$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb.cer File: cd24b3f3-8c24-4212-b596-7495552f2bbb.cer (raw, json) Hash identifier: 90VYnh/GhwkY5wujxbFqg1TF71ltB9+EYOZr3FWa40E= Subject key identifier: 07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285843AB24B56B6F547016F7FF90A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Oct 2023 15:29:23 +0000 Certificate not after: Tue 27 Jan 2026 16:29:23 +0000 Subordinate resources: AS: 4314 AS: 11943 AS: 13693 AS: 14765 AS: 14791 AS: 19734 AS: 25798 AS: 32898 AS: 33507 AS: 35924 AS: 54340 AS: 62911 AS: 63001 AS: 393814 AS: 397772 AS: 398149 AS: 400569 IP: 64.130.64.0/19 IP: 64.185.0.0/18 IP: 65.182.64.0/19 IP: 145.224.0.0/19 IP: 172.110.0.0/19 IP: 199.254.157.0/24 IP: 205.209.224.0/19 IP: 206.251.160.0/19 IP: 209.16.64.0/19 IP: 209.205.128.0/18 IP: 216.97.240.0/20 IP: 216.131.24.0/21 IP: 216.167.128.0/18 IP: 2606:1600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:ab:24:b5:6b:6f:54:70:16:f7:ff:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 25 15:29:23 2023 GMT Not After : Jan 27 16:29:23 2026 GMT Subject: CN=cd24b3f3-8c24-4212-b596-7495552f2bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:6a:9a:4e:56:16:33:7c:c6:27:67:ba:55: 7f:e4:6c:83:79:e7:df:6d:7d:f2:f7:e9:71:e0:50: 71:e4:88:c9:0b:7d:77:f9:b7:01:40:d2:56:7c:1b: 6f:48:53:2a:25:00:ca:1d:a6:4f:d5:a1:51:bb:dd: 09:3f:86:6a:63:58:0e:43:5a:bd:46:d9:a8:ae:9b: aa:b0:2c:95:3c:b2:ab:12:ff:a1:d6:a8:ef:9c:46: 12:5f:9c:d2:69:89:95:48:cf:df:2c:ea:91:59:6b: a4:be:04:7c:79:76:be:2e:df:e4:73:c6:d8:2b:23: c7:85:84:f1:ff:c0:0e:39:a8:bf:cf:52:99:9f:60: 5e:78:46:7b:32:b3:08:0b:22:bb:b1:b5:04:d2:d4: 1c:e7:68:f5:9e:a8:49:5a:63:ca:b3:67:99:e0:83: 1f:8c:d8:33:f1:7b:e4:63:a7:a5:48:e0:01:70:d5: 8d:97:0e:17:82:97:df:6f:8b:5e:1b:0c:1b:fd:65: 11:19:a2:e7:ca:9d:44:4e:d8:4a:b9:ae:aa:fe:75: 5e:12:52:fd:fe:fa:1f:15:fa:50:69:44:0e:22:63: e0:47:e8:b4:d6:c0:2b:8e:8f:0c:27:47:e5:b2:bb: c3:78:6a:ab:b5:83:b6:b0:39:24:c7:68:f7:11:72: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 64.130.64.0/19 64.185.0.0/18 65.182.64.0/19 145.224.0.0/19 172.110.0.0/19 199.254.157.0/24 205.209.224.0/19 206.251.160.0/19 209.16.64.0/19 209.205.128.0/18 216.97.240.0/20 216.131.24.0/21 216.167.128.0/18 IPv6: 2606:1600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4314 11943 13693 14765 14791 19734 25798 32898 33507 35924 54340 62911 63001 393814 397772 398149 400569 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3e:7a:9d:30:b7:82:ae:64:69:d6:b0:78:fb:30:ea:1d:b0: d9:65:97:58:fa:9a:80:81:e5:49:b9:c7:2d:5f:e6:1a:5e:3c: 77:31:0e:d5:16:76:12:d7:2b:ef:63:20:35:d8:8e:d1:e3:38: 21:57:4c:99:88:46:95:c8:52:27:f4:7a:e2:c5:c1:08:90:87: 5c:d1:b2:0a:db:bc:a5:f4:aa:5e:a2:8b:eb:b3:97:b3:9b:89: 90:da:57:d4:1f:de:99:6c:9a:08:c0:f5:72:8e:24:79:02:40: 6a:e7:7b:84:06:ec:c7:07:d4:54:33:89:c3:ad:ad:6a:24:9f: e7:19:c4:f7:a7:f7:cd:4b:65:24:1d:52:04:9c:f9:45:33:08: 23:9a:9a:4a:2b:d5:da:cc:d6:e2:ed:39:3d:72:5e:74:8b:8a: d9:91:39:e1:f5:07:23:1c:49:a6:27:42:14:91:68:40:98:31: 27:f6:46:2d:5d:55:e5:f1:c6:05:69:e4:cb:c3:29:8a:07:f7: 9b:9c:ea:5f:49:bb:77:fd:2f:c0:ad:24:47:3d:76:5a:1b:54: 81:95:21:77:82:01:21:7d:bd:0d:01:c1:47:5b:12:c9:6a:ad: 7a:fe:7f:62:1b:a5:d4:83:4d:05:bd:22:79:8c:54:b6:03:db: ef:ff:47:6e -----BEGIN CERTIFICATE----- MIIHqTCCBpGgAwIBAgIUAQ0Mn0MoWEOrJLVrb1RwFvf/kKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTAyNTE1MjkyM1oXDTI2MDEyNzE2MjkyM1owLzEtMCsGA1UEAxMk Y2QyNGIzZjMtOGMyNC00MjEyLWI1OTYtNzQ5NTU1MmYyYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvxqmk5WFjN8xidnulV/5GyDeeffbX3y9+lx 4FBx5IjJC313+bcBQNJWfBtvSFMqJQDKHaZP1aFRu90JP4ZqY1gOQ1q9Rtmorpuq sCyVPLKrEv+h1qjvnEYSX5zSaYmVSM/fLOqRWWukvgR8eXa+Lt/kc8bYKyPHhYTx /8AOOai/z1KZn2BeeEZ7MrMICyK7sbUE0tQc52j1nqhJWmPKs2eZ4IMfjNgz8Xvk Y6elSOABcNWNlw4Xgpffb4teGwwb/WURGaLnyp1ETthKua6q/nVeElL9/vofFfpQ aUQOImPgR+i01sArjo8MJ0flsrvDeGqrtYO2sDkkx2j3EXKAWwIDAQABo4IEuzCC BLcwHQYDVR0OBBYEFAf4mpIbYuRT4CnPeUgXkAk1UVMFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j ZDI0YjNmMy04YzI0LTQyMTItYjU5Ni03NDk1NTUyZjJiYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NkMjRiM2YzLThjMjQtNDIxMi1i NTk2LTc0OTU1NTJmMmJiYi9jZDI0YjNmMy04YzI0LTQyMTItYjU5Ni03NDk1NTUy ZjJiYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwdgYIKwYBBQUH AQcBAf8EZzBlMFQEAgABME4DBAVAgkADBAZAuQADBAVBtkADBAWR4AADBAWsbgAD BADH/p0DBAXN0eADBAXO+6ADBAXREEADBAbRzYADBATYYfADBAPYgxgDBAbYp4Aw DQQCAAIwBwMFACYGFgAwYwYIKwYBBQUHAQgBAf8EVDBSoFAwTgICENoCAi6nAgI1 fQICOa0CAjnHAgJNFgICZMYCAwCAggIDAILjAgMAjFQCAwDURAIDAPW/AgMA9hkC AwYCVgIDBhHMAgMGE0UCAwYcuTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwPnqdMLeCrmRp1rB4+zDqHbDZ ZZdY+pqAgeVJucctX+YaXjx3MQ7VFnYS1yvvYyA12I7R4zghV0yZiEaVyFIn9Hri xcEIkIdc0bIK27yl9Kpeoovrs5ezm4mQ2lfUH96ZbJoIwPVyjiR5AkBq53uEBuzH B9RUM4nDra1qJJ/nGcT3p/fNS2UkHVIEnPlFMwgjmppKK9XazNbi7Tk9cl50i4rZ kTnh9QcjHEmmJ0IUkWhAmDEn9kYtXVXl8cYFaeTLwymKB/ebnOpfSbt3/S/ArSRH PXZaG1SBlSF3ggEhfb0NAcFHWxLJaq16/n9iG6XUg00FvSJ5jFS2A9vv/0du -----END CERTIFICATE-----Generated at Sat May 11 15:36:01 2024 by rpki-client on console-fra.rpki-client.org