$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer File: 4215bba6-51b0-41f8-9185-dda3367a8df5.cer (raw, json) Hash identifier: YvsIOwZng7jvGXIB6Yr1UymUpm6MlMmykHztkjKy2+k= Subject key identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584750A9284D6DF51E05BBAA6B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Sep 2024 00:45:27 +0000 Certificate not after: Mon 28 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 11071 AS: 36143 AS: 40603 AS: 393299 IP: 64.37.0.0/20 IP: 64.255.80.0/20 IP: 70.34.0.0/20 IP: 74.120.32.0/21 IP: 74.123.12.0/22 IP: 104.152.60.0/22 IP: 104.192.200.0/22 IP: 148.59.162.0/23 IP: 162.246.100.0/22 IP: 192.136.36.0/24 IP: 192.238.0.0/24 IP: 195.85.106.0/23 IP: 198.181.62.0/23 IP: 199.66.116.0/22 IP: 204.17.177.0/24 IP: 204.52.243.0/24 IP: 204.130.209.0/24 IP: 206.81.76.0/22 IP: 207.50.144.0/20 IP: 208.65.0.0/22 IP: 208.66.32.0/21 IP: 208.88.8.0/22 IP: 209.33.192.0/18 IP: 2604:2540::/32 IP: 2604:2c00::/32 IP: 2606:5980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:50:a9:28:4d:6d:f5:1e:05:bb:aa:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 24 00:45:27 2024 GMT Not After : Dec 28 01:45:27 2026 GMT Subject: CN=4215bba6-51b0-41f8-9185-dda3367a8df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:1a:34:b5:86:a4:c5:3c:5d:e3:77:9a:dd: 3c:b3:b9:f9:10:60:2f:17:1c:19:42:db:c8:f0:5a: f4:36:3d:e1:5e:4d:68:5a:24:63:fb:3a:25:6c:91: 64:3d:96:a1:e8:99:fb:a0:3c:c5:ee:7a:29:03:99: 8c:30:2d:c7:44:e8:4d:99:9e:32:31:67:1f:17:43: 3b:2b:c1:45:40:76:d3:d8:2f:45:56:6c:44:da:b8: 37:ae:80:5f:7a:88:c6:ac:82:dc:44:6d:91:58:a4: 6f:c5:4f:61:05:2e:14:64:cc:8d:e3:53:f9:d4:02: ba:20:b8:29:9e:d1:a6:eb:b0:d8:a8:89:a4:b4:3d: c3:6f:0e:e0:b0:c4:32:ca:5b:5d:90:58:a4:e3:15: 69:34:74:a0:17:06:9c:cc:f4:fe:2d:3f:0f:81:64: e6:c7:50:ea:99:bf:01:ae:55:d7:89:d7:95:84:68: 69:2e:5d:b3:6c:bc:42:0b:9c:33:9b:d5:9d:0a:35: 1a:ea:20:cc:bf:19:2e:67:f5:83:55:fe:bc:7f:42: a3:31:52:f6:1a:bf:1f:3f:bb:57:86:60:09:3a:a7: 02:df:3f:52:ea:af:4e:01:8a:b1:0c:1a:19:98:94: f1:9b:47:0c:87:1b:90:a3:5c:c2:0a:55:82:4f:82: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.37.0.0/20 64.255.80.0/20 70.34.0.0/20 74.120.32.0/21 74.123.12.0/22 104.152.60.0/22 104.192.200.0/22 148.59.162.0/23 162.246.100.0/22 192.136.36.0/24 192.238.0.0/24 195.85.106.0/23 198.181.62.0/23 199.66.116.0/22 204.17.177.0/24 204.52.243.0/24 204.130.209.0/24 206.81.76.0/22 207.50.144.0/20 208.65.0.0/22 208.66.32.0/21 208.88.8.0/22 209.33.192.0/18 IPv6: 2604:2540::/32 2604:2c00::/32 2606:5980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11071 36143 40603 393299 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:71:69:ec:cb:0d:12:a4:82:9c:1e:81:ec:a7:c4:1b:e4:27: 39:21:d7:44:77:ba:3e:75:97:64:f3:41:8a:de:b0:cf:96:13: 33:00:34:29:25:70:f6:f7:66:04:7b:b1:93:06:84:c4:56:13: 48:a7:47:39:c0:d2:4c:f2:f4:25:54:e6:a4:03:78:b5:87:c4: fe:1f:13:fc:9c:7b:10:0e:11:8e:ea:64:c8:88:8a:ef:e3:c3: 27:84:66:7a:8e:15:16:04:6f:e1:14:63:e7:8b:43:2d:36:a2: 0b:60:56:25:f4:e2:10:18:28:ea:ea:dd:5c:cf:bb:1f:e3:92: 0c:e4:9c:c6:b6:c0:0c:e5:59:bd:9c:c2:e7:90:24:fd:aa:80: fc:a6:4e:eb:9a:93:a1:d8:fa:08:7b:52:ea:64:99:a4:72:d0: a0:e4:59:f3:2d:1a:dc:f3:4a:00:62:2d:12:30:0a:ad:c0:5c: a2:cd:1b:68:7d:66:91:5d:0f:13:44:b9:05:27:9e:d2:b5:fe: 30:eb:ef:0e:b1:2f:82:2a:c2:6d:d8:05:1d:58:4c:18:4c:bb: 4a:ab:c6:86:b5:72:a7:c2:8a:ce:0d:ea:ac:e7:1e:c7:fb:4c: 57:85:31:9b:d6:8a:21:9c:c5:47:5e:b3:c0:34:8b:65:f4:9b: 41:bb:79:1e -----BEGIN CERTIFICATE----- MIIHvTCCBqWgAwIBAgIUAQ0Mn0MoWEdQqShNbfUeBbuqa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDkyNDAwNDUyN1oXDTI2MTIyODAxNDUyN1owLzEtMCsGA1UEAxMk NDIxNWJiYTYtNTFiMC00MWY4LTkxODUtZGRhMzM2N2E4ZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYcaNLWGpMU8XeN3mt08s7n5EGAvFxwZQtvI 8Fr0Nj3hXk1oWiRj+zolbJFkPZah6Jn7oDzF7nopA5mMMC3HROhNmZ4yMWcfF0M7 K8FFQHbT2C9FVmxE2rg3roBfeojGrILcRG2RWKRvxU9hBS4UZMyN41P51AK6ILgp ntGm67DYqImktD3Dbw7gsMQyyltdkFik4xVpNHSgFwaczPT+LT8PgWTmx1Dqmb8B rlXXideVhGhpLl2zbLxCC5wzm9WdCjUa6iDMvxkuZ/WDVf68f0KjMVL2Gr8fP7tX hmAJOqcC3z9S6q9OAYqxDBoZmJTxm0cMhxuQo1zCClWCT4Ky6wIDAQABo4IEzzCC BMswHQYDVR0OBBYEFCTIwxRN2GbOI+Y5SKvKxEVizzH+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 MjE1YmJhNi01MWIwLTQxZjgtOTE4NS1kZGEzMzY3YThkZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQyMTViYmE2LTUxYjAtNDFmOC05 MTg1LWRkYTMzNjdhOGRmNS80MjE1YmJhNi01MWIwLTQxZjgtOTE4NS1kZGEzMzY3 YThkZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgcQGCCsGAQUF BwEHAQH/BIG0MIGxMIGRBAIAATCBigMEBEAlAAMEBED/UAMEBEYiAAMEA0p4IAME Akp7DAMEAmiYPAMEAmjAyAMEAZQ7ogMEAqL2ZAMEAMCIJAMEAMDuAAMEAcNVagME Aca1PgMEAsdCdAMEAMwRsQMEAMw08wMEAMyC0QMEAs5RTAMEBM8ykAMEAtBBAAME A9BCIAMEAtBYCAMEBtEhwDAbBAIAAjAVAwUAJgQlQAMFACYELAADBQAmBlmAMCgG CCsGAQUFBwEIAQH/BBkwF6AVMBMCAis/AgMAjS8CAwCemwIDBgBTMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AItxaezLDRKkgpwegeynxBvkJzkh10R3uj51l2TzQYresM+WEzMANCklcPb3ZgR7 sZMGhMRWE0inRznA0kzy9CVU5qQDeLWHxP4fE/ycexAOEY7qZMiIiu/jwyeEZnqO FRYEb+EUY+eLQy02ogtgViX04hAYKOrq3VzPux/jkgzknMa2wAzlWb2cwueQJP2q gPymTuuak6HY+gh7UupkmaRy0KDkWfMtGtzzSgBiLRIwCq3AXKLNG2h9ZpFdDxNE uQUnntK1/jDr7w6xL4Iqwm3YBR1YTBhMu0qrxoa1cqfCis4N6qznHsf7TFeFMZvW iiGcxUdes8A0i2X0m0G7eR4= -----END CERTIFICATE-----Generated at Thu Nov 21 15:39:32 2024 by rpki-client on console-fra.rpki-client.org