$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer File: 11f590b6-eb6e-4969-824b-0df247220283.cer (raw, json) Hash identifier: Rgjy3N73Ks5OZgi3o9L+Mih0L3cxk5+bVagZqdzwbMs= Subject key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285848ED34175D70B6DAE651594900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 19:18:25 +0000 Certificate not after: Wed 20 Jan 2027 18:00:53 +0000 Subordinate resources: AS: 46165 AS: 395208 AS: 395301 AS: 396139 IP: 23.227.216.0/22 IP: 27.121.114.0/23 IP: 64.190.89.0/24 IP: 64.190.102.0/24 IP: 69.48.208.0/24 IP: 103.135.128.0/23 IP: 139.60.76.0/22 IP: 148.59.143.0/24 IP: 162.120.64.0/22 IP: 205.201.28.0/23 IP: 209.172.4.0/24 IP: 209.251.28.0/22 IP: 2604:4440::/32 IP: 2607:6380::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:34:17:5d:70:b6:da:e6:51:59:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Feb 18 19:18:25 2025 GMT Not After : Jan 20 18:00:53 2027 GMT Subject: CN=11f590b6-eb6e-4969-824b-0df247220283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:61:52:ba:75:bf:e6:51:ab:62:a7:87:b3: db:ae:6f:6c:ab:b6:e4:8e:40:c7:1b:29:54:d5:d2: 98:be:36:c2:bf:95:05:99:fe:d3:71:6b:e6:40:c5: 39:a7:0a:3e:de:62:ca:4c:8f:48:f8:a1:2d:2a:a6: c7:56:83:8d:d4:f8:21:65:2c:b0:7a:bb:3e:8b:68: a8:51:ae:98:a1:bb:f0:91:10:e9:44:2d:34:f3:d7: a9:a9:2e:5f:00:c6:ee:58:c5:0b:2a:82:b0:8f:2d: bc:9a:fe:8d:62:d0:48:58:1a:86:f4:0e:17:d1:d6: 7f:25:79:da:96:ac:d3:3e:c5:67:95:76:d2:43:e9: ae:a4:e8:b7:1e:c6:6a:18:90:86:d7:65:cd:83:13: 64:58:d9:0d:fb:d5:ce:96:72:91:1a:a2:86:f9:b2: f4:d7:36:2c:e9:61:fb:ab:eb:99:e3:db:0e:bb:0b: 4b:f2:19:9c:05:8f:c4:7f:d7:eb:3b:01:b2:88:86: 8d:c8:04:13:37:e4:cc:b8:49:5e:89:5c:93:a3:b5: 8c:58:8d:54:89:91:81:23:87:07:9b:2e:e7:6d:0d: 66:dc:62:1f:12:5b:10:12:75:83:8d:1f:76:01:bc: 64:aa:f8:a0:8c:76:dd:73:23:23:79:17:0c:1e:94: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.227.216.0/22 27.121.114.0/23 64.190.89.0/24 64.190.102.0/24 69.48.208.0/24 103.135.128.0/23 139.60.76.0/22 148.59.143.0/24 162.120.64.0/22 205.201.28.0/23 209.172.4.0/24 209.251.28.0/22 IPv6: 2604:4440::/32 2607:6380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46165 395208 395301 396139 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8f:80:ad:aa:77:64:bd:c6:1c:ee:a5:d9:45:db:71:e1:c1: 21:3b:05:a2:e4:e1:db:6e:e1:f1:dc:c8:86:6a:e1:cf:8f:00: 67:8e:08:ac:17:2c:36:77:d6:71:e2:a1:b4:39:dc:c0:f5:df: 40:8c:4d:65:ee:77:3f:e7:47:43:85:46:e6:6d:e1:10:ce:88: 12:31:7d:5c:60:0b:37:73:32:16:bc:dd:c4:88:ec:33:5b:e4: c7:c7:5b:cf:90:cc:5f:02:4b:34:f9:08:c1:22:ac:0d:34:bd: 2c:25:e6:55:73:c9:d4:70:e1:d9:f0:65:84:e1:1a:ed:6a:78: 9d:23:e9:76:27:ff:7a:ad:15:59:99:ca:2f:9e:31:d5:7f:7c: d2:c1:d6:c2:6f:a2:56:fe:24:d9:95:f0:60:d9:ef:19:68:5a: 41:ed:e8:59:ad:3d:9e:2d:7e:4d:72:22:83:a7:cf:f8:97:4a: 9e:02:fd:b4:ea:5b:8b:d3:4a:1f:7d:8a:91:2f:76:36:61:60: 90:cb:24:7d:d1:d9:af:26:9a:85:c2:3a:b7:1f:1e:3c:8b:e2: 13:86:08:ed:c5:09:d5:21:40:5b:75:c8:d8:f9:1e:a7:50:c6: 7e:db:b9:24:de:92:b2:f6:ce:37:0e:00:45:ea:a1:c9:9a:ad: 3c:15:b4:0f -----BEGIN CERTIFICATE----- MIIHcDCCBligAwIBAgIUAQ0Mn0MoWEjtNBddcLba5lFZSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDIxODE5MTgyNVoXDTI3MDEyMDE4MDA1M1owLzEtMCsGA1UEAxMk MTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIwMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN5hUrp1v+ZRq2Knh7Pbrm9sq7bkjkDHGylU 1dKYvjbCv5UFmf7TcWvmQMU5pwo+3mLKTI9I+KEtKqbHVoON1PghZSywers+i2io Ua6YobvwkRDpRC0089epqS5fAMbuWMULKoKwjy28mv6NYtBIWBqG9A4X0dZ/JXna lqzTPsVnlXbSQ+mupOi3HsZqGJCG12XNgxNkWNkN+9XOlnKRGqKG+bL01zYs6WH7 q+uZ49sOuwtL8hmcBY/Ef9frOwGyiIaNyAQTN+TMuEleiVyTo7WMWI1UiZGBI4cH my7nbQ1m3GIfElsQEnWDjR92AbxkqvigjHbdcyMjeRcMHpRgmQIDAQABo4IEgjCC BH4wHQYDVR0OBBYEFILjJNi+xoXdT2rVJpNsvgpIMRhTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x MWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzExZjU5MGI2LWViNmUtNDk2OS04 MjRiLTBkZjI0NzIyMDI4My8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcy MjAyODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwdwYIKwYBBQUH AQcBAf8EaDBmME4EAgABMEgDBAIX49gDBAEbeXIDBABAvlkDBABAvmYDBABFMNAD BAFnh4ADBAKLPEwDBACUO48DBAKieEADBAHNyRwDBADRrAQDBALR+xwwFAQCAAIw DgMFACYEREADBQAmB2OAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwC0VQIDBgfI AgMGCCUCAwYLazBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBYj4CtqndkvcYc7qXZRdtx4cEhOwWi5OHbbuHx 3MiGauHPjwBnjgisFyw2d9Zx4qG0OdzA9d9AjE1l7nc/50dDhUbmbeEQzogSMX1c YAs3czIWvN3EiOwzW+THx1vPkMxfAks0+QjBIqwNNL0sJeZVc8nUcOHZ8GWE4Rrt anidI+l2J/96rRVZmcovnjHVf3zSwdbCb6JW/iTZlfBg2e8ZaFpB7ehZrT2eLX5N ciKDp8/4l0qeAv206luL00offYqRL3Y2YWCQyyR90dmvJpqFwjq3Hx48i+IThgjt xQnVIUBbdcjY+R6nUMZ+27kk3pKy9s43DgBF6qHJmq08FbQP -----END CERTIFICATE-----Generated at Sun Apr 27 04:22:12 2025 by rpki-client