$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer File: 01586a37-c709-480e-ac0d-b07d855c615b.cer (raw, json) Hash identifier: t5Wx8mtkykTVByZP817xFBWsVPkYpOtxjcoWUpfqlAg= Subject key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858476433F18C961AE8F6E635EA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Oct 2024 00:45:26 +0000 Certificate not after: Mon 04 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 46516 AS: 396931 IP: 23.249.161.0/24 IP: 23.249.163.0 -- 23.249.164.255 IP: 23.249.169.0/24 IP: 23.249.174.0/23 IP: 66.111.61.0/24 IP: 138.128.132.0/22 IP: 162.251.136.0/21 IP: 172.103.32.0/22 IP: 209.242.192.0/19 IP: 216.170.118.0/24 IP: 216.170.123.0/24 IP: 2600:2900::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:33:f1:8c:96:1a:e8:f6:e6:35:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 1 00:45:26 2024 GMT Not After : Jan 4 01:45:26 2027 GMT Subject: CN=01586a37-c709-480e-ac0d-b07d855c615b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:0d:c9:e7:e1:c3:67:78:af:9a:a5:e7:53: e5:5c:98:22:b2:14:37:60:43:aa:76:d2:9c:29:a8: a5:6a:7b:15:a0:52:86:45:3a:a0:93:a0:8e:fc:d3: 0e:d6:d4:7c:cc:6d:66:c3:d0:8f:65:4f:2c:b6:d0: 52:67:e4:57:ed:52:82:d0:1f:77:d9:f7:5d:1e:43: b5:e5:bc:41:eb:fc:93:c1:28:2d:22:41:0b:3f:63: a1:1b:3e:f1:c0:b1:5a:5f:af:4a:ee:3b:b7:61:0b: c3:c0:36:34:0d:92:65:64:94:4a:8f:cb:db:70:cf: 95:6a:26:36:53:54:47:70:16:de:b2:66:35:08:13: 52:cc:3f:50:7a:8b:e9:16:e4:93:5f:7a:5b:82:65: 31:16:17:12:73:12:9c:19:09:c5:ba:81:e5:72:1d: 98:ff:c4:22:52:cb:ea:0e:73:ae:2c:11:5f:dd:df: 5a:fb:b3:7f:d5:88:a5:3a:e4:e2:0a:bf:c6:33:53: d2:1d:07:5a:a4:b2:72:62:52:fb:1a:b5:77:cb:73: ea:14:12:e6:e0:fc:b1:fc:96:c8:a1:4d:c0:5b:94: a5:d7:74:28:3c:7e:f3:33:cf:b4:54:ab:2b:9e:71: 99:9a:fa:cb:06:0a:2b:03:24:6b:c2:3e:bd:52:e0: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.249.161.0/24 23.249.163.0-23.249.164.255 23.249.169.0/24 23.249.174.0/23 66.111.61.0/24 138.128.132.0/22 162.251.136.0/21 172.103.32.0/22 209.242.192.0/19 216.170.118.0/24 216.170.123.0/24 IPv6: 2600:2900::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46516 396931 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:eb:9f:c1:e8:d5:12:e4:28:39:72:16:4e:67:f4:65:e1:a4: ff:8b:d0:45:54:bc:dc:ce:34:8e:d8:06:39:ca:35:f7:25:a2: c8:38:a5:d2:9f:c2:a8:73:ef:8a:cd:4c:1d:fe:5d:de:c7:99: 0f:f1:a3:0c:04:23:af:c7:3f:75:d9:53:30:99:4b:fa:c2:46: fa:39:1a:99:60:86:57:64:7d:0f:2b:93:4a:f3:b0:24:81:9a: 49:4e:13:57:91:b9:f9:03:a3:d9:02:ba:2f:c6:9f:b3:c4:ec: cc:16:8a:dd:de:df:e3:99:ac:44:72:38:c6:60:81:49:2b:53: 8a:fe:1b:5d:de:68:d0:97:4c:d7:fc:90:66:ba:0b:09:dc:45: f5:8e:4a:56:83:4c:e7:0f:eb:34:1c:df:69:a2:1e:76:6c:3f: 1d:0f:39:b5:fd:9c:b5:2f:13:4a:44:d2:56:9d:54:97:95:ff: 8d:64:bd:9a:c4:ff:42:52:07:5b:34:45:b7:9d:e8:33:ef:00: 47:ef:ef:99:95:2d:93:a8:a4:1f:29:97:ec:58:d2:66:db:bd: 98:1c:74:67:b8:01:1e:97:00:d0:18:ea:70:b9:ea:cb:45:7d: cd:55:f3:8a:d5:17:57:c2:05:55:98:c4:44:0e:f8:d2:e4:cf: fb:8f:b7:1f -----BEGIN CERTIFICATE----- MIIHYTCCBkmgAwIBAgIUAQ0Mn0MoWEdkM/GMlhro9uY16gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTAwMTAwNDUyNloXDTI3MDEwNDAxNDUyNlowLzEtMCsGA1UEAxMk MDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2MTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvsNyefhw2d4r5ql51PlXJgishQ3YEOqdtKc KailansVoFKGRTqgk6CO/NMO1tR8zG1mw9CPZU8sttBSZ+RX7VKC0B932fddHkO1 5bxB6/yTwSgtIkELP2OhGz7xwLFaX69K7ju3YQvDwDY0DZJlZJRKj8vbcM+VaiY2 U1RHcBbesmY1CBNSzD9QeovpFuSTX3pbgmUxFhcScxKcGQnFuoHlch2Y/8QiUsvq DnOuLBFf3d9a+7N/1YilOuTiCr/GM1PSHQdapLJyYlL7GrV3y3PqFBLm4Pyx/JbI oU3AW5Sl13QoPH7zM8+0VKsrnnGZmvrLBgorAyRrwj69UuCTWwIDAQABo4IEczCC BG8wHQYDVR0OBBYEFEC4aT/JFJ9cK3v6iLjH/2Iy65upMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w MTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzAxNTg2YTM3LWM3MDktNDgwZS1h YzBkLWIwN2Q4NTVjNjE1Yi8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1 YzYxNWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwcgYIKwYBBQUH AQcBAf8EYzBhMFAEAgABMEoDBAAX+aEwDAMEABf5owMEABf5pAMEABf5qQMEARf5 rgMEAEJvPQMEAoqAhAMEA6L7iAMEAqxnIAMEBdHywAMEANiqdgMEANiqezANBAIA AjAHAwUEJgApADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAtbQCAwYOgzBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCA65/B6NUS5Cg5chZOZ/Rl4aT/i9BFVLzczjSO2AY5yjX3JaLIOKXSn8Ko c++KzUwd/l3ex5kP8aMMBCOvxz912VMwmUv6wkb6ORqZYIZXZH0PK5NK87AkgZpJ ThNXkbn5A6PZArovxp+zxOzMFord3t/jmaxEcjjGYIFJK1OK/htd3mjQl0zX/JBm ugsJ3EX1jkpWg0znD+s0HN9poh52bD8dDzm1/Zy1LxNKRNJWnVSXlf+NZL2axP9C UgdbNEW3negz7wBH7++ZlS2TqKQfKZfsWNJm272YHHRnuAEelwDQGOpwuerLRX3N VfOK1RdXwgVVmMREDvjS5M/7j7cf -----END CERTIFICATE-----Generated at Thu Nov 21 15:39:26 2024 by rpki-client on console-fra.rpki-client.org