$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer File: 209f0328-0af3-4de3-a043-8072346acdf7.cer (raw, json) Hash identifier: jrShQuX7P41E8vB487X24uwR1FggdBexMXtEBcJEW3s= Subject key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285846D89DB4C8DF08B76513F45340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Aug 2024 00:45:22 +0000 Certificate not after: Sun 15 Nov 2026 01:45:22 +0000 Subordinate resources: AS: 5771 AS: 7782 IP: 23.235.96.0/20 IP: 63.140.64.0/18 IP: 66.230.80.0 -- 66.230.127.255 IP: 69.161.0.0/19 IP: 69.162.192.0/19 IP: 74.124.64.0/18 IP: 107.152.112.0/20 IP: 162.211.56.0/21 IP: 162.218.128.0/21 IP: 198.163.32.0/21 IP: 204.17.139.0 -- 204.17.140.255 IP: 209.112.128.0 -- 209.112.223.255 IP: 209.193.0.0/18 IP: 216.67.0.0/17 IP: 2001:4948::/32 IP: 2602:233::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:d8:9d:b4:c8:df:08:b7:65:13:f4:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 12 00:45:22 2024 GMT Not After : Nov 15 01:45:22 2026 GMT Subject: CN=209f0328-0af3-4de3-a043-8072346acdf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:96:f4:e7:d9:b1:c0:bd:ab:c5:0b:dc:b7: 6c:0f:14:32:c8:5d:db:f5:fb:3a:55:d1:a1:c5:3b: be:ef:33:88:58:6c:b5:c1:b5:71:ae:3e:83:cc:ed: 26:57:99:1d:fc:19:9a:19:6e:bb:b7:9d:02:63:0c: 20:0c:dc:d7:55:d5:c3:35:9a:85:88:bc:5d:c9:a9: fb:61:ca:eb:65:6f:04:ef:c9:c2:d7:19:83:b3:57: ea:50:88:1e:53:1c:ff:93:f0:80:10:a5:c9:91:a4: cb:7f:43:86:79:3d:e3:44:6f:12:e3:cc:a7:4e:78: 61:30:73:68:36:cd:83:d1:22:8c:3d:ab:06:15:2f: f1:42:e1:bc:68:5b:75:25:fa:a3:12:d2:e7:d9:9b: 47:51:a8:99:03:c3:1a:02:6f:a2:7d:57:a1:dd:8b: 23:06:c5:7b:74:41:7b:d7:47:13:c5:11:8e:3f:ae: 8c:22:eb:3a:81:c5:0a:a6:fb:f7:19:8d:2c:42:92: c6:e3:65:69:f8:26:07:ed:0f:14:14:53:8e:6c:03: b9:eb:9b:dd:7d:c2:76:c3:f2:4d:55:9a:0a:8a:6e: dd:fb:78:61:ce:cf:f2:4c:78:7f:5a:42:42:3b:e7: 22:c4:1a:df:2c:45:4a:ac:9a:3c:3b:14:25:a8:49: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.235.96.0/20 63.140.64.0/18 66.230.80.0-66.230.127.255 69.161.0.0/19 69.162.192.0/19 74.124.64.0/18 107.152.112.0/20 162.211.56.0/21 162.218.128.0/21 198.163.32.0/21 204.17.139.0-204.17.140.255 209.112.128.0-209.112.223.255 209.193.0.0/18 216.67.0.0/17 IPv6: 2001:4948::/32 2602:233::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5771 7782 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0c:a5:10:35:08:62:8c:c6:4e:54:95:32:51:70:98:4e:5e: ed:c6:71:07:7f:b2:c0:0e:4f:54:5a:ee:94:d1:80:38:4e:06: 42:f6:61:92:02:6c:30:83:be:1a:28:25:86:91:c1:b5:37:40: 91:9e:98:29:07:46:12:6a:38:6a:7f:4e:9e:2f:5d:36:0e:a6: 98:fb:ef:30:71:2e:0a:1f:c7:fe:b0:a8:f8:eb:30:f9:eb:b2: 52:2c:4b:11:09:3c:96:ba:81:20:5f:f7:ac:af:ef:55:74:92: 3d:ea:7e:5b:4d:10:54:6c:71:7b:40:5b:fa:32:fb:3b:c1:f1: fd:b7:82:16:2b:0c:fb:1c:8b:2d:63:53:53:6b:a2:d1:1f:fc: 56:e6:1c:f1:3b:22:e3:24:1d:77:51:55:f2:a0:d5:5f:bb:6d: 05:a7:e7:42:58:c2:9d:6d:6d:e0:8b:56:c1:c8:30:18:82:52: 81:1d:a7:98:e6:0c:56:63:63:8a:1e:4f:b6:65:a6:37:e0:ac: 86:b1:d4:e8:cd:73:6c:f1:8e:42:f5:b2:2d:22:50:e5:d0:24: 2f:37:a3:cb:38:05:8c:45:18:89:36:cc:01:c6:e9:36:61:fe: aa:77:a9:40:5f:2b:54:05:bd:e8:fa:da:86:d0:dd:b9:e5:95: 91:76:f4:3e -----BEGIN CERTIFICATE----- MIIHizCCBnOgAwIBAgIUAQ0Mn0MoWEbYnbTI3wi3ZRP0U0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDgxMjAwNDUyMloXDTI2MTExNTAxNDUyMlowLzEtMCsGA1UEAxMk MjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFjZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngOW9OfZscC9q8UL3LdsDxQyyF3b9fs6VdGh xTu+7zOIWGy1wbVxrj6DzO0mV5kd/BmaGW67t50CYwwgDNzXVdXDNZqFiLxdyan7 YcrrZW8E78nC1xmDs1fqUIgeUxz/k/CAEKXJkaTLf0OGeT3jRG8S48ynTnhhMHNo Ns2D0SKMPasGFS/xQuG8aFt1JfqjEtLn2ZtHUaiZA8MaAm+ifVeh3YsjBsV7dEF7 10cTxRGOP66MIus6gcUKpvv3GY0sQpLG42Vp+CYH7Q8UFFOObAO565vdfcJ2w/JN VZoKim7d+3hhzs/yTHh/WkJCO+cixBrfLEVKrJo8OxQlqEk22QIDAQABo4IEnTCC BJkwHQYDVR0OBBYEFLKCKtGyNilNtEhPzkHMeiKUS2QHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y MDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIwOWYwMzI4LTBhZjMtNGRlMy1h MDQzLTgwNzIzNDZhY2RmNy8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2 YWNkZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgZ0GCCsGAQUF BwEHAQH/BIGNMIGKMHIEAgABMGwDBAQX62ADBAY/jEAwDAMEBELmUAMEB0LmAAME BUWhAAMEBUWiwAMEBkp8QAMEBGuYcAMEA6LTOAMEA6LagAMEA8ajIDAMAwQAzBGL AwQAzBGMMAwDBAfRcIADBAXRcMADBAbRwQADBAfYQwAwFAQCAAIwDgMFACABSUgD BQAmAgIzMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAhaLAgIeZjBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBU DKUQNQhijMZOVJUyUXCYTl7txnEHf7LADk9UWu6U0YA4TgZC9mGSAmwwg74aKCWG kcG1N0CRnpgpB0YSajhqf06eL102DqaY++8wcS4KH8f+sKj46zD567JSLEsRCTyW uoEgX/esr+9VdJI96n5bTRBUbHF7QFv6Mvs7wfH9t4IWKwz7HIstY1NTa6LRH/xW 5hzxOyLjJB13UVXyoNVfu20Fp+dCWMKdbW3gi1bByDAYglKBHaeY5gxWY2OKHk+2 ZaY34KyGsdTozXNs8Y5C9bItIlDl0CQvN6PLOAWMRRiJNswBxuk2Yf6qd6lAXytU Bb3o+tqG0N255ZWRdvQ+ -----END CERTIFICATE-----Generated at Thu Nov 21 16:28:26 2024 by rpki-client on console-ams.rpki-client.org