$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer File: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer (raw, json) Hash identifier: c6VX4MA9XoGT9NpTiMYfLFmEgELVKdKC8HsMJDoXEjU= Subject key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584714A37400208D6F034D984260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Sep 2024 12:45:27 +0000 Certificate not after: Sun 06 Dec 2026 13:45:27 +0000 Subordinate resources: AS: 18986 IP: 66.51.160.0/20 IP: 148.163.160.0/20 IP: 173.255.152.0/21 IP: 202.130.217.0/24 IP: 203.21.47.0/24 IP: 203.21.104.0/24 IP: 203.28.168.0/24 IP: 203.30.143.0/24 IP: 203.30.211.0/24 IP: 203.34.15.0/24 IP: 203.57.110.0/24 IP: 2605:1c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:14:a3:74:00:20:8d:6f:03:4d:98:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 2 12:45:27 2024 GMT Not After : Dec 6 13:45:27 2026 GMT Subject: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:f1:43:10:63:eb:3b:e6:03:91:6d:38:db: 3a:af:9c:a4:23:64:12:a8:40:5f:4d:f3:fb:8d:37: f2:a5:4b:91:c4:69:30:0a:0c:6c:18:cb:02:11:de: 21:57:07:c7:17:a5:2a:68:1d:49:c9:72:7b:46:2e: 09:69:74:1e:1b:44:8d:70:86:0d:3f:04:e0:4f:64: 13:86:6f:a4:5e:41:54:e6:c1:26:31:c8:20:a1:11: 7b:82:ac:a1:82:47:54:1b:f8:63:2c:e8:94:6f:d6: 19:cc:e7:8c:c2:fb:e6:1a:41:97:c0:9f:3f:48:a4: c9:86:e7:27:f5:f7:8e:b3:00:2e:5d:ea:8a:77:4e: c2:dd:29:37:19:2e:2a:76:a4:35:e0:2c:b6:f7:51: 9e:d7:61:ba:c1:bf:c7:c0:d1:67:e2:45:16:76:0a: 28:59:16:0b:a0:0b:72:65:68:3e:7a:ae:21:82:ac: c2:fe:8e:85:4f:c0:af:47:04:90:77:ea:d7:77:6b: 7d:ee:32:89:4c:5a:de:37:cd:6a:81:27:35:45:c5: c9:71:59:e7:c2:42:50:0c:61:9b:d1:0e:d8:e5:db: 6e:e3:20:9e:b3:df:10:ce:af:d8:35:72:bd:55:5f: 52:2b:39:8b:ab:0a:d7:82:d0:bd:cb:25:6f:13:df: 9c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.51.160.0/20 148.163.160.0/20 173.255.152.0/21 202.130.217.0/24 203.21.47.0/24 203.21.104.0/24 203.28.168.0/24 203.30.143.0/24 203.30.211.0/24 203.34.15.0/24 203.57.110.0/24 IPv6: 2605:1c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18986 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:67:7e:f6:ba:ac:e2:1d:37:d0:b6:2a:c1:80:58:9c:6a:c4: 82:6d:b0:5e:ce:21:87:2a:9a:4e:4a:4c:2e:22:cc:e9:32:60: 74:fd:08:55:7e:84:2b:d0:94:79:8e:e2:bd:e6:03:8e:ee:57: fd:19:b3:dd:4c:d4:75:01:19:be:43:14:5c:8b:da:d9:7a:72: 83:62:1e:3a:21:3a:24:0b:cd:eb:14:ed:ef:45:a7:ad:2f:5a: 95:2a:05:47:e6:36:4b:c1:02:cc:62:a7:98:5a:b4:c9:e9:e1: ea:55:65:10:a3:a5:fb:89:4e:9c:e6:7f:84:17:0c:a3:54:36: e2:25:d0:54:da:c7:c5:73:3a:54:b8:9e:1e:3a:9f:9a:82:25: 3c:13:35:21:f3:c8:e3:9c:ce:cf:ec:a6:72:5e:1c:78:a2:00: 2b:c1:c9:d3:e0:b2:df:8a:14:f0:73:5f:0f:bf:21:17:e7:f9: 85:88:d1:0e:65:c4:64:c0:ec:cd:80:05:0c:5d:a4:74:f7:d3: 9b:70:da:e6:dc:b1:f4:b5:71:d2:08:11:6c:28:e3:ff:d3:ae: 22:8f:38:fa:ea:0b:c7:8d:13:87:b6:b5:88:d3:5e:5d:20:e4: 32:a3:fe:4f:98:80:1f:03:54:15:45:79:ae:8b:6f:f0:1c:3c: 39:2c:a5:e8 -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEcUo3QAII1vA02YQmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDkwMjEyNDUyN1oXDTI2MTIwNjEzNDUyN1owLzEtMCsGA1UEAxMk MzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM7xQxBj6zvmA5FtONs6r5ykI2QSqEBfTfP7 jTfypUuRxGkwCgxsGMsCEd4hVwfHF6UqaB1JyXJ7Ri4JaXQeG0SNcIYNPwTgT2QT hm+kXkFU5sEmMcggoRF7gqyhgkdUG/hjLOiUb9YZzOeMwvvmGkGXwJ8/SKTJhucn 9feOswAuXeqKd07C3Sk3GS4qdqQ14Cy291Ge12G6wb/HwNFn4kUWdgooWRYLoAty ZWg+eq4hgqzC/o6FT8CvRwSQd+rXd2t97jKJTFreN81qgSc1RcXJcVnnwkJQDGGb 0Q7Y5dtu4yCes98Qzq/YNXK9VV9SKzmLqwrXgtC9yyVvE9+cXwIDAQABo4IEZTCC BGEwHQYDVR0OBBYEFDSu1iL1vqscMp5VEc12A3VQnBcFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z NWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzM1YTNmMDg4LTA1YjctNDcwYS05 YWY1LTQ1YmQyNWVlOGZjMS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVl ZThmYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwagYIKwYBBQUH AQcBAf8EWzBZMEgEAgABMEIDBARCM6ADBASUo6ADBAOt/5gDBADKgtkDBADLFS8D BADLFWgDBADLHKgDBADLHo8DBADLHtMDBADLIg8DBADLOW4wDQQCAAIwBwMFACYF HIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICSiowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACGd+9rqs4h03 0LYqwYBYnGrEgm2wXs4hhyqaTkpMLiLM6TJgdP0IVX6EK9CUeY7iveYDju5X/Rmz 3UzUdQEZvkMUXIva2Xpyg2IeOiE6JAvN6xTt70WnrS9alSoFR+Y2S8ECzGKnmFq0 yenh6lVlEKOl+4lOnOZ/hBcMo1Q24iXQVNrHxXM6VLieHjqfmoIlPBM1IfPI45zO z+ymcl4ceKIAK8HJ0+Cy34oU8HNfD78hF+f5hYjRDmXEZMDszYAFDF2kdPfTm3Da 5tyx9LVx0ggRbCjj/9OuIo84+uoLx40Th7a1iNNeXSDkMqP+T5iAHwNUFUV5rotv 8Bw8OSyl6A== -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:14 2024 by rpki-client on console-ams.rpki-client.org