$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer File: a062a219-9ee8-48a3-897a-8410b6da94a1.cer (raw, json) Hash identifier: 0pAN0YpQPN2b0YKYk9Z1uPW8iMljXuO3dSXOnK0UdnA= Subject key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285847A9FF0B272CC21DD5E0E3B300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Oct 2024 00:45:26 +0000 Certificate not after: Fri 29 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 803 AS: 26501 AS: 399844 IP: 64.110.192.0/18 IP: 64.201.192.0/19 IP: 67.225.0.0/17 IP: 68.69.192.0/19 IP: 69.11.0.0/17 IP: 71.17.0.0/16 IP: 74.113.12.0/22 IP: 96.125.240.0/20 IP: 104.152.28.0/22 IP: 104.219.8.0/22 IP: 104.255.48.0/22 IP: 108.60.160.0/19 IP: 108.160.16.0/20 IP: 108.174.160.0/20 IP: 142.164.0.0/16 IP: 162.253.8.0/22 IP: 192.34.224.0/21 IP: 198.245.112.0/20 IP: 199.26.190.0/23 IP: 199.189.88.0/21 IP: 206.163.224.0/19 IP: 207.47.128.0/17 IP: 216.126.200.0/22 IP: 216.174.128.0/19 IP: 216.197.128.0/17 IP: 2604:1e80::/32 IP: 2607:f4a8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a9:ff:0b:27:2c:c2:1d:d5:e0:e3:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 26 00:45:26 2024 GMT Not After : Jan 29 01:45:26 2027 GMT Subject: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:8b:ad:81:8d:6b:79:98:f6:db:03:6e:6f: b1:64:8a:1d:d7:f9:cb:56:75:2d:e1:9a:e4:12:d2: 70:02:bb:98:1a:93:61:74:f7:3d:73:21:f8:17:d1: 66:9b:0c:7b:16:79:06:ea:dc:8d:99:d9:f8:8e:e9: 2b:a4:1b:ad:07:ba:53:c0:c3:cd:e2:4b:39:38:fc: d6:bd:1e:b4:19:52:de:c3:ee:58:bd:f6:5d:78:61: f7:e3:86:bf:84:d3:8a:9c:09:88:8f:dd:5c:60:77: 53:ca:31:67:ef:11:68:0a:a3:50:7b:80:4d:39:77: 96:da:d8:b3:f8:1c:1d:a5:e1:6d:5f:52:7a:6c:9f: 18:11:19:8b:4d:0d:3a:7c:64:cc:b2:ce:43:f1:b3: 0a:21:13:ca:97:e6:c1:c1:01:45:6b:e2:04:0c:7a: 49:dd:d7:66:ce:73:42:19:40:0c:d7:1f:6e:36:38: cf:d0:c8:fd:2b:21:a9:98:8c:33:b6:5f:92:58:1c: b2:b0:5a:f8:44:6c:55:aa:d0:1a:fa:f4:75:e2:7f: 73:10:23:e4:00:92:f2:fe:22:ca:34:a0:82:6c:2d: 4e:0f:14:b8:c3:eb:82:7c:80:51:52:c6:88:4d:81: 7c:dd:19:d5:a6:a9:fa:9e:ec:49:6a:9d:92:89:6a: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.110.192.0/18 64.201.192.0/19 67.225.0.0/17 68.69.192.0/19 69.11.0.0/17 71.17.0.0/16 74.113.12.0/22 96.125.240.0/20 104.152.28.0/22 104.219.8.0/22 104.255.48.0/22 108.60.160.0/19 108.160.16.0/20 108.174.160.0/20 142.164.0.0/16 162.253.8.0/22 192.34.224.0/21 198.245.112.0/20 199.26.190.0/23 199.189.88.0/21 206.163.224.0/19 207.47.128.0/17 216.126.200.0/22 216.174.128.0/19 216.197.128.0/17 IPv6: 2604:1e80::/32 2607:f4a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 803 26501 399844 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ed:66:3b:74:3a:76:35:3b:ec:1e:50:c7:e9:34:77:02:4a: 44:64:ec:96:be:a2:9c:13:4b:3d:0d:c9:4d:01:d0:05:28:b7: 23:82:32:b4:e0:15:73:fb:35:83:8c:27:e8:af:52:23:23:1d: e7:24:f0:d3:c4:c6:ec:ab:dd:10:2e:b4:ba:ad:7e:f7:bf:67: 9f:ed:5c:57:3f:f8:a7:5d:13:d9:32:40:a6:46:65:b6:c0:4a: ef:6f:71:31:5c:85:af:1f:e7:23:49:c9:68:75:15:4b:8f:7b: 3a:33:43:2c:78:ba:0c:29:b4:e8:c1:f0:98:c8:54:e2:d7:d2: dc:9e:0d:08:91:25:46:cb:bf:5b:f1:5e:33:ba:2e:19:92:32: 5e:f8:a3:75:f2:b9:63:aa:d9:9d:32:dc:92:ab:61:f3:a4:3a: 46:c2:0a:4d:5d:0b:1c:cb:4f:b6:80:59:f9:bf:ee:78:2f:5d: 07:6f:7a:91:14:f3:a9:f9:cc:00:e8:16:77:a6:82:70:a4:b0: 26:f3:a4:dd:70:1f:22:d3:bb:ff:8b:37:2c:a3:2c:73:56:d9: 21:b1:43:cf:fb:23:35:90:60:1e:c1:36:8c:21:ed:e0:9c:46: fd:8b:28:9f:fb:dc:19:7a:04:c7:6b:08:e2:d6:46:19:bf:10: 42:e9:f1:ae -----BEGIN CERTIFICATE----- MIIHujCCBqKgAwIBAgIUAQ0Mn0MoWEep/wsnLMId1eDjswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTAyNjAwNDUyNloXDTI3MDEyOTAxNDUyNlowLzEtMCsGA1UEAxMk YTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssKLrYGNa3mY9tsDbm+xZIod1/nLVnUt4Zrk EtJwAruYGpNhdPc9cyH4F9Fmmwx7FnkG6tyNmdn4jukrpButB7pTwMPN4ks5OPzW vR60GVLew+5YvfZdeGH344a/hNOKnAmIj91cYHdTyjFn7xFoCqNQe4BNOXeW2tiz +BwdpeFtX1J6bJ8YERmLTQ06fGTMss5D8bMKIRPKl+bBwQFFa+IEDHpJ3ddmznNC GUAM1x9uNjjP0Mj9KyGpmIwztl+SWByysFr4RGxVqtAa+vR14n9zECPkAJLy/iLK NKCCbC1ODxS4w+uCfIBRUsaITYF83RnVpqn6nuxJap2SiWovaQIDAQABo4IEzDCC BMgwHQYDVR0OBBYEFBQoJ2YFnSSgtPKID++p7ODpboYYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwNjJhMjE5LTllZTgtNDhhMy04 OTdhLTg0MTBiNmRhOTRhMS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZk YTk0YTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgccGCCsGAQUF BwEHAQH/BIG3MIG0MIGbBAIAATCBlAMEBkBuwAMEBUDJwAMEB0PhAAMEBURFwAME B0ULAAMDAEcRAwQCSnEMAwQEYH3wAwQCaJgcAwQCaNsIAwQCaP8wAwQFbDygAwQE bKAQAwQEbK6gAwMAjqQDBAKi/QgDBAPAIuADBATG9XADBAHHGr4DBAPHvVgDBAXO o+ADBAfPL4ADBALYfsgDBAXYroADBAfYxYAwFAQCAAIwDgMFACYEHoADBQAmB/So MCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAgMjAgJnhQIDBhnkMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABrt Zjt0OnY1O+weUMfpNHcCSkRk7Ja+opwTSz0NyU0B0AUotyOCMrTgFXP7NYOMJ+iv UiMjHeck8NPExuyr3RAutLqtfve/Z5/tXFc/+KddE9kyQKZGZbbASu9vcTFcha8f 5yNJyWh1FUuPezozQyx4ugwptOjB8JjIVOLX0tyeDQiRJUbLv1vxXjO6LhmSMl74 o3XyuWOq2Z0y3JKrYfOkOkbCCk1dCxzLT7aAWfm/7ngvXQdvepEU86n5zADoFnem gnCksCbzpN1wHyLTu/+LNyyjLHNW2SGxQ8/7IzWQYB7BNowh7eCcRv2LKJ/73Bl6 BMdrCOLWRhm/EELp8a4= -----END CERTIFICATE-----Generated at Thu Nov 21 16:33:40 2024 by rpki-client on console-ams.rpki-client.org