$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer File: 712951d4-501e-451c-a20a-59b6aff3e2d4.cer (raw, json) Hash identifier: ENeBpRre/oaUbJEc1otsysNg2bog9dZhRSCzIwx1GLA= Subject key identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584471E047436D9CE40384F63600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Jan 2024 19:57:22 +0000 Certificate not after: Wed 08 Apr 2026 18:57:22 +0000 Subordinate resources: IP: 146.18.0.0/16 IP: 155.161.0.0/16 IP: 161.135.0.0/16 IP: 165.150.0.0/16 IP: 170.5.0.0/16 IP: 192.67.56.0/24 IP: 192.112.46.0/24 IP: 192.189.184.0/22 IP: 198.140.0.0 -- 198.140.5.255 IP: 199.81.0.0 -- 199.82.255.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:71:e0:47:43:6d:9c:e4:03:84:f6:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 4 19:57:22 2024 GMT Not After : Apr 8 18:57:22 2026 GMT Subject: CN=712951d4-501e-451c-a20a-59b6aff3e2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:df:f3:79:83:04:7c:10:ff:11:81:6d:d4: de:01:6b:d2:34:1e:82:a4:42:b1:fe:b6:b3:36:87: 8d:d5:b7:50:08:f5:84:4b:3b:9d:db:d4:58:59:47: f4:1a:c6:63:e0:b6:66:c1:94:53:6c:32:2c:e2:87: 1d:26:0e:79:01:12:95:17:fa:a6:14:38:33:0d:da: 16:90:1d:56:12:0f:06:57:e3:b7:aa:40:7e:0e:23: 0c:b1:cc:c7:02:18:bf:f2:3d:e9:fc:54:41:3c:04: 0e:5e:ba:e1:cc:e0:32:f7:b4:83:2f:6b:c4:3a:ee: 7f:50:cb:7f:24:d9:03:e8:3e:a0:44:24:c1:06:51: 77:4b:5b:fd:70:6f:79:84:80:14:f0:1f:86:f3:ea: ae:70:87:53:53:69:a3:d0:03:6c:16:86:c7:48:9b: 57:c4:4d:32:4c:0c:b1:74:1c:af:04:b3:40:08:76: ca:d6:b9:53:69:f8:fa:9b:96:5f:79:c3:5f:76:7f: 0e:00:fb:8c:d1:a8:f2:3f:ec:83:8f:7a:da:e5:da: 70:fd:b2:ee:4f:de:82:c0:06:ab:44:44:ff:2e:b3: 50:ab:1f:be:49:80:7d:6e:18:3d:ea:0c:2d:d6:74: c0:95:f5:02:b2:58:2a:2f:b3:9b:31:1e:17:c7:1d: 09:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 146.18.0.0/16 155.161.0.0/16 161.135.0.0/16 165.150.0.0/16 170.5.0.0/16 192.67.56.0/24 192.112.46.0/24 192.189.184.0/22 198.140.0.0-198.140.5.255 199.81.0.0-199.82.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2b:3f:5d:bc:41:eb:a1:70:27:c1:f5:52:21:36:33:50:02: 1c:d2:3d:d2:b9:a7:7a:ce:33:24:57:e6:18:e0:68:a6:a1:01: cb:ed:ba:dd:f2:9b:28:f0:20:93:46:f8:24:01:a3:8e:3b:a5: f7:8d:8f:59:a6:ed:72:2c:32:19:61:d4:8c:de:75:b8:27:26: f7:aa:de:ea:d8:2b:3e:9c:d2:0f:7c:53:ad:39:e0:a4:5f:d6: ee:f2:c3:e5:15:ea:99:81:d9:ce:33:1b:3e:80:d3:cf:e8:f0: 7c:ad:9b:a7:74:b9:66:6b:93:c1:79:86:ba:d0:0b:47:c4:ee: 16:39:16:10:04:6c:94:a9:92:c7:6f:7c:e1:9a:70:20:84:75: d1:35:c6:00:ef:58:f2:c7:90:24:d0:bf:95:1f:36:25:78:02: b1:62:ed:a8:c9:c7:90:1d:d1:78:83:e8:79:5a:3b:4c:ec:7d: b3:f0:2b:bc:56:b9:eb:78:98:09:49:57:dd:2c:2d:ad:cf:54: fa:ec:eb:a5:dc:8c:81:44:c6:e8:2c:d3:89:d5:1b:25:d0:e3: 89:e2:b4:33:50:d8:b0:64:1d:69:d1:61:37:44:dc:d9:08:12: e9:a6:da:65:0a:4a:39:6f:7c:11:1d:89:ed:77:b6:28:16:ac: 46:6c:01:3a -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWERx4EdDbZzkA4T2NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDEwNDE5NTcyMloXDTI2MDQwODE4NTcyMlowLzEtMCsGA1UEAxMk NzEyOTUxZDQtNTAxZS00NTFjLWEyMGEtNTliNmFmZjNlMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTLf83mDBHwQ/xGBbdTeAWvSNB6CpEKx/raz NoeN1bdQCPWESzud29RYWUf0GsZj4LZmwZRTbDIs4ocdJg55ARKVF/qmFDgzDdoW kB1WEg8GV+O3qkB+DiMMsczHAhi/8j3p/FRBPAQOXrrhzOAy97SDL2vEOu5/UMt/ JNkD6D6gRCTBBlF3S1v9cG95hIAU8B+G8+qucIdTU2mj0ANsFobHSJtXxE0yTAyx dByvBLNACHbK1rlTafj6m5ZfecNfdn8OAPuM0ajyP+yDj3ra5dpw/bLuT96CwAar RET/LrNQqx++SYB9bhg96gwt1nTAlfUCslgqL7ObMR4Xxx0JAwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFFJ6OI4oQTKMkrJwrjOcvSx1o05zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 MTI5NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2YWZmM2UyZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzcxMjk1MWQ0LTUwMWUtNDUxYy1h MjBhLTU5YjZhZmYzZTJkNC83MTI5NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2YWZm M2UyZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwXQYIKwYBBQUH AQcBAf8ETjBMMEoEAgABMEQDAwCSEgMDAJuhAwMAoYcDAwCllgMDAKoFAwQAwEM4 AwQAwHAuAwQCwL24MAsDAwLGjAMEAcaMBDAKAwMAx1EDAwDHUjBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBm Kz9dvEHroXAnwfVSITYzUAIc0j3Suad6zjMkV+YY4GimoQHL7brd8pso8CCTRvgk AaOOO6X3jY9Zpu1yLDIZYdSM3nW4Jyb3qt7q2Cs+nNIPfFOtOeCkX9bu8sPlFeqZ gdnOMxs+gNPP6PB8rZundLlma5PBeYa60AtHxO4WORYQBGyUqZLHb3zhmnAghHXR NcYA71jyx5Ak0L+VHzYleAKxYu2oyceQHdF4g+h5WjtM7H2z8Cu8VrnreJgJSVfd LC2tz1T67Oul3IyBRMboLNOJ1Rsl0OOJ4rQzUNiwZB1p0WE3RNzZCBLpptplCko5 b3wRHYntd7YoFqxGbAE6 -----END CERTIFICATE-----Generated at Sat May 11 15:32:36 2024 by rpki-client on console-ams.rpki-client.org