$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer File: 2780f5b3-6e58-46dc-9841-4c845dccd557.cer (raw, json) Hash identifier: U2AcQvVsXakjN9aDBVq67D3B93JysbYBgUuJQ7Ic1l0= Subject key identifier: 28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285847DC5D31CB8570DA0C4D27D4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Nov 2024 01:45:33 +0000 Certificate not after: Tue 16 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 40034 IP: 66.81.192.0/20 IP: 104.254.96.0/23 IP: 162.210.68.0/23 IP: 162.222.224.0/24 IP: 162.251.87.0/24 IP: 199.79.60.0/23 IP: 199.191.50.0/23 IP: 204.11.56.0/23 IP: 208.91.196.0/23 IP: 2604:10c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:5d:31:cb:85:70:da:0c:4d:27:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 13 01:45:33 2024 GMT Not After : Feb 16 01:45:33 2027 GMT Subject: CN=2780f5b3-6e58-46dc-9841-4c845dccd557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:d5:a8:79:cd:7c:b4:a7:4b:c6:63:d1:35: 68:89:cd:d4:66:2a:df:f0:6d:2f:92:6a:72:db:c2: 11:d0:4d:66:d5:d6:3b:63:a9:c2:86:25:fc:81:88: 9f:07:d0:1d:16:dc:f0:5a:4b:c4:ab:c4:33:f4:a4: 58:04:bf:b8:26:9b:82:8b:c3:96:a7:80:a0:34:32: 77:23:d9:bc:ba:03:66:6f:1d:2f:cc:f7:9d:c7:76: 8f:52:e0:0c:cc:62:36:72:29:4b:11:3a:fc:85:7d: 7c:bb:57:e7:51:0e:da:78:a3:d4:54:da:40:20:47: 3e:f8:1e:8a:17:cd:88:77:90:4f:57:12:86:5b:9f: fc:eb:98:d8:b0:2b:29:d3:9f:97:2f:1b:4a:92:79: 2d:f9:dd:27:00:fc:e1:c3:de:db:50:65:8b:4a:a4: ca:90:0d:a7:90:3d:3b:77:71:44:d0:20:2b:f8:a8: b8:0d:fe:70:11:05:51:4a:cc:25:14:72:4b:cb:3e: b4:7d:07:e6:32:1e:c9:07:b3:a0:cf:66:b0:28:d3: de:cd:d2:b8:9a:2f:fd:fb:e4:ae:ec:ae:8b:a9:e3: b0:53:cd:b3:4d:2d:a9:33:33:ac:64:27:81:d0:50: d5:df:6f:9e:ef:7a:9d:fc:15:8b:28:5c:8e:c1:2c: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.81.192.0/20 104.254.96.0/23 162.210.68.0/23 162.222.224.0/24 162.251.87.0/24 199.79.60.0/23 199.191.50.0/23 204.11.56.0/23 208.91.196.0/23 IPv6: 2604:10c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40034 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:35:56:ae:4e:e1:a6:b0:f6:41:ee:43:62:ed:84:94:c4:b8: 4a:df:47:3b:e9:ef:d3:b5:43:25:53:20:a0:a5:f1:b1:c2:ec: 07:cd:3f:e1:52:5b:04:1e:a1:c1:57:bf:95:58:74:78:08:4a: cc:22:81:ef:df:53:1f:1a:a2:72:83:a4:19:88:97:67:22:a9: a8:77:ac:7e:82:b5:8c:0e:40:8f:9f:f6:7d:d1:35:a6:83:69: 79:fc:7b:40:2f:ea:83:d3:cd:44:ea:a1:f3:fc:b2:82:b7:be: 29:6d:35:5d:00:37:ce:d1:37:37:11:e9:6b:fe:09:f0:92:bd: ee:b8:06:93:38:5b:27:ea:f9:f1:b6:cb:46:4b:ab:8b:3f:43: 9a:10:e6:6b:cc:fd:6d:97:ac:41:f7:54:6e:b1:e7:92:4f:36: ef:3b:af:cb:8a:6d:c5:21:c2:e5:6e:df:5b:95:45:08:03:bd: ae:e0:c2:92:83:55:3c:01:6b:21:78:37:e2:5d:22:df:50:66: e9:c5:c6:62:f0:6e:ab:5d:83:d9:06:71:90:63:09:4e:e2:ba: b3:2f:2f:90:91:8c:35:87:de:c6:1b:bd:bd:6f:81:b6:08:a5: b0:6f:0e:03:ec:de:de:4f:3e:c0:e8:a3:50:e5:ec:ea:b1:49: ff:97:15:26 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWEfcXTHLhXDaDE0n1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTExMzAxNDUzM1oXDTI3MDIxNjAxNDUzM1owLzEtMCsGA1UEAxMk Mjc4MGY1YjMtNmU1OC00NmRjLTk4NDEtNGM4NDVkY2NkNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlybVqHnNfLSnS8Zj0TVoic3UZirf8G0vkmpy 28IR0E1m1dY7Y6nChiX8gYifB9AdFtzwWkvEq8Qz9KRYBL+4JpuCi8OWp4CgNDJ3 I9m8ugNmbx0vzPedx3aPUuAMzGI2cilLETr8hX18u1fnUQ7aeKPUVNpAIEc++B6K F82Id5BPVxKGW5/865jYsCsp05+XLxtKknkt+d0nAPzhw97bUGWLSqTKkA2nkD07 d3FE0CAr+Ki4Df5wEQVRSswlFHJLyz60fQfmMh7JB7Ogz2awKNPezdK4mi/9++Su 7K6LqeOwU82zTS2pMzOsZCeB0FDV32+e73qd/BWLKFyOwSw8oQIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFCjeRwM5RkpubCL39Cb9REjaxhhcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y NzgwZjViMy02ZTU4LTQ2ZGMtOTg0MS00Yzg0NWRjY2Q1NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI3ODBmNWIzLTZlNTgtNDZkYy05 ODQxLTRjODQ1ZGNjZDU1Ny8yNzgwZjViMy02ZTU4LTQ2ZGMtOTg0MS00Yzg0NWRj Y2Q1NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBARCUcADBAFo/mADBAGi0kQDBACi3uADBACi+1cD BAHHTzwDBAHHvzIDBAHMCzgDBAHQW8QwDQQCAAIwBwMFACYEEMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJxiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHQ1Vq5O4aaw9kHuQ2LthJTEuErf Rzvp79O1QyVTIKCl8bHC7AfNP+FSWwQeocFXv5VYdHgISswige/fUx8aonKDpBmI l2ciqah3rH6CtYwOQI+f9n3RNaaDaXn8e0Av6oPTzUTqofP8soK3viltNV0AN87R NzcR6Wv+CfCSve64BpM4Wyfq+fG2y0ZLq4s/Q5oQ5mvM/W2XrEH3VG6x55JPNu87 r8uKbcUhwuVu31uVRQgDva7gwpKDVTwBayF4N+JdIt9QZunFxmLwbqtdg9kGcZBj CU7iurMvL5CRjDWH3sYbvb1vgbYIpbBvDgPs3t5PPsDoo1Dl7OqxSf+XFSY= -----END CERTIFICATE-----Generated at Fri Nov 22 07:01:49 2024 by rpki-client on console-fra.rpki-client.org