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MB4EAgABMBgDBALHD7wDBAXMPyADBALQQtgDBALQUDAwGwQCAAIw FQMHACYgAJLgAAMFACYgAbYDAwAmMDBABggrBgEFBQcBCAEB/wQxMC+gLTArAgI2 kgICODgCAkAjAgJBFAICSkwCAk05AgJb/wIDBgCRAgMGCVkCAwYJXzBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAk41eJBb+hdzgzIXMPkR+w+rwivEaqsDhJhWIkzW4gBeJfH2Rq0zCrmj5DJh9n 9hK1o5ES5ArdKGOrO5pOLUzj31vWISPGVqPJuoFajOdovJh+AO0Y5CbV87yAFUls fGk1QULzRDFJ19T6iOKJUtXD+QkbLBrZ9nM9DqI4jxojB6dgJMw7gpp18t2X1szQ wcmV+xbAYSDv33kwNnxhnzdMSbYAcWmX/n9pLJmvewPpzW6t0KnBAOzBFmQVIH/s QrqP6+56Y5btCSzFmRxdk1NVm8/79GJRBU/39u/Yc5awZqANo6B24gqdtGoIpLG0 8+ho15rlDCxrrNNgyGHKnoL8 -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:35 2024 by rpki-client on console-fra.rpki-client.org