$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb.cer File: cd24b3f3-8c24-4212-b596-7495552f2bbb.cer (raw, json) Hash identifier: si9aewHTFOwZQPVbBiUx3atYrKOdlp76SvmTQsfqhXQ= Subject key identifier: 07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285846C988DF0252BB586996124544 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Aug 2024 15:06:16 +0000 Certificate not after: Tue 27 Jan 2026 16:29:23 +0000 Subordinate resources: AS: 4314 AS: 11943 AS: 13693 AS: 14765 AS: 14791 AS: 19734 AS: 25798 AS: 32898 AS: 33507 AS: 35924 AS: 54340 AS: 62911 AS: 63001 AS: 393526 AS: 393814 AS: 397772 AS: 398149 AS: 400569 AS: 401284 IP: 64.130.64.0/19 IP: 64.185.0.0/18 IP: 65.182.64.0/19 IP: 145.224.0.0/19 IP: 172.110.0.0/19 IP: 199.254.157.0/24 IP: 205.209.224.0/19 IP: 206.251.160.0/19 IP: 209.16.64.0/19 IP: 209.205.128.0/18 IP: 216.97.240.0/20 IP: 216.131.24.0/21 IP: 216.167.128.0/18 IP: 2606:1600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:c9:88:df:02:52:bb:58:69:96:12:45:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Aug 6 15:06:16 2024 GMT Not After : Jan 27 16:29:23 2026 GMT Subject: CN=cd24b3f3-8c24-4212-b596-7495552f2bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:6a:9a:4e:56:16:33:7c:c6:27:67:ba:55: 7f:e4:6c:83:79:e7:df:6d:7d:f2:f7:e9:71:e0:50: 71:e4:88:c9:0b:7d:77:f9:b7:01:40:d2:56:7c:1b: 6f:48:53:2a:25:00:ca:1d:a6:4f:d5:a1:51:bb:dd: 09:3f:86:6a:63:58:0e:43:5a:bd:46:d9:a8:ae:9b: aa:b0:2c:95:3c:b2:ab:12:ff:a1:d6:a8:ef:9c:46: 12:5f:9c:d2:69:89:95:48:cf:df:2c:ea:91:59:6b: a4:be:04:7c:79:76:be:2e:df:e4:73:c6:d8:2b:23: c7:85:84:f1:ff:c0:0e:39:a8:bf:cf:52:99:9f:60: 5e:78:46:7b:32:b3:08:0b:22:bb:b1:b5:04:d2:d4: 1c:e7:68:f5:9e:a8:49:5a:63:ca:b3:67:99:e0:83: 1f:8c:d8:33:f1:7b:e4:63:a7:a5:48:e0:01:70:d5: 8d:97:0e:17:82:97:df:6f:8b:5e:1b:0c:1b:fd:65: 11:19:a2:e7:ca:9d:44:4e:d8:4a:b9:ae:aa:fe:75: 5e:12:52:fd:fe:fa:1f:15:fa:50:69:44:0e:22:63: e0:47:e8:b4:d6:c0:2b:8e:8f:0c:27:47:e5:b2:bb: c3:78:6a:ab:b5:83:b6:b0:39:24:c7:68:f7:11:72: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 64.130.64.0/19 64.185.0.0/18 65.182.64.0/19 145.224.0.0/19 172.110.0.0/19 199.254.157.0/24 205.209.224.0/19 206.251.160.0/19 209.16.64.0/19 209.205.128.0/18 216.97.240.0/20 216.131.24.0/21 216.167.128.0/18 IPv6: 2606:1600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4314 11943 13693 14765 14791 19734 25798 32898 33507 35924 54340 62911 63001 393526 393814 397772 398149 400569 401284 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:5f:0d:0f:cf:ed:f6:f4:a6:24:1c:31:7a:66:8e:43:ba:f2: af:9d:bc:98:8d:ff:63:da:f0:25:e9:af:9d:26:37:02:75:59: 0b:6b:4f:6c:5f:1c:31:af:75:42:09:ec:f4:72:e4:81:e3:a3: 45:35:0a:e0:a3:d0:fc:8d:e0:9c:f9:53:4a:f0:e6:b7:41:81: a2:7d:9a:55:c1:12:58:39:0f:b0:e7:b1:31:4f:52:2c:41:08: f2:a5:35:f6:a7:09:62:e4:6a:e6:99:55:8b:b3:16:69:3f:59: 2a:61:c3:34:f5:fc:f2:3d:aa:99:97:4f:ad:bd:5e:bc:82:21: b8:17:a9:d5:e9:9c:f4:09:3f:54:3e:a1:0a:e9:3e:3b:31:8f: 4b:0d:23:4d:25:7e:f5:e7:cc:d3:59:17:2c:02:be:91:d6:0a: 5f:90:09:64:37:56:b1:27:0d:b6:8b:c0:5a:31:5f:ba:22:bb: 4a:35:3f:e3:14:07:c6:44:a0:60:07:57:5d:b9:ba:4e:39:41: c4:cb:67:ef:40:3a:96:c1:d1:60:cd:1b:8d:0b:af:71:a0:21: 10:b2:af:4d:90:27:1e:b1:1f:e2:4d:c2:f0:64:ab:ed:7e:15: 15:f5:e5:6f:fe:7e:0d:8e:2c:f9:c6:06:59:5f:51:2c:fa:50: 3f:a5:a0:0a -----BEGIN CERTIFICATE----- MIIHszCCBpugAwIBAgIUAQ0Mn0MoWEbJiN8CUrtYaZYSRUQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDgwNjE1MDYxNloXDTI2MDEyNzE2MjkyM1owLzEtMCsGA1UEAxMk Y2QyNGIzZjMtOGMyNC00MjEyLWI1OTYtNzQ5NTU1MmYyYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvxqmk5WFjN8xidnulV/5GyDeeffbX3y9+lx 4FBx5IjJC313+bcBQNJWfBtvSFMqJQDKHaZP1aFRu90JP4ZqY1gOQ1q9Rtmorpuq sCyVPLKrEv+h1qjvnEYSX5zSaYmVSM/fLOqRWWukvgR8eXa+Lt/kc8bYKyPHhYTx /8AOOai/z1KZn2BeeEZ7MrMICyK7sbUE0tQc52j1nqhJWmPKs2eZ4IMfjNgz8Xvk Y6elSOABcNWNlw4Xgpffb4teGwwb/WURGaLnyp1ETthKua6q/nVeElL9/vofFfpQ aUQOImPgR+i01sArjo8MJ0flsrvDeGqrtYO2sDkkx2j3EXKAWwIDAQABo4IExTCC BMEwHQYDVR0OBBYEFAf4mpIbYuRT4CnPeUgXkAk1UVMFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j ZDI0YjNmMy04YzI0LTQyMTItYjU5Ni03NDk1NTUyZjJiYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NkMjRiM2YzLThjMjQtNDIxMi1i NTk2LTc0OTU1NTJmMmJiYi9jZDI0YjNmMy04YzI0LTQyMTItYjU5Ni03NDk1NTUy ZjJiYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwdgYIKwYBBQUH AQcBAf8EZzBlMFQEAgABME4DBAVAgkADBAZAuQADBAVBtkADBAWR4AADBAWsbgAD BADH/p0DBAXN0eADBAXO+6ADBAXREEADBAbRzYADBATYYfADBAPYgxgDBAbYp4Aw DQQCAAIwBwMFACYGFgAwbQYIKwYBBQUHAQgBAf8EXjBcoFowWAICENoCAi6nAgI1 fQICOa0CAjnHAgJNFgICZMYCAwCAggIDAILjAgMAjFQCAwDURAIDAPW/AgMA9hkC AwYBNgIDBgJWAgMGEcwCAwYTRQIDBhy5AgMGH4QwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAl18ND8/t9vSm JBwxemaOQ7ryr528mI3/Y9rwJemvnSY3AnVZC2tPbF8cMa91Qgns9HLkgeOjRTUK 4KPQ/I3gnPlTSvDmt0GBon2aVcESWDkPsOexMU9SLEEI8qU19qcJYuRq5plVi7MW aT9ZKmHDNPX88j2qmZdPrb1evIIhuBep1emc9Ak/VD6hCuk+OzGPSw0jTSV+9efM 01kXLAK+kdYKX5AJZDdWsScNtovAWjFfuiK7SjU/4xQHxkSgYAdXXbm6TjlBxMtn 70A6lsHRYM0bjQuvcaAhELKvTZAnHrEf4k3C8GSr7X4VFfXlb/5+DY4s+cYGWV9R LPpQP6WgCg== -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:44 2024 by rpki-client on console-fra.rpki-client.org