$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer File: 73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer (raw, json) Hash identifier: 0FwraouzilwW59Yo+6NjY/WQ9360G74N3jlHEw9Has0= Subject key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858470C436736D0E59BEFB9938600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Aug 2024 12:45:27 +0000 Certificate not after: Thu 03 Dec 2026 13:45:27 +0000 Subordinate resources: AS: 14397 AS: 393545 IP: 65.49.128.0/23 IP: 65.49.149.0/24 IP: 104.251.113.0 -- 104.251.118.255 IP: 104.251.121.0/24 IP: 104.251.124.0/22 IP: 2605:c180::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:0c:43:67:36:d0:e5:9b:ef:b9:93:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 30 12:45:27 2024 GMT Not After : Dec 3 13:45:27 2026 GMT Subject: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a0:e8:2e:bd:66:5b:93:e3:44:4c:b3:b0:80: 2a:91:72:93:05:b0:03:06:f1:bf:3b:4a:7a:86:a8: df:74:b7:29:02:50:82:0c:b1:11:f7:6d:91:9e:0b: 9c:14:ad:48:b4:3c:d0:f6:87:79:5f:2a:51:69:b5: be:a1:ff:a8:fc:c5:de:3e:9e:09:bf:a1:c4:2c:ec: 68:62:04:0c:eb:40:52:d1:5b:a0:46:fa:ab:bd:54: 1f:98:3d:e7:0f:16:07:42:08:ee:bb:90:28:fc:db: 15:2b:03:11:c1:e0:a1:b5:ef:d7:c1:6a:3a:13:f7: 92:b5:93:21:5d:d0:99:e8:f9:73:c5:28:57:8e:79: 52:fa:94:7d:1b:85:c8:fb:97:49:44:82:05:d7:ad: 1b:81:00:71:81:9e:9e:f9:06:8b:41:5c:ca:6a:4c: 13:ac:9e:9d:27:39:29:85:f3:e9:43:2b:9e:a8:5b: 09:27:5d:5f:e9:0e:9e:7f:1d:ec:02:d4:13:65:42: 9e:1c:b7:4e:f4:43:48:13:87:c8:f4:10:2b:bb:a1: dd:5c:42:65:c2:e8:e7:9a:6d:0c:f0:10:5e:23:74: e9:e3:37:c1:cf:d2:6f:77:61:0b:11:0c:2c:29:23: f7:41:11:d1:5d:01:67:5b:79:ee:2f:66:34:30:60: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 65.49.128.0/23 65.49.149.0/24 104.251.113.0-104.251.118.255 104.251.121.0/24 104.251.124.0/22 IPv6: 2605:c180::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14397 393545 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:72:fa:0a:62:96:b7:b1:05:1c:01:b5:a4:f1:11:43:d4:e7: b4:eb:5c:46:8c:08:63:43:67:17:23:c3:aa:8b:de:86:28:62: 3b:58:7d:a0:8a:73:e6:3a:82:76:26:82:cd:14:ec:2e:07:59: c4:bc:5f:6d:25:c8:4b:2d:ad:92:84:03:e0:1a:f7:4f:cd:d5: e4:35:98:ba:44:93:1f:ba:4e:e3:09:66:c3:6d:f5:a8:28:db: 17:34:7b:5f:6a:82:d1:06:21:d2:63:27:17:5b:5f:42:af:0e: 63:08:96:5b:0d:28:29:f9:b7:18:d6:f8:4c:e1:2e:28:32:e5: 4a:f2:30:09:c7:e4:45:d8:4e:67:11:46:9d:bb:d9:89:36:b6: e3:f6:d1:83:a2:d2:7d:14:72:3d:13:6f:6b:cb:1e:44:e4:b0: b2:e0:a7:d1:ba:3b:94:e1:12:21:cc:c1:40:83:fe:45:66:a2: a2:91:d7:40:7d:9f:c1:f9:1f:d2:ed:29:8c:1e:0c:4d:0a:d1: 2e:da:85:4d:99:21:47:d7:1b:f8:38:01:17:53:66:60:04:20: 82:bc:7c:ac:95:1d:95:d5:10:58:bc:fc:da:36:b0:d3:56:71: f8:b1:dd:94:17:24:ae:a3:ac:ba:df:6e:d5:09:ce:ba:09:fb: db:2a:c8:f3 -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEcMQ2c20OWb77mThgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDgzMDEyNDUyN1oXDTI2MTIwMzEzNDUyN1owLzEtMCsGA1UEAxMk NzNkMmRiYWUtM2YxYS00ZDllLTllMDEtZjdlZjI1MGY1NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6DoLr1mW5PjREyzsIAqkXKTBbADBvG/O0p6 hqjfdLcpAlCCDLER922RngucFK1ItDzQ9od5XypRabW+of+o/MXePp4Jv6HELOxo YgQM60BS0VugRvqrvVQfmD3nDxYHQgjuu5Ao/NsVKwMRweChte/XwWo6E/eStZMh XdCZ6PlzxShXjnlS+pR9G4XI+5dJRIIF160bgQBxgZ6e+QaLQVzKakwTrJ6dJzkp hfPpQyueqFsJJ11f6Q6efx3sAtQTZUKeHLdO9ENIE4fI9BAru6HdXEJlwujnmm0M 8BBeI3Tp4zfBz9Jvd2ELEQwsKSP3QRHRXQFnW3nuL2Y0MGD9swIDAQABo4IETzCC BEswHQYDVR0OBBYEFATxDtxgzwB+QDJedxWZ174F8gYOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUwZjU1ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzczZDJkYmFlLTNmMWEtNGQ5ZS05 ZTAxLWY3ZWYyNTBmNTVlZi83M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUw ZjU1ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MCwEAgABMCYDBAFBMYADBABBMZUwDAMEAGj7cQMEAGj7dgMEAGj7 eQMEAmj7fDAOBAIAAjAIAwYEJgXBgAAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC OD0CAwYBSTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBKcvoKYpa3sQUcAbWk8RFD1Oe061xGjAhjQ2cXI8Oq i96GKGI7WH2ginPmOoJ2JoLNFOwuB1nEvF9tJchLLa2ShAPgGvdPzdXkNZi6RJMf uk7jCWbDbfWoKNsXNHtfaoLRBiHSYycXW19Crw5jCJZbDSgp+bcY1vhM4S4oMuVK 8jAJx+RF2E5nEUadu9mJNrbj9tGDotJ9FHI9E29ryx5E5LCy4KfRujuU4RIhzMFA g/5FZqKikddAfZ/B+R/S7SmMHgxNCtEu2oVNmSFH1xv4OAEXU2ZgBCCCvHyslR2V 1RBYvPzaNrDTVnH4sd2UFySuo6y6327VCc66CfvbKsjz -----END CERTIFICATE-----Generated at Fri Nov 22 17:31:32 2024 by rpki-client on console-ams.rpki-client.org